Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/635f75-616b-4b93-ab40-e3718998b184/1/C86QcAXcPrBHC8PbRpCNoQkXuEo.mft
File: C86QcAXcPrBHC8PbRpCNoQkXuEo.mft (raw, json)
Hash identifier: 0pA5M3sO5e+F3GATM7XNtMsUdXDbiz6ioQ8V9zJXdVw=
Subject key identifier: 1A:85:97:32:16:C9:FA:90:15:2A:77:8D:D7:7D:E7:B7:36:61:6E:9A
Authority key identifier: 0B:CE:90:70:05:DC:3E:B0:47:0B:C3:DB:46:90:8D:A1:09:17:B8:4A
Certificate issuer: /CN=0bce907005dc3eb0470bc3db46908da10917b84a
Certificate serial: 019A71B87D73F0D9C72C519DA96FDD923204
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C86QcAXcPrBHC8PbRpCNoQkXuEo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/635f75-616b-4b93-ab40-e3718998b184/1/C86QcAXcPrBHC8PbRpCNoQkXuEo.mft
Manifest number: 10CE
Signing time: Tue 11 Nov 2025 07:01:47 +0000
Manifest this update: Tue 11 Nov 2025 07:01:47 +0000
Manifest next update: Wed 12 Nov 2025 07:01:47 +0000
Files and hashes: 1: C86QcAXcPrBHC8PbRpCNoQkXuEo.crl (hash: VJ+qGSSzkjpzZPhnSyD8Mgs59etyXZBbp8mteN8foIQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/635f75-616b-4b93-ab40-e3718998b184/1/C86QcAXcPrBHC8PbRpCNoQkXuEo.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/635f75-616b-4b93-ab40-e3718998b184/1/C86QcAXcPrBHC8PbRpCNoQkXuEo.mft
rsync://rpki.ripe.net/repository/DEFAULT/C86QcAXcPrBHC8PbRpCNoQkXuEo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:7d:73:f0:d9:c7:2c:51:9d:a9:6f:dd:92:32:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bce907005dc3eb0470bc3db46908da10917b84a
Validity
Not Before: Nov 11 07:01:47 2025 GMT
Not After : Nov 12 07:01:47 2025 GMT
Subject: CN=1a85973216c9fa90152a778dd77de7b736616e9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:9e:ca:49:4d:6a:ca:4e:e9:2b:63:30:73:bb:
00:70:08:ee:ca:9f:27:e0:02:1c:80:d4:a8:2b:67:
ac:4f:be:01:0a:f2:72:78:4a:8c:15:56:f7:17:87:
cf:62:30:a2:e9:52:a8:d1:60:4b:ed:37:e8:5b:9c:
ee:b2:a9:b9:a6:e1:0c:be:df:66:40:f1:99:f2:4c:
e8:e0:04:0a:ee:a8:fc:cd:1f:91:0b:32:a5:43:cf:
a8:e7:80:2c:6a:5d:6e:1f:27:e0:79:62:21:55:10:
b9:5b:af:5a:fc:a1:b5:4e:b8:b0:4e:d0:c9:28:ed:
b3:cc:55:c0:ad:13:db:e7:6a:e5:43:38:37:e0:96:
ca:e4:16:35:2b:98:42:3f:b6:c8:b6:f7:a8:3a:14:
57:26:74:56:5c:49:25:aa:a9:9c:9b:8b:c1:78:4e:
fc:c9:ed:6e:78:dc:b2:76:8f:fa:52:ee:a7:b4:c6:
ed:0e:89:18:03:da:a4:38:c6:fe:59:65:4a:37:35:
b4:a7:ab:0e:de:b9:d8:51:fe:4d:30:24:5c:a2:42:
d7:9e:33:fd:2b:c8:51:8e:da:0b:70:7b:76:43:e2:
17:33:5c:0c:33:e4:79:87:10:44:b1:7b:16:cf:fb:
fa:9f:dc:2e:57:5e:e5:82:b1:94:22:f3:1a:aa:93:
6b:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:85:97:32:16:C9:FA:90:15:2A:77:8D:D7:7D:E7:B7:36:61:6E:9A
X509v3 Authority Key Identifier:
keyid:0B:CE:90:70:05:DC:3E:B0:47:0B:C3:DB:46:90:8D:A1:09:17:B8:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C86QcAXcPrBHC8PbRpCNoQkXuEo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/635f75-616b-4b93-ab40-e3718998b184/1/C86QcAXcPrBHC8PbRpCNoQkXuEo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/635f75-616b-4b93-ab40-e3718998b184/1/C86QcAXcPrBHC8PbRpCNoQkXuEo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:f2:93:b3:44:ca:9d:9d:15:e4:9f:53:88:c0:00:07:07:04:
de:a4:45:30:3b:0d:bf:f6:65:1d:45:8d:be:d9:dd:13:6c:f1:
2f:41:4c:16:a9:c3:f1:19:13:84:54:66:bd:1a:d2:0d:81:49:
8e:e7:de:af:e8:47:27:7d:ab:9d:00:98:d1:03:a5:47:db:2f:
8e:f8:ec:bb:68:e5:55:29:28:ed:b0:60:21:6f:3b:d9:87:64:
11:e0:79:6e:e4:76:ae:8c:83:79:d5:48:fe:26:f3:9c:ba:18:
3c:62:f3:07:3f:1a:dd:c1:09:f0:34:6c:29:b5:a0:59:d8:e2:
8d:34:c1:b6:5e:ae:44:f2:4b:0d:82:1c:1d:18:d6:f8:0c:63:
53:15:78:56:20:b7:9a:fe:19:85:66:9e:88:7f:15:35:b9:67:
3e:82:55:f1:ca:d0:dd:52:14:c6:53:5f:d6:d7:62:8c:9c:a7:
34:35:dd:e3:86:3a:e6:c8:2b:ea:83:51:03:56:8f:94:61:f7:
37:5e:9e:d5:1d:16:45:f3:16:65:6d:16:d0:7a:bd:1b:63:95:
7f:60:10:a8:9f:19:f7:cf:39:02:7c:d6:af:2a:1b:96:b3:d2:
bb:fa:b2:35:47:55:be:23:f5:b3:59:b1:ac:10:e7:ae:95:7c:
d6:7f:60:ba
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxuH1z8NnHLFGdqW/dkjIEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBiY2U5MDcwMDVkYzNlYjA0NzBiYzNkYjQ2OTA4ZGExMDkx
N2I4NGEwHhcNMjUxMTExMDcwMTQ3WhcNMjUxMTEyMDcwMTQ3WjAzMTEwLwYDVQQD
EygxYTg1OTczMjE2YzlmYTkwMTUyYTc3OGRkNzdkZTdiNzM2NjE2ZTlhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2J7KSU1qyk7pK2Mwc7sAcAjuyp8n
4AIcgNSoK2esT74BCvJyeEqMFVb3F4fPYjCi6VKo0WBL7TfoW5zusqm5puEMvt9m
QPGZ8kzo4AQK7qj8zR+RCzKlQ8+o54Asal1uHyfgeWIhVRC5W69a/KG1TriwTtDJ
KO2zzFXArRPb52rlQzg34JbK5BY1K5hCP7bItveoOhRXJnRWXEklqqmcm4vBeE78
ye1ueNyydo/6Uu6ntMbtDokYA9qkOMb+WWVKNzW0p6sO3rnYUf5NMCRcokLXnjP9
K8hRjtoLcHt2Q+IXM1wMM+R5hxBEsXsWz/v6n9wuV17lgrGUIvMaqpNr8QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBqFlzIWyfqQFSp3jdd957c2YW6aMB8GA1UdIwQY
MBaAFAvOkHAF3D6wRwvD20aQjaEJF7hKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQzg2UWNBWGNQckJIQzhQYlJwQ05vUWtYdUVvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi82MzVmNzUtNjE2Yi00YjkzLWFiNDAt
ZTM3MTg5OThiMTg0LzEvQzg2UWNBWGNQckJIQzhQYlJwQ05vUWtYdUVvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZi82MzVmNzUtNjE2Yi00YjkzLWFiNDAtZTM3MTg5OThiMTg0
LzEvQzg2UWNBWGNQckJIQzhQYlJwQ05vUWtYdUVvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdvKTs0TK
nZ0V5J9TiMAABwcE3qRFMDsNv/ZlHUWNvtndE2zxL0FMFqnD8RkThFRmvRrSDYFJ
jufer+hHJ32rnQCY0QOlR9svjvjsu2jlVSko7bBgIW872YdkEeB5buR2royDedVI
/ibznLoYPGLzBz8a3cEJ8DRsKbWgWdjijTTBtl6uRPJLDYIcHRjW+AxjUxV4ViC3
mv4ZhWaeiH8VNblnPoJV8crQ3VIUxlNf1tdijJynNDXd44Y65sgr6oNRA1aPlGH3
N16e1R0WRfMWZW0W0Hq9G2OVf2AQqJ8Z9885AnzWryoblrPSu/qyNUdVviP1s1mx
rBDnrpV81n9gug==
-----END CERTIFICATE-----
Generated at Tue Nov 11 11:47:57 2025 by rpki-client