Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/b3d8c4-37fb-40e8-82de-f8419fe5872b/1/F7zvn6HzsThCEzqtT3tAHtyY4Eg.mft
File: F7zvn6HzsThCEzqtT3tAHtyY4Eg.mft (raw, json)
Hash identifier: N2wBjCIFCYN0GGzy2gEq3QhG/sT8h3qyCGaC6YQ/hzs=
Subject key identifier: 31:55:0F:86:73:2E:89:09:32:11:DC:1B:66:03:CF:65:40:6F:1A:72
Authority key identifier: 17:BC:EF:9F:A1:F3:B1:38:42:13:3A:AD:4F:7B:40:1E:DC:98:E0:48
Certificate issuer: /CN=17bcef9fa1f3b13842133aad4f7b401edc98e048
Certificate serial: 019A72938978394661B411290950A4B22203
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F7zvn6HzsThCEzqtT3tAHtyY4Eg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/b3d8c4-37fb-40e8-82de-f8419fe5872b/1/F7zvn6HzsThCEzqtT3tAHtyY4Eg.mft
Manifest number: 09EE
Signing time: Tue 11 Nov 2025 11:01:02 +0000
Manifest this update: Tue 11 Nov 2025 11:01:02 +0000
Manifest next update: Wed 12 Nov 2025 11:01:02 +0000
Files and hashes: 1: F7zvn6HzsThCEzqtT3tAHtyY4Eg.crl (hash: URcErtTuC3R52YIgBwFrbXGBH/g55UAX9O4sC8Yi4/Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/b3d8c4-37fb-40e8-82de-f8419fe5872b/1/F7zvn6HzsThCEzqtT3tAHtyY4Eg.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/b3d8c4-37fb-40e8-82de-f8419fe5872b/1/F7zvn6HzsThCEzqtT3tAHtyY4Eg.mft
rsync://rpki.ripe.net/repository/DEFAULT/F7zvn6HzsThCEzqtT3tAHtyY4Eg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:89:78:39:46:61:b4:11:29:09:50:a4:b2:22:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17bcef9fa1f3b13842133aad4f7b401edc98e048
Validity
Not Before: Nov 11 11:01:02 2025 GMT
Not After : Nov 12 11:01:02 2025 GMT
Subject: CN=31550f86732e89093211dc1b6603cf65406f1a72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:fa:c9:36:50:73:84:d4:52:55:98:e0:80:1e:
4f:17:25:74:cd:dd:23:cb:65:64:1c:03:ba:52:b8:
24:ad:6c:51:40:15:2d:51:4f:aa:4b:b0:74:a2:aa:
c0:e4:fc:4b:7e:a6:f4:c7:95:12:80:53:a9:42:98:
11:bb:f9:5d:3f:5d:af:d8:36:6c:e9:10:eb:7f:d2:
1c:64:cb:f9:10:68:50:b1:ea:15:dd:31:e4:2e:1c:
30:1d:86:d9:cd:a1:9d:56:c3:35:7f:ff:52:a1:50:
35:dd:48:6a:3e:dd:26:a3:e1:98:5b:17:1b:cb:47:
72:32:60:43:6f:2d:0c:03:ec:5a:d6:f4:16:33:24:
ce:01:d8:08:92:cc:d6:66:ef:4e:db:d8:41:92:fe:
81:c0:a5:6f:f0:56:75:ad:1f:cb:02:57:07:f2:cd:
22:7e:bd:79:4c:68:4a:5d:ef:27:d6:92:c7:55:a7:
93:88:7b:70:ed:9e:0e:6a:98:19:ca:09:dd:db:c9:
29:27:16:19:b2:c5:09:d7:ed:4e:aa:ea:9a:64:f4:
d9:93:4a:53:d3:3d:36:0b:9c:ae:64:79:d0:1c:78:
d4:7b:f5:e8:c1:f6:8c:69:97:2a:63:17:ab:85:ea:
66:a5:ee:3f:a8:bb:51:65:81:40:94:0f:74:d3:a4:
e3:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:55:0F:86:73:2E:89:09:32:11:DC:1B:66:03:CF:65:40:6F:1A:72
X509v3 Authority Key Identifier:
