Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/4c6ebf-aa1a-4f1a-b18f-3e8b5f3c4c36/1/sXeHrvys6kKsZDmUmlaPDf_nd-0.mft
File: sXeHrvys6kKsZDmUmlaPDf_nd-0.mft (raw, json)
Hash identifier: rIpURsz/aB7AGyUbIX+wv+gnXs05cMXJ3nCaO6gQRYs=
Subject key identifier: 21:71:FD:6D:13:2A:57:29:51:6D:85:B5:19:43:1B:97:7A:9C:FD:18
Authority key identifier: B1:77:87:AE:FC:AC:EA:42:AC:64:39:94:9A:56:8F:0D:FF:E7:77:ED
Certificate issuer: /CN=b17787aefcacea42ac6439949a568f0dffe777ed
Certificate serial: 019A4DE1C36A1762F87C03A84F194884293E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sXeHrvys6kKsZDmUmlaPDf_nd-0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/4c6ebf-aa1a-4f1a-b18f-3e8b5f3c4c36/1/sXeHrvys6kKsZDmUmlaPDf_nd-0.mft
Manifest number: 1020
Signing time: Tue 04 Nov 2025 08:00:32 +0000
Manifest this update: Tue 04 Nov 2025 08:00:32 +0000
Manifest next update: Wed 05 Nov 2025 08:00:32 +0000
Files and hashes: 1: sXeHrvys6kKsZDmUmlaPDf_nd-0.crl (hash: jFPDpGDejfjMGYjopyXuMFG9AwzWDUUqqvAp5p4MZhQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/4c6ebf-aa1a-4f1a-b18f-3e8b5f3c4c36/1/sXeHrvys6kKsZDmUmlaPDf_nd-0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/4c6ebf-aa1a-4f1a-b18f-3e8b5f3c4c36/1/sXeHrvys6kKsZDmUmlaPDf_nd-0.mft
rsync://rpki.ripe.net/repository/DEFAULT/sXeHrvys6kKsZDmUmlaPDf_nd-0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e1:c3:6a:17:62:f8:7c:03:a8:4f:19:48:84:29:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b17787aefcacea42ac6439949a568f0dffe777ed
Validity
Not Before: Nov 4 08:00:32 2025 GMT
Not After : Nov 5 08:00:32 2025 GMT
Subject: CN=2171fd6d132a5729516d85b519431b977a9cfd18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:bf:8d:93:43:bf:b6:a7:2f:51:e7:db:23:ad:
9e:1c:0d:09:64:b8:01:a9:ce:78:8e:6f:e8:6e:f0:
e5:d5:d9:67:6b:4f:7e:d7:d5:21:dc:10:4b:f0:f2:
a2:9f:05:c1:94:04:87:2d:7f:4f:db:76:24:da:24:
6f:42:b9:fa:aa:6e:6e:85:74:e4:38:3a:27:63:6d:
1a:34:df:fc:8d:7a:5a:67:85:07:0d:08:41:84:9e:
9a:3b:18:28:0f:b4:20:5f:31:26:95:f6:9a:a6:cf:
d4:e8:ba:2a:e8:fd:62:a0:eb:fc:09:3c:b3:43:1d:
16:b1:d8:c4:57:ab:cf:56:64:4c:8c:86:27:9f:3d:
ad:23:52:5a:f2:dc:04:de:ed:82:b5:64:ed:d5:a4:
68:48:ec:b3:89:03:ea:91:0b:6b:60:b8:fb:1f:b9:
c9:29:b1:0f:0b:6e:dc:f9:05:78:b3:fe:49:6b:36:
31:40:15:b1:bb:69:88:ee:10:aa:28:fa:6f:ff:70:
42:59:b2:0d:be:a0:58:ad:90:09:8b:3a:7d:e5:3a:
98:73:05:8b:5a:86:06:2c:d7:3e:b1:86:52:0c:cb:
be:10:86:77:ed:0b:ce:ce:1a:de:43:a0:bf:34:e9:
84:53:66:b5:8f:5f:4f:bc:22:c6:55:41:74:d4:c7:
79:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:71:FD:6D:13:2A:57:29:51:6D:85:B5:19:43:1B:97:7A:9C:FD:18
X509v3 Authority Key Identifier:
keyid:B1:77:87:AE:FC:AC:EA:42:AC:64:39:94:9A:56:8F:0D:FF:E7:77:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sXeHrvys6kKsZDmUmlaPDf_nd-0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/4c6ebf-aa1a-4f1a-b18f-3e8b5f3c4c36/1/sXeHrvys6kKsZDmUmlaPDf_nd-0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/4c6ebf-aa1a-4f1a-b18f-3e8b5f3c4c36/1/sXeHrvys6kKsZDmUmlaPDf_nd-0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:2b:b2:85:ec:7c:bd:d0:9e:5a:0e:0f:86:20:de:45:63:b6:
8b:a5:01:0f:1e:c9:f8:82:8c:a3:c3:09:37:39:a2:f6:d4:b2:
dc:cd:94:4c:74:51:b3:56:dc:7a:56:6c:89:37:db:04:5e:d5:
a3:5c:7b:c6:e9:32:29:3c:02:f7:8a:86:d3:27:fb:ee:dd:f7:
e6:ac:5a:d2:da:1e:a5:37:71:3c:3f:b4:7a:ba:bd:7f:66:b5:
41:05:fb:b3:e1:47:0d:97:bf:d3:0a:99:63:eb:d8:43:40:0e:
40:76:a6:68:ba:7b:2c:6a:9a:fb:4d:ae:37:49:af:de:ec:2c:
15:f6:4b:79:cd:11:85:8a:13:68:98:78:58:70:98:38:fe:67:
97:ce:6f:eb:d6:a0:08:15:61:c1:9f:5c:1c:25:f3:cf:5f:b4:
76:bf:f5:eb:2f:25:31:be:f4:69:36:5a:15:69:02:e3:29:94:
bc:3d:11:e6:d8:0e:63:bf:af:16:01:77:70:ea:e1:2b:44:5c:
28:6e:ab:0b:2c:09:07:15:93:f9:2a:6d:07:92:68:b8:17:b6:
fe:7f:65:6c:fa:54:1e:af:4f:a4:61:b9:4b:55:93:2f:71:ad:
e8:60:41:25:37:99:79:4a:a9:23