Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/e2b95d-0b26-402d-96ec-68691dabbdf3/1/fIIwKK7_xZmu_6XeW5DMrTNJfbk.mft
File: fIIwKK7_xZmu_6XeW5DMrTNJfbk.mft (raw, json)
Hash identifier: 9WTvV7U7vhlSpHovnT0pUGkwI910HI0lXXmadv8Db0Y=
Subject key identifier: 60:26:EA:9E:29:CE:53:51:12:6B:07:C7:45:92:12:27:7A:A8:88:78
Authority key identifier: 7C:82:30:28:AE:FF:C5:99:AE:FF:A5:DE:5B:90:CC:AD:33:49:7D:B9
Certificate issuer: /CN=7c823028aeffc599aeffa5de5b90ccad33497db9
Certificate serial: 019A71B8CD7E7E9FC759D1056065005ED7CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fIIwKK7_xZmu_6XeW5DMrTNJfbk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/e2b95d-0b26-402d-96ec-68691dabbdf3/1/fIIwKK7_xZmu_6XeW5DMrTNJfbk.mft
Manifest number: 06AE
Signing time: Tue 11 Nov 2025 07:02:07 +0000
Manifest this update: Tue 11 Nov 2025 07:02:07 +0000
Manifest next update: Wed 12 Nov 2025 07:02:07 +0000
Files and hashes: 1: fIIwKK7_xZmu_6XeW5DMrTNJfbk.crl (hash: B9CkO6Pg7mhAib/u5BgSSbHK+JYrunD1G8XYcPudk+Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/e2b95d-0b26-402d-96ec-68691dabbdf3/1/fIIwKK7_xZmu_6XeW5DMrTNJfbk.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/e2b95d-0b26-402d-96ec-68691dabbdf3/1/fIIwKK7_xZmu_6XeW5DMrTNJfbk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fIIwKK7_xZmu_6XeW5DMrTNJfbk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:cd:7e:7e:9f:c7:59:d1:05:60:65:00:5e:d7:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c823028aeffc599aeffa5de5b90ccad33497db9
Validity
Not Before: Nov 11 07:02:07 2025 GMT
Not After : Nov 12 07:02:07 2025 GMT
Subject: CN=6026ea9e29ce5351126b07c7459212277aa88878
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:19:a5:b9:51:de:d4:fb:be:11:d8:f8:f9:3e:
5e:8b:c9:c4:e4:22:9b:56:e6:cc:14:dc:2e:8e:7c:
6b:7b:55:e0:2b:30:93:b4:cd:ee:db:33:77:94:f4:
a2:80:e8:01:16:50:5e:22:92:09:9d:ac:46:2c:38:
fb:a3:b8:61:7d:5d:56:ab:a9:06:3e:4d:0b:b8:80:
1b:f0:75:21:ea:6d:ef:ca:bb:cf:2c:f6:d3:6c:89:
87:89:e2:28:05:10:d8:c1:d7:90:7b:25:be:33:a2:
a9:96:18:bf:69:c4:32:87:51:d7:4b:ae:4b:d6:ce:
a3:9f:4e:d0:93:32:75:b3:da:ad:67:8f:35:79:44:
08:90:a6:b5:e5:a2:f4:1c:3b:7a:54:be:1e:cc:22:
86:5e:a9:90:07:e6:a4:33:6a:01:d1:88:aa:33:47:
a4:1d:66:51:40:ae:0a:bb:9e:86:6a:8a:41:e1:af:
fa:39:c5:73:08:5b:be:14:e2:0c:f9:67:e2:f7:ad:
d5:4b:e4:fa:4a:88:6b:6e:e7:b9:87:bc:84:e1:3e:
8c:b2:8e:97:0f:43:9b:2c:2a:01:d8:74:1b:32:0c:
04:e0:e1:37:b3:56:f8:1c:7f:53:a3:db:f8:d7:ef:
19:79:7a:6c:eb:84:9c:40:62:84:5d:f6:60:31:54:
de:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:26:EA:9E:29:CE:53:51:12:6B:07:C7:45:92:12:27:7A:A8:88:78
X509v3 Authority Key Identifier:
keyid:7C:82:30:28:AE:FF:C5:99:AE:FF:A5:DE:5B:90:CC:AD:33:49:7D:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fIIwKK7_xZmu_6XeW5DMrTNJfbk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/e2b95d-0b26-402d-96ec-68691dabbdf3/1/fIIwKK7_xZmu_6XeW5DMrTNJfbk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/e2b95d-0b26-402d-96ec-68691dabbdf3/1/fIIwKK7_xZmu_6XeW5DMrTNJfbk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:d4:a9:84:7b:64:d1:52:5d:3c:1d:cd:b6:30:5f:15:81:83:
4e:fe:0f:63:d2:80:2c:1c:ef:d5:d6:1d:95:0a:13:cc:6b:b4:
1a:4f:a5:61:ce:3e:8b:24:d8:bb:22:fb:ed:83:27:dd:5b:78:
63:7e:6e:d1:97:60:02:a1:c6:4c:a4:c7:09:ea:52:a3:1e:0f:
3d:2a:03:87:f2:5f:65:2e:91:31:44:8b:8e:9f:1a:fb:17:1b:
ef:42:18:1e:39:72:8f:56:bb:3a:2c:c5:b9:a2:b5:af:c8:99:
aa:77:1a:8e:ad:c7:b4:20:03:f7:70:6e:46:08:78:e3:76:b0:
d7:3b:91:e8:37:05:ed:ac:8b:ea:d8:4c:8c:51:b5:cb:cf:dc:
ed:06:95:8d:f4:9a:82:8b:ac:47:bd:ed:bf:26:dc:9c:45:0a:
df:4b:d0:b5:8c:3a:31:40:b4:0b:61:ef:a0:73:19:cd:f7:67:
35:23:42:f3:8b:39:08:ef:f3:cc:d3:d3:b6:03:c8:37:f7:a4:
e2:f5:80:76:4b:41:14:e8:f9:50:1d:64:c7:78:83:65:e3:9c:
23:2b:70:1a:8d:90:67:53:fd:17:1f:7a:78:66:a1:46:d3:c1:
4d:ab:8d:60:11:a2:99:56:d7:ae:53:d8:2b:a6:0f:08:90:46:
e3:91:1b:c8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxuM1+fp/HWdEFYGUAXtfNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdjODIzMDI4YWVmZmM1OTlhZWZmYTVkZTViOTBjY2FkMzM0
OTdkYjkwHhcNMjUxMTExMDcwMjA3WhcNMjUxMTEyMDcwMjA3WjAzMTEwLwYDVQQD
Eyg2MDI2ZWE5ZTI5Y2U1MzUxMTI2YjA3Yzc0NTkyMTIyNzdhYTg4ODc4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzxmluVHe1Pu+Edj4+T5ei8nE5CKb
VubMFNwujnxre1XgKzCTtM3u2zN3lPSigOgBFlBeIpIJnaxGLDj7o7hhfV1Wq6kG
Pk0LuIAb8HUh6m3vyrvPLPbTbImHieIoBRDYwdeQeyW+M6Kplhi/acQyh1HXS65L
1s6jn07QkzJ1s9qtZ481eUQIkKa15aL0HDt6VL4ezCKGXqmQB+akM2oB0YiqM0ek
HWZRQK4Ku56GaopB4a/6OcVzCFu+FOIM+Wfi963VS+T6Sohrbue5h7yE4T6Mso6X
D0ObLCoB2HQbMgwE4OE3s1b4HH9To9v41+8ZeXps64ScQGKEXfZgMVTeewIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGAm6p4pzlNREmsHx0WSEid6qIh4MB8GA1UdIwQY
MBaAFHyCMCiu/8WZrv+l3luQzK0zSX25MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZklJd0tLN194Wm11XzZYZVc1RE1yVE5KZmJrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC9lMmI5NWQtMGIyNi00MDJkLTk2ZWMt
Njg2OTFkYWJiZGYzLzEvZklJd0tLN194Wm11XzZYZVc1RE1yVE5KZmJrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOC9lMmI5NWQtMGIyNi00MDJkLTk2ZWMtNjg2OTFkYWJiZGYz
LzEvZklJd0tLN194Wm11XzZYZVc1RE1yVE5KZmJrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPtSphHtk
0VJdPB3NtjBfFYGDTv4PY9KALBzv1dYdlQoTzGu0Gk+lYc4+iyTYuyL77YMn3Vt4
Y35u0ZdgAqHGTKTHCepSox4PPSoDh/JfZS6RMUSLjp8a+xcb70IYHjlyj1a7OizF
uaK1r8iZqncajq3HtCAD93BuRgh443aw1zuR6DcF7ayL6thMjFG1y8/c7QaVjfSa
gousR73tvybcnEUK30vQtYw6MUC0C2HvoHMZzfdnNSNC84s5CO/zzNPTtgPIN/ek
4vWAdktBFOj5UB1kx3iDZeOcIytwGo2QZ1P9Fx96eGahRtPBTauNYBGimVbXrlPY
K6YPCJBG45EbyA==
-----END CERTIFICATE-----
Generated at Tue Nov 11 11:41:48 2025 by rpki-client