Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/e873bc-95f4-4dca-b96e-a037d57444e3/1/xI9vTNWSgKZUi7IyAXtKPIp1EW4.mft
File: xI9vTNWSgKZUi7IyAXtKPIp1EW4.mft (raw, json)
Hash identifier: KqTeRcrclKgC2uP+45Gsp2nJPdyU+WLJNjXYnGR6TD4=
Subject key identifier: FD:C9:FC:CD:61:69:EB:D4:60:BC:7E:51:98:F4:04:F3:45:30:5B:D2
Authority key identifier: C4:8F:6F:4C:D5:92:80:A6:54:8B:B2:32:01:7B:4A:3C:8A:75:11:6E
Certificate issuer: /CN=c48f6f4cd59280a6548bb232017b4a3c8a75116e
Certificate serial: 019A4F626B14DFF4ADACEB89F126EF4E2AFE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xI9vTNWSgKZUi7IyAXtKPIp1EW4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/e873bc-95f4-4dca-b96e-a037d57444e3/1/xI9vTNWSgKZUi7IyAXtKPIp1EW4.mft
Manifest number: 0497
Signing time: Tue 04 Nov 2025 15:00:41 +0000
Manifest this update: Tue 04 Nov 2025 15:00:41 +0000
Manifest next update: Wed 05 Nov 2025 15:00:41 +0000
Files and hashes: 1: xI9vTNWSgKZUi7IyAXtKPIp1EW4.crl (hash: f8adVMLON3rxDYlgG1r0FA/d9nG88MjGw0ks0jQBzp8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/e873bc-95f4-4dca-b96e-a037d57444e3/1/xI9vTNWSgKZUi7IyAXtKPIp1EW4.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/e873bc-95f4-4dca-b96e-a037d57444e3/1/xI9vTNWSgKZUi7IyAXtKPIp1EW4.mft
rsync://rpki.ripe.net/repository/DEFAULT/xI9vTNWSgKZUi7IyAXtKPIp1EW4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:62:6b:14:df:f4:ad:ac:eb:89:f1:26:ef:4e:2a:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c48f6f4cd59280a6548bb232017b4a3c8a75116e
Validity
Not Before: Nov 4 15:00:41 2025 GMT
Not After : Nov 5 15:00:41 2025 GMT
Subject: CN=fdc9fccd6169ebd460bc7e5198f404f345305bd2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:6d:b4:70:41:08:0d:8a:21:d9:6c:b6:04:fc:
6a:1c:e8:4b:9f:53:e8:c7:41:f3:17:4a:8e:32:2d:
16:8f:8a:4d:47:e6:33:8a:2d:65:33:af:25:7f:a1:
85:90:e6:f9:f6:dd:9c:4c:ba:ba:f1:13:45:6b:a7:
d8:3d:72:c9:58:0d:66:e1:fb:60:b3:ba:6c:70:2b:
1b:ec:57:2f:1c:dc:4b:81:c0:98:b4:fa:f5:47:2c:
60:62:34:38:09:ea:48:56:d6:c9:69:70:cf:aa:df:
3f:4b:2f:c3:21:23:86:93:c8:22:4c:c3:af:ce:a3:
89:b7:53:b8:5f:d6:4e:d0:60:84:38:09:48:b9:b6:
c9:64:c4:16:c7:82:86:30:e3:05:22:f7:88:57:9b:
24:07:07:db:e1:11:99:b8:3e:7c:4d:46:21:53:36:
a8:8b:05:81:ce:32:74:9c:b7:d0:ea:ea:b1:0f:d1:
78:22:e1:7f:34:61:ca:c2:ed:84:21:f7:47:20:74:
53:3e:ff:b6:d2:71:00:8d:79:4d:3a:21:3a:8b:77:
69:a7:9c:75:2a:cb:62:49:57:84:8a:f6:76:85:2c:
f9:4a:80:6a:64:9b:34:41:e9:c3:14:b3:f5:1d:b1:
9a:78:29:19:2a:a7:a0:5e:a3:33:b9:40:8e:23:3f:
a6:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:C9:FC:CD:61:69:EB:D4:60:BC:7E:51:98:F4:04:F3:45:30:5B:D2
X509v3 Authority Key Identifier:
keyid:C4:8F:6F:4C:D5:92:80:A6:54:8B:B2:32:01:7B:4A:3C:8A:75:11:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xI9vTNWSgKZUi7IyAXtKPIp1EW4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/e873bc-95f4-4dca-b96e-a037d57444e3/1/xI9vTNWSgKZUi7IyAXtKPIp1EW4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/e873bc-95f4-4dca-b96e-a037d57444e3/1/xI9vTNWSgKZUi7IyAXtKPIp1EW4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:bf:c2:83:72:0e:14:2f:2e:15:25:66:27:d3:83:42:c9:14:
a0:98:ac:32:da:c4:dc:59:c3:6f:a0:b0:98:bc:79:71:67:57:
48:8a:51:03:08:38:3b:40:62:69:f3:c2:fd:98:24:81:ed:72:
73:24:16:a0:c3:aa:8f:ce:8a:5e:54:7f:97:01:02:ad:8a:95:
18:8c:6f:d4:7d:7c:48:c9:1e:a2:17:df:99:e3:c3:e5:9f:ae:
02:e7:25:d9:32:4e:f8:a3:54:8d:29:a9:b7:79:1e:5f:77:51:
07:c7:34:dd:ea:d2:fa:03:04:e8:93:5d:d9:3b:0f:30:41:f2:
56:04:fd:b0:09:b7:ff:9c:9f:0b:23:db:35:e2:c9:8f:ac:be:
cc:b3:63:04:33:54:ef:87:23:60:2e:e0:15:ad:54:26:93:69:
3d:23:5b:1f:c9:ac:78:12:80:da:b1:5f:1a:1d:e6:7b:39:09:
6b:c1:58:bd:21:c0:06:b3:51:ab:9f:55:6d:cb:b5:4d:41:53:
4b:dd:66:d7:15:c3:53:9a:60:16:a0:f2:b4:90:f1:70:87:de:
15:31:b4:6f:96:c2:89:f8:23:e2:a1:a8:fa:06:58:8a:ad:b2:
a4:2e:3c:c5:21:f0:6b:c2:10:27:1f:38:79:8d:84:aa:c6:ed:
32:52:14:4b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpPYmsU3/StrOuJ8SbvTir+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM0OGY2ZjRjZDU5MjgwYTY1NDhiYjIzMjAxN2I0YTNjOGE3
NTExNmUwHhcNMjUxMTA0MTUwMDQxWhcNMjUxMTA1MTUwMDQxWjAzMTEwLwYDVQQD
EyhmZGM5ZmNjZDYxNjllYmQ0NjBiYzdlNTE5OGY0MDRmMzQ1MzA1YmQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArm20cEEIDYoh2Wy2BPxqHOhLn1Po
x0HzF0qOMi0Wj4pNR+Yzii1lM68lf6GFkOb59t2cTLq68RNFa6fYPXLJWA1m4ftg
s7pscCsb7FcvHNxLgcCYtPr1RyxgYjQ4CepIVtbJaXDPqt8/Sy/DISOGk8giTMOv
zqOJt1O4X9ZO0GCEOAlIubbJZMQWx4KGMOMFIveIV5skBwfb4RGZuD58TUYhUzao
iwWBzjJ0nLfQ6uqxD9F4IuF/NGHKwu2EIfdHIHRTPv+20nEAjXlNOiE6i3dpp5x1
KstiSVeEivZ2hSz5SoBqZJs0QenDFLP1HbGaeCkZKqegXqMzuUCOIz+mGwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP3J/M1haevUYLx+UZj0BPNFMFvSMB8GA1UdIwQY
MBaAFMSPb0zVkoCmVIuyMgF7SjyKdRFuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveEk5dlROV1NnS1pVaTdJeUFYdEtQSXAxRVc0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy9lODczYmMtOTVmNC00ZGNhLWI5NmUt
YTAzN2Q1NzQ0NGUzLzEveEk5dlROV1NnS1pVaTdJeUFYdEtQSXAxRVc0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy9lODczYmMtOTVmNC00ZGNhLWI5NmUtYTAzN2Q1NzQ0NGUz
LzEveEk5dlROV1NnS1pVaTdJeUFYdEtQSXAxRVc0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXr/Cg3IO
FC8uFSVmJ9ODQskUoJisMtrE3FnDb6CwmLx5cWdXSIpRAwg4O0BiafPC/Zgkge1y
cyQWoMOqj86KXlR/lwECrYqVGIxv1H18SMkeohffmePD5Z+uAucl2TJO+KNUjSmp
t3keX3dRB8c03erS+gME6JNd2TsPMEHyVgT9sAm3/5yfCyPbNeLJj6y+zLNjBDNU
74cjYC7gFa1UJpNpPSNbH8mseBKA2rFfGh3mezkJa8FYvSHABrNRq59Vbcu1TUFT
S91m1xXDU5pgFqDytJDxcIfeFTG0b5bCifgj4qGo+gZYiq2ypC48xSHwa8IQJx84
eY2EqsbtMlIUSw==
-----END CERTIFICATE-----
Generated at Tue Nov 4 18:16:14 2025 by rpki-client