Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/8e43b9-1f51-4b93-9b27-74b6f005d17b/1/M2FwqC1X_LnkQKq8O-nsQL0DnE4.mft
File: M2FwqC1X_LnkQKq8O-nsQL0DnE4.mft (raw, json)
Hash identifier: vR6eiB/AFefx94gDZsWYhuQzJB5ezqoTTEyBzquvbbg=
Subject key identifier: A5:D2:73:A6:9E:E6:CF:3B:9A:B7:40:FB:45:78:16:59:B8:C6:91:78
Authority key identifier: 33:61:70:A8:2D:57:FC:B9:E4:40:AA:BC:3B:E9:EC:40:BD:03:9C:4E
Certificate issuer: /CN=336170a82d57fcb9e440aabc3be9ec40bd039c4e
Certificate serial: 019A71B875BA5FF909B2EC48E3C79FC1D328
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M2FwqC1X_LnkQKq8O-nsQL0DnE4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/8e43b9-1f51-4b93-9b27-74b6f005d17b/1/M2FwqC1X_LnkQKq8O-nsQL0DnE4.mft
Manifest number: 0C9F
Signing time: Tue 11 Nov 2025 07:01:45 +0000
Manifest this update: Tue 11 Nov 2025 07:01:45 +0000
Manifest next update: Wed 12 Nov 2025 07:01:45 +0000
Files and hashes: 1: M2FwqC1X_LnkQKq8O-nsQL0DnE4.crl (hash: m5Emj0ouQ6sEGPsnAlwhETkqPcn8jV8uufNflDhDSZ8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/8e43b9-1f51-4b93-9b27-74b6f005d17b/1/M2FwqC1X_LnkQKq8O-nsQL0DnE4.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/8e43b9-1f51-4b93-9b27-74b6f005d17b/1/M2FwqC1X_LnkQKq8O-nsQL0DnE4.mft
rsync://rpki.ripe.net/repository/DEFAULT/M2FwqC1X_LnkQKq8O-nsQL0DnE4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:75:ba:5f:f9:09:b2:ec:48:e3:c7:9f:c1:d3:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=336170a82d57fcb9e440aabc3be9ec40bd039c4e
Validity
Not Before: Nov 11 07:01:45 2025 GMT
Not After : Nov 12 07:01:45 2025 GMT
Subject: CN=a5d273a69ee6cf3b9ab740fb45781659b8c69178
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:28:cb:bd:b9:d2:15:e3:19:8d:cc:d5:15:5e:
94:b4:c1:9a:af:be:a5:c6:85:ab:9d:8b:48:bf:44:
73:7c:70:a1:cb:29:36:84:fd:e0:34:76:a0:97:47:
89:1e:6c:a5:5e:2d:5c:87:4a:a8:7f:2f:95:19:55:
fc:c5:b7:67:86:2d:73:4d:d3:fb:03:d0:37:48:cd:
f9:12:1b:a3:4e:95:78:a3:05:2d:6d:9f:16:77:7d:
fe:35:56:f4:1c:93:8c:36:ab:b7:3a:c6:98:db:a6:
69:51:75:d6:14:37:b7:95:dc:dc:fe:06:97:29:e6:
ca:ec:64:95:6f:95:35:80:3b:a4:a8:68:7c:1e:46:
c4:cb:e0:96:c2:86:2a:e9:59:18:3d:dc:73:aa:01:
bc:32:2b:7a:f4:67:e3:f8:9b:58:c0:84:57:c2:3c:
2d:67:2c:ef:30:d9:f0:7a:ec:cd:42:b0:01:c2:c9:
4c:21:ef:bf:28:4f:2b:db:07:c4:97:af:d6:8a:26:
45:60:f4:39:e3:2a:ad:55:1e:3c:8a:b2:4e:de:ef:
98:11:36:65:4a:50:60:02:9a:51:df:49:c3:14:cc:
95:4e:82:3e:f6:5b:73:30:8a:02:f6:a6:3e:ba:73:
11:50:74:ed:47:06:66:2f:6d:91:44:c9:80:05:10:
4e:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:D2:73:A6:9E:E6:CF:3B:9A:B7:40:FB:45:78:16:59:B8:C6:91:78
X509v3 Authority Key Identifier:
