Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/f63546-6892-4f4d-b800-8fd45cd5138a/1/RjJg5F7hUhxqq4PyHVtp6BDB4HM.mft
File: RjJg5F7hUhxqq4PyHVtp6BDB4HM.mft (raw, json)
Hash identifier: WF/nslr2pkd9hqZ3dnsB1LdIxNCFCuFUnGI+z/6rlnI=
Subject key identifier: BB:A7:32:94:FD:40:DF:D9:98:C0:E7:D1:FC:B5:16:47:B7:CD:D5:BD
Authority key identifier: 46:32:60:E4:5E:E1:52:1C:6A:AB:83:F2:1D:5B:69:E8:10:C1:E0:73
Certificate issuer: /CN=463260e45ee1521c6aab83f21d5b69e810c1e073
Certificate serial: 019A71B79A3F79E7444FA3EBD0EF27BCA881
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RjJg5F7hUhxqq4PyHVtp6BDB4HM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/f63546-6892-4f4d-b800-8fd45cd5138a/1/RjJg5F7hUhxqq4PyHVtp6BDB4HM.mft
Manifest number: 171A
Signing time: Tue 11 Nov 2025 07:00:49 +0000
Manifest this update: Tue 11 Nov 2025 07:00:49 +0000
Manifest next update: Wed 12 Nov 2025 07:00:49 +0000
Files and hashes: 1: RjJg5F7hUhxqq4PyHVtp6BDB4HM.crl (hash: 25a6gFe1caXQ6QZ5A/EjjV9qWPRCTYKBh8dDMZagtNo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/f63546-6892-4f4d-b800-8fd45cd5138a/1/RjJg5F7hUhxqq4PyHVtp6BDB4HM.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/f63546-6892-4f4d-b800-8fd45cd5138a/1/RjJg5F7hUhxqq4PyHVtp6BDB4HM.mft
rsync://rpki.ripe.net/repository/DEFAULT/RjJg5F7hUhxqq4PyHVtp6BDB4HM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:9a:3f:79:e7:44:4f:a3:eb:d0:ef:27:bc:a8:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=463260e45ee1521c6aab83f21d5b69e810c1e073
Validity
Not Before: Nov 11 07:00:49 2025 GMT
Not After : Nov 12 07:00:49 2025 GMT
Subject: CN=bba73294fd40dfd998c0e7d1fcb51647b7cdd5bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:84:04:4d:31:35:9f:d1:45:ca:47:1e:4d:8b:
e8:85:9c:9e:be:e1:ec:4e:9f:fe:90:73:eb:29:c3:
17:ba:9a:96:39:e4:6e:c6:fb:84:da:ea:c9:69:7f:
c2:38:1e:1b:ad:d3:ef:22:43:d1:19:79:e9:b9:02:
25:d7:e2:7f:c8:40:74:e7:74:a8:76:f6:15:2f:b2:
79:eb:26:1a:03:20:62:11:12:3e:b3:7f:3e:c2:91:
0c:f7:ef:4a:c7:ba:31:57:1f:2b:e9:95:92:8a:3e:
6f:c3:f3:e1:86:f8:26:b2:44:b8:d6:92:42:cb:cf:
f8:c4:13:e6:f8:01:c0:c3:96:b2:5f:d6:7a:93:1f:
6a:0c:a4:c5:55:cd:f7:0a:d9:8e:69:7c:d2:a8:94:
d5:ba:7f:d0:77:a7:21:d4:87:09:cf:2a:b9:7b:4c:
63:c1:ac:2a:ae:03:f4:62:a5:d6:65:29:ea:24:6b:
ae:bd:fe:21:9e:58:9d:94:70:b4:35:ad:36:60:f3:
09:6f:e0:55:68:8c:15:24:14:26:9c:b3:ec:5a:7a:
42:52:df:a4:e8:89:94:80:ab:5b:36:1c:ba:db:6d:
28:8f:a0:3e:72:b7:61:c5:35:d6:1f:83:b8:2a:a6:
51:91:6d:c9:38:ce:51:bb:8c:91:f5:34:e3:c8:3e:
ac:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:A7:32:94:FD:40:DF:D9:98:C0:E7:D1:FC:B5:16:47:B7:CD:D5:BD
X509v3 Authority Key Identifier:
keyid:46:32:60:E4:5E:E1:52:1C:6A:AB:83:F2:1D:5B:69:E8:10:C1:E0:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RjJg5F7hUhxqq4PyHVtp6BDB4HM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/f63546-6892-4f4d-b800-8fd45cd5138a/1/RjJg5F7hUhxqq4PyHVtp6BDB4HM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/f63546-6892-4f4d-b800-8fd45cd5138a/1/RjJg5F7hUhxqq4PyHVtp6BDB4HM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:61:62:ab:85:b5:ab:4d:dd:76:1a:c7:61:c1:2d:9a:19:86:
c3:fa:fd:37:dc:08:24:30:18:29:13:f2:89:48:49:db:08:9a:
98:ae:2b:e7:4a:ab:67:69:f7:8d:ed:fd:bc:dd:b4:25:b3:46:
66:f4:65:76:f0:34:07:07:ac:34:54:08:1e:b8:dd:4c:63:d2:
26:1a:b8:d6:e5:0a:59:b1:aa:2a:00:73:96:0d:1e:4a:f5:d2:
e0:b9:2b:92:31:04:12:a7:4b:94:26:61:a3:f5:5a:85:a7:09:
28:76:6f:41:07:d1:10:60:d1:ad:b6:ad:89:45:38:15:49:6c:
73:aa:3b:c8:5b:ce:11:03:c3:3d:41:80:af:6d:a4:fc:23:43:
46:57:83:d4:21:04:3e:d4:af:76:00:68:34:2d:a1:d2:80:3f:
a5:1a:bd:09:d6:9f:82:16:84:98:ff:1a:10:c3:4c:ec:81:1d:
f9:16:eb:04:ba:c2:5e:07:99:40:b0:0b:6b:a2:31:c0:9f:24:
2d:70:c0:41:87:24:cb:6b:76:c5:15:a7:aa:b1:c7:38:6a:c0:
6d:6b:97:c8:16:d4:54:9c:39:84:ca:25:28:0c:07:72:cf:8f:
cb:d0:ac:e0:d3:29:fa:11:6a:42:03:a6:c7:f8:95:2d:96:d3:
ea:45:81:c6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxt5o/eedET6Pr0O8nvKiBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ2MzI2MGU0NWVlMTUyMWM2YWFiODNmMjFkNWI2OWU4MTBj
MWUwNzMwHhcNMjUxMTExMDcwMDQ5WhcNMjUxMTEyMDcwMDQ5WjAzMTEwLwYDVQQD
EyhiYmE3MzI5NGZkNDBkZmQ5OThjMGU3ZDFmY2I1MTY0N2I3Y2RkNWJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApoQETTE1n9FFykceTYvohZyevuHs
Tp/+kHPrKcMXupqWOeRuxvuE2urJaX/COB4brdPvIkPRGXnpuQIl1+J/yEB053So
dvYVL7J56yYaAyBiERI+s38+wpEM9+9Kx7oxVx8r6ZWSij5vw/PhhvgmskS41pJC
y8/4xBPm+AHAw5ayX9Z6kx9qDKTFVc33CtmOaXzSqJTVun/Qd6ch1IcJzyq5e0xj
wawqrgP0YqXWZSnqJGuuvf4hnlidlHC0Na02YPMJb+BVaIwVJBQmnLPsWnpCUt+k
6ImUgKtbNhy6220oj6A+crdhxTXWH4O4KqZRkW3JOM5Ru4yR9TTjyD6sCwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLunMpT9QN/ZmMDn0fy1Fke3zdW9MB8GA1UdIwQY
MBaAFEYyYORe4VIcaquD8h1baegQweBzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUmpKZzVGN2hVaHhxcTRQeUhWdHA2QkRCNEhNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy9mNjM1NDYtNjg5Mi00ZjRkLWI4MDAt
OGZkNDVjZDUxMzhhLzEvUmpKZzVGN2hVaHhxcTRQeUhWdHA2QkRCNEhNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYy9mNjM1NDYtNjg5Mi00ZjRkLWI4MDAtOGZkNDVjZDUxMzhh
LzEvUmpKZzVGN2hVaHhxcTRQeUhWdHA2QkRCNEhNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKmFiq4W1
q03ddhrHYcEtmhmGw/r9N9wIJDAYKRPyiUhJ2wiamK4r50qrZ2n3je39vN20JbNG
ZvRldvA0BwesNFQIHrjdTGPSJhq41uUKWbGqKgBzlg0eSvXS4LkrkjEEEqdLlCZh
o/VahacJKHZvQQfREGDRrbatiUU4FUlsc6o7yFvOEQPDPUGAr22k/CNDRleD1CEE
PtSvdgBoNC2h0oA/pRq9CdafghaEmP8aEMNM7IEd+RbrBLrCXgeZQLALa6IxwJ8k
LXDAQYcky2t2xRWnqrHHOGrAbWuXyBbUVJw5hMolKAwHcs+Py9Cs4NMp+hFqQgOm
x/iVLZbT6kWBxg==
-----END CERTIFICATE-----
Generated at Tue Nov 11 11:46:22 2025 by rpki-client