Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/0f65fe-262f-474d-8cb6-8ccb674a3875/1/MIVZam3hzL6mZbRWxNLM0JZJmx8.mft
File: MIVZam3hzL6mZbRWxNLM0JZJmx8.mft (raw, json)
Hash identifier: 4rXDpxUGerFOTORHOoLvKxkWj4uvURrV8dOFIXaTPAE=
Subject key identifier: 36:23:BA:94:ED:D6:62:0F:24:91:06:12:3E:AC:8E:CA:C4:40:0E:F3
Authority key identifier: 30:85:59:6A:6D:E1:CC:BE:A6:65:B4:56:C4:D2:CC:D0:96:49:9B:1F
Certificate issuer: /CN=3085596a6de1ccbea665b456c4d2ccd096499b1f
Certificate serial: 019A71B77E673E3841A26EDA6BFB832971E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MIVZam3hzL6mZbRWxNLM0JZJmx8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/0f65fe-262f-474d-8cb6-8ccb674a3875/1/MIVZam3hzL6mZbRWxNLM0JZJmx8.mft
Manifest number: 0B05
Signing time: Tue 11 Nov 2025 07:00:42 +0000
Manifest this update: Tue 11 Nov 2025 07:00:42 +0000
Manifest next update: Wed 12 Nov 2025 07:00:42 +0000
Files and hashes: 1: MIVZam3hzL6mZbRWxNLM0JZJmx8.crl (hash: q0n5rw3LxZP1yZpjQ4Wng3AIdGA+nnrXohiVY/E4zUc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/0f65fe-262f-474d-8cb6-8ccb674a3875/1/MIVZam3hzL6mZbRWxNLM0JZJmx8.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/0f65fe-262f-474d-8cb6-8ccb674a3875/1/MIVZam3hzL6mZbRWxNLM0JZJmx8.mft
rsync://rpki.ripe.net/repository/DEFAULT/MIVZam3hzL6mZbRWxNLM0JZJmx8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:7e:67:3e:38:41:a2:6e:da:6b:fb:83:29:71:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3085596a6de1ccbea665b456c4d2ccd096499b1f
Validity
Not Before: Nov 11 07:00:42 2025 GMT
Not After : Nov 12 07:00:42 2025 GMT
Subject: CN=3623ba94edd6620f249106123eac8ecac4400ef3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:97:2d:f5:f3:69:7e:74:5c:ae:b7:a5:30:82:
41:e6:3d:6f:c4:b6:95:0f:74:8d:63:c6:99:89:bc:
57:0c:0d:82:86:35:ee:f1:4f:60:3e:08:30:18:d0:
83:9d:e7:9a:62:d2:db:0f:f4:ab:03:16:80:01:70:
89:e2:2a:20:a5:dc:d2:d4:ba:c7:d0:52:ec:3e:e9:
41:df:a0:4e:24:79:45:41:e3:b3:3c:be:17:49:52:
1d:af:b8:ea:53:e0:16:8f:05:e2:87:b5:b8:92:aa:
e0:d7:77:d2:12:e6:76:c9:9b:f6:48:fe:5d:3a:e6:
bc:84:50:8d:f7:9b:86:3e:7f:f8:5b:d0:96:33:c7:
23:d4:b5:0d:7a:2b:40:fc:1f:05:74:3c:98:45:45:
0c:79:66:59:e7:fc:77:87:3c:0f:c5:36:9c:a3:23:
43:55:35:c7:bb:1d:4c:b1:b1:a8:13:51:6b:cf:90:
93:22:62:62:04:9a:84:5f:d8:c9:22:9f:e3:69:c1:
8a:3f:5d:0b:67:06:54:3f:59:49:a5:46:4e:d0:fd:
b0:da:35:3b:4f:3c:f8:ab:53:fb:5c:a9:58:fe:21:
35:32:79:df:ca:34:64:a5:17:a2:a1:b7:b9:35:75:
87:1b:d2:d4:04:c4:c3:b1:9f:0a:dd:0a:8a:bb:18:
a7:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:23:BA:94:ED:D6:62:0F:24:91:06:12:3E:AC:8E:CA:C4:40:0E:F3
X509v3 Authority Key Identifier:
keyid:30:85:59:6A:6D:E1:CC:BE:A6:65:B4:56:C4:D2:CC:D0:96:49:9B:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MIVZam3hzL6mZbRWxNLM0JZJmx8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/0f65fe-262f-474d-8cb6-8ccb674a3875/1/MIVZam3hzL6mZbRWxNLM0JZJmx8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/0f65fe-262f-474d-8cb6-8ccb674a3875/1/MIVZam3hzL6mZbRWxNLM0JZJmx8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:b4:22:89:ed:c2:2e:43:e1:d6:ce:0a:03:42:c6:ba:46:84:
a1:3f:86:92:4c:c4:50:7c:35:05:69:6f:68:ea:cd:90:7b:56:
c1:36:09:33:f8:98:2e:21:44:b7:49:ea:52:48:80:66:9c:f1:
ff:eb:6b:22:8b:56:cb:90:e9:b3:a5:09:a2:6d:37:95:ae:9f:
d2:6d:81:d8:a7:24:94:38:40:56:4d:c8:f5:43:6a:48:83:46:
04:76:cf:2e:e1:15:60:03:15:07:1f:46:7c:ea:fe:74:1b:7e:
6d:71:51:c7:db:2a:ac:c0:15:4f:f2:ac:3e:73:88:8e:20:d9:
c7:f6:f1:35:64:1f:c4:33:97:83:07:93:a4:c9:1b:9e:99:ac:
ee:dd:9c:6c:cd:b5:4b:f5:93:57:2d:d3:8d:67:75:97:67:0f:
86:45:89:43:c2:c0:5f:57:88:99:6a:44:57:3c:de:62:81:42:
dd:48:ea:e5:c7:ab:dd:24:f0:55:79:1c:d2:5c:b8:3d:80:a0:
57:37:ab:6e:02:92:00:c3:cb:12:01:72:1d:a1:ae:e7:1b:04:
88:74:87:a8:e2:6f:7a:a1:66:11:c8:99:13:63:7e:d6:d9:fa:
7f:86:f7:99:59:d7:33:60:3e:1d:42:c8:0b:81:1c:37:92:7f:
40:eb:fe:aa
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxt35nPjhBom7aa/uDKXHpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMwODU1OTZhNmRlMWNjYmVhNjY1YjQ1NmM0ZDJjY2QwOTY0
OTliMWYwHhcNMjUxMTExMDcwMDQyWhcNMjUxMTEyMDcwMDQyWjAzMTEwLwYDVQQD
EygzNjIzYmE5NGVkZDY2MjBmMjQ5MTA2MTIzZWFjOGVjYWM0NDAwZWYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA25ct9fNpfnRcrrelMIJB5j1vxLaV
D3SNY8aZibxXDA2ChjXu8U9gPggwGNCDneeaYtLbD/SrAxaAAXCJ4iogpdzS1LrH
0FLsPulB36BOJHlFQeOzPL4XSVIdr7jqU+AWjwXih7W4kqrg13fSEuZ2yZv2SP5d
Oua8hFCN95uGPn/4W9CWM8cj1LUNeitA/B8FdDyYRUUMeWZZ5/x3hzwPxTacoyND
VTXHux1MsbGoE1Frz5CTImJiBJqEX9jJIp/jacGKP10LZwZUP1lJpUZO0P2w2jU7
Tzz4q1P7XKlY/iE1MnnfyjRkpReiobe5NXWHG9LUBMTDsZ8K3QqKuxinowIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDYjupTt1mIPJJEGEj6sjsrEQA7zMB8GA1UdIwQY
MBaAFDCFWWpt4cy+pmW0VsTSzNCWSZsfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTUlWWmFtM2h6TDZtWmJSV3hOTE0wSlpKbXg4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy8wZjY1ZmUtMjYyZi00NzRkLThjYjYt
OGNjYjY3NGEzODc1LzEvTUlWWmFtM2h6TDZtWmJSV3hOTE0wSlpKbXg4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYy8wZjY1ZmUtMjYyZi00NzRkLThjYjYtOGNjYjY3NGEzODc1
LzEvTUlWWmFtM2h6TDZtWmJSV3hOTE0wSlpKbXg4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdrQiie3C
LkPh1s4KA0LGukaEoT+GkkzEUHw1BWlvaOrNkHtWwTYJM/iYLiFEt0nqUkiAZpzx
/+trIotWy5Dps6UJom03la6f0m2B2KcklDhAVk3I9UNqSINGBHbPLuEVYAMVBx9G
fOr+dBt+bXFRx9sqrMAVT/KsPnOIjiDZx/bxNWQfxDOXgweTpMkbnpms7t2cbM21
S/WTVy3TjWd1l2cPhkWJQ8LAX1eImWpEVzzeYoFC3Ujq5cer3STwVXkc0ly4PYCg
VzerbgKSAMPLEgFyHaGu5xsEiHSHqOJveqFmEciZE2N+1tn6f4b3mVnXM2A+HULI
C4EcN5J/QOv+qg==
-----END CERTIFICATE-----
Generated at Tue Nov 11 14:07:04 2025 by rpki-client