Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/5ef3e2-31fe-4664-b5df-29d0ba12eda2/1/h66JOPDgseq2FIgzbSPKORh9bqM.mft
File: h66JOPDgseq2FIgzbSPKORh9bqM.mft (raw, json)
Hash identifier: IYmH+ypPZg3UzCFLvgMgTcYP619U9WQrXjmjuiMMfZQ=
Subject key identifier: C7:CF:5E:1B:4A:70:FD:15:CB:A3:0B:BE:B6:5D:37:8A:76:8F:C0:4C
Authority key identifier: 87:AE:89:38:F0:E0:B1:EA:B6:14:88:33:6D:23:CA:39:18:7D:6E:A3
Certificate issuer: /CN=87ae8938f0e0b1eab61488336d23ca39187d6ea3
Certificate serial: 019A725C5D895BF1BD266D2DE2F293C8F646
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h66JOPDgseq2FIgzbSPKORh9bqM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/5ef3e2-31fe-4664-b5df-29d0ba12eda2/1/h66JOPDgseq2FIgzbSPKORh9bqM.mft
Manifest number: 0632
Signing time: Tue 11 Nov 2025 10:00:47 +0000
Manifest this update: Tue 11 Nov 2025 10:00:47 +0000
Manifest next update: Wed 12 Nov 2025 10:00:47 +0000
Files and hashes: 1: h66JOPDgseq2FIgzbSPKORh9bqM.crl (hash: Oqr3Zt1WTW1RuiZ8jjzgz9FAbgaogx3FcnWYFQTCBhw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/5ef3e2-31fe-4664-b5df-29d0ba12eda2/1/h66JOPDgseq2FIgzbSPKORh9bqM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/5ef3e2-31fe-4664-b5df-29d0ba12eda2/1/h66JOPDgseq2FIgzbSPKORh9bqM.mft
rsync://rpki.ripe.net/repository/DEFAULT/h66JOPDgseq2FIgzbSPKORh9bqM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:5d:89:5b:f1:bd:26:6d:2d:e2:f2:93:c8:f6:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87ae8938f0e0b1eab61488336d23ca39187d6ea3
Validity
Not Before: Nov 11 10:00:47 2025 GMT
Not After : Nov 12 10:00:47 2025 GMT
Subject: CN=c7cf5e1b4a70fd15cba30bbeb65d378a768fc04c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:80:69:6f:84:8d:29:79:f3:02:b8:e9:25:b5:
94:2a:94:0f:23:71:20:4c:56:eb:44:a2:ac:5a:a5:
f9:03:ad:47:f5:57:d8:c9:ba:27:64:83:a1:c9:57:
57:56:ee:cd:76:de:1a:78:c3:b0:d0:22:77:0d:57:
2e:0d:bf:32:53:5b:02:d8:84:66:d9:15:e9:86:bb:
2e:5d:aa:6f:4e:79:86:19:8e:c2:34:e4:62:b3:d3:
d1:1a:47:d2:4d:5a:a5:6a:83:24:d5:c3:ed:5e:17:
60:03:25:43:f4:e3:25:f1:4e:95:7b:d3:95:36:68:
a7:a8:4c:a9:53:b0:ab:15:f4:48:2e:57:f5:63:5a:
0d:11:ff:8b:90:0c:7b:ef:a7:55:04:32:f3:4e:9a:
ed:3e:97:4e:1f:eb:d6:0d:9f:45:6c:b5:71:f0:a5:
c1:b6:29:09:10:a2:f1:af:fd:a4:3e:c8:74:c9:90:
92:66:07:e5:30:85:e9:d7:8d:0c:29:4b:f9:bb:55:
68:dc:c9:08:76:08:34:38:4d:b6:fd:65:2c:40:bb:
2c:be:c1:5d:c7:49:18:b3:80:43:f7:b1:8f:d1:c1:
a7:36:7d:85:58:ab:c0:4d:63:22:4d:9e:3a:76:76:
2c:54:da:86:6a:7e:f5:71:e6:72:31:44:b6:f7:d5:
b4:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:CF:5E:1B:4A:70:FD:15:CB:A3:0B:BE:B6:5D:37:8A:76:8F:C0:4C
X509v3 Authority Key Identifier:
