Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/6f6743-0b22-4312-9c1a-b3663a345518/1/C0L7SDHB2vLZY8R2ONcDCG7sqN4.mft
File: C0L7SDHB2vLZY8R2ONcDCG7sqN4.mft (raw, json)
Hash identifier: xurdrGn1mSEzW/r1pJL9YxWQBorJ+8WhOKBBKQSX1q4=
Subject key identifier: 73:19:73:35:05:A9:52:A0:6A:90:F1:F5:F3:E6:0D:EA:F7:02:D5:A4
Authority key identifier: 0B:42:FB:48:31:C1:DA:F2:D9:63:C4:76:38:D7:03:08:6E:EC:A8:DE
Certificate issuer: /CN=0b42fb4831c1daf2d963c47638d703086eeca8de
Certificate serial: 019A71134C0D93DED50461FEE0E44455A77C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C0L7SDHB2vLZY8R2ONcDCG7sqN4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/6f6743-0b22-4312-9c1a-b3663a345518/1/C0L7SDHB2vLZY8R2ONcDCG7sqN4.mft
Manifest number: 1722
Signing time: Tue 11 Nov 2025 04:01:21 +0000
Manifest this update: Tue 11 Nov 2025 04:01:21 +0000
Manifest next update: Wed 12 Nov 2025 04:01:21 +0000
Files and hashes: 1: C0L7SDHB2vLZY8R2ONcDCG7sqN4.crl (hash: Lur56ZChe1HrybLDTo6ITHtRSKuHQpQUMbruT6QqgtQ=)
2: zmy93HOVaR95SsJ_nMqWvP0tGkI.roa (hash: CpAhgA9BKzHDj13uVF86y4qqslsHctpwgNDLQY2WnPs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/6f6743-0b22-4312-9c1a-b3663a345518/1/C0L7SDHB2vLZY8R2ONcDCG7sqN4.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/6f6743-0b22-4312-9c1a-b3663a345518/1/C0L7SDHB2vLZY8R2ONcDCG7sqN4.mft
rsync://rpki.ripe.net/repository/DEFAULT/C0L7SDHB2vLZY8R2ONcDCG7sqN4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:13:4c:0d:93:de:d5:04:61:fe:e0:e4:44:55:a7:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b42fb4831c1daf2d963c47638d703086eeca8de
Validity
Not Before: Nov 11 04:01:21 2025 GMT
Not After : Nov 12 04:01:21 2025 GMT
Subject: CN=7319733505a952a06a90f1f5f3e60deaf702d5a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:67:18:c2:8d:01:4a:ee:4c:31:0e:39:fd:ad:
01:ea:00:9a:af:8e:38:4f:cf:d6:3e:68:bc:6c:01:
8a:dd:91:f7:c2:ee:48:4f:fc:6a:31:67:53:e6:c5:
04:32:7c:ae:40:76:8f:38:56:c4:e5:0e:4b:5a:20:
ee:64:3c:b3:de:ec:c9:23:e0:e6:d8:ee:c2:fc:ff:
c3:08:4f:64:1f:7a:99:19:62:78:71:27:d6:da:7e:
ff:35:67:83:d6:fb:10:19:66:6e:4e:bb:ea:54:da:
cc:e6:8f:db:91:ea:35:e5:6b:19:4e:40:92:9b:cb:
15:5f:f9:a0:ae:79:7d:fd:60:4d:1a:27:4c:33:78:
57:24:d4:56:4c:7f:28:22:f0:4a:c7:46:44:d9:69:
ce:6a:c6:59:44:b3:02:d3:53:91:b9:f2:5d:08:00:
af:c3:94:db:db:43:f6:49:8b:a5:f6:22:14:0c:1b:
5f:95:e2:ee:c5:93:d9:00:c7:3c:2a:cd:4b:1f:cb:
24:e7:14:73:8e:ba:1b:50:1f:a6:ba:8c:ce:57:2f:
e8:bb:6c:2c:93:2e:93:4e:f9:72:91:18:58:4c:b4:
8d:c6:f6:b1:9f:d9:c6:ad:68:5e:d4:f6:46:3f:6a:
fa:d2:bb:eb:1c:0f:7d:44:c5:bf:ec:de:33:36:db:
11:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:19:73:35:05:A9:52:A0:6A:90:F1:F5:F3:E6:0D:EA:F7:02:D5:A4
X509v3 Authority Key Identifier:
