Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/1305d7-3a16-4623-b74e-eeaf20ebf8ef/1/sQQLwlH-AmafV_6lcnQ6N6z71Vc.mft
File: sQQLwlH-AmafV_6lcnQ6N6z71Vc.mft (raw, json)
Hash identifier: ViT916xM2ex2H7gw41mTm+oHSgm1bYQJSRSgn6fPQ7I=
Subject key identifier: 1F:C2:A2:87:3E:5D:83:52:A0:11:7D:FD:B9:02:96:B0:41:FD:85:2A
Authority key identifier: B1:04:0B:C2:51:FE:02:66:9F:57:FE:A5:72:74:3A:37:AC:FB:D5:57
Certificate issuer: /CN=b1040bc251fe02669f57fea572743a37acfbd557
Certificate serial: 019A725C76E56412D131FDD70F5E80AE538B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sQQLwlH-AmafV_6lcnQ6N6z71Vc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/1305d7-3a16-4623-b74e-eeaf20ebf8ef/1/sQQLwlH-AmafV_6lcnQ6N6z71Vc.mft
Manifest number: 08C5
Signing time: Tue 11 Nov 2025 10:00:53 +0000
Manifest this update: Tue 11 Nov 2025 10:00:53 +0000
Manifest next update: Wed 12 Nov 2025 10:00:53 +0000
Files and hashes: 1: sQQLwlH-AmafV_6lcnQ6N6z71Vc.crl (hash: R8GJKnwf5y38wNUkA2GJ9zRJCgNhc3j564ARV5u33wU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/1305d7-3a16-4623-b74e-eeaf20ebf8ef/1/sQQLwlH-AmafV_6lcnQ6N6z71Vc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/1305d7-3a16-4623-b74e-eeaf20ebf8ef/1/sQQLwlH-AmafV_6lcnQ6N6z71Vc.mft
rsync://rpki.ripe.net/repository/DEFAULT/sQQLwlH-AmafV_6lcnQ6N6z71Vc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:76:e5:64:12:d1:31:fd:d7:0f:5e:80:ae:53:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1040bc251fe02669f57fea572743a37acfbd557
Validity
Not Before: Nov 11 10:00:53 2025 GMT
Not After : Nov 12 10:00:53 2025 GMT
Subject: CN=1fc2a2873e5d8352a0117dfdb90296b041fd852a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:c1:bc:0b:4c:dc:81:76:54:ac:4e:7e:7f:7d:
05:32:29:f7:d2:6e:0f:f2:30:92:19:b6:04:00:6d:
42:fc:93:a4:43:1b:06:69:c1:cb:fa:e4:cb:73:b9:
a8:ff:34:e3:56:90:f2:af:7e:e0:48:9c:d3:dc:88:
7a:be:81:5f:a6:c0:7b:00:76:08:f3:e6:f9:d7:50:
14:5f:54:ab:78:46:bf:72:a5:ec:bf:73:a1:04:84:
2f:d4:32:28:22:e7:46:7e:c4:4b:73:80:06:ac:36:
68:5e:bd:92:0b:9d:f5:0f:29:42:04:88:f6:20:fd:
25:29:a3:96:33:d8:fc:22:eb:b1:5a:dd:74:f3:84:
6e:e6:96:7f:60:52:54:29:d2:aa:ae:2a:7a:ac:a5:
1f:9d:35:bb:c0:d3:3e:70:84:da:b4:db:17:05:fe:
ab:68:74:67:21:b4:1d:67:e1:2c:30:98:77:b3:99:
f8:ff:00:da:a6:87:7d:7d:5f:36:ad:f3:c2:4d:a1:
e3:09:e6:7e:c5:e4:92:bc:86:3f:a5:c8:81:75:7e:
7b:5f:83:33:f2:d4:13:e4:32:6f:32:63:4c:d1:91:
1f:03:2b:1c:d5:73:fb:4c:0f:21:9e:2f:f1:68:8b:
2a:41:aa:3e:67:0b:1a:ec:95:f6:8f:da:63:d8:74:
08:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:C2:A2:87:3E:5D:83:52:A0:11:7D:FD:B9:02:96:B0:41:FD:85:2A
X509v3 Authority Key Identifier:
keyid:B1:04:0B:C2:51:FE:02:66:9F:57:FE:A5:72:74:3A:37:AC:FB:D5:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sQQLwlH-AmafV_6lcnQ6N6z71Vc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/1305d7-3a16-4623-b74e-eeaf20ebf8ef/1/sQQLwlH-AmafV_6lcnQ6N6z71Vc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/1305d7-3a16-4623-b74e-eeaf20ebf8ef/1/sQQLwlH-AmafV_6lcnQ6N6z71Vc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:1d:61:5d:e2:76:70:ee:68:6a:32:f8:da:85:8a:b1:de:96:
52:02:41:87:31:b9:c0:5d:00:bd:56:74:e7:c7:71:b9:a4:5f:
55:a7:8b:f0:ba:aa:16:fb:2a:37:dd:c8:6a:69:7c:6a:95:f9:
b5:fe:e4:94:16:d7:e7:18:f9:26:90:76:07:71:95:f6:88:4c:
3d:56:c4:ef:d6:bb:9e:d3:ba:02:fb:30:7b:29:4e:59:b5:38:
b6:d6:9a:7b:e2:fe:80:df:fd:4a:37:ab:cb:9a:da:d1:df:40:
04:cd:ce:58:9f:b5:a7:f1:f6:ff:00:51:77:77:a8:ee:a3:e0:
97:d7:5d:d4:bb:2f:f1:22:db:f9:ab:86:dd:68:c0:9d:33:73:
49:63:be:a1:21:90:97:a3:e2:b1:87:c1:63:28:45:34:e2:90:
85:cb:22:88:b9:b9:f3:16:a0:72:cd:f1:bd:af:40:43:ca:94:
50:d2:dc:4c:6d:f8:72:0d:fd:70:7e:0b:d0:65:fc:de:44:cd:
94:c0:b8:c7:09:72:19:ea:4a:05:c8:a9:72:c2:94:cc:35:7b:
2c:51:42:f6:8e:b5:b3:91:29:f4:8e:e8:8e:0b:c1:5f:5f:8e:
98:27:39:9d:c6:9f:41:12:f2:14:16:a7:59:d9:d8:bf:6d:5a:
ea:db:bc:ce
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpyXHblZBLRMf3XD16ArlOLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIxMDQwYmMyNTFmZTAyNjY5ZjU3ZmVhNTcyNzQzYTM3YWNm
YmQ1NTcwHhcNMjUxMTExMTAwMDUzWhcNMjUxMTEyMTAwMDUzWjAzMTEwLwYDVQQD
EygxZmMyYTI4NzNlNWQ4MzUyYTAxMTdkZmRiOTAyOTZiMDQxZmQ4NTJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAucG8C0zcgXZUrE5+f30FMin30m4P
8jCSGbYEAG1C/JOkQxsGacHL+uTLc7mo/zTjVpDyr37gSJzT3Ih6voFfpsB7AHYI
8+b511AUX1SreEa/cqXsv3OhBIQv1DIoIudGfsRLc4AGrDZoXr2SC531DylCBIj2
IP0lKaOWM9j8IuuxWt1084Ru5pZ/YFJUKdKqrip6rKUfnTW7wNM+cITatNsXBf6r
aHRnIbQdZ+EsMJh3s5n4/wDapod9fV82rfPCTaHjCeZ+xeSSvIY/pciBdX57X4Mz
8tQT5DJvMmNM0ZEfAysc1XP7TA8hni/xaIsqQao+Zwsa7JX2j9pj2HQIqwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB/Cooc+XYNSoBF9/bkClrBB/YUqMB8GA1UdIwQY
MBaAFLEEC8JR/gJmn1f+pXJ0Ojes+9VXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc1FRTHdsSC1BbWFmVl82bGNuUTZONno3MVZjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNi8xMzA1ZDctM2ExNi00NjIzLWI3NGUt
ZWVhZjIwZWJmOGVmLzEvc1FRTHdsSC1BbWFmVl82bGNuUTZONno3MVZjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNi8xMzA1ZDctM2ExNi00NjIzLWI3NGUtZWVhZjIwZWJmOGVm
LzEvc1FRTHdsSC1BbWFmVl82bGNuUTZONno3MVZjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPx1hXeJ2
cO5oajL42oWKsd6WUgJBhzG5wF0AvVZ058dxuaRfVaeL8LqqFvsqN93Iaml8apX5
tf7klBbX5xj5JpB2B3GV9ohMPVbE79a7ntO6AvsweylOWbU4ttaae+L+gN/9Sjer
y5ra0d9ABM3OWJ+1p/H2/wBRd3eo7qPgl9dd1Lsv8SLb+auG3WjAnTNzSWO+oSGQ
l6PisYfBYyhFNOKQhcsiiLm58xagcs3xva9AQ8qUUNLcTG34cg39cH4L0GX83kTN
lMC4xwlyGepKBcipcsKUzDV7LFFC9o61s5Ep9I7ojgvBX1+OmCc5ncafQRLyFBan
WdnYv21a6tu8zg==
-----END CERTIFICATE-----
Generated at Tue Nov 11 12:43:20 2025 by rpki-client