keyid:87:AE:89:38:F0:E0:B1:EA:B6:14:88:33:6D:23:CA:39:18:7D:6E:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h66JOPDgseq2FIgzbSPKORh9bqM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/5ef3e2-31fe-4664-b5df-29d0ba12eda2/1/h66JOPDgseq2FIgzbSPKORh9bqM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/5ef3e2-31fe-4664-b5df-29d0ba12eda2/1/h66JOPDgseq2FIgzbSPKORh9bqM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:d4:20:86:de:0b:bd:0d:b7:14:2d:af:04:4c:bf:c1:17:d2:
73:5e:83:36:97:3c:75:51:21:e1:0a:06:97:f1:53:a2:a9:c7:
ef:7f:73:b1:8f:7c:09:5f:b9:e2:f6:50:12:1c:9f:89:da:51:
d6:3f:9f:a2:e5:a9:cf:e4:40:59:6f:a6:26:f9:d3:c8:34:a5:
12:ca:b7:a9:42:d0:36:f5:df:03:a9:8d:6e:2a:8e:9e:74:e2:
dd:d5:e4:9e:a7:c6:dc:70:e1:c3:9b:a0:da:38:6b:b4:22:a9:
a9:a7:4a:ac:3f:44:ab:84:c5:85:e2:a7:b0:b0:a2:86:85:38:
64:67:a2:9c:7c:e2:78:65:53:92:3d:07:d3:63:b2:93:df:3f:
e6:91:96:0a:13:c9:62:3a:29:64:c7:f9:e5:8b:57:a6:9c:63:
78:fa:62:95:b3:18:89:b5:27:2a:0e:fa:99:5e:f4:6c:b1:87:
8d:1c:c2:c8:32:38:d4:2d:bb:db:f3:4d:54:97:a7:82:ec:b9:
d9:28:c8:bd:75:a4:01:15:74:78:d2:35:e8:03:94:f8:3e:3f:
7c:06:19:dd:7c:6f:3d:38:77:2e:9f:ab:31:2a:ea:b3:70:3b:
25:6f:ab:56:27:da:b2:49:10:81:20:5c:10:4f:cf:4b:e7:52:
d4:84:c2:9a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpyXF2JW/G9Jm0t4vKTyPZGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg3YWU4OTM4ZjBlMGIxZWFiNjE0ODgzMzZkMjNjYTM5MTg3
ZDZlYTMwHhcNMjUxMTExMTAwMDQ3WhcNMjUxMTEyMTAwMDQ3WjAzMTEwLwYDVQQD
EyhjN2NmNWUxYjRhNzBmZDE1Y2JhMzBiYmViNjVkMzc4YTc2OGZjMDRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuIBpb4SNKXnzArjpJbWUKpQPI3Eg
TFbrRKKsWqX5A61H9VfYybonZIOhyVdXVu7Ndt4aeMOw0CJ3DVcuDb8yU1sC2IRm
2RXphrsuXapvTnmGGY7CNORis9PRGkfSTVqlaoMk1cPtXhdgAyVD9OMl8U6Ve9OV
NminqEypU7CrFfRILlf1Y1oNEf+LkAx776dVBDLzTprtPpdOH+vWDZ9FbLVx8KXB
tikJEKLxr/2kPsh0yZCSZgflMIXp140MKUv5u1Vo3MkIdgg0OE22/WUsQLssvsFd
x0kYs4BD97GP0cGnNn2FWKvATWMiTZ46dnYsVNqGan71ceZyMUS299W0mQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMfPXhtKcP0Vy6MLvrZdN4p2j8BMMB8GA1UdIwQY
MBaAFIeuiTjw4LHqthSIM20jyjkYfW6jMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaDY2Sk9QRGdzZXEyRklnemJTUEtPUmg5YnFNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC81ZWYzZTItMzFmZS00NjY0LWI1ZGYt
MjlkMGJhMTJlZGEyLzEvaDY2Sk9QRGdzZXEyRklnemJTUEtPUmg5YnFNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNC81ZWYzZTItMzFmZS00NjY0LWI1ZGYtMjlkMGJhMTJlZGEy
LzEvaDY2Sk9QRGdzZXEyRklnemJTUEtPUmg5YnFNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAttQght4L
vQ23FC2vBEy/wRfSc16DNpc8dVEh4QoGl/FToqnH739zsY98CV+54vZQEhyfidpR
1j+fouWpz+RAWW+mJvnTyDSlEsq3qULQNvXfA6mNbiqOnnTi3dXknqfG3HDhw5ug
2jhrtCKpqadKrD9Eq4TFheKnsLCihoU4ZGeinHzieGVTkj0H02Oyk98/5pGWChPJ
YjopZMf55YtXppxjePpilbMYibUnKg76mV70bLGHjRzCyDI41C272/NNVJenguy5
2SjIvXWkARV0eNI16AOU+D4/fAYZ3XxvPTh3Lp+rMSrqs3A7JW+rVifaskkQgSBc
EE/PS+dS1ITCmg==
-----END CERTIFICATE-----
Generated at Tue Nov 11 14:17:36 2025 by rpki-client