Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/43b73f-a0c5-4a2d-94cd-b53967a2c938/1/m-f4kiq4RqKYGeqCS7HGGwbjE7A.mft
File: m-f4kiq4RqKYGeqCS7HGGwbjE7A.mft (raw, json)
Hash identifier: HYhL+dHu8lUba+avTcNQV9PEr3H4RxtUXZJrnoN0HaQ=
Subject key identifier: 78:31:30:B5:C3:2F:49:60:85:99:2E:EA:C4:66:63:B8:B7:12:02:3E
Authority key identifier: 9B:E7:F8:92:2A:B8:46:A2:98:19:EA:82:4B:B1:C6:1B:06:E3:13:B0
Certificate issuer: /CN=9be7f8922ab846a29819ea824bb1c61b06e313b0
Certificate serial: 019A7293D1486D01A1C8F73D462D6E0A1C27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m-f4kiq4RqKYGeqCS7HGGwbjE7A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/43b73f-a0c5-4a2d-94cd-b53967a2c938/1/m-f4kiq4RqKYGeqCS7HGGwbjE7A.mft
Manifest number: 0985
Signing time: Tue 11 Nov 2025 11:01:21 +0000
Manifest this update: Tue 11 Nov 2025 11:01:21 +0000
Manifest next update: Wed 12 Nov 2025 11:01:21 +0000
Files and hashes: 1: m-f4kiq4RqKYGeqCS7HGGwbjE7A.crl (hash: PE7YOwx4OqZ9Y2IhshUme+MpeRAUusZFe0uhOXGacOw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/43b73f-a0c5-4a2d-94cd-b53967a2c938/1/m-f4kiq4RqKYGeqCS7HGGwbjE7A.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/43b73f-a0c5-4a2d-94cd-b53967a2c938/1/m-f4kiq4RqKYGeqCS7HGGwbjE7A.mft
rsync://rpki.ripe.net/repository/DEFAULT/m-f4kiq4RqKYGeqCS7HGGwbjE7A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:d1:48:6d:01:a1:c8:f7:3d:46:2d:6e:0a:1c:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9be7f8922ab846a29819ea824bb1c61b06e313b0
Validity
Not Before: Nov 11 11:01:21 2025 GMT
Not After : Nov 12 11:01:21 2025 GMT
Subject: CN=783130b5c32f496085992eeac46663b8b712023e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:0b:56:7e:34:73:13:c7:ce:34:c2:86:64:16:
02:ab:73:51:22:1a:a3:f7:ad:96:56:c0:59:3d:01:
af:c1:8e:d6:8c:ce:c1:d3:29:0c:38:9e:b8:d0:64:
52:88:87:85:be:db:46:88:5f:78:67:ae:87:80:af:
7a:6e:00:da:bd:c8:f7:7e:28:c2:3e:42:55:75:51:
af:0c:04:8f:95:f9:22:ed:d2:ce:e8:8e:8b:d8:45:
44:90:ff:00:e5:fe:d8:7d:b9:2f:1e:d6:36:2d:98:
85:ba:5e:69:a9:43:29:c6:ff:b9:c1:1b:8f:0c:d5:
6c:b2:0d:37:d8:ba:45:e3:ec:92:e6:c9:eb:46:7b:
a4:f2:03:b5:d4:3d:f4:00:42:bb:e2:2e:17:40:55:
63:ad:90:30:f4:cc:71:6f:83:1b:2a:33:bb:e3:e5:
66:64:36:e0:60:ca:c1:82:81:53:cf:3f:ca:2f:0d:
17:d0:02:9c:a0:4e:ac:b6:7e:83:d4:5d:a6:b5:8d:
04:6a:01:5c:e9:b3:1e:53:4e:35:0d:72:bf:41:ba:
d3:5d:32:cd:41:a8:98:b0:1a:82:b6:95:99:92:ad:
07:51:5b:eb:3a:0d:a3:54:0d:69:41:99:92:ac:8a:
12:1d:7c:ce:3a:d8:a3:4f:68:9a:05:53:f2:0a:7c:
c4:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:31:30:B5:C3:2F:49:60:85:99:2E:EA:C4:66:63:B8:B7:12:02:3E
X509v3 Authority Key Identifier:
