Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/9f068a-17f4-4311-8bbc-234b322a0cfe/1/o_60EOB9CI-2UbkTdJuBJX47mVI.mft
File: o_60EOB9CI-2UbkTdJuBJX47mVI.mft (raw, json)
Hash identifier: gf5HWSww7nCEe2UrogH4ggegGfc7Nue7lGfluylQJBY=
Subject key identifier: 8C:F6:9C:D1:CA:31:1C:74:82:6F:B4:BB:60:E5:01:E2:0A:43:29:7E
Authority key identifier: A3:FE:B4:10:E0:7D:08:8F:B6:51:B9:13:74:9B:81:25:7E:3B:99:52
Certificate issuer: /CN=a3feb410e07d088fb651b913749b81257e3b9952
Certificate serial: 019923A0F7AC8E4C452E1CD345925D9C09B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o_60EOB9CI-2UbkTdJuBJX47mVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/9f068a-17f4-4311-8bbc-234b322a0cfe/1/o_60EOB9CI-2UbkTdJuBJX47mVI.mft
Manifest number: 10BC
Signing time: Sun 07 Sep 2025 10:02:55 +0000
Manifest this update: Sun 07 Sep 2025 10:02:55 +0000
Manifest next update: Mon 08 Sep 2025 10:02:55 +0000
Files and hashes: 1: o_60EOB9CI-2UbkTdJuBJX47mVI.crl (hash: 1q3mq1Gqnr0I4uQUPFlU8CCRneML3lumrQ8H0J8VQ4U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/9f068a-17f4-4311-8bbc-234b322a0cfe/1/o_60EOB9CI-2UbkTdJuBJX47mVI.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/9f068a-17f4-4311-8bbc-234b322a0cfe/1/o_60EOB9CI-2UbkTdJuBJX47mVI.mft
rsync://rpki.ripe.net/repository/DEFAULT/o_60EOB9CI-2UbkTdJuBJX47mVI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:a0:f7:ac:8e:4c:45:2e:1c:d3:45:92:5d:9c:09:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3feb410e07d088fb651b913749b81257e3b9952
Validity
Not Before: Sep 7 10:02:55 2025 GMT
Not After : Sep 8 10:02:55 2025 GMT
Subject: CN=8cf69cd1ca311c74826fb4bb60e501e20a43297e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:ad:16:53:a7:a6:c8:05:a7:ef:e0:e5:2e:f5:
70:77:c7:e8:09:e3:3c:37:d8:df:60:02:f5:4d:fc:
bc:29:f3:e4:ae:c7:64:8c:f2:3a:bc:ec:c1:5e:ec:
5d:5e:dc:ef:62:b0:b6:5c:e1:2f:d7:a7:1f:20:75:
a7:7b:60:66:f4:82:ad:a4:0c:12:2e:16:56:49:08:
c9:aa:ec:a2:2c:b0:e9:8d:4e:cd:cb:ea:19:05:62:
f6:0a:0e:1a:94:91:0e:1d:cf:50:8d:8e:02:e6:7e:
bc:25:0b:c3:bf:58:c2:77:92:94:30:f6:1e:a0:2d:
b6:2b:92:01:39:6e:1c:43:b8:24:d1:7b:f8:b6:36:
51:23:4c:3f:d3:23:02:26:50:ed:e5:ae:30:90:b6:
9a:0e:a1:50:f8:26:8a:7a:27:58:f1:5f:48:bf:46:
b8:85:79:2e:1d:e4:ae:13:11:74:c1:ae:3d:04:08:
c0:3b:11:5c:37:7a:ea:cf:a8:7d:ea:b5:ae:96:34:
ef:80:e6:a1:13:af:87:2d:81:75:d8:b2:00:bc:b9:
2f:d7:9c:cf:47:10:00:8c:fe:57:5e:1b:20:b0:dd:
c6:ea:90:29:d1:ef:43:67:f9:f4:2d:b7:4b:0c:a4:
2a:eb:a7:a1:0c:e7:a9:03:2b:60:1b:4e:3e:fd:78:
8f:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:F6:9C:D1:CA:31:1C:74:82:6F:B4:BB:60:E5:01:E2:0A:43:29:7E
X509v3 Authority Key Identifier:
