Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/3dd37d-6b0b-4f1f-b0fb-93238fcd1622/1/d6W3Uxx6reukfRwv65uee6qxu7c.mft
File: d6W3Uxx6reukfRwv65uee6qxu7c.mft (raw, json)
Hash identifier: Ssi1zMGNFBEsukXDzjYQpSLJSn6s1HiFntVUesFoSGM=
Subject key identifier: 37:D7:C0:EA:04:F1:77:78:8C:41:91:1E:D4:C3:76:67:F5:80:58:25
Authority key identifier: 77:A5:B7:53:1C:7A:AD:EB:A4:7D:1C:2F:EB:9B:9E:7B:AA:B1:BB:B7
Certificate issuer: /CN=77a5b7531c7aadeba47d1c2feb9b9e7baab1bbb7
Certificate serial: 019A71B77798FC44D6E090E2FC97D8045778
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d6W3Uxx6reukfRwv65uee6qxu7c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/3dd37d-6b0b-4f1f-b0fb-93238fcd1622/1/d6W3Uxx6reukfRwv65uee6qxu7c.mft
Manifest number: 171D
Signing time: Tue 11 Nov 2025 07:00:40 +0000
Manifest this update: Tue 11 Nov 2025 07:00:40 +0000
Manifest next update: Wed 12 Nov 2025 07:00:40 +0000
Files and hashes: 1: d6W3Uxx6reukfRwv65uee6qxu7c.crl (hash: jf3A81mcPHdlTcGqMNIdo6IpF3Qew4HlgW0pK1G1qoc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/3dd37d-6b0b-4f1f-b0fb-93238fcd1622/1/d6W3Uxx6reukfRwv65uee6qxu7c.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/3dd37d-6b0b-4f1f-b0fb-93238fcd1622/1/d6W3Uxx6reukfRwv65uee6qxu7c.mft
rsync://rpki.ripe.net/repository/DEFAULT/d6W3Uxx6reukfRwv65uee6qxu7c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:77:98:fc:44:d6:e0:90:e2:fc:97:d8:04:57:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77a5b7531c7aadeba47d1c2feb9b9e7baab1bbb7
Validity
Not Before: Nov 11 07:00:40 2025 GMT
Not After : Nov 12 07:00:40 2025 GMT
Subject: CN=37d7c0ea04f177788c41911ed4c37667f5805825
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fd:1a:31:0a:78:0d:82:8b:6e:52:6b:28:ee:28:
fa:a8:38:30:21:9e:7f:12:b8:5d:42:5b:fd:33:50:
2b:08:ff:40:ad:f2:b1:7b:21:3f:e1:ae:46:0a:3c:
7c:a6:d0:2d:76:ca:ea:12:ee:54:ec:48:3a:42:c7:
56:35:8f:69:e1:18:a1:66:ab:21:e9:ed:55:05:c2:
37:4e:c3:28:4f:87:03:29:c3:89:6d:3f:22:b3:71:
08:14:18:2b:7d:9d:8f:b9:70:ba:13:5c:80:b6:a5:
bf:75:6a:0f:05:33:1e:e8:3c:3b:e5:46:af:ef:91:
59:01:8a:27:33:e7:5a:c7:b1:69:bf:52:a1:ed:d2:
55:0c:96:3f:27:f9:fc:a5:27:7f:8a:12:1c:99:7e:
6f:a9:0c:aa:b7:22:ff:f9:bf:84:31:f0:2f:5d:8b:
aa:96:1a:d9:d2:3b:53:d3:f3:c5:11:36:6e:0d:42:
40:f9:56:9f:07:04:dc:4b:cb:0c:ad:1a:23:f3:8a:
b9:39:d2:c9:6d:0f:73:91:6f:98:c7:be:5b:63:56:
9a:64:53:c0:ae:63:f7:19:4b:46:a8:4a:0e:49:4a:
53:ba:66:74:19:9c:f3:92:e5:5b:79:13:d0:97:05:
f9:d9:c3:23:9f:4b:c9:d2:20:97:2e:32:a5:42:7f:
d1:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:D7:C0:EA:04:F1:77:78:8C:41:91:1E:D4:C3:76:67:F5:80:58:25
X509v3 Authority Key Identifier:
keyid:77:A5:B7:53:1C:7A:AD:EB:A4:7D:1C:2F:EB:9B:9E:7B:AA:B1:BB:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6W3Uxx6reukfRwv65uee6qxu7c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/3dd37d-6b0b-4f1f-b0fb-93238fcd1622/1/d6W3Uxx6reukfRwv65uee6qxu7c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/3dd37d-6b0b-4f1f-b0fb-93238fcd1622/1/d6W3Uxx6reukfRwv65uee6qxu7c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:4e:5b:92:a0:b1:41:1f:ad:d3:d7:16:d3:96:30:55:1d:85:
2f:cf:fa:7e:d1:8b:32:83:ea:52:16:6f:02:fb:31:92:02:a7:
46:6a:83:fd:b0:90:f8:16:d2:71:dd:bd:20:d1:11:5d:1d:36:
b4:68:c9:3c:9e:06:ac:cd:d4:8d:4c:44:9f:5b:2e:9c:91:68:
1a:7c:7c:01:be:91:e4:7e:5e:46:fa:24:6b:e2:55:03:8b:20:
64:c5:61:ca:eb:e1:fd:2a:cb:ab:8d:a8:1b:cb:31:74:f6:87:
84:cc:69:17:c5:59:d9:8e:66:2f:d2:6b:b0:68:0b:fb:bc:9f:
70:4f:42:16:58:9e:8c:11:b9:8f:f7:f7:ec:e0:a6:2e:d8:3d:
1f:00:a8:f7:5b:4b:c7:6a:0e:e1:9f:dc:9f:4e:a1:f3:3f:f6:
ad:1d:9e:29:f1:01:eb:f2:73:58:65:d4:57:eb:1d:90:e9:06:
af:18:62:b3:8d:50:4e:4e:37:3c:ca:0c:00:bd:72:83:36:57:
db:e1:b2:be:50:19:ed:7b:83:68:8b:a0:5c:05:98:b5:62:85:
b0:4b:e2:01:23:d8:0a:9c:81:f5:92:3e:a4:07:64:9e:4b:e5:
5f:7f:c6:d1:19:dd:69:fa:29:6f:e7:bb:7b:51:17:1e:41:89:
eb:a9:e7:f4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxt3eY/ETW4JDi/JfYBFd4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc3YTViNzUzMWM3YWFkZWJhNDdkMWMyZmViOWI5ZTdiYWFi
MWJiYjcwHhcNMjUxMTExMDcwMDQwWhcNMjUxMTEyMDcwMDQwWjAzMTEwLwYDVQQD
EygzN2Q3YzBlYTA0ZjE3Nzc4OGM0MTkxMWVkNGMzNzY2N2Y1ODA1ODI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA/RoxCngNgotuUmso7ij6qDgwIZ5/
ErhdQlv9M1ArCP9ArfKxeyE/4a5GCjx8ptAtdsrqEu5U7Eg6QsdWNY9p4RihZqsh
6e1VBcI3TsMoT4cDKcOJbT8is3EIFBgrfZ2PuXC6E1yAtqW/dWoPBTMe6Dw75Uav
75FZAYonM+dax7Fpv1Kh7dJVDJY/J/n8pSd/ihIcmX5vqQyqtyL/+b+EMfAvXYuq
lhrZ0jtT0/PFETZuDUJA+VafBwTcS8sMrRoj84q5OdLJbQ9zkW+Yx75bY1aaZFPA
rmP3GUtGqEoOSUpTumZ0GZzzkuVbeRPQlwX52cMjn0vJ0iCXLjKlQn/RQQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDfXwOoE8Xd4jEGRHtTDdmf1gFglMB8GA1UdIwQY
MBaAFHelt1Mceq3rpH0cL+ubnnuqsbu3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZDZXM1V4eDZyZXVrZlJ3djY1dWVlNnF4dTdjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi8zZGQzN2QtNmIwYi00ZjFmLWIwZmIt
OTMyMzhmY2QxNjIyLzEvZDZXM1V4eDZyZXVrZlJ3djY1dWVlNnF4dTdjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMi8zZGQzN2QtNmIwYi00ZjFmLWIwZmItOTMyMzhmY2QxNjIy
LzEvZDZXM1V4eDZyZXVrZlJ3djY1dWVlNnF4dTdjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATk5bkqCx
QR+t09cW05YwVR2FL8/6ftGLMoPqUhZvAvsxkgKnRmqD/bCQ+BbScd29INERXR02
tGjJPJ4GrM3UjUxEn1sunJFoGnx8Ab6R5H5eRvoka+JVA4sgZMVhyuvh/SrLq42o
G8sxdPaHhMxpF8VZ2Y5mL9JrsGgL+7yfcE9CFliejBG5j/f37OCmLtg9HwCo91tL
x2oO4Z/cn06h8z/2rR2eKfEB6/JzWGXUV+sdkOkGrxhis41QTk43PMoMAL1ygzZX
2+GyvlAZ7XuDaIugXAWYtWKFsEviASPYCpyB9ZI+pAdknkvlX3/G0Rndafopb+e7
e1EXHkGJ66nn9A==
-----END CERTIFICATE-----
Generated at Tue Nov 11 11:32:12 2025 by rpki-client