keyid:9B:E7:F8:92:2A:B8:46:A2:98:19:EA:82:4B:B1:C6:1B:06:E3:13:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m-f4kiq4RqKYGeqCS7HGGwbjE7A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/43b73f-a0c5-4a2d-94cd-b53967a2c938/1/m-f4kiq4RqKYGeqCS7HGGwbjE7A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/43b73f-a0c5-4a2d-94cd-b53967a2c938/1/m-f4kiq4RqKYGeqCS7HGGwbjE7A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:f7:59:38:fd:14:ee:31:44:8f:a7:30:8e:e8:29:fd:43:7c:
11:20:eb:98:ec:b3:10:18:cc:65:aa:8a:72:8a:0a:e9:72:f7:
66:12:13:03:41:a5:c1:21:41:00:1a:44:c2:c4:a8:eb:4a:2f:
2b:55:9b:74:93:c5:ee:ad:ef:52:69:68:04:5f:49:95:40:8b:
d6:14:a6:56:83:79:18:74:da:90:b9:c6:b1:16:50:c6:ae:03:
82:f1:6a:31:04:6e:ce:c0:ac:fe:77:a5:5b:36:9f:03:f9:11:
a2:1b:41:7c:c6:26:b9:f7:f3:60:cc:ad:29:6d:32:38:e2:22:
44:6e:25:19:50:11:e0:c3:11:11:f4:c1:94:d0:4a:71:ce:7f:
3c:e1:61:02:40:41:16:d2:c3:ae:e9:b1:e2:75:d3:6e:e7:b9:
a8:d6:76:64:ed:cd:6e:74:37:f9:a1:8d:d8:2a:a4:04:63:27:
7d:02:58:8d:de:e4:99:2c:32:3c:bd:e3:31:99:c8:5b:cc:9e:
83:63:15:72:68:b1:a5:83:2e:4a:23:23:cc:66:ca:ae:ed:bb:
05:ec:bb:bd:01:06:50:2b:80:43:08:6c:cb:af:99:5d:b1:31:
0a:70:4d:e5:56:4d:40:73:2d:48:f1:27:94:61:10:06:18:a8:
2d:d1:24:2e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpyk9FIbQGhyPc9Ri1uChwnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDliZTdmODkyMmFiODQ2YTI5ODE5ZWE4MjRiYjFjNjFiMDZl
MzEzYjAwHhcNMjUxMTExMTEwMTIxWhcNMjUxMTEyMTEwMTIxWjAzMTEwLwYDVQQD
Eyg3ODMxMzBiNWMzMmY0OTYwODU5OTJlZWFjNDY2NjNiOGI3MTIwMjNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyQtWfjRzE8fONMKGZBYCq3NRIhqj
962WVsBZPQGvwY7WjM7B0ykMOJ640GRSiIeFvttGiF94Z66HgK96bgDavcj3fijC
PkJVdVGvDASPlfki7dLO6I6L2EVEkP8A5f7YfbkvHtY2LZiFul5pqUMpxv+5wRuP
DNVssg032LpF4+yS5snrRnuk8gO11D30AEK74i4XQFVjrZAw9Mxxb4MbKjO74+Vm
ZDbgYMrBgoFTzz/KLw0X0AKcoE6stn6D1F2mtY0EagFc6bMeU041DXK/QbrTXTLN
QaiYsBqCtpWZkq0HUVvrOg2jVA1pQZmSrIoSHXzOOtijT2iaBVPyCnzElQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHgxMLXDL0lghZku6sRmY7i3EgI+MB8GA1UdIwQY
MBaAFJvn+JIquEaimBnqgkuxxhsG4xOwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbS1mNGtpcTRScUtZR2VxQ1M3SEdHd2JqRTdBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy80M2I3M2YtYTBjNS00YTJkLTk0Y2Qt
YjUzOTY3YTJjOTM4LzEvbS1mNGtpcTRScUtZR2VxQ1M3SEdHd2JqRTdBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYy80M2I3M2YtYTBjNS00YTJkLTk0Y2QtYjUzOTY3YTJjOTM4
LzEvbS1mNGtpcTRScUtZR2VxQ1M3SEdHd2JqRTdBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnvdZOP0U
7jFEj6cwjugp/UN8ESDrmOyzEBjMZaqKcooK6XL3ZhITA0GlwSFBABpEwsSo60ov
K1WbdJPF7q3vUmloBF9JlUCL1hSmVoN5GHTakLnGsRZQxq4DgvFqMQRuzsCs/nel
WzafA/kRohtBfMYmuffzYMytKW0yOOIiRG4lGVAR4MMREfTBlNBKcc5/POFhAkBB
FtLDrumx4nXTbue5qNZ2ZO3NbnQ3+aGN2CqkBGMnfQJYjd7kmSwyPL3jMZnIW8ye
g2MVcmixpYMuSiMjzGbKru27Bey7vQEGUCuAQwhsy6+ZXbExCnBN5VZNQHMtSPEn
lGEQBhioLdEkLg==
-----END CERTIFICATE-----
Generated at Tue Nov 11 15:17:52 2025 by rpki-client