Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/bf426a-3a8f-4252-a17f-ba02c960b8f4/1/RRblOzLKp2GQbw_N6idbcg4XQsg.mft
File: RRblOzLKp2GQbw_N6idbcg4XQsg.mft (raw, json)
Hash identifier: WYKsjVwV2C3HhZrSR5RiqWwYcZgsB0dgdBukTiPzXZI=
Subject key identifier: F0:B5:AC:9A:C9:3A:8F:6C:BD:79:19:E5:98:8F:BC:80:83:CC:97:60
Authority key identifier: 45:16:E5:3B:32:CA:A7:61:90:6F:0F:CD:EA:27:5B:72:0E:17:42:C8
Certificate issuer: /CN=4516e53b32caa761906f0fcdea275b720e1742c8
Certificate serial: 019A7112DAD385522246D649EE981C6CA0AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RRblOzLKp2GQbw_N6idbcg4XQsg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/bf426a-3a8f-4252-a17f-ba02c960b8f4/1/RRblOzLKp2GQbw_N6idbcg4XQsg.mft
Manifest number: 16B4
Signing time: Tue 11 Nov 2025 04:00:52 +0000
Manifest this update: Tue 11 Nov 2025 04:00:52 +0000
Manifest next update: Wed 12 Nov 2025 04:00:52 +0000
Files and hashes: 1: RRblOzLKp2GQbw_N6idbcg4XQsg.crl (hash: UivjAtOfMIsFd8P74nqI9ChXFuPz4S3Jlktzyjns0t8=)
2: pi-26F4PeqiMAjfpczMwVUa13T4.roa (hash: Vruq+xuvPpEjrPLqBdBog4T5WQxUoJKp5FP5nL6SSoA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/bf426a-3a8f-4252-a17f-ba02c960b8f4/1/RRblOzLKp2GQbw_N6idbcg4XQsg.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/bf426a-3a8f-4252-a17f-ba02c960b8f4/1/RRblOzLKp2GQbw_N6idbcg4XQsg.mft
rsync://rpki.ripe.net/repository/DEFAULT/RRblOzLKp2GQbw_N6idbcg4XQsg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:12:da:d3:85:52:22:46:d6:49:ee:98:1c:6c:a0:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4516e53b32caa761906f0fcdea275b720e1742c8
Validity
Not Before: Nov 11 04:00:52 2025 GMT
Not After : Nov 12 04:00:52 2025 GMT
Subject: CN=f0b5ac9ac93a8f6cbd7919e5988fbc8083cc9760
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:c8:1f:aa:df:ec:e2:86:d5:58:ab:95:19:6a:
e2:f9:ad:d9:05:f3:61:4c:6c:92:d9:5a:5c:04:52:
c2:64:a3:73:f6:90:36:18:21:3a:2b:56:48:72:a5:
08:56:ca:bd:e7:dc:e1:f4:3b:35:ec:05:d6:14:36:
d8:b2:77:cd:fb:fd:3b:d5:f4:48:d6:86:52:fe:de:
5b:10:91:e4:40:d7:86:60:98:c4:ca:41:08:62:8e:
d7:8d:ec:25:2a:e3:51:ef:ee:1b:2d:d9:76:48:4a:
54:d2:d5:08:17:b6:ef:a1:a1:5a:be:b9:10:58:1f:
b2:37:71:cc:33:01:df:8f:7a:a6:5c:94:d0:9f:40:
95:d6:ea:4a:e5:75:79:9a:a9:53:bb:80:24:ae:38:
e4:eb:0a:6f:f7:97:eb:f7:d3:99:f2:64:5e:98:e3:
cd:c6:51:70:84:d9:4b:03:3f:99:d2:14:3f:ce:1f:
b5:c2:17:6b:36:8a:5f:1a:cb:31:c4:6a:af:75:99:
60:bc:19:88:c8:ab:7a:8e:49:e9:f4:1c:e6:2a:45:
e1:89:b6:66:a8:63:88:2c:e5:0a:2f:e9:ac:05:87:
f0:4d:df:27:84:11:d7:56:82:03:30:54:a7:fd:d9:
52:94:cb:f8:20:e0:d0:97:ad:27:d2:3e:c1:5f:da:
15:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:B5:AC:9A:C9:3A:8F:6C:BD:79:19:E5:98:8F:BC:80:83:CC:97:60
X509v3 Authority Key Identifier:
keyid:45:16:E5:3B:32:CA:A7:61:90:6F:0F:CD:EA:27:5B:72:0E:17:42:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RRblOzLKp2GQbw_N6idbcg4XQsg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/bf426a-3a8f-4252-a17f-ba02c960b8f4/1/RRblOzLKp2GQbw_N6idbcg4XQsg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/bf426a-3a8f-4252-a17f-ba02c960b8f4/1/RRblOzLKp2GQbw_N6idbcg4XQsg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:2c:8f:e1:aa:c6:ac:09:fb:73:4a:d0:5c:d0:7c:6b:22:0c:
8d:59:ad:86:f1:58:18:18:f9:4b:ea:92:e7:a6:d7:f5:e7:8a:
f2:94:ab:92:27:ca:c0:8d:80:89:24:b1:2b:6f:e6:a0:0f:01:
b1:27:84:5c:98:64:b0:ef:07:80:d4:ab:d9:e5:70:a8:c4:af:
56:10:be:bc:49:62:16:ae:a6:0f:ec:ec:b9:ed:19:4e:e1:79:
c1:ab:66:90:32:2b:c0:6b:f5:4c:d9:1d:29:8a:86:f0:7f:2e:
52:81:5e:6b:a4:4b:e7:8f:4c:41:fa:45:e7:df:63:9d:f2:97:
71:f8:60:82:c3:e7:85:54:63:42:db:00:52:c3:ea:8b:90:c1:
63:43:fc:a2:43:8c:8a:a9:74:cb:ea:e4:f3:c1:fb:95:8a:09:
fe:c2:dd:c3:83:99:2e:3e:ac:68:c0:d2:b6:28:c5:61:d7:1a:
79:54:38:51:27:e3:08:3a:8a:15:a1:dc:f2:b4:91:7b:0f:cf:
20:cd:f6:37:d7:c4:de:8b:7a:43:2c:17:b5:39:d8:9d:5a:82:
74:fd:1c:b6:25:cb:96:98:cc:c6:92:5e:99:6e:7c:c3:ff:53:
45:aa:4d:db:b3:a2:81:8e:2e:87:e3:6d:c9:dc:c1:6b:a1:8e:
9d:2f:b8:70
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxEtrThVIiRtZJ7pgcbKCtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ1MTZlNTNiMzJjYWE3NjE5MDZmMGZjZGVhMjc1YjcyMGUx
NzQyYzgwHhcNMjUxMTExMDQwMDUyWhcNMjUxMTEyMDQwMDUyWjAzMTEwLwYDVQQD
EyhmMGI1YWM5YWM5M2E4ZjZjYmQ3OTE5ZTU5ODhmYmM4MDgzY2M5NzYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj8gfqt/s4obVWKuVGWri+a3ZBfNh
TGyS2VpcBFLCZKNz9pA2GCE6K1ZIcqUIVsq959zh9Ds17AXWFDbYsnfN+/071fRI
1oZS/t5bEJHkQNeGYJjEykEIYo7XjewlKuNR7+4bLdl2SEpU0tUIF7bvoaFavrkQ
WB+yN3HMMwHfj3qmXJTQn0CV1upK5XV5mqlTu4Akrjjk6wpv95fr99OZ8mRemOPN
xlFwhNlLAz+Z0hQ/zh+1whdrNopfGssxxGqvdZlgvBmIyKt6jknp9BzmKkXhibZm
qGOILOUKL+msBYfwTd8nhBHXVoIDMFSn/dlSlMv4IODQl60n0j7BX9oV4wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPC1rJrJOo9svXkZ5ZiPvICDzJdgMB8GA1UdIwQY
MBaAFEUW5TsyyqdhkG8PzeonW3IOF0LIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUlJibE96TEtwMkdRYndfTjZpZGJjZzRYUXNnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy9iZjQyNmEtM2E4Zi00MjUyLWExN2Yt
YmEwMmM5NjBiOGY0LzEvUlJibE96TEtwMkdRYndfTjZpZGJjZzRYUXNnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYy9iZjQyNmEtM2E4Zi00MjUyLWExN2YtYmEwMmM5NjBiOGY0
LzEvUlJibE96TEtwMkdRYndfTjZpZGJjZzRYUXNnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqCyP4arG
rAn7c0rQXNB8ayIMjVmthvFYGBj5S+qS56bX9eeK8pSrkifKwI2AiSSxK2/moA8B
sSeEXJhksO8HgNSr2eVwqMSvVhC+vEliFq6mD+zsue0ZTuF5watmkDIrwGv1TNkd
KYqG8H8uUoFea6RL549MQfpF599jnfKXcfhggsPnhVRjQtsAUsPqi5DBY0P8okOM
iql0y+rk88H7lYoJ/sLdw4OZLj6saMDStijFYdcaeVQ4USfjCDqKFaHc8rSRew/P
IM32N9fE3ot6QywXtTnYnVqCdP0ctiXLlpjMxpJemW58w/9TRapN27OigY4uh+Nt
ydzBa6GOnS+4cA==
-----END CERTIFICATE-----
Generated at Tue Nov 11 12:43:12 2025 by rpki-client