keyid:33:61:70:A8:2D:57:FC:B9:E4:40:AA:BC:3B:E9:EC:40:BD:03:9C:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M2FwqC1X_LnkQKq8O-nsQL0DnE4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/8e43b9-1f51-4b93-9b27-74b6f005d17b/1/M2FwqC1X_LnkQKq8O-nsQL0DnE4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/8e43b9-1f51-4b93-9b27-74b6f005d17b/1/M2FwqC1X_LnkQKq8O-nsQL0DnE4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:24:be:3a:43:2c:9c:81:ab:6f:df:4d:69:ed:e0:6b:2b:83:
a8:f6:5b:52:2e:b5:6f:89:79:d0:98:9f:37:d1:12:9c:9f:e5:
97:07:cd:24:38:fe:4a:0d:f7:cc:2d:7a:75:e8:66:34:11:66:
e7:3d:d6:cc:e4:a0:9c:5d:fd:d5:de:8a:fd:be:2f:33:be:57:
40:28:38:7f:06:4f:4c:a9:ec:0d:5c:49:e5:e3:5d:4c:aa:2e:
13:0e:f1:db:0b:eb:81:ed:74:fd:80:4c:4c:36:bd:6f:fc:82:
38:b1:f2:cc:2a:81:eb:18:3a:54:13:85:87:27:2c:f3:2f:46:
3b:a6:65:9f:3d:ea:92:d3:4d:0f:46:23:a4:f7:74:99:fc:24:
1f:ea:6f:d9:88:b7:b0:2f:ca:ff:be:72:48:99:16:09:71:c7:
b0:67:67:8c:a4:79:33:11:5a:8c:a6:b0:65:8a:99:ce:fb:d6:
1d:69:e1:f7:d7:da:af:e6:ba:2a:e8:3d:b3:4d:77:94:90:93:
59:58:81:c8:ee:72:80:a6:1d:df:5c:9c:dc:dc:6d:5b:1e:6f:
7b:d6:bc:08:0a:9c:8c:cd:63:ec:60:3b:e0:59:7b:50:ee:9f:
bd:08:1f:e3:6e:38:6e:16:1e:cf:56:c0:5f:a2:d4:09:f8:f1:
07:cb:63:8c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxuHW6X/kJsuxI48efwdMoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMzNjE3MGE4MmQ1N2ZjYjllNDQwYWFiYzNiZTllYzQwYmQw
MzljNGUwHhcNMjUxMTExMDcwMTQ1WhcNMjUxMTEyMDcwMTQ1WjAzMTEwLwYDVQQD
EyhhNWQyNzNhNjllZTZjZjNiOWFiNzQwZmI0NTc4MTY1OWI4YzY5MTc4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtyjLvbnSFeMZjczVFV6UtMGar76l
xoWrnYtIv0RzfHChyyk2hP3gNHagl0eJHmylXi1ch0qofy+VGVX8xbdnhi1zTdP7
A9A3SM35EhujTpV4owUtbZ8Wd33+NVb0HJOMNqu3OsaY26ZpUXXWFDe3ldzc/gaX
KebK7GSVb5U1gDukqGh8HkbEy+CWwoYq6VkYPdxzqgG8Mit69Gfj+JtYwIRXwjwt
ZyzvMNnweuzNQrABwslMIe+/KE8r2wfEl6/WiiZFYPQ54yqtVR48irJO3u+YETZl
SlBgAppR30nDFMyVToI+9ltzMIoC9qY+unMRUHTtRwZmL22RRMmABRBOrQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKXSc6ae5s87mrdA+0V4Flm4xpF4MB8GA1UdIwQY
MBaAFDNhcKgtV/y55ECqvDvp7EC9A5xOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTTJGd3FDMVhfTG5rUUtxOE8tbnNRTDBEbkU0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi84ZTQzYjktMWY1MS00YjkzLTliMjct
NzRiNmYwMDVkMTdiLzEvTTJGd3FDMVhfTG5rUUtxOE8tbnNRTDBEbkU0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYi84ZTQzYjktMWY1MS00YjkzLTliMjctNzRiNmYwMDVkMTdi
LzEvTTJGd3FDMVhfTG5rUUtxOE8tbnNRTDBEbkU0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqCS+OkMs
nIGrb99Nae3gayuDqPZbUi61b4l50JifN9ESnJ/llwfNJDj+Sg33zC16dehmNBFm
5z3WzOSgnF391d6K/b4vM75XQCg4fwZPTKnsDVxJ5eNdTKouEw7x2wvrge10/YBM
TDa9b/yCOLHyzCqB6xg6VBOFhycs8y9GO6Zlnz3qktNND0YjpPd0mfwkH+pv2Yi3
sC/K/75ySJkWCXHHsGdnjKR5MxFajKawZYqZzvvWHWnh99far+a6Kug9s013lJCT
WViByO5ygKYd31yc3NxtWx5ve9a8CAqcjM1j7GA74Fl7UO6fvQgf4244bhYez1bA
X6LUCfjxB8tjjA==
-----END CERTIFICATE-----
Generated at Tue Nov 11 11:40:54 2025 by rpki-client