keyid:17:BC:EF:9F:A1:F3:B1:38:42:13:3A:AD:4F:7B:40:1E:DC:98:E0:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F7zvn6HzsThCEzqtT3tAHtyY4Eg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/b3d8c4-37fb-40e8-82de-f8419fe5872b/1/F7zvn6HzsThCEzqtT3tAHtyY4Eg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/b3d8c4-37fb-40e8-82de-f8419fe5872b/1/F7zvn6HzsThCEzqtT3tAHtyY4Eg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:13:24:02:97:34:a3:49:2e:b3:08:7e:57:fd:e8:aa:26:ed:
3e:20:1e:f9:17:1c:16:e1:bc:0f:6d:30:97:52:5c:66:ab:a4:
0c:46:52:13:59:ea:9d:34:91:9a:47:35:bc:72:fd:60:51:b2:
58:88:c5:00:af:57:5a:72:12:f6:0d:57:0f:1e:4e:f8:1a:b5:
a7:bf:ca:6f:09:6f:ef:05:54:ea:c2:d0:7f:57:c9:54:af:f3:
97:9e:d8:86:3f:11:92:7a:2b:0b:7d:c8:9a:a8:88:91:6d:2d:
bb:45:6e:e1:4f:90:fc:55:83:f4:e9:0f:7f:70:29:0a:b4:6a:
52:91:03:c6:02:50:c9:66:0f:af:1e:a7:85:8a:c5:31:f2:ff:
68:6b:70:30:2b:a8:fb:02:2d:57:19:91:91:b7:94:65:e8:63:
43:1b:f2:06:9d:29:46:f7:f7:df:28:78:8d:0a:0c:1a:83:ff:
79:f3:eb:d5:dd:77:9a:3f:cc:65:d6:62:28:24:95:c7:54:9b:
e4:1c:7a:35:54:eb:a0:9b:9e:8b:96:31:ed:d0:3b:5e:24:79:
d4:6c:e4:32:bc:57:bb:ad:41:83:d7:dc:99:9b:61:d0:f2:1c:
72:21:f8:c3:2f:a9:9f:96:3e:9f:67:0a:af:8b:97:88:fd:42:
6e:81:d3:40
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpyk4l4OUZhtBEpCVCksiIDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE3YmNlZjlmYTFmM2IxMzg0MjEzM2FhZDRmN2I0MDFlZGM5
OGUwNDgwHhcNMjUxMTExMTEwMTAyWhcNMjUxMTEyMTEwMTAyWjAzMTEwLwYDVQQD
EygzMTU1MGY4NjczMmU4OTA5MzIxMWRjMWI2NjAzY2Y2NTQwNmYxYTcyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3/rJNlBzhNRSVZjggB5PFyV0zd0j
y2VkHAO6UrgkrWxRQBUtUU+qS7B0oqrA5PxLfqb0x5USgFOpQpgRu/ldP12v2DZs
6RDrf9IcZMv5EGhQseoV3THkLhwwHYbZzaGdVsM1f/9SoVA13UhqPt0mo+GYWxcb
y0dyMmBDby0MA+xa1vQWMyTOAdgIkszWZu9O29hBkv6BwKVv8FZ1rR/LAlcH8s0i
fr15TGhKXe8n1pLHVaeTiHtw7Z4OapgZygnd28kpJxYZssUJ1+1OquqaZPTZk0pT
0z02C5yuZHnQHHjUe/XowfaMaZcqYxerhepmpe4/qLtRZYFAlA9006TjJwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDFVD4ZzLokJMhHcG2YDz2VAbxpyMB8GA1UdIwQY
MBaAFBe875+h87E4QhM6rU97QB7cmOBIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRjd6dm42SHpzVGhDRXpxdFQzdEFIdHlZNEVnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC9iM2Q4YzQtMzdmYi00MGU4LTgyZGUt
Zjg0MTlmZTU4NzJiLzEvRjd6dm42SHpzVGhDRXpxdFQzdEFIdHlZNEVnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOC9iM2Q4YzQtMzdmYi00MGU4LTgyZGUtZjg0MTlmZTU4NzJi
LzEvRjd6dm42SHpzVGhDRXpxdFQzdEFIdHlZNEVnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARRMkApc0
o0kuswh+V/3oqibtPiAe+RccFuG8D20wl1JcZqukDEZSE1nqnTSRmkc1vHL9YFGy
WIjFAK9XWnIS9g1XDx5O+Bq1p7/Kbwlv7wVU6sLQf1fJVK/zl57Yhj8RknorC33I
mqiIkW0tu0Vu4U+Q/FWD9OkPf3ApCrRqUpEDxgJQyWYPrx6nhYrFMfL/aGtwMCuo
+wItVxmRkbeUZehjQxvyBp0pRvf33yh4jQoMGoP/efPr1d13mj/MZdZiKCSVx1Sb
5Bx6NVTroJuei5Yx7dA7XiR51GzkMrxXu61Bg9fcmZth0PIcciH4wy+pn5Y+n2cK
r4uXiP1CboHTQA==
-----END CERTIFICATE-----
Generated at Tue Nov 11 14:17:13 2025 by rpki-client