Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/500bb7-e554-4b1c-9f43-ea52ae08de9c/1/sXK1vcdU1fZE5AgdvAOytAqJ8W0.mft
File: sXK1vcdU1fZE5AgdvAOytAqJ8W0.mft (raw, json)
Hash identifier: jJ9fB+yGdO9EO9G1W9zUYKaZbYr4LOYYbFYPuxhoDBE=
Subject key identifier: EC:DA:B1:7B:18:A6:3B:57:80:6E:D8:81:BD:C2:7A:70:06:C5:D2:D2
Authority key identifier: B1:72:B5:BD:C7:54:D5:F6:44:E4:08:1D:BC:03:B2:B4:0A:89:F1:6D
Certificate issuer: /CN=b172b5bdc754d5f644e4081dbc03b2b40a89f16d
Certificate serial: 019A56AEA8C191B546F8235CE25E3C3973A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sXK1vcdU1fZE5AgdvAOytAqJ8W0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/500bb7-e554-4b1c-9f43-ea52ae08de9c/1/sXK1vcdU1fZE5AgdvAOytAqJ8W0.mft
Manifest number: 0465
Signing time: Thu 06 Nov 2025 01:01:18 +0000
Manifest this update: Thu 06 Nov 2025 01:01:18 +0000
Manifest next update: Fri 07 Nov 2025 01:01:18 +0000
Files and hashes: 1: sXK1vcdU1fZE5AgdvAOytAqJ8W0.crl (hash: +L24y2228S1VEc/2vZlVo48uChp8aZ4bkKlpduDzqk4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/500bb7-e554-4b1c-9f43-ea52ae08de9c/1/sXK1vcdU1fZE5AgdvAOytAqJ8W0.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/500bb7-e554-4b1c-9f43-ea52ae08de9c/1/sXK1vcdU1fZE5AgdvAOytAqJ8W0.mft
rsync://rpki.ripe.net/repository/DEFAULT/sXK1vcdU1fZE5AgdvAOytAqJ8W0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 21:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:56:ae:a8:c1:91:b5:46:f8:23:5c:e2:5e:3c:39:73:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b172b5bdc754d5f644e4081dbc03b2b40a89f16d
Validity
Not Before: Nov 6 01:01:18 2025 GMT
Not After : Nov 7 01:01:18 2025 GMT
Subject: CN=ecdab17b18a63b57806ed881bdc27a7006c5d2d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:76:7f:ee:0b:71:ec:d5:8d:55:45:e6:a7:61:
4a:e7:a2:0d:d8:e7:29:d3:43:ae:55:cc:99:e3:bf:
dc:88:d9:e5:d3:40:eb:65:15:b1:bc:49:e9:41:e1:
44:44:41:eb:ce:68:3f:5f:c3:f4:80:e0:2c:03:bf:
4c:e1:5f:39:4c:51:fb:3a:74:0f:6d:b8:f8:e3:a2:
28:6f:79:5d:46:35:28:2a:e7:89:85:8c:b2:69:13:
b0:04:c9:d4:0c:a9:a0:08:60:8c:bd:3f:0a:d9:56:
2c:25:9a:c5:b7:1f:da:29:8a:f4:be:7d:90:69:54:
45:88:ae:74:80:22:33:fa:c4:ad:77:71:54:7d:30:
d2:4d:3c:7a:4f:3f:87:c5:d5:d1:6e:4e:c8:90:40:
cb:73:a8:a0:0e:ac:4b:24:4b:62:4a:dc:16:55:83:
13:3a:dd:b0:22:7b:07:e2:36:98:cb:af:ff:91:53:
9f:3b:f6:b0:d0:30:98:ed:4e:04:ed:ee:90:aa:b3:
fb:a6:e1:5f:36:0b:45:a9:8a:6f:c4:a4:3b:ad:ec:
cd:6e:60:0f:84:f8:ac:b9:19:e2:e1:27:a9:f5:d2:
db:a2:73:9c:bc:98:76:90:02:ad:9c:32:55:c0:66:
49:a8:3c:57:5e:dd:4a:c3:b4:0b:2e:d7:d0:18:7f:
c4:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:DA:B1:7B:18:A6:3B:57:80:6E:D8:81:BD:C2:7A:70:06:C5:D2:D2
X509v3 Authority Key Identifier:
keyid:B1:72:B5:BD:C7:54:D5:F6:44:E4:08:1D:BC:03:B2:B4:0A:89:F1:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sXK1vcdU1fZE5AgdvAOytAqJ8W0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/500bb7-e554-4b1c-9f43-ea52ae08de9c/1/sXK1vcdU1fZE5AgdvAOytAqJ8W0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/500bb7-e554-4b1c-9f43-ea52ae08de9c/1/sXK1vcdU1fZE5AgdvAOytAqJ8W0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:a9:61:98:1a:3b:21:bc:73:b1:29:d6:9b:94:ea:0e:ec:e5:
86:1c:de:22:61:13:7d:1f:2a:95:48:79:45:25:b2:63:20:6b:
8e:bf:fc:c9:6f:3a:24:92:1c:89:5a:47:c9:93:a6:39:e5:b9:
2e:08:15:c2:6b:60:e7:a4:c4:1f:cb:29:3d:e8:e0:0e:ce:ba:
08:90:9f:d4:df:4d:57:e3:37:f9:09:d3:3f:9f:de:c8:3c:6d:
a3:47:be:8d:06:6f:5d:e5:8a:ed:a1:0f:0f:39:96:76:03:e7:
6d:ea:9e:f3:de:6c:79:a3:b8:59:cd:15:9e:78:83:44:09:bd:
74:8b:03:d4:4c:f0:81:34:d3:28:f7:a1:50:8a:a0:d2:ff:1d:
08:8b:25:25:6e:81:73:98:01:6a:42:67:97:b4:2d:a8:8c:dc:
ae:5d:c8:f2:cd:46:44:cd:51:b2:b8:7e:37:68:04:ba:48:01:
25:50:c7:2a:f4:72:c4:b9:c1:b2:41:ab:bc:7f:a4:f9:03:67:
46:ae:b8:41:43:d6:63:94:7c:54:3d:e4:09:e8:81:4c:a4:8d:
73:c3:08:b8:49:82:74:b3:ac:1c:f7:14:e4:6b:b6:6d:bc:fb:
8d:18:e5:9b:23:04:14:7a:5c:e7:67:83:18:b6:81:a4:e9:ff:
19:8a:84:65
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpWrqjBkbVG+CNc4l48OXOlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIxNzJiNWJkYzc1NGQ1ZjY0NGU0MDgxZGJjMDNiMmI0MGE4
OWYxNmQwHhcNMjUxMTA2MDEwMTE4WhcNMjUxMTA3MDEwMTE4WjAzMTEwLwYDVQQD
EyhlY2RhYjE3YjE4YTYzYjU3ODA2ZWQ4ODFiZGMyN2E3MDA2YzVkMmQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA03Z/7gtx7NWNVUXmp2FK56IN2Ocp
00OuVcyZ47/ciNnl00DrZRWxvEnpQeFEREHrzmg/X8P0gOAsA79M4V85TFH7OnQP
bbj446Iob3ldRjUoKueJhYyyaROwBMnUDKmgCGCMvT8K2VYsJZrFtx/aKYr0vn2Q
aVRFiK50gCIz+sStd3FUfTDSTTx6Tz+HxdXRbk7IkEDLc6igDqxLJEtiStwWVYMT
Ot2wInsH4jaYy6//kVOfO/aw0DCY7U4E7e6QqrP7puFfNgtFqYpvxKQ7rezNbmAP
hPisuRni4Sep9dLbonOcvJh2kAKtnDJVwGZJqDxXXt1Kw7QLLtfQGH/EvQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOzasXsYpjtXgG7Ygb3CenAGxdLSMB8GA1UdIwQY
MBaAFLFytb3HVNX2ROQIHbwDsrQKifFtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc1hLMXZjZFUxZlpFNUFnZHZBT3l0QXFKOFcwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny81MDBiYjctZTU1NC00YjFjLTlmNDMt
ZWE1MmFlMDhkZTljLzEvc1hLMXZjZFUxZlpFNUFnZHZBT3l0QXFKOFcwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ny81MDBiYjctZTU1NC00YjFjLTlmNDMtZWE1MmFlMDhkZTlj
LzEvc1hLMXZjZFUxZlpFNUFnZHZBT3l0QXFKOFcwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAU6lhmBo7
IbxzsSnWm5TqDuzlhhzeImETfR8qlUh5RSWyYyBrjr/8yW86JJIciVpHyZOmOeW5
LggVwmtg56TEH8spPejgDs66CJCf1N9NV+M3+QnTP5/eyDxto0e+jQZvXeWK7aEP
DzmWdgPnbeqe895seaO4Wc0VnniDRAm9dIsD1EzwgTTTKPehUIqg0v8dCIslJW6B
c5gBakJnl7QtqIzcrl3I8s1GRM1Rsrh+N2gEukgBJVDHKvRyxLnBskGrvH+k+QNn
Rq64QUPWY5R8VD3kCeiBTKSNc8MIuEmCdLOsHPcU5Gu2bbz7jRjlmyMEFHpc52eD
GLaBpOn/GYqEZQ==
-----END CERTIFICATE-----
Generated at Thu Nov 6 06:04:36 2025 by rpki-client