Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/5c765c-83f3-45d1-8930-8d04f8779423/1/kVijd10MXrOPIPDvmjYRBhpRlbM.mft
File: kVijd10MXrOPIPDvmjYRBhpRlbM.mft (raw, json)
Hash identifier: hS3EyQwtPb/oTdAbpxIZqLbj1rHcxOeQdDgrt88tpdg=
Subject key identifier: E8:92:C9:C6:7C:5E:ED:D6:22:67:51:86:D8:F5:27:4D:D5:03:04:27
Authority key identifier: 91:58:A3:77:5D:0C:5E:B3:8F:20:F0:EF:9A:36:11:06:1A:51:95:B3
Certificate issuer: /CN=9158a3775d0c5eb38f20f0ef9a3611061a5195b3
Certificate serial: 019A73012254EA2959756EAD36935F750646
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kVijd10MXrOPIPDvmjYRBhpRlbM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/5c765c-83f3-45d1-8930-8d04f8779423/1/kVijd10MXrOPIPDvmjYRBhpRlbM.mft
Manifest number: 171D
Signing time: Tue 11 Nov 2025 13:00:45 +0000
Manifest this update: Tue 11 Nov 2025 13:00:45 +0000
Manifest next update: Wed 12 Nov 2025 13:00:45 +0000
Files and hashes: 1: kVijd10MXrOPIPDvmjYRBhpRlbM.crl (hash: OPbqxs7qH4XjHZoyvT6AjawhwtW+knEVLbjtFAP1SA4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/5c765c-83f3-45d1-8930-8d04f8779423/1/kVijd10MXrOPIPDvmjYRBhpRlbM.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/5c765c-83f3-45d1-8930-8d04f8779423/1/kVijd10MXrOPIPDvmjYRBhpRlbM.mft
rsync://rpki.ripe.net/repository/DEFAULT/kVijd10MXrOPIPDvmjYRBhpRlbM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:73:01:22:54:ea:29:59:75:6e:ad:36:93:5f:75:06:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9158a3775d0c5eb38f20f0ef9a3611061a5195b3
Validity
Not Before: Nov 11 13:00:45 2025 GMT
Not After : Nov 12 13:00:45 2025 GMT
Subject: CN=e892c9c67c5eedd622675186d8f5274dd5030427
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:4f:67:8b:f2:57:1f:55:ae:2d:5c:71:66:57:
68:41:5e:6a:9a:42:f0:19:21:95:e8:ab:f3:ee:02:
a1:aa:bd:0c:da:1b:10:ef:9b:ec:47:29:30:af:5f:
0f:11:fa:7d:a7:41:4d:8c:3c:c7:b5:d3:5a:c5:db:
7e:8d:b0:6a:4f:92:aa:1e:f9:82:7c:96:b1:a7:14:
31:ef:08:30:cf:cf:a4:fc:28:81:0d:65:a4:41:46:
9b:a7:18:9b:19:c4:15:e0:0c:63:5f:63:a8:b2:f7:
06:e4:71:f3:09:4f:25:4d:d7:5f:91:72:70:5a:f2:
1c:89:f2:61:ee:b0:fb:9d:d5:d6:30:4a:1e:4f:e9:
5d:7c:aa:f6:db:ad:13:66:d8:78:e8:50:ab:bc:bf:
86:c5:f8:a3:66:36:01:8c:ed:dc:67:66:5e:7e:70:
70:0b:0b:27:d4:e9:0d:e3:e9:d2:0f:78:81:22:3b:
fe:15:28:5f:be:f7:2d:a3:59:44:eb:34:c1:71:0f:
7a:69:2e:7b:b2:dc:ed:14:92:47:30:cc:15:d5:fb:
31:41:eb:7d:81:42:03:1e:73:79:f8:64:01:e5:21:
23:46:e5:ca:7e:48:cc:be:68:77:67:57:6c:6c:9d:
65:dc:e5:6a:eb:d9:1c:7d:0e:9f:ed:a7:d5:0e:7e:
20:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:92:C9:C6:7C:5E:ED:D6:22:67:51:86:D8:F5:27:4D:D5:03:04:27
X509v3 Authority Key Identifier:
keyid:91:58:A3:77:5D:0C:5E:B3:8F:20:F0:EF:9A:36:11:06:1A:51:95:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kVijd10MXrOPIPDvmjYRBhpRlbM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/5c765c-83f3-45d1-8930-8d04f8779423/1/kVijd10MXrOPIPDvmjYRBhpRlbM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/5c765c-83f3-45d1-8930-8d04f8779423/1/kVijd10MXrOPIPDvmjYRBhpRlbM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:d7:4f:f7:30:b8:bf:bf:f2:67:40:0e:f6:60:dd:7d:53:9d:
8e:ea:42:ed:e5:73:88:c1:00:0a:d5:d9:a1:c3:ea:dc:d4:71:
e0:7e:11:ad:08:39:55:c2:60:a7:7f:97:62:55:34:98:22:0a:
9e:14:13:b9:b9:44:43:a0:50:30:74:97:86:95:74:68:1c:20:
30:83:38:9e:39:64:dd:3c:f6:86:8b:69:f6:24:3f:6e:47:0a:
e9:63:e2:e3:b4:63:80:d0:cb:d5:09:02:f5:18:fb:0d:f0:e0:
a1:68:ad:1b:49:d7:f0:e8:02:78:fc:64:39:4a:43:ff:cc:4d:
3f:9c:91:0a:85:00:9e:f0:35:5e:2f:49:b2:4e:1d:20:d6:61:
82:68:1c:8c:ad:a9:3d:b5:06:58:55:c7:05:43:ec:9e:97:18:
8b:10:fb:71:ea:44:2b:2c:ea:7b:60:ad:e7:b6:5a:db:56:a8:
0e:d4:ef:4a:42:80:b9:4b:47:9b:d5:4d:bb:b1:08:36:bc:0f:
ce:e2:e9:e1:52:83:29:a7:ab:69:95:a5:55:2d:66:62:a9:0f:
5a:52:89:b2:65:3f:11:0c:85:eb:de:f6:51:82:5f:2c:50:c2:
bb:ec:2c:91:d5:1f:c6:02:50:ee:cd:42:3e:32:f2:00:79:80:
28:70:54:80
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpzASJU6ilZdW6tNpNfdQZGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkxNThhMzc3NWQwYzVlYjM4ZjIwZjBlZjlhMzYxMTA2MWE1
MTk1YjMwHhcNMjUxMTExMTMwMDQ1WhcNMjUxMTEyMTMwMDQ1WjAzMTEwLwYDVQQD
EyhlODkyYzljNjdjNWVlZGQ2MjI2NzUxODZkOGY1Mjc0ZGQ1MDMwNDI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtU9ni/JXH1WuLVxxZldoQV5qmkLw
GSGV6Kvz7gKhqr0M2hsQ75vsRykwr18PEfp9p0FNjDzHtdNaxdt+jbBqT5KqHvmC
fJaxpxQx7wgwz8+k/CiBDWWkQUabpxibGcQV4AxjX2OosvcG5HHzCU8lTddfkXJw
WvIcifJh7rD7ndXWMEoeT+ldfKr2260TZth46FCrvL+GxfijZjYBjO3cZ2ZefnBw
Cwsn1OkN4+nSD3iBIjv+FShfvvcto1lE6zTBcQ96aS57stztFJJHMMwV1fsxQet9
gUIDHnN5+GQB5SEjRuXKfkjMvmh3Z1dsbJ1l3OVq69kcfQ6f7afVDn4g9QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOiSycZ8Xu3WImdRhtj1J03VAwQnMB8GA1UdIwQY
MBaAFJFYo3ddDF6zjyDw75o2EQYaUZWzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva1ZpamQxME1Yck9QSVBEdm1qWVJCaHBSbGJNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC81Yzc2NWMtODNmMy00NWQxLTg5MzAt
OGQwNGY4Nzc5NDIzLzEva1ZpamQxME1Yck9QSVBEdm1qWVJCaHBSbGJNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOC81Yzc2NWMtODNmMy00NWQxLTg5MzAtOGQwNGY4Nzc5NDIz
LzEva1ZpamQxME1Yck9QSVBEdm1qWVJCaHBSbGJNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAi9dP9zC4
v7/yZ0AO9mDdfVOdjupC7eVziMEACtXZocPq3NRx4H4RrQg5VcJgp3+XYlU0mCIK
nhQTublEQ6BQMHSXhpV0aBwgMIM4njlk3Tz2hotp9iQ/bkcK6WPi47RjgNDL1QkC
9Rj7DfDgoWitG0nX8OgCePxkOUpD/8xNP5yRCoUAnvA1Xi9Jsk4dINZhgmgcjK2p
PbUGWFXHBUPsnpcYixD7cepEKyzqe2Ct57Za21aoDtTvSkKAuUtHm9VNu7EINrwP
zuLp4VKDKaeraZWlVS1mYqkPWlKJsmU/EQyF6972UYJfLFDCu+wskdUfxgJQ7s1C
PjLyAHmAKHBUgA==
-----END CERTIFICATE-----
Generated at Tue Nov 11 16:46:16 2025 by rpki-client