Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/77ce38-402c-4cb9-8582-221449118309/1/TeztaXzW72A8kPgBiBg7zjAgQOE.mft
File: TeztaXzW72A8kPgBiBg7zjAgQOE.mft (raw, json)
Hash identifier: Ee9quJiV5yscPs11Qx5+7FJHWyo7FpFAEJvHT7sj52o=
Subject key identifier: C1:F4:CC:48:CF:71:19:01:67:B5:E2:2F:6F:D9:DC:68:3E:30:6E:4E
Authority key identifier: 4D:EC:ED:69:7C:D6:EF:60:3C:90:F8:01:88:18:3B:CE:30:20:40:E1
Certificate issuer: /CN=4deced697cd6ef603c90f80188183bce302040e1
Certificate serial: 019A725CC3FC0C4F0BF89E1BB3AE40F08E64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TeztaXzW72A8kPgBiBg7zjAgQOE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/77ce38-402c-4cb9-8582-221449118309/1/TeztaXzW72A8kPgBiBg7zjAgQOE.mft
Manifest number: 06BD
Signing time: Tue 11 Nov 2025 10:01:13 +0000
Manifest this update: Tue 11 Nov 2025 10:01:13 +0000
Manifest next update: Wed 12 Nov 2025 10:01:13 +0000
Files and hashes: 1: TeztaXzW72A8kPgBiBg7zjAgQOE.crl (hash: kNSkfRnG3RiiXWcNkgXj9j0908oCl2BBksxR7VJwv8A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/77ce38-402c-4cb9-8582-221449118309/1/TeztaXzW72A8kPgBiBg7zjAgQOE.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/77ce38-402c-4cb9-8582-221449118309/1/TeztaXzW72A8kPgBiBg7zjAgQOE.mft
rsync://rpki.ripe.net/repository/DEFAULT/TeztaXzW72A8kPgBiBg7zjAgQOE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:c3:fc:0c:4f:0b:f8:9e:1b:b3:ae:40:f0:8e:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4deced697cd6ef603c90f80188183bce302040e1
Validity
Not Before: Nov 11 10:01:13 2025 GMT
Not After : Nov 12 10:01:13 2025 GMT
Subject: CN=c1f4cc48cf71190167b5e22f6fd9dc683e306e4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:b9:fa:79:82:7c:76:06:3d:26:d1:fa:ee:55:
15:d9:eb:d6:ce:53:45:58:fa:83:5d:0f:a1:9d:a6:
b5:de:2d:49:09:b3:8e:89:9c:d4:3f:4e:c1:90:dc:
05:4d:bb:86:d5:1e:3d:28:a1:80:8f:15:4d:ae:f8:
5c:7c:6c:e8:be:ce:af:85:48:28:67:0b:d3:fa:5a:
bd:06:3e:7c:00:27:00:ab:7e:d6:ec:a3:61:5b:51:
82:e5:6f:74:90:60:6b:b6:33:51:9c:08:a1:45:9a:
c5:63:c1:3a:d1:b7:e1:3c:4d:5f:f6:d7:ce:a6:c7:
c9:cc:52:8b:62:24:eb:1d:c6:de:dd:96:4d:33:e2:
cc:04:83:f2:1d:49:d3:c2:0b:2f:84:13:ba:97:3a:
b9:aa:d5:56:a8:8d:39:ff:d9:05:ae:9f:b7:12:26:
a9:82:3b:ed:39:20:2e:d7:26:ce:da:6e:03:37:82:
f6:d2:0c:88:18:cd:48:3b:54:9b:e9:ab:79:38:e1:
2f:ea:87:d7:20:b6:5a:ca:4d:47:bd:39:73:d5:ab:
df:55:51:3f:ca:8f:16:ac:2e:79:d3:c9:7e:07:61:
b8:8c:98:29:a4:79:e0:5c:1d:c1:a2:68:ef:9c:d6:
74:a8:b5:44:7d:85:7e:da:51:7f:7c:63:6f:91:59:
78:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:F4:CC:48:CF:71:19:01:67:B5:E2:2F:6F:D9:DC:68:3E:30:6E:4E
X509v3 Authority Key Identifier:
keyid:4D:EC:ED:69:7C:D6:EF:60:3C:90:F8:01:88:18:3B:CE:30:20:40:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TeztaXzW72A8kPgBiBg7zjAgQOE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/77ce38-402c-4cb9-8582-221449118309/1/TeztaXzW72A8kPgBiBg7zjAgQOE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/77ce38-402c-4cb9-8582-221449118309/1/TeztaXzW72A8kPgBiBg7zjAgQOE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:51:69:b7:1c:45:61:71:47:89:ce:3f:e5:e2:66:72:12:f2:
67:ad:c9:57:3b:4d:33:9f:bb:47:98:86:1d:24:80:61:c7:ed:
3b:07:c7:50:40:38:29:46:32:45:8f:9c:95:bd:c3:1c:61:d6:
48:13:47:f4:c0:c0:d2:cc:7c:f5:9a:de:5b:bc:c4:82:a4:40:
01:fb:91:12:6d:b9:57:ea:a3:61:d5:2f:ac:d9:19:9c:3b:a6:
a8:b0:0f:7f:e1:62:f2:71:51:48:ed:00:9c:af:d9:8b:2d:6d:
0e:52:75:24:f9:53:67:f5:1e:81:9c:8b:bc:18:79:4f:27:77:
aa:58:77:bd:26:e5:ce:b2:44:ac:2d:f4:e9:e3:ca:84:ad:17:
7b:79:ee:57:60:14:64:47:46:0a:25:3a:1e:ee:8a:09:ce:9c:
25:fb:c3:bc:a5:a5:bb:01:31:4d:4a:12:ad:0f:6e:e3:4a:9b:
3c:aa:ed:ef:1b:be:2c:74:70:08:23:dd:d3:8d:fb:0b:87:1f:
81:a0:11:41:74:5b:60:3e:d3:1c:11:d7:0d:26:a3:41:68:f2:
a6:f8:94:14:b4:ad:50:f1:3a:be:ef:26:1c:cb:13:40:18:f8:
68:d4:ca:78:aa:5b:d6:69:cb:e1:8e:85:4b:ff:0f:b5:d2:57:
c3:b2:34:14
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpyXMP8DE8L+J4bs65A8I5kMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRkZWNlZDY5N2NkNmVmNjAzYzkwZjgwMTg4MTgzYmNlMzAy
MDQwZTEwHhcNMjUxMTExMTAwMTEzWhcNMjUxMTEyMTAwMTEzWjAzMTEwLwYDVQQD
EyhjMWY0Y2M0OGNmNzExOTAxNjdiNWUyMmY2ZmQ5ZGM2ODNlMzA2ZTRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoLn6eYJ8dgY9JtH67lUV2evWzlNF
WPqDXQ+hnaa13i1JCbOOiZzUP07BkNwFTbuG1R49KKGAjxVNrvhcfGzovs6vhUgo
ZwvT+lq9Bj58ACcAq37W7KNhW1GC5W90kGBrtjNRnAihRZrFY8E60bfhPE1f9tfO
psfJzFKLYiTrHcbe3ZZNM+LMBIPyHUnTwgsvhBO6lzq5qtVWqI05/9kFrp+3Eiap
gjvtOSAu1ybO2m4DN4L20gyIGM1IO1Sb6at5OOEv6ofXILZayk1HvTlz1avfVVE/
yo8WrC5508l+B2G4jJgppHngXB3BomjvnNZ0qLVEfYV+2lF/fGNvkVl40QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMH0zEjPcRkBZ7XiL2/Z3Gg+MG5OMB8GA1UdIwQY
MBaAFE3s7Wl81u9gPJD4AYgYO84wIEDhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVGV6dGFYelc3MkE4a1BnQmlCZzd6akFnUU9FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi83N2NlMzgtNDAyYy00Y2I5LTg1ODIt
MjIxNDQ5MTE4MzA5LzEvVGV6dGFYelc3MkE4a1BnQmlCZzd6akFnUU9FLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZi83N2NlMzgtNDAyYy00Y2I5LTg1ODItMjIxNDQ5MTE4MzA5
LzEvVGV6dGFYelc3MkE4a1BnQmlCZzd6akFnUU9FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAR1FptxxF
YXFHic4/5eJmchLyZ63JVztNM5+7R5iGHSSAYcftOwfHUEA4KUYyRY+clb3DHGHW
SBNH9MDA0sx89ZreW7zEgqRAAfuREm25V+qjYdUvrNkZnDumqLAPf+Fi8nFRSO0A
nK/Ziy1tDlJ1JPlTZ/UegZyLvBh5Tyd3qlh3vSblzrJErC306ePKhK0Xe3nuV2AU
ZEdGCiU6Hu6KCc6cJfvDvKWluwExTUoSrQ9u40qbPKrt7xu+LHRwCCPd0437C4cf
gaARQXRbYD7THBHXDSajQWjypviUFLStUPE6vu8mHMsTQBj4aNTKeKpb1mnL4Y6F
S/8PtdJXw7I0FA==
-----END CERTIFICATE-----
Generated at Tue Nov 11 14:16:18 2025 by rpki-client