Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/7c11b7-7c2c-4f05-9017-86c016d7a73c/1/B8YQsqBtsYMYVLZybDMJAzYodBU.mft
File: B8YQsqBtsYMYVLZybDMJAzYodBU.mft (raw, json)
Hash identifier: nQ7xGNW2zFV4OhfJo1u6EYmvYKC2ZGxLTdhcqyckHdg=
Subject key identifier: 59:A6:B2:EC:25:CA:C2:74:85:7E:2C:E7:BF:F0:12:EF:B8:AB:7F:05
Authority key identifier: 07:C6:10:B2:A0:6D:B1:83:18:54:B6:72:6C:33:09:03:36:28:74:15
Certificate issuer: /CN=07c610b2a06db1831854b6726c33090336287415
Certificate serial: 019A71B8DA23C45764C269519A2D83066274
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B8YQsqBtsYMYVLZybDMJAzYodBU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/7c11b7-7c2c-4f05-9017-86c016d7a73c/1/B8YQsqBtsYMYVLZybDMJAzYodBU.mft
Manifest number: 171F
Signing time: Tue 11 Nov 2025 07:02:11 +0000
Manifest this update: Tue 11 Nov 2025 07:02:11 +0000
Manifest next update: Wed 12 Nov 2025 07:02:11 +0000
Files and hashes: 1: B8YQsqBtsYMYVLZybDMJAzYodBU.crl (hash: Epd1n985aVf+x6zI2La7t1nCWmuYXSV124o2f3Kr9bE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/7c11b7-7c2c-4f05-9017-86c016d7a73c/1/B8YQsqBtsYMYVLZybDMJAzYodBU.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/7c11b7-7c2c-4f05-9017-86c016d7a73c/1/B8YQsqBtsYMYVLZybDMJAzYodBU.mft
rsync://rpki.ripe.net/repository/DEFAULT/B8YQsqBtsYMYVLZybDMJAzYodBU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:da:23:c4:57:64:c2:69:51:9a:2d:83:06:62:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07c610b2a06db1831854b6726c33090336287415
Validity
Not Before: Nov 11 07:02:11 2025 GMT
Not After : Nov 12 07:02:11 2025 GMT
Subject: CN=59a6b2ec25cac274857e2ce7bff012efb8ab7f05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:e3:a5:73:65:84:52:d7:fa:91:79:d6:f0:64:
d3:95:21:e2:58:64:04:1c:00:71:a3:98:a6:97:b8:
30:14:fa:80:b6:f3:c1:0b:8d:21:8f:8d:0e:b1:2a:
7e:36:85:fc:27:80:1b:8e:0a:6c:f9:e9:2f:d7:dc:
2d:8e:0e:82:97:23:aa:d1:30:5a:78:d5:7b:ae:8c:
9f:32:3b:9f:09:c0:47:32:c7:24:45:e7:ce:dc:e9:
d1:40:e8:c8:f1:39:df:d5:90:33:fe:2b:46:da:f5:
12:6c:9e:8f:37:47:10:2f:3b:15:da:88:0b:bf:1a:
94:25:af:f3:ef:e1:68:13:11:79:4d:9e:09:c9:92:
96:a8:87:cd:98:3e:0a:ac:90:49:8b:48:f7:9a:d2:
12:6b:59:2a:36:27:d3:76:ce:bc:ea:ea:6e:b7:33:
3d:2a:94:0a:a7:c6:64:50:7a:aa:c1:96:3f:bb:43:
6c:d6:59:da:36:d5:b6:6b:1a:d7:48:4c:e0:07:50:
e1:94:be:23:6c:c2:d2:1e:00:95:ba:6e:8e:f9:f5:
94:94:b3:27:af:fe:51:85:f1:d1:43:76:3c:8b:1f:
b5:bb:e1:78:a0:4f:2b:76:76:81:55:11:f6:48:66:
41:26:88:48:77:22:76:50:7b:df:10:1a:47:ca:ca:
62:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:A6:B2:EC:25:CA:C2:74:85:7E:2C:E7:BF:F0:12:EF:B8:AB:7F:05
X509v3 Authority Key Identifier:
keyid:07:C6:10:B2:A0:6D:B1:83:18:54:B6:72:6C:33:09:03:36:28:74:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B8YQsqBtsYMYVLZybDMJAzYodBU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/7c11b7-7c2c-4f05-9017-86c016d7a73c/1/B8YQsqBtsYMYVLZybDMJAzYodBU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/7c11b7-7c2c-4f05-9017-86c016d7a73c/1/B8YQsqBtsYMYVLZybDMJAzYodBU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:16:10:97:30:32:26:77:f1:49:92:5b:32:dd:c0:44:ea:c4:
53:1e:95:b8:b6:34:2d:3c:43:39:20:19:be:a6:ac:75:d3:a5:
be:fc:3a:88:fa:38:e0:28:14:f4:fa:30:fd:3b:b9:96:ca:39:
c6:b2:ba:0b:84:b9:ed:d0:eb:1e:f3:84:01:8c:fc:48:52:1f:
8d:7c:2b:55:70:93:50:1f:97:eb:4d:89:ac:2d:fd:3e:1f:e7:
6a:88:0a:35:66:f1:8f:81:ed:67:bd:bd:52:3c:85:46:af:9c:
df:9a:94:21:71:af:8d:5a:f4:5a:3d:0f:ec:e6:9a:b9:e1:40:
4a:ea:e0:90:29:ab:41:6c:1b:3b:e8:c2:fc:52:92:e9:09:35:
b5:63:a4:ac:59:7d:8e:84:6b:fe:d5:4a:16:25:c8:5c:5b:3f:
4e:73:34:30:7c:bb:ba:43:80:5a:d0:10:ee:d6:e9:42:5a:40:
e4:b1:d9:56:df:2e:b4:49:81:45:90:78:1f:24:d7:ce:82:40:
de:4d:5c:38:6b:88:b6:25:79:51:a8:7e:38:7a:e1:c6:ec:27:
3b:3e:1b:d2:97:28:d5:bf:dd:ec:d8:f7:8d:2e:09:fa:7e:8b:
2e:f6:32:40:80:7c:b2:30:b7:54:90:a6:f4:dc:c7:51:53:af:
b1:ab:ac:1e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxuNojxFdkwmlRmi2DBmJ0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA3YzYxMGIyYTA2ZGIxODMxODU0YjY3MjZjMzMwOTAzMzYy
ODc0MTUwHhcNMjUxMTExMDcwMjExWhcNMjUxMTEyMDcwMjExWjAzMTEwLwYDVQQD
Eyg1OWE2YjJlYzI1Y2FjMjc0ODU3ZTJjZTdiZmYwMTJlZmI4YWI3ZjA1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxOOlc2WEUtf6kXnW8GTTlSHiWGQE
HABxo5iml7gwFPqAtvPBC40hj40OsSp+NoX8J4Abjgps+ekv19wtjg6ClyOq0TBa
eNV7royfMjufCcBHMsckRefO3OnRQOjI8Tnf1ZAz/itG2vUSbJ6PN0cQLzsV2ogL
vxqUJa/z7+FoExF5TZ4JyZKWqIfNmD4KrJBJi0j3mtISa1kqNifTds686uputzM9
KpQKp8ZkUHqqwZY/u0Ns1lnaNtW2axrXSEzgB1DhlL4jbMLSHgCVum6O+fWUlLMn
r/5RhfHRQ3Y8ix+1u+F4oE8rdnaBVRH2SGZBJohIdyJ2UHvfEBpHyspicwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFmmsuwlysJ0hX4s57/wEu+4q38FMB8GA1UdIwQY
MBaAFAfGELKgbbGDGFS2cmwzCQM2KHQVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQjhZUXNxQnRzWU1ZVkxaeWJETUpBellvZEJVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi83YzExYjctN2MyYy00ZjA1LTkwMTct
ODZjMDE2ZDdhNzNjLzEvQjhZUXNxQnRzWU1ZVkxaeWJETUpBellvZEJVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZi83YzExYjctN2MyYy00ZjA1LTkwMTctODZjMDE2ZDdhNzNj
LzEvQjhZUXNxQnRzWU1ZVkxaeWJETUpBellvZEJVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcBYQlzAy
JnfxSZJbMt3AROrEUx6VuLY0LTxDOSAZvqasddOlvvw6iPo44CgU9Pow/Tu5lso5
xrK6C4S57dDrHvOEAYz8SFIfjXwrVXCTUB+X602JrC39Ph/naogKNWbxj4HtZ729
UjyFRq+c35qUIXGvjVr0Wj0P7OaaueFASurgkCmrQWwbO+jC/FKS6Qk1tWOkrFl9
joRr/tVKFiXIXFs/TnM0MHy7ukOAWtAQ7tbpQlpA5LHZVt8utEmBRZB4HyTXzoJA
3k1cOGuItiV5Uah+OHrhxuwnOz4b0pco1b/d7Nj3jS4J+n6LLvYyQIB8sjC3VJCm
9NzHUVOvsausHg==
-----END CERTIFICATE-----
Generated at Tue Nov 11 12:39:06 2025 by rpki-client