Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/b967a2-ce26-4787-8015-a33191d8a2e1/1/fsS92Wu94fVcNATX7Ga-BH6xfZw.mft
File: fsS92Wu94fVcNATX7Ga-BH6xfZw.mft (raw, json)
Hash identifier: DsbLm8cFfIbDson/+jBo0YUP0V+Uvxi0oovRMckuTYs=
Subject key identifier: 85:E7:28:9F:B7:5D:5D:9B:32:9C:C1:9E:C4:C0:FF:3D:1D:F4:45:81
Authority key identifier: 7E:C4:BD:D9:6B:BD:E1:F5:5C:34:04:D7:EC:66:BE:04:7E:B1:7D:9C
Certificate issuer: /CN=7ec4bdd96bbde1f55c3404d7ec66be047eb17d9c
Certificate serial: 019A7293FD7B51D366983AB735BCAD60DE78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fsS92Wu94fVcNATX7Ga-BH6xfZw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/b967a2-ce26-4787-8015-a33191d8a2e1/1/fsS92Wu94fVcNATX7Ga-BH6xfZw.mft
Manifest number: 0B95
Signing time: Tue 11 Nov 2025 11:01:32 +0000
Manifest this update: Tue 11 Nov 2025 11:01:32 +0000
Manifest next update: Wed 12 Nov 2025 11:01:32 +0000
Files and hashes: 1: fsS92Wu94fVcNATX7Ga-BH6xfZw.crl (hash: 2nfezjQ8iuVpzLDrTZPOEZT/Q+MWNqxAEjMQuOzkB3c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/b967a2-ce26-4787-8015-a33191d8a2e1/1/fsS92Wu94fVcNATX7Ga-BH6xfZw.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/b967a2-ce26-4787-8015-a33191d8a2e1/1/fsS92Wu94fVcNATX7Ga-BH6xfZw.mft
rsync://rpki.ripe.net/repository/DEFAULT/fsS92Wu94fVcNATX7Ga-BH6xfZw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:fd:7b:51:d3:66:98:3a:b7:35:bc:ad:60:de:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ec4bdd96bbde1f55c3404d7ec66be047eb17d9c
Validity
Not Before: Nov 11 11:01:32 2025 GMT
Not After : Nov 12 11:01:32 2025 GMT
Subject: CN=85e7289fb75d5d9b329cc19ec4c0ff3d1df44581
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:40:b3:55:18:2f:c2:64:30:1f:58:0d:d8:d9:
89:cc:4d:f1:d4:db:98:e4:2e:63:ea:7f:8d:ab:d2:
42:6a:9a:b5:9d:fc:09:df:a8:8a:d3:2e:b9:5a:9a:
93:84:6c:eb:38:a0:bc:7f:98:5d:84:2f:28:d9:67:
d5:62:cc:dd:72:56:83:6a:d8:f3:5d:8b:5f:54:b7:
4d:7c:d8:9f:ba:c4:80:6c:4e:3a:91:85:ee:53:c8:
bb:fa:a0:01:01:40:a7:b7:fc:8f:45:c0:14:dc:1f:
65:88:c8:d5:42:c3:3d:f6:a7:b8:b4:88:0b:a4:1c:
d6:da:e0:0e:09:08:df:36:29:7f:d3:73:77:c8:25:
09:59:97:e2:e2:09:b9:ff:86:59:63:45:1c:ee:44:
df:b6:6a:15:18:8f:f8:af:b9:68:7a:e5:af:8d:36:
9c:b6:7c:d1:10:40:b1:eb:90:1b:7f:5c:02:ff:e9:
f7:a8:05:2e:77:19:3a:b7:4a:45:81:11:c2:4c:b0:
18:4c:d7:f4:3d:1e:90:bb:ba:ae:e3:5b:a4:fd:7c:
58:46:6d:48:df:21:17:a0:4b:71:49:0e:fd:ed:b5:
9e:44:89:51:a3:62:f2:7e:35:25:6e:26:d5:1b:95:
bc:88:34:11:c6:9e:c1:f3:92:b1:8a:c2:ae:7f:6e:
75:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:E7:28:9F:B7:5D:5D:9B:32:9C:C1:9E:C4:C0:FF:3D:1D:F4:45:81
X509v3 Authority Key Identifier:
