Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/5c57dd-486e-4c69-a116-f90a8dce1bfc/1/tOOoY2nvedwTz7Q3YV1JI4i_jOM.mft
File: tOOoY2nvedwTz7Q3YV1JI4i_jOM.mft (raw, json)
Hash identifier: wWxPEqfbtDd6P/yEtkt0+IN//dIRPwQuXiHOYjXO4U0=
Subject key identifier: 4C:A3:AB:5A:74:EB:3F:30:03:31:AD:71:52:76:62:C0:3D:EC:FA:5D
Authority key identifier: B4:E3:A8:63:69:EF:79:DC:13:CF:B4:37:61:5D:49:23:88:BF:8C:E3
Certificate issuer: /CN=b4e3a86369ef79dc13cfb437615d492388bf8ce3
Certificate serial: 019A71B91343CAC0E536DE090466AC8DC693
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tOOoY2nvedwTz7Q3YV1JI4i_jOM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/5c57dd-486e-4c69-a116-f90a8dce1bfc/1/tOOoY2nvedwTz7Q3YV1JI4i_jOM.mft
Manifest number: 0FB9
Signing time: Tue 11 Nov 2025 07:02:25 +0000
Manifest this update: Tue 11 Nov 2025 07:02:25 +0000
Manifest next update: Wed 12 Nov 2025 07:02:25 +0000
Files and hashes: 1: tOOoY2nvedwTz7Q3YV1JI4i_jOM.crl (hash: 9CgwX8VbGWaca4Zaa/t/n4YzJ0JZ9RIo/ik/qXNlbJQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/5c57dd-486e-4c69-a116-f90a8dce1bfc/1/tOOoY2nvedwTz7Q3YV1JI4i_jOM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/5c57dd-486e-4c69-a116-f90a8dce1bfc/1/tOOoY2nvedwTz7Q3YV1JI4i_jOM.mft
rsync://rpki.ripe.net/repository/DEFAULT/tOOoY2nvedwTz7Q3YV1JI4i_jOM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b9:13:43:ca:c0:e5:36:de:09:04:66:ac:8d:c6:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4e3a86369ef79dc13cfb437615d492388bf8ce3
Validity
Not Before: Nov 11 07:02:25 2025 GMT
Not After : Nov 12 07:02:25 2025 GMT
Subject: CN=4ca3ab5a74eb3f300331ad71527662c03decfa5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:4a:77:18:37:15:e4:a5:9e:d7:0d:e1:9b:70:
4c:4e:a1:42:b5:db:a0:f2:30:f6:e3:10:d7:75:c6:
8b:60:34:8f:4a:a7:57:da:d7:a5:49:25:53:47:4a:
dd:92:00:d3:0a:87:86:16:8c:f2:4c:8d:07:9d:77:
c2:2b:d6:7f:2a:3c:fc:f2:c2:3d:7c:d1:9f:1a:72:
61:63:88:b3:10:c2:01:b8:57:0a:e3:45:94:99:de:
e6:9e:eb:9d:92:85:3a:9b:88:47:fd:87:1a:30:2e:
0d:e6:7b:44:22:61:48:3d:29:fc:40:f2:41:57:90:
c3:32:a7:4d:4f:f9:bd:70:25:e8:0e:14:ae:ae:49:
1a:df:34:f0:8e:d1:81:f7:a6:55:c2:5d:1e:69:6d:
d0:74:39:fa:96:2a:b3:cd:89:40:7e:1b:de:84:29:
2a:96:3a:f8:7b:8c:1e:7f:a7:9b:0a:74:59:18:ee:
db:22:c3:11:7e:1b:90:9a:5a:42:36:33:f5:97:6d:
b3:60:81:2d:bc:bc:6f:00:44:a7:e4:89:14:0c:a7:
24:30:46:54:a0:87:6b:99:28:42:2e:9d:7e:27:08:
a3:19:17:00:82:64:e6:2b:7e:c4:f0:e6:6b:88:4a:
2e:d1:c6:74:db:5e:ed:ab:c0:b3:7d:03:8e:8b:1f:
58:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:A3:AB:5A:74:EB:3F:30:03:31:AD:71:52:76:62:C0:3D:EC:FA:5D
X509v3 Authority Key Identifier:
keyid:B4:E3:A8:63:69:EF:79:DC:13:CF:B4:37:61:5D:49:23:88:BF:8C:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tOOoY2nvedwTz7Q3YV1JI4i_jOM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/5c57dd-486e-4c69-a116-f90a8dce1bfc/1/tOOoY2nvedwTz7Q3YV1JI4i_jOM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/5c57dd-486e-4c69-a116-f90a8dce1bfc/1/tOOoY2nvedwTz7Q3YV1JI4i_jOM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:72:63:19:a8:e1:4f:3a:4c:b1:0d:8f:18:05:ce:7c:d1:8a:
14:53:d2:ed:fd:49:29:1a:37:d2:ec:d2:60:00:94:2d:78:0e:
33:a0:87:2d:e4:64:0e:dc:d7:9d:16:d7:0a:b0:39:2b:0e:19:
ee:64:06:4b:c0:29:3d:b6:e3:ec:b5:e6:08:60:b6:6e:47:60:
48:8b:65:5e:9b:96:9e:eb:a3:e2:03:5f:20:29:84:30:c1:67:
8e:51:5f:1d:c3:2c:16:09:16:01:a5:9e:79:b4:db:2c:b1:db:
e3:bc:44:e8:ed:6d:7b:8a:9b:d0:fb:b2:c2:bc:0c:25:62:b1:
61:f4:3e:c5:26:04:ad:96:79:f7:5a:75:00:43:bc:75:03:c3:
73:6b:43:0a:5f:e4:1e:aa:f2:7c:89:e8:a5:04:e9:73:a7:06:
c8:9b:12:94:0d:dc:31:24:05:fd:48:7d:f3:5e:03:a0:c3:0b:
fd:eb:e2:e4:aa:a6:e7:d5:db:39:70:c6:35:7d:69:f4:b6:e3:
d1:f3:fb:43:f9:62:f0:7b:df:16:6c:83:7b:f5:8d:c2:95:13:
3d:bc:60:ac:20:32:3c:58:ea:89:3c:9d:88:bf:ba:93:26:8c:
d7:eb:eb:ae:a1:0d:16:f3:1a:1e:d9:e2:df:aa:e6:8f:ed:3e:
6a:6c:f3:36
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxuRNDysDlNt4JBGasjcaTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0ZTNhODYzNjllZjc5ZGMxM2NmYjQzNzYxNWQ0OTIzODhi
ZjhjZTMwHhcNMjUxMTExMDcwMjI1WhcNMjUxMTEyMDcwMjI1WjAzMTEwLwYDVQQD
Eyg0Y2EzYWI1YTc0ZWIzZjMwMDMzMWFkNzE1Mjc2NjJjMDNkZWNmYTVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA30p3GDcV5KWe1w3hm3BMTqFCtdug
8jD24xDXdcaLYDSPSqdX2telSSVTR0rdkgDTCoeGFozyTI0HnXfCK9Z/Kjz88sI9
fNGfGnJhY4izEMIBuFcK40WUmd7mnuudkoU6m4hH/YcaMC4N5ntEImFIPSn8QPJB
V5DDMqdNT/m9cCXoDhSurkka3zTwjtGB96ZVwl0eaW3QdDn6liqzzYlAfhvehCkq
ljr4e4wef6ebCnRZGO7bIsMRfhuQmlpCNjP1l22zYIEtvLxvAESn5IkUDKckMEZU
oIdrmShCLp1+JwijGRcAgmTmK37E8OZriEou0cZ0217tq8CzfQOOix9YYQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEyjq1p06z8wAzGtcVJ2YsA97PpdMB8GA1UdIwQY
MBaAFLTjqGNp73ncE8+0N2FdSSOIv4zjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdE9Pb1kybnZlZHdUejdRM1lWMUpJNGlfak9NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy81YzU3ZGQtNDg2ZS00YzY5LWExMTYt
ZjkwYThkY2UxYmZjLzEvdE9Pb1kybnZlZHdUejdRM1lWMUpJNGlfak9NLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy81YzU3ZGQtNDg2ZS00YzY5LWExMTYtZjkwYThkY2UxYmZj
LzEvdE9Pb1kybnZlZHdUejdRM1lWMUpJNGlfak9NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL3JjGajh
TzpMsQ2PGAXOfNGKFFPS7f1JKRo30uzSYACULXgOM6CHLeRkDtzXnRbXCrA5Kw4Z
7mQGS8ApPbbj7LXmCGC2bkdgSItlXpuWnuuj4gNfICmEMMFnjlFfHcMsFgkWAaWe
ebTbLLHb47xE6O1te4qb0PuywrwMJWKxYfQ+xSYErZZ591p1AEO8dQPDc2tDCl/k
HqryfInopQTpc6cGyJsSlA3cMSQF/Uh9814DoMML/evi5Kqm59XbOXDGNX1p9Lbj
0fP7Q/li8HvfFmyDe/WNwpUTPbxgrCAyPFjqiTydiL+6kyaM1+vrrqENFvMaHtni
36rmj+0+amzzNg==
-----END CERTIFICATE-----
Generated at Tue Nov 11 13:10:28 2025 by rpki-client