Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/0dc925-a33b-4d3a-add3-d6d140e4ce6d/1/xxovfXzIw2N0bpa8P8yLBflgb-o.mft
File: xxovfXzIw2N0bpa8P8yLBflgb-o.mft (raw, json)
Hash identifier: EG8Bp5AeLGKrvkhh0Il+SglYAUkyHvXaDPuBGRz/v40=
Subject key identifier: 2D:D1:AE:29:61:F8:CD:CA:67:8F:F8:08:71:CD:DE:25:C7:91:2E:AB
Authority key identifier: C7:1A:2F:7D:7C:C8:C3:63:74:6E:96:BC:3F:CC:8B:05:F9:60:6F:EA
Certificate issuer: /CN=c71a2f7d7cc8c363746e96bc3fcc8b05f9606fea
Certificate serial: 019A503D96B458B69663FC0337211E4E5298
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xxovfXzIw2N0bpa8P8yLBflgb-o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/0dc925-a33b-4d3a-add3-d6d140e4ce6d/1/xxovfXzIw2N0bpa8P8yLBflgb-o.mft
Manifest number: 170C
Signing time: Tue 04 Nov 2025 19:00:04 +0000
Manifest this update: Tue 04 Nov 2025 19:00:04 +0000
Manifest next update: Wed 05 Nov 2025 19:00:04 +0000
Files and hashes: 1: xxovfXzIw2N0bpa8P8yLBflgb-o.crl (hash: 8GfJgPTZPQcr8v2O4lsRFmk50pvTmM4pc3o1kv6h1FI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/0dc925-a33b-4d3a-add3-d6d140e4ce6d/1/xxovfXzIw2N0bpa8P8yLBflgb-o.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/0dc925-a33b-4d3a-add3-d6d140e4ce6d/1/xxovfXzIw2N0bpa8P8yLBflgb-o.mft
rsync://rpki.ripe.net/repository/DEFAULT/xxovfXzIw2N0bpa8P8yLBflgb-o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:3d:96:b4:58:b6:96:63:fc:03:37:21:1e:4e:52:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c71a2f7d7cc8c363746e96bc3fcc8b05f9606fea
Validity
Not Before: Nov 4 19:00:04 2025 GMT
Not After : Nov 5 19:00:04 2025 GMT
Subject: CN=2dd1ae2961f8cdca678ff80871cdde25c7912eab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:c9:5c:3c:24:51:46:79:3e:4e:41:4e:77:20:
22:44:0d:1a:a4:1d:46:01:70:19:af:b3:1e:0d:a5:
8c:fd:40:38:cf:2f:a7:bc:4f:e0:e4:65:3f:89:73:
ad:a7:5c:cb:78:8e:69:76:27:e4:d8:0b:1f:cd:c6:
98:a1:f5:e8:9a:57:12:73:18:d3:54:7a:99:e1:a5:
0c:4e:ec:21:48:54:e6:de:fd:c5:2c:e7:1f:f5:80:
16:ce:9e:1e:f8:ee:c2:a2:df:0c:01:fb:36:7b:3a:
99:44:60:f2:d0:08:f9:6e:34:ec:aa:a7:92:fc:63:
92:08:7d:9b:c4:46:7b:1e:58:ac:3c:15:a2:ac:c3:
2a:dd:d1:30:85:e6:e1:81:c7:68:ce:5c:73:a5:61:
dc:f6:19:80:1d:f4:11:63:31:8e:aa:2b:41:f2:ed:
4d:0c:93:6c:5d:6b:54:bf:27:ae:11:c8:85:07:b3:
c8:e0:22:e6:da:51:32:51:ed:6c:6a:9f:ce:6c:7d:
20:f2:d9:de:33:c6:2b:5c:19:49:22:9b:ea:b4:a9:
ba:7a:a2:cb:94:4f:70:29:ff:95:62:4c:59:e4:7f:
c8:61:d1:d2:95:bb:73:9d:ea:c5:ff:75:bf:e4:d1:
8c:c2:1c:dc:79:75:05:2a:8b:98:5f:58:0d:59:dc:
c0:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:D1:AE:29:61:F8:CD:CA:67:8F:F8:08:71:CD:DE:25:C7:91:2E:AB
X509v3 Authority Key Identifier:
keyid:C7:1A:2F:7D:7C:C8:C3:63:74:6E:96:BC:3F:CC:8B:05:F9:60:6F:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xxovfXzIw2N0bpa8P8yLBflgb-o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/0dc925-a33b-4d3a-add3-d6d140e4ce6d/1/xxovfXzIw2N0bpa8P8yLBflgb-o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/0dc925-a33b-4d3a-add3-d6d140e4ce6d/1/xxovfXzIw2N0bpa8P8yLBflgb-o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:f1:3c:bf:c5:30:f6:89:c7:77:02:81:f3:3f:74:3e:ca:5f:
55:0c:44:e2:18:e1:cb:50:7d:60:ec:72:a4:a3:7f:ee:cc:bb:
31:7b:22:12:c4:23:40:e0:90:5f:8f:29:9b:fe:35:da:80:b5:
da:23:b3:a9:d4:be:e1:f1:f4:7a:67:ee:7b:23:b5:ef:5e:37:
3c:63:14:50:6f:44:34:f0:42:98:39:44:d1:6b:c2:b2:36:3c:
a0:04:b9:3b:77:5f:fe:3c:65:94:b2:38:86:05:36:4f:4d:3b:
97:6d:12:05:70:0e:ab:2a:6a:48:7f:6d:1f:21:88:c4:e9:ea:
7c:57:bf:85:9b:42:a5:23:03:fd:dd:f3:bb:93:21:1f:a9:5f:
5d:10:56:9a:04:b5:85:8e:ca:b1:96:bd:a7:86:6b:5c:fd:a4:
c6:28:40:dc:8c:eb:22:9c:dd:64:03:db:fa:66:bf:ee:9c:0b:
7b:a2:81:2d:38:fe:8e:0f:0d:ea:3f:94:d6:ce:a0:8e:ac:90:
4e:3e:f4:be:48:33:b4:d5:c4:57:2d:e8:06:1f:93:04:be:69:
c6:e8:d5:65:40:e1:dd:05:2c:34:8f:4d:19:20:57:7e:c1:21:
b5:37:45:70:90:59:48:fc:5a:c9:50:df:36:48:25:76:b3:a6:
2c:e0:55:ab
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpQPZa0WLaWY/wDNyEeTlKYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM3MWEyZjdkN2NjOGMzNjM3NDZlOTZiYzNmY2M4YjA1Zjk2
MDZmZWEwHhcNMjUxMTA0MTkwMDA0WhcNMjUxMTA1MTkwMDA0WjAzMTEwLwYDVQQD
EygyZGQxYWUyOTYxZjhjZGNhNjc4ZmY4MDg3MWNkZGUyNWM3OTEyZWFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvslcPCRRRnk+TkFOdyAiRA0apB1G
AXAZr7MeDaWM/UA4zy+nvE/g5GU/iXOtp1zLeI5pdifk2AsfzcaYofXomlcScxjT
VHqZ4aUMTuwhSFTm3v3FLOcf9YAWzp4e+O7Cot8MAfs2ezqZRGDy0Aj5bjTsqqeS
/GOSCH2bxEZ7HlisPBWirMMq3dEwhebhgcdozlxzpWHc9hmAHfQRYzGOqitB8u1N
DJNsXWtUvyeuEciFB7PI4CLm2lEyUe1sap/ObH0g8tneM8YrXBlJIpvqtKm6eqLL
lE9wKf+VYkxZ5H/IYdHSlbtznerF/3W/5NGMwhzceXUFKouYX1gNWdzAawIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC3Rrilh+M3KZ4/4CHHN3iXHkS6rMB8GA1UdIwQY
MBaAFMcaL318yMNjdG6WvD/MiwX5YG/qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveHhvdmZYekl3Mk4wYnBhOFA4eUxCZmxnYi1vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC8wZGM5MjUtYTMzYi00ZDNhLWFkZDMt
ZDZkMTQwZTRjZTZkLzEveHhvdmZYekl3Mk4wYnBhOFA4eUxCZmxnYi1vLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MC8wZGM5MjUtYTMzYi00ZDNhLWFkZDMtZDZkMTQwZTRjZTZk
LzEveHhvdmZYekl3Mk4wYnBhOFA4eUxCZmxnYi1vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAg/E8v8Uw
9onHdwKB8z90PspfVQxE4hjhy1B9YOxypKN/7sy7MXsiEsQjQOCQX48pm/412oC1
2iOzqdS+4fH0emfueyO17143PGMUUG9ENPBCmDlE0WvCsjY8oAS5O3df/jxllLI4
hgU2T007l20SBXAOqypqSH9tHyGIxOnqfFe/hZtCpSMD/d3zu5MhH6lfXRBWmgS1
hY7KsZa9p4ZrXP2kxihA3IzrIpzdZAPb+ma/7pwLe6KBLTj+jg8N6j+U1s6gjqyQ
Tj70vkgztNXEVy3oBh+TBL5pxujVZUDh3QUsNI9NGSBXfsEhtTdFcJBZSPxayVDf
NkgldrOmLOBVqw==
-----END CERTIFICATE-----
Generated at Wed Nov 5 00:10:38 2025 by rpki-client