Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/32eab1-c31b-47b4-aa2a-e52956c48006/1/sTOAeQSG3DdtBNxUHpgCywL3Ulo.mft
File: sTOAeQSG3DdtBNxUHpgCywL3Ulo.mft (raw, json)
Hash identifier: t5YTSsofvG2RYx/xlJkBA4UtkCb6UkkNfdlo+XaskU8=
Subject key identifier: 5E:8D:10:EB:0C:A2:C7:E1:02:77:FC:AF:37:C2:A6:08:E3:B9:34:A1
Authority key identifier: B1:33:80:79:04:86:DC:37:6D:04:DC:54:1E:98:02:CB:02:F7:52:5A
Certificate issuer: /CN=b13380790486dc376d04dc541e9802cb02f7525a
Certificate serial: 019A71EEB80E99DAAC9C268769C473B35EFB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sTOAeQSG3DdtBNxUHpgCywL3Ulo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/32eab1-c31b-47b4-aa2a-e52956c48006/1/sTOAeQSG3DdtBNxUHpgCywL3Ulo.mft
Manifest number: 6E
Signing time: Tue 11 Nov 2025 08:01:01 +0000
Manifest this update: Tue 11 Nov 2025 08:01:01 +0000
Manifest next update: Wed 12 Nov 2025 08:01:01 +0000
Files and hashes: 1: sTOAeQSG3DdtBNxUHpgCywL3Ulo.crl (hash: pji44/DIPN34c0vllaE8dpMxAYupDOwL1gCgtZ0efAg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/32eab1-c31b-47b4-aa2a-e52956c48006/1/sTOAeQSG3DdtBNxUHpgCywL3Ulo.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/32eab1-c31b-47b4-aa2a-e52956c48006/1/sTOAeQSG3DdtBNxUHpgCywL3Ulo.mft
rsync://rpki.ripe.net/repository/DEFAULT/sTOAeQSG3DdtBNxUHpgCywL3Ulo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:b8:0e:99:da:ac:9c:26:87:69:c4:73:b3:5e:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b13380790486dc376d04dc541e9802cb02f7525a
Validity
Not Before: Nov 11 08:01:01 2025 GMT
Not After : Nov 12 08:01:01 2025 GMT
Subject: CN=5e8d10eb0ca2c7e10277fcaf37c2a608e3b934a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:9d:72:38:e6:1b:61:b0:04:d5:b2:3c:31:29:
53:80:e4:89:25:bc:e0:6b:3a:96:4f:2b:94:e8:f7:
e1:06:43:a6:80:36:6d:bd:71:be:32:76:df:fa:8f:
32:bb:c0:8c:93:63:77:39:5f:4b:eb:46:b9:7b:27:
bd:b3:8d:b0:ad:0d:97:87:75:e9:ec:19:02:ee:db:
34:23:4f:72:89:4b:e6:d9:68:fa:89:74:ae:40:7f:
8c:b8:f5:f7:2a:f4:62:bc:b3:d3:c5:c7:46:fc:d9:
6b:41:47:ca:fb:c4:fe:13:da:48:9b:0d:1a:5c:d3:
19:2b:77:b2:f9:5f:45:14:37:6f:d2:e9:44:c3:e6:
5b:15:f8:76:50:96:1e:00:48:b0:75:f4:4b:7e:c7:
32:0c:4c:00:12:cc:db:63:bf:c2:0b:bb:e5:46:b8:
62:af:a8:61:f1:74:22:e0:7e:7e:9a:6f:2b:d3:c1:
2c:7d:63:70:57:cc:0a:0a:10:8e:0d:c9:b7:72:8c:
e8:81:58:23:1d:3d:53:5c:d0:0f:5a:25:c9:de:9a:
a9:29:9c:9f:33:71:43:04:c9:0a:c4:66:ee:3a:e6:
c8:26:a0:da:3f:de:f6:13:71:ec:29:17:4d:e7:df:
58:3c:0b:57:15:a9:26:06:b2:67:2d:99:05:c6:17:
78:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:8D:10:EB:0C:A2:C7:E1:02:77:FC:AF:37:C2:A6:08:E3:B9:34:A1
X509v3 Authority Key Identifier:
keyid:B1:33:80:79:04:86:DC:37:6D:04:DC:54:1E:98:02:CB:02:F7:52:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sTOAeQSG3DdtBNxUHpgCywL3Ulo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/32eab1-c31b-47b4-aa2a-e52956c48006/1/sTOAeQSG3DdtBNxUHpgCywL3Ulo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/32eab1-c31b-47b4-aa2a-e52956c48006/1/sTOAeQSG3DdtBNxUHpgCywL3Ulo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:2a:de:9c:5c:73:e7:69:d6:ee:8d:b9:dd:57:37:6c:db:14:
67:19:d7:a1:cd:6c:76:04:68:f0:f3:38:40:65:cf:fa:cf:25:
16:a7:05:5b:ce:c8:b3:af:88:45:63:6e:2d:e7:72:f5:9f:e7:
f5:e7:5c:1b:a6:f7:ca:d2:99:97:b5:61:0d:33:57:eb:04:32:
e1:fb:3d:8b:c9:32:9d:0d:cf:d1:a0:24:92:dc:da:c6:0c:c8:
aa:86:17:c8:00:87:83:31:f9:53:ae:32:47:f0:83:41:78:3b:
07:aa:1b:87:20:51:b8:02:a1:9a:bd:37:b5:06:c9:b4:af:68:
a9:c5:08:97:57:ce:f5:29:60:b1:ce:c1:c0:6f:c0:5e:e7:68:
2c:2e:ea:80:27:5d:e5:03:45:18:c8:c3:e5:25:b0:0f:6b:26:
99:62:b9:8d:4b:52:79:4f:1c:dd:0b:04:3f:b8:be:9a:c5:d0:
8a:df:39:69:56:1b:dc:5d:8c:f2:99:1a:5f:74:ad:1e:ff:33:
49:cf:5a:42:e4:fb:22:ed:b1:7a:99:97:7d:b9:da:66:33:12:
7b:86:2b:89:26:33:13:5e:60:fa:82:2c:87:09:26:c3:2c:2d:
bb:80:ba:d3:69:27:0d:b2:66:33:f3:6c:14:09:2f:83:da:c6:
42:68:1d:4f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpx7rgOmdqsnCaHacRzs177MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIxMzM4MDc5MDQ4NmRjMzc2ZDA0ZGM1NDFlOTgwMmNiMDJm
NzUyNWEwHhcNMjUxMTExMDgwMTAxWhcNMjUxMTEyMDgwMTAxWjAzMTEwLwYDVQQD
Eyg1ZThkMTBlYjBjYTJjN2UxMDI3N2ZjYWYzN2MyYTYwOGUzYjkzNGExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzZ1yOOYbYbAE1bI8MSlTgOSJJbzg
azqWTyuU6PfhBkOmgDZtvXG+Mnbf+o8yu8CMk2N3OV9L60a5eye9s42wrQ2Xh3Xp
7BkC7ts0I09yiUvm2Wj6iXSuQH+MuPX3KvRivLPTxcdG/NlrQUfK+8T+E9pImw0a
XNMZK3ey+V9FFDdv0ulEw+ZbFfh2UJYeAEiwdfRLfscyDEwAEszbY7/CC7vlRrhi
r6hh8XQi4H5+mm8r08EsfWNwV8wKChCODcm3cozogVgjHT1TXNAPWiXJ3pqpKZyf
M3FDBMkKxGbuOubIJqDaP972E3HsKRdN599YPAtXFakmBrJnLZkFxhd4KQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF6NEOsMosfhAnf8rzfCpgjjuTShMB8GA1UdIwQY
MBaAFLEzgHkEhtw3bQTcVB6YAssC91JaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc1RPQWVRU0czRGR0Qk54VUhwZ0N5d0wzVWxvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS8zMmVhYjEtYzMxYi00N2I0LWFhMmEt
ZTUyOTU2YzQ4MDA2LzEvc1RPQWVRU0czRGR0Qk54VUhwZ0N5d0wzVWxvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMS8zMmVhYjEtYzMxYi00N2I0LWFhMmEtZTUyOTU2YzQ4MDA2
LzEvc1RPQWVRU0czRGR0Qk54VUhwZ0N5d0wzVWxvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtirenFxz
52nW7o253Vc3bNsUZxnXoc1sdgRo8PM4QGXP+s8lFqcFW87Is6+IRWNuLedy9Z/n
9edcG6b3ytKZl7VhDTNX6wQy4fs9i8kynQ3P0aAkktzaxgzIqoYXyACHgzH5U64y
R/CDQXg7B6obhyBRuAKhmr03tQbJtK9oqcUIl1fO9Slgsc7BwG/AXudoLC7qgCdd
5QNFGMjD5SWwD2smmWK5jUtSeU8c3QsEP7i+msXQit85aVYb3F2M8pkaX3StHv8z
Sc9aQuT7Iu2xepmXfbnaZjMSe4YriSYzE15g+oIshwkmwywtu4C602knDbJmM/Ns
FAkvg9rGQmgdTw==
-----END CERTIFICATE-----
Generated at Tue Nov 11 12:37:38 2025 by rpki-client