Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/6fda1d-b96b-4cf9-bb68-3fbdd9dbbd92/1/xsAMVTpU2gW5NjWmVMraA8bZ3ys.mft
File: xsAMVTpU2gW5NjWmVMraA8bZ3ys.mft (raw, json)
Hash identifier: aXceVuTvTHchc2iSSUxY8vjVYO/14NURQydDl+CA2iU=
Subject key identifier: 55:1B:7C:D7:CF:BB:32:46:CE:4B:EB:C5:D2:BE:E8:91:CA:52:73:9F
Authority key identifier: C6:C0:0C:55:3A:54:DA:05:B9:36:35:A6:54:CA:DA:03:C6:D9:DF:2B
Certificate issuer: /CN=c6c00c553a54da05b93635a654cada03c6d9df2b
Certificate serial: 019A4E4FD23BF32BE050DB6FD48C8E42F326
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xsAMVTpU2gW5NjWmVMraA8bZ3ys.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/6fda1d-b96b-4cf9-bb68-3fbdd9dbbd92/1/xsAMVTpU2gW5NjWmVMraA8bZ3ys.mft
Manifest number: 07DE
Signing time: Tue 04 Nov 2025 10:00:45 +0000
Manifest this update: Tue 04 Nov 2025 10:00:45 +0000
Manifest next update: Wed 05 Nov 2025 10:00:45 +0000
Files and hashes: 1: xsAMVTpU2gW5NjWmVMraA8bZ3ys.crl (hash: cpU6JmcNAAvq9F+n/CZiZ7Fa1iUmy/0VUi4F5SDeRGI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/6fda1d-b96b-4cf9-bb68-3fbdd9dbbd92/1/xsAMVTpU2gW5NjWmVMraA8bZ3ys.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/6fda1d-b96b-4cf9-bb68-3fbdd9dbbd92/1/xsAMVTpU2gW5NjWmVMraA8bZ3ys.mft
rsync://rpki.ripe.net/repository/DEFAULT/xsAMVTpU2gW5NjWmVMraA8bZ3ys.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:4f:d2:3b:f3:2b:e0:50:db:6f:d4:8c:8e:42:f3:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6c00c553a54da05b93635a654cada03c6d9df2b
Validity
Not Before: Nov 4 10:00:45 2025 GMT
Not After : Nov 5 10:00:45 2025 GMT
Subject: CN=551b7cd7cfbb3246ce4bebc5d2bee891ca52739f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:d8:28:c9:55:c2:8f:04:93:d0:48:80:d7:5b:
72:6e:51:5c:b8:ed:79:37:f4:5f:88:98:30:48:87:
58:5a:f8:e7:fd:6b:d1:bb:8f:86:15:40:86:63:4f:
1b:f4:7c:56:af:b7:b3:8c:a6:9b:25:5b:f1:60:53:
dd:5d:a8:2b:0d:10:18:6e:c0:84:da:a3:af:99:29:
dc:6d:c3:19:ad:b3:63:57:de:92:83:a4:fe:0a:b4:
51:f5:e3:47:d5:0d:70:79:e7:32:ad:7d:11:53:c7:
6f:83:15:f3:82:d7:f2:f4:f3:52:55:00:17:00:88:
d6:32:9a:b7:ab:15:d4:61:bf:d8:7f:b4:be:bc:36:
8c:e9:23:45:4c:88:82:fd:b3:81:7d:2e:d3:e1:b6:
f6:07:c4:26:58:75:62:50:a1:16:36:da:da:3d:28:
e7:5e:00:1a:22:80:9c:e7:55:25:f8:9f:4b:27:fd:
f9:a7:ee:9d:16:f6:55:92:18:23:a7:78:c6:5e:39:
71:9f:54:8c:e7:de:12:36:6f:13:bf:ef:1e:18:5e:
83:c2:07:be:4c:d6:06:90:db:7a:e7:8a:22:d3:80:
9b:65:39:36:3a:0c:bd:04:01:3a:63:0a:de:6d:f6:
b1:55:0d:8a:5b:3b:51:5e:72:fc:66:9d:af:1e:53:
6a:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:1B:7C:D7:CF:BB:32:46:CE:4B:EB:C5:D2:BE:E8:91:CA:52:73:9F
X509v3 Authority Key Identifier:
keyid:C6:C0:0C:55:3A:54:DA:05:B9:36:35:A6:54:CA:DA:03:C6:D9:DF:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xsAMVTpU2gW5NjWmVMraA8bZ3ys.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/6fda1d-b96b-4cf9-bb68-3fbdd9dbbd92/1/xsAMVTpU2gW5NjWmVMraA8bZ3ys.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/6fda1d-b96b-4cf9-bb68-3fbdd9dbbd92/1/xsAMVTpU2gW5NjWmVMraA8bZ3ys.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:77:a1:c2:8a:c0:e2:b1:7f:cd:72:06:2b:c9:76:9c:ef:08:
20:7e:ae:85:86:84:36:a9:f8:09:ba:94:7f:0c:05:3e:54:6e:
0f:0c:7d:d0:a7:89:21:34:57:af:a1:4f:bd:21:fa:b7:75:7f:
00:5c:47:a1:4e:87:25:ba:e2:34:f3:01:db:17:aa:2c:af:69:
64:d3:be:c9:e5:61:31:f6:af:cd:0b:e7:ff:c0:7a:8a:a4:db:
3b:1a:fb:0d:2e:d7:18:f8:bf:c7:a1:10:8f:e3:f8:48:96:bd:
2b:ca:fd:f9:f2:71:87:9d:10:94:57:5b:13:77:b7:d7:41:49:
87:8d:8e:38:18:7d:e6:a2:e4:be:06:17:ef:ba:8d:7c:8a:77:
8d:21:dc:e8:01:19:a9:d7:fb:47:b1:f1:b3:14:6d:65:c5:0c:
2f:6c:45:a9:9c:fe:4b:dd:da:a5:c9:db:e5:37:46:34:50:99:
cd:ca:43:72:24:d4:04:f0:57:72:37:5d:89:53:5d:36:33:b9:
9e:40:fc:0e:f4:98:c2:eb:a3:ab:d9:63:e9:25:c0:39:16:b7:
7b:47:71:a1:91:53:13:73:d3:30:78:5a:6a:43:d7:28:96:a0:
38:e2:e1:5e:f1:e2:31:20:61:9d:fe:96:8d:57:87:98:ec:f2:
80:e2:1f:89
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpOT9I78yvgUNtv1IyOQvMmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2YzAwYzU1M2E1NGRhMDViOTM2MzVhNjU0Y2FkYTAzYzZk
OWRmMmIwHhcNMjUxMTA0MTAwMDQ1WhcNMjUxMTA1MTAwMDQ1WjAzMTEwLwYDVQQD
Eyg1NTFiN2NkN2NmYmIzMjQ2Y2U0YmViYzVkMmJlZTg5MWNhNTI3MzlmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm9goyVXCjwST0EiA11tyblFcuO15
N/RfiJgwSIdYWvjn/WvRu4+GFUCGY08b9HxWr7ezjKabJVvxYFPdXagrDRAYbsCE
2qOvmSncbcMZrbNjV96Sg6T+CrRR9eNH1Q1weecyrX0RU8dvgxXzgtfy9PNSVQAX
AIjWMpq3qxXUYb/Yf7S+vDaM6SNFTIiC/bOBfS7T4bb2B8QmWHViUKEWNtraPSjn
XgAaIoCc51Ul+J9LJ/35p+6dFvZVkhgjp3jGXjlxn1SM594SNm8Tv+8eGF6Dwge+
TNYGkNt654oi04CbZTk2Ogy9BAE6YwrebfaxVQ2KWztRXnL8Zp2vHlNqTQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFUbfNfPuzJGzkvrxdK+6JHKUnOfMB8GA1UdIwQY
MBaAFMbADFU6VNoFuTY1plTK2gPG2d8rMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveHNBTVZUcFUyZ1c1TmpXbVZNcmFBOGJaM3lzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS82ZmRhMWQtYjk2Yi00Y2Y5LWJiNjgt
M2ZiZGQ5ZGJiZDkyLzEveHNBTVZUcFUyZ1c1TmpXbVZNcmFBOGJaM3lzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOS82ZmRhMWQtYjk2Yi00Y2Y5LWJiNjgtM2ZiZGQ5ZGJiZDky
LzEveHNBTVZUcFUyZ1c1TmpXbVZNcmFBOGJaM3lzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVnehworA
4rF/zXIGK8l2nO8IIH6uhYaENqn4CbqUfwwFPlRuDwx90KeJITRXr6FPvSH6t3V/
AFxHoU6HJbriNPMB2xeqLK9pZNO+yeVhMfavzQvn/8B6iqTbOxr7DS7XGPi/x6EQ
j+P4SJa9K8r9+fJxh50QlFdbE3e310FJh42OOBh95qLkvgYX77qNfIp3jSHc6AEZ
qdf7R7HxsxRtZcUML2xFqZz+S93apcnb5TdGNFCZzcpDciTUBPBXcjddiVNdNjO5
nkD8DvSYwuujq9lj6SXAORa3e0dxoZFTE3PTMHhaakPXKJagOOLhXvHiMSBhnf6W
jVeHmOzygOIfiQ==
-----END CERTIFICATE-----
Generated at Tue Nov 4 14:51:18 2025 by rpki-client