Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/9bdb8c-d307-41f6-ac81-e3ccf3ea3c4a/1/h3YEKrfwcZWY6znlPvkuCsz6T6M.mft
File: h3YEKrfwcZWY6znlPvkuCsz6T6M.mft (raw, json)
Hash identifier: sKD78jHJlVEVvBpNBWEDDYS2lJBRLR3hG4d9I3zXC2Q=
Subject key identifier: 19:F5:35:50:CD:A9:D7:EF:AC:9C:19:F9:6D:36:CB:4B:60:BA:6C:4F
Authority key identifier: 87:76:04:2A:B7:F0:71:95:98:EB:39:E5:3E:F9:2E:0A:CC:FA:4F:A3
Certificate issuer: /CN=8776042ab7f0719598eb39e53ef92e0accfa4fa3
Certificate serial: 019A71B942D88EE73980EFAAB23C028E1710
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h3YEKrfwcZWY6znlPvkuCsz6T6M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/9bdb8c-d307-41f6-ac81-e3ccf3ea3c4a/1/h3YEKrfwcZWY6znlPvkuCsz6T6M.mft
Manifest number: 0B20
Signing time: Tue 11 Nov 2025 07:02:37 +0000
Manifest this update: Tue 11 Nov 2025 07:02:37 +0000
Manifest next update: Wed 12 Nov 2025 07:02:37 +0000
Files and hashes: 1: h3YEKrfwcZWY6znlPvkuCsz6T6M.crl (hash: JEMf+cjyqqiUiyZX88O3Z/+gN+602AEiY7tZQU7iIME=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/9bdb8c-d307-41f6-ac81-e3ccf3ea3c4a/1/h3YEKrfwcZWY6znlPvkuCsz6T6M.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/9bdb8c-d307-41f6-ac81-e3ccf3ea3c4a/1/h3YEKrfwcZWY6znlPvkuCsz6T6M.mft
rsync://rpki.ripe.net/repository/DEFAULT/h3YEKrfwcZWY6znlPvkuCsz6T6M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b9:42:d8:8e:e7:39:80:ef:aa:b2:3c:02:8e:17:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8776042ab7f0719598eb39e53ef92e0accfa4fa3
Validity
Not Before: Nov 11 07:02:37 2025 GMT
Not After : Nov 12 07:02:37 2025 GMT
Subject: CN=19f53550cda9d7efac9c19f96d36cb4b60ba6c4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:14:37:01:87:e9:bb:df:27:94:09:ea:fb:a1:
cd:d1:5d:c6:fb:74:25:ba:49:da:86:7a:a3:10:f5:
0c:61:71:b2:cd:95:64:44:39:3d:65:44:2c:80:8d:
5a:35:21:d4:f1:2f:bd:a1:18:88:32:52:db:9a:f2:
fb:d7:3c:d8:7b:b7:91:16:67:f6:4c:e4:d9:44:67:
14:20:e4:6f:6a:67:76:19:f7:d4:bb:f6:58:8e:8c:
75:83:84:4e:e4:ef:3d:54:f5:21:97:89:96:27:6b:
aa:f1:44:38:53:29:32:4f:c8:ae:39:98:86:75:7b:
d1:03:c1:22:f7:92:81:11:36:2f:f4:4b:5e:14:e2:
fa:2c:0b:08:0e:4b:c0:d3:3e:25:fc:35:c0:f3:cd:
66:88:b2:52:40:00:90:ba:46:a3:63:99:84:b7:b8:
39:b2:02:8f:9a:b5:0d:50:d3:f3:04:76:f6:a1:df:
34:95:69:65:83:58:18:8e:24:ac:d2:a0:b4:43:9b:
1f:0c:46:32:41:b4:66:54:cd:d4:57:0a:b9:df:ad:
0d:ec:0c:ad:e4:ab:b5:56:95:3c:5e:b9:e2:be:e1:
2f:01:9e:a5:d1:b4:7d:d2:f5:1c:6a:e7:44:70:89:
20:ef:38:33:21:ed:cd:12:6e:8c:74:f4:dc:6f:a2:
4d:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:F5:35:50:CD:A9:D7:EF:AC:9C:19:F9:6D:36:CB:4B:60:BA:6C:4F
X509v3 Authority Key Identifier:
keyid:87:76:04:2A:B7:F0:71:95:98:EB:39:E5:3E:F9:2E:0A:CC:FA:4F:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h3YEKrfwcZWY6znlPvkuCsz6T6M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/9bdb8c-d307-41f6-ac81-e3ccf3ea3c4a/1/h3YEKrfwcZWY6znlPvkuCsz6T6M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/9bdb8c-d307-41f6-ac81-e3ccf3ea3c4a/1/h3YEKrfwcZWY6znlPvkuCsz6T6M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:09:3d:47:e5:ad:d6:00:1e:80:b8:40:fe:b3:9c:c2:79:de:
e0:6d:39:fc:5e:78:5d:49:68:00:98:a1:1b:63:b5:32:99:63:
cc:48:22:b3:17:02:86:af:52:a0:ec:3f:a4:f4:de:37:6d:8a:
c4:a4:16:e9:0c:bf:26:19:03:e6:32:fb:8c:58:07:6e:92:7b:
5c:90:e5:a8:5c:1b:50:ec:4f:80:6a:bf:6e:31:fb:3f:69:90:
0e:41:ac:dd:72:15:51:a8:ea:b8:8f:9c:d6:25:c4:19:c2:e9:
c4:59:2c:1d:86:9f:01:fd:37:94:4d:84:27:be:81:89:d7:5d:
21:f6:18:0e:44:3c:33:8a:da:1a:47:dd:7a:7e:65:9d:71:88:
fa:49:b9:e7:44:8f:ae:5b:07:55:29:93:75:9d:94:e4:91:3c:
fd:d2:31:2f:e7:a2:3e:bc:dc:a4:fd:14:98:f2:32:1b:6a:34:
de:3e:fa:37:e0:79:67:eb:15:ee:69:d4:20:3d:0b:f6:31:22:
57:de:6f:0b:2a:2e:57:b4:9d:29:69:60:b0:71:32:28:81:29:
a1:9c:e3:cc:b7:06:f4:0c:af:22:14:09:8f:2e:a8:40:e9:6f:
39:b2:79:23:8c:8e:38:35:40:42:7f:6b:a0:37:96:74:06:c4:
34:94:1b:e3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxuULYjuc5gO+qsjwCjhcQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg3NzYwNDJhYjdmMDcxOTU5OGViMzllNTNlZjkyZTBhY2Nm
YTRmYTMwHhcNMjUxMTExMDcwMjM3WhcNMjUxMTEyMDcwMjM3WjAzMTEwLwYDVQQD
EygxOWY1MzU1MGNkYTlkN2VmYWM5YzE5Zjk2ZDM2Y2I0YjYwYmE2YzRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuxQ3AYfpu98nlAnq+6HN0V3G+3Ql
uknahnqjEPUMYXGyzZVkRDk9ZUQsgI1aNSHU8S+9oRiIMlLbmvL71zzYe7eRFmf2
TOTZRGcUIORvamd2GffUu/ZYjox1g4RO5O89VPUhl4mWJ2uq8UQ4UykyT8iuOZiG
dXvRA8Ei95KBETYv9EteFOL6LAsIDkvA0z4l/DXA881miLJSQACQukajY5mEt7g5
sgKPmrUNUNPzBHb2od80lWllg1gYjiSs0qC0Q5sfDEYyQbRmVM3UVwq5360N7Ayt
5Ku1VpU8XrnivuEvAZ6l0bR90vUcaudEcIkg7zgzIe3NEm6MdPTcb6JNdQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBn1NVDNqdfvrJwZ+W02y0tgumxPMB8GA1UdIwQY
MBaAFId2BCq38HGVmOs55T75LgrM+k+jMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaDNZRUtyZndjWldZNnpubFB2a3VDc3o2VDZNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC85YmRiOGMtZDMwNy00MWY2LWFjODEt
ZTNjY2YzZWEzYzRhLzEvaDNZRUtyZndjWldZNnpubFB2a3VDc3o2VDZNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMC85YmRiOGMtZDMwNy00MWY2LWFjODEtZTNjY2YzZWEzYzRh
LzEvaDNZRUtyZndjWldZNnpubFB2a3VDc3o2VDZNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqgk9R+Wt
1gAegLhA/rOcwnne4G05/F54XUloAJihG2O1MpljzEgisxcChq9SoOw/pPTeN22K
xKQW6Qy/JhkD5jL7jFgHbpJ7XJDlqFwbUOxPgGq/bjH7P2mQDkGs3XIVUajquI+c
1iXEGcLpxFksHYafAf03lE2EJ76BidddIfYYDkQ8M4raGkfden5lnXGI+km550SP
rlsHVSmTdZ2U5JE8/dIxL+eiPrzcpP0UmPIyG2o03j76N+B5Z+sV7mnUID0L9jEi
V95vCyouV7SdKWlgsHEyKIEpoZzjzLcG9AyvIhQJjy6oQOlvObJ5I4yOODVAQn9r
oDeWdAbENJQb4w==
-----END CERTIFICATE-----
Generated at Tue Nov 11 11:38:14 2025 by rpki-client