keyid:7E:C4:BD:D9:6B:BD:E1:F5:5C:34:04:D7:EC:66:BE:04:7E:B1:7D:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fsS92Wu94fVcNATX7Ga-BH6xfZw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/b967a2-ce26-4787-8015-a33191d8a2e1/1/fsS92Wu94fVcNATX7Ga-BH6xfZw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/b967a2-ce26-4787-8015-a33191d8a2e1/1/fsS92Wu94fVcNATX7Ga-BH6xfZw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:99:85:27:9c:16:d2:00:80:73:c6:0a:bc:be:4c:96:f5:b5:
d4:59:77:30:84:fa:d7:99:fc:c9:30:b8:f1:dd:26:83:e6:0a:
48:36:33:25:f2:e6:b5:51:2a:fb:58:e7:3f:0f:82:1a:bf:00:
ed:34:af:08:2f:f9:bd:4a:23:ac:84:b4:0a:41:92:79:6b:f1:
ea:db:ba:05:1a:e6:bc:80:1d:b4:d3:2d:e7:95:33:69:37:e8:
6f:66:27:d3:0b:f8:53:cd:ee:65:87:69:1e:05:31:f6:8d:8c:
c0:0e:d4:4c:d6:ca:09:22:fc:56:ff:67:77:e2:24:18:a8:d5:
47:3a:35:54:a1:38:45:05:38:1d:bc:b7:92:bb:9c:87:54:ab:
9c:c9:5b:38:b6:a5:20:1c:90:c6:de:62:8c:62:ad:74:f2:cc:
f2:1c:b3:ec:b5:e6:e5:ea:4c:2d:90:18:ee:f7:4d:f2:8c:a2:
80:42:eb:5f:6f:af:00:cf:7e:aa:4d:b5:2b:bf:10:44:8c:61:
34:8d:d9:86:5f:50:f1:28:90:0c:3a:ae:d5:0e:39:d3:38:24:
a0:14:38:13:2e:03:10:c8:8b:d2:10:91:10:3d:59:4e:0a:3a:
81:36:75:69:72:db:de:a5:40:99:a1:a2:9f:de:ca:1d:5f:c7:
4d:05:b6:d9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpyk/17UdNmmDq3NbytYN54MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdlYzRiZGQ5NmJiZGUxZjU1YzM0MDRkN2VjNjZiZTA0N2Vi
MTdkOWMwHhcNMjUxMTExMTEwMTMyWhcNMjUxMTEyMTEwMTMyWjAzMTEwLwYDVQQD
Eyg4NWU3Mjg5ZmI3NWQ1ZDliMzI5Y2MxOWVjNGMwZmYzZDFkZjQ0NTgxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwkCzVRgvwmQwH1gN2NmJzE3x1NuY
5C5j6n+Nq9JCapq1nfwJ36iK0y65WpqThGzrOKC8f5hdhC8o2WfVYszdclaDatjz
XYtfVLdNfNifusSAbE46kYXuU8i7+qABAUCnt/yPRcAU3B9liMjVQsM99qe4tIgL
pBzW2uAOCQjfNil/03N3yCUJWZfi4gm5/4ZZY0Uc7kTftmoVGI/4r7loeuWvjTac
tnzREECx65Abf1wC/+n3qAUudxk6t0pFgRHCTLAYTNf0PR6Qu7qu41uk/XxYRm1I
3yEXoEtxSQ797bWeRIlRo2LyfjUlbibVG5W8iDQRxp7B85KxisKuf2519wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIXnKJ+3XV2bMpzBnsTA/z0d9EWBMB8GA1UdIwQY
MBaAFH7EvdlrveH1XDQE1+xmvgR+sX2cMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZnNTOTJXdTk0ZlZjTkFUWDdHYS1CSDZ4Zlp3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy9iOTY3YTItY2UyNi00Nzg3LTgwMTUt
YTMzMTkxZDhhMmUxLzEvZnNTOTJXdTk0ZlZjTkFUWDdHYS1CSDZ4Zlp3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNy9iOTY3YTItY2UyNi00Nzg3LTgwMTUtYTMzMTkxZDhhMmUx
LzEvZnNTOTJXdTk0ZlZjTkFUWDdHYS1CSDZ4Zlp3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALJmFJ5wW
0gCAc8YKvL5MlvW11Fl3MIT615n8yTC48d0mg+YKSDYzJfLmtVEq+1jnPw+CGr8A
7TSvCC/5vUojrIS0CkGSeWvx6tu6BRrmvIAdtNMt55UzaTfob2Yn0wv4U83uZYdp
HgUx9o2MwA7UTNbKCSL8Vv9nd+IkGKjVRzo1VKE4RQU4Hby3kruch1SrnMlbOLal
IByQxt5ijGKtdPLM8hyz7LXm5epMLZAY7vdN8oyigELrX2+vAM9+qk21K78QRIxh
NI3Zhl9Q8SiQDDqu1Q450zgkoBQ4Ey4DEMiL0hCRED1ZTgo6gTZ1aXLb3qVAmaGi
n97KHV/HTQW22Q==
-----END CERTIFICATE-----
Generated at Tue Nov 11 14:10:55 2025 by rpki-client