
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/43e70b-df62-4028-a386-a029fbb4be29/1/xoEG9ElX0ZQCAzWwv9YHfMvNyHg.mft
File: xoEG9ElX0ZQCAzWwv9YHfMvNyHg.mft (raw, json)
Hash identifier: w/8pAXSyaKxD1b+aebr4+WwhDnObUnW2J9aBMf1wqq4=
Subject key identifier: 63:F7:7D:49:76:CB:F1:F3:4F:51:06:A3:22:0B:62:54:70:00:1E:87
Authority key identifier: C6:81:06:F4:49:57:D1:94:02:03:35:B0:BF:D6:07:7C:CB:CD:C8:78
Certificate issuer: /CN=c68106f44957d194020335b0bfd6077ccbcdc878
Certificate serial: 01988C584C93BE928F7DE49D1288674585D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xoEG9ElX0ZQCAzWwv9YHfMvNyHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/43e70b-df62-4028-a386-a029fbb4be29/1/xoEG9ElX0ZQCAzWwv9YHfMvNyHg.mft
Manifest number: 1621
Signing time: Sat 09 Aug 2025 01:00:53 +0000
Manifest this update: Sat 09 Aug 2025 01:00:53 +0000
Manifest next update: Sun 10 Aug 2025 01:00:53 +0000
Files and hashes: 1: xoEG9ElX0ZQCAzWwv9YHfMvNyHg.crl (hash: 4Md0QdSOhLxjNpk6+IjNHtK8WlsdKaDl1dSL9LB83dQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/43e70b-df62-4028-a386-a029fbb4be29/1/xoEG9ElX0ZQCAzWwv9YHfMvNyHg.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/43e70b-df62-4028-a386-a029fbb4be29/1/xoEG9ElX0ZQCAzWwv9YHfMvNyHg.mft
rsync://rpki.ripe.net/repository/DEFAULT/xoEG9ElX0ZQCAzWwv9YHfMvNyHg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 20:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8c:58:4c:93:be:92:8f:7d:e4:9d:12:88:67:45:85:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c68106f44957d194020335b0bfd6077ccbcdc878
Validity
Not Before: Aug 9 01:00:53 2025 GMT
Not After : Aug 10 01:00:53 2025 GMT
Subject: CN=63f77d4976cbf1f34f5106a3220b625470001e87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:8a:7d:ac:67:7d:51:b4:99:02:a3:9c:d5:d1:
cb:20:b0:99:c7:cb:df:fc:00:a8:41:cd:ee:5c:1d:
8b:fb:2e:ce:c3:1a:2e:38:50:66:d2:8b:1e:e1:58:
30:e2:18:63:c1:1a:15:1c:89:77:8f:7a:ad:3b:04:
3f:bf:ba:c2:92:ae:cc:50:9a:4c:d2:eb:3c:88:82:
09:a1:ed:87:38:79:c3:d1:d6:7e:2c:e1:f4:b7:6d:
05:d0:c1:28:0e:3c:ee:26:be:09:5d:72:f5:3b:2e:
a5:e1:be:00:ed:f4:2e:91:00:88:83:6f:f1:a7:75:
33:f5:40:1b:f2:6f:fc:08:61:85:9f:df:8c:35:a7:
35:50:72:f0:cd:ed:8d:d3:27:00:97:2c:81:82:cc:
7d:06:21:62:b0:49:ec:ed:dc:ad:3a:f0:b8:21:1c:
6e:ea:86:e4:9d:80:90:8c:11:31:89:da:ae:eb:d6:
d6:12:e9:5d:91:77:e6:c4:ac:45:77:22:dc:4b:d6:
60:e8:67:ad:e0:ad:44:e0:69:cf:0a:ec:98:f9:46:
be:2b:64:4d:6a:d0:67:a4:fd:40:b4:74:b8:c5:06:
7b:1b:24:ec:2d:bc:0f:3e:de:04:85:46:52:06:fd:
4c:b7:74:f9:ce:86:b3:8e:a8:ab:5d:55:6d:27:8f:
94:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:F7:7D:49:76:CB:F1:F3:4F:51:06:A3:22:0B:62:54:70:00:1E:87
X509v3 Authority Key Identifier:
keyid:C6:81:06:F4:49:57:D1:94:02:03:35:B0:BF:D6:07:7C:CB:CD:C8:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xoEG9ElX0ZQCAzWwv9YHfMvNyHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/43e70b-df62-4028-a386-a029fbb4be29/1/xoEG9ElX0ZQCAzWwv9YHfMvNyHg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/43e70b-df62-4028-a386-a029fbb4be29/1/xoEG9ElX0ZQCAzWwv9YHfMvNyHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:b3:77:85:80:cf:33:ad:c2:13:32:f7:1c:83:73:91:ec:f6:
73:8f:b8:17:39:29:f0:a1:7c:3b:c7:72:60:b7:5a:74:ab:d5:
4e:71:55:82:4e:81:51:34:93:b8:f2:d3:fc:f5:a1:e4:56:70:
c2:e3:45:ea:9d:91:d2:60:f9:7f:d0:cb:fa:cc:57:ec:03:6f:
92:c9:9f:d4:9d:e9:99:dd:10:3e:12:ea:8d:7a:7d:5f:44:b9:
3e:dc:4a:5a:5d:3c:84:bd:6f:e7:b9:d5:2c:74:25:5f:cd:a6:
9c:a7:f7:20:e4:ee:1a:bc:73:bf:04:75:6d:be:be:df:72:15:
2d:fb:20:5d:4d:24:5b:c5:57:de:50:ed:d2:ee:d2:f0:29:93:
5e:2a:7e:b3:4e:62:2d:60:8a:f6:79:53:fc:35:ab:3e:64:fc:
d9:90:b0:8c:d1:f9:88:e6:7b:50:72:15:c6:e8:6f:89:f7:00:
40:f5:55:f6:e2:cc:40:68:7a:51:ab:32:e3:15:b1:66:d8:7f:
04:be:19:e6:8c:66:1b:0a:e5:98:64:b8:9d:2b:bb:52:5c:2b:
55:39:08:5c:13:fb:c6:c7:a2:c8:21:0d:e3:dd:6b:f1:98:41:
97:5e:0b:5d:5a:f3:9e:44:01:40:20:8d:1e:04:f3:6c:4c:44:
88:ba:87:2c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiMWEyTvpKPfeSdEohnRYXWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2ODEwNmY0NDk1N2QxOTQwMjAzMzViMGJmZDYwNzdjY2Jj
ZGM4NzgwHhcNMjUwODA5MDEwMDUzWhcNMjUwODEwMDEwMDUzWjAzMTEwLwYDVQQD
Eyg2M2Y3N2Q0OTc2Y2JmMWYzNGY1MTA2YTMyMjBiNjI1NDcwMDAxZTg3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuIp9rGd9UbSZAqOc1dHLILCZx8vf
/ACoQc3uXB2L+y7OwxouOFBm0ose4Vgw4hhjwRoVHIl3j3qtOwQ/v7rCkq7MUJpM
0us8iIIJoe2HOHnD0dZ+LOH0t20F0MEoDjzuJr4JXXL1Oy6l4b4A7fQukQCIg2/x
p3Uz9UAb8m/8CGGFn9+MNac1UHLwze2N0ycAlyyBgsx9BiFisEns7dytOvC4IRxu
6obknYCQjBExidqu69bWEuldkXfmxKxFdyLcS9Zg6Get4K1E4GnPCuyY+Ua+K2RN
atBnpP1AtHS4xQZ7GyTsLbwPPt4EhUZSBv1Mt3T5zoazjqirXVVtJ4+UNQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGP3fUl2y/HzT1EGoyILYlRwAB6HMB8GA1UdIwQY
MBaAFMaBBvRJV9GUAgM1sL/WB3zLzch4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveG9FRzlFbFgwWlFDQXpXd3Y5WUhmTXZOeUhnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS80M2U3MGItZGY2Mi00MDI4LWEzODYt
YTAyOWZiYjRiZTI5LzEveG9FRzlFbFgwWlFDQXpXd3Y5WUhmTXZOeUhnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82YS80M2U3MGItZGY2Mi00MDI4LWEzODYtYTAyOWZiYjRiZTI5
LzEveG9FRzlFbFgwWlFDQXpXd3Y5WUhmTXZOeUhnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAI7N3hYDP
M63CEzL3HINzkez2c4+4Fzkp8KF8O8dyYLdadKvVTnFVgk6BUTSTuPLT/PWh5FZw
wuNF6p2R0mD5f9DL+sxX7ANvksmf1J3pmd0QPhLqjXp9X0S5PtxKWl08hL1v57nV
LHQlX82mnKf3IOTuGrxzvwR1bb6+33IVLfsgXU0kW8VX3lDt0u7S8CmTXip+s05i
LWCK9nlT/DWrPmT82ZCwjNH5iOZ7UHIVxuhvifcAQPVV9uLMQGh6Uasy4xWxZth/
BL4Z5oxmGwrlmGS4nSu7UlwrVTkIXBP7xseiyCEN491r8ZhBl14LXVrznkQBQCCN
HgTzbExEiLqHLA==
-----END CERTIFICATE-----
Generated at Sat Aug 9 05:51:12 2025 by rpki-client