keyid:0B:42:FB:48:31:C1:DA:F2:D9:63:C4:76:38:D7:03:08:6E:EC:A8:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C0L7SDHB2vLZY8R2ONcDCG7sqN4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/6f6743-0b22-4312-9c1a-b3663a345518/1/C0L7SDHB2vLZY8R2ONcDCG7sqN4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/6f6743-0b22-4312-9c1a-b3663a345518/1/C0L7SDHB2vLZY8R2ONcDCG7sqN4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:ed:b5:e8:cf:e5:1d:d0:58:5f:13:96:9c:f2:54:fb:35:5a:
fe:8a:3c:bc:c0:48:38:49:3c:47:7f:0f:e5:32:54:35:87:71:
3f:75:3c:b0:df:53:db:ef:11:ac:f8:18:72:be:10:0e:49:66:
c3:4c:fd:17:59:02:9c:4d:d8:6b:fe:f2:5e:27:c3:dd:06:e1:
35:bc:1e:cd:f3:ce:2c:af:16:77:9b:b5:88:a9:20:bc:3c:fc:
63:20:7d:61:16:69:2c:90:23:39:29:b4:3a:d8:f7:0d:c8:ca:
dd:42:fe:24:21:0a:6c:35:ad:0a:02:28:47:8a:d5:44:0a:d9:
04:08:34:b4:06:a2:f6:15:83:aa:b9:b0:0f:46:31:84:ed:7b:
ef:8f:ae:80:d7:fa:88:70:cd:ee:b4:3c:b4:3b:ff:c1:54:09:
dd:e1:3c:d8:4f:b9:ef:d9:cb:71:1b:28:ec:68:42:8e:12:c6:
6a:ca:43:4b:4f:59:9b:4f:0b:d2:66:a8:9d:ce:77:63:00:b2:
a3:73:14:4b:d4:70:81:c7:3b:06:9e:44:2d:7e:d0:37:e2:88:
30:28:62:b9:c1:45:b0:c1:0d:3c:fe:c4:c8:6a:64:4b:15:f2:
e5:96:b1:bc:18:e8:4a:dd:74:f7:8d:d5:66:54:d2:68:93:09:
84:19:d2:1f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxE0wNk97VBGH+4OREVad8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBiNDJmYjQ4MzFjMWRhZjJkOTYzYzQ3NjM4ZDcwMzA4NmVl
Y2E4ZGUwHhcNMjUxMTExMDQwMTIxWhcNMjUxMTEyMDQwMTIxWjAzMTEwLwYDVQQD
Eyg3MzE5NzMzNTA1YTk1MmEwNmE5MGYxZjVmM2U2MGRlYWY3MDJkNWE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqmcYwo0BSu5MMQ45/a0B6gCar444
T8/WPmi8bAGK3ZH3wu5IT/xqMWdT5sUEMnyuQHaPOFbE5Q5LWiDuZDyz3uzJI+Dm
2O7C/P/DCE9kH3qZGWJ4cSfW2n7/NWeD1vsQGWZuTrvqVNrM5o/bkeo15WsZTkCS
m8sVX/mgrnl9/WBNGidMM3hXJNRWTH8oIvBKx0ZE2WnOasZZRLMC01ORufJdCACv
w5Tb20P2SYul9iIUDBtfleLuxZPZAMc8Ks1LH8sk5xRzjrobUB+muozOVy/ou2ws
ky6TTvlykRhYTLSNxvaxn9nGrWhe1PZGP2r60rvrHA99RMW/7N4zNtsR/QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHMZczUFqVKgapDx9fPmDer3AtWkMB8GA1UdIwQY
MBaAFAtC+0gxwdry2WPEdjjXAwhu7KjeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQzBMN1NESEIydkxaWThSMk9OY0RDRzdzcU40LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC82ZjY3NDMtMGIyMi00MzEyLTljMWEt
YjM2NjNhMzQ1NTE4LzEvQzBMN1NESEIydkxaWThSMk9OY0RDRzdzcU40Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNC82ZjY3NDMtMGIyMi00MzEyLTljMWEtYjM2NjNhMzQ1NTE4
LzEvQzBMN1NESEIydkxaWThSMk9OY0RDRzdzcU40LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAau216M/l
HdBYXxOWnPJU+zVa/oo8vMBIOEk8R38P5TJUNYdxP3U8sN9T2+8RrPgYcr4QDklm
w0z9F1kCnE3Ya/7yXifD3QbhNbwezfPOLK8Wd5u1iKkgvDz8YyB9YRZpLJAjOSm0
Otj3DcjK3UL+JCEKbDWtCgIoR4rVRArZBAg0tAai9hWDqrmwD0YxhO1774+ugNf6
iHDN7rQ8tDv/wVQJ3eE82E+579nLcRso7GhCjhLGaspDS09Zm08L0maonc53YwCy
o3MUS9Rwgcc7Bp5ELX7QN+KIMChiucFFsMENPP7EyGpkSxXy5ZaxvBjoSt10943V
ZlTSaJMJhBnSHw==
-----END CERTIFICATE-----
Generated at Tue Nov 11 11:26:46 2025 by rpki-client