keyid:A3:FE:B4:10:E0:7D:08:8F:B6:51:B9:13:74:9B:81:25:7E:3B:99:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o_60EOB9CI-2UbkTdJuBJX47mVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/9f068a-17f4-4311-8bbc-234b322a0cfe/1/o_60EOB9CI-2UbkTdJuBJX47mVI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/9f068a-17f4-4311-8bbc-234b322a0cfe/1/o_60EOB9CI-2UbkTdJuBJX47mVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:3c:b1:46:f4:dd:35:06:13:c1:b5:2f:4a:4d:5d:43:b0:b9:
b9:45:7d:f9:f2:82:14:e5:c5:e9:43:0e:5c:e6:b2:d7:5e:c1:
6c:37:2b:d1:4b:68:1f:6d:b5:1b:1e:3a:44:04:d2:b9:8c:27:
66:e8:75:11:03:6f:c9:15:5b:5a:89:c8:ab:65:da:3b:16:c1:
bc:71:ca:86:e4:18:bb:61:68:bb:b0:c9:ed:2f:b5:90:f5:6f:
94:0a:c9:0e:da:83:9a:75:44:ce:7f:9c:5e:3d:a5:97:02:dd:
31:06:df:80:4b:14:61:ec:07:4e:d0:27:3b:8e:ef:b6:5c:fd:
41:83:b0:bb:1e:b9:46:38:7d:5e:fb:b7:96:4f:86:78:bc:f3:
3a:d8:da:48:f7:f9:ee:64:b3:ad:9b:43:81:18:27:f8:86:98:
58:42:17:56:55:1c:d7:f7:d8:0a:b2:6a:ca:8c:e6:00:99:75:
66:51:ab:2b:0e:ad:27:6f:62:2f:72:9f:3c:4e:4f:c0:23:5a:
05:86:af:52:b0:06:1c:ca:21:98:11:11:88:d8:75:38:3b:17:
cc:f6:20:9f:17:1f:42:74:19:d5:2e:6b:dc:43:18:62:2d:57:
76:68:a8:a9:51:39:cc:79:6d:61:8e:06:b5:d7:19:cd:8c:6a:
b1:8b:c3:77
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkjoPesjkxFLhzTRZJdnAm2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEzZmViNDEwZTA3ZDA4OGZiNjUxYjkxMzc0OWI4MTI1N2Uz
Yjk5NTIwHhcNMjUwOTA3MTAwMjU1WhcNMjUwOTA4MTAwMjU1WjAzMTEwLwYDVQQD
Eyg4Y2Y2OWNkMWNhMzExYzc0ODI2ZmI0YmI2MGU1MDFlMjBhNDMyOTdlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp60WU6emyAWn7+DlLvVwd8foCeM8
N9jfYAL1Tfy8KfPkrsdkjPI6vOzBXuxdXtzvYrC2XOEv16cfIHWne2Bm9IKtpAwS
LhZWSQjJquyiLLDpjU7Ny+oZBWL2Cg4alJEOHc9QjY4C5n68JQvDv1jCd5KUMPYe
oC22K5IBOW4cQ7gk0Xv4tjZRI0w/0yMCJlDt5a4wkLaaDqFQ+CaKeidY8V9Iv0a4
hXkuHeSuExF0wa49BAjAOxFcN3rqz6h96rWuljTvgOahE6+HLYF12LIAvLkv15zP
RxAAjP5XXhsgsN3G6pAp0e9DZ/n0LbdLDKQq66ehDOepAytgG04+/XiPbwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIz2nNHKMRx0gm+0u2DlAeIKQyl+MB8GA1UdIwQY
MBaAFKP+tBDgfQiPtlG5E3SbgSV+O5lSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb182MEVPQjlDSS0yVWJrVGRKdUJKWDQ3bVZJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC85ZjA2OGEtMTdmNC00MzExLThiYmMt
MjM0YjMyMmEwY2ZlLzEvb182MEVPQjlDSS0yVWJrVGRKdUJKWDQ3bVZJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNC85ZjA2OGEtMTdmNC00MzExLThiYmMtMjM0YjMyMmEwY2Zl
LzEvb182MEVPQjlDSS0yVWJrVGRKdUJKWDQ3bVZJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKDyxRvTd
NQYTwbUvSk1dQ7C5uUV9+fKCFOXF6UMOXOay117BbDcr0UtoH221Gx46RATSuYwn
Zuh1EQNvyRVbWonIq2XaOxbBvHHKhuQYu2Fou7DJ7S+1kPVvlArJDtqDmnVEzn+c
Xj2llwLdMQbfgEsUYewHTtAnO47vtlz9QYOwux65Rjh9Xvu3lk+GeLzzOtjaSPf5
7mSzrZtDgRgn+IaYWEIXVlUc1/fYCrJqyozmAJl1ZlGrKw6tJ29iL3KfPE5PwCNa
BYavUrAGHMohmBERiNh1ODsXzPYgnxcfQnQZ1S5r3EMYYi1XdmioqVE5zHltYY4G
tdcZzYxqsYvDdw==
-----END CERTIFICATE-----
Generated at Sun Sep 7 12:21:14 2025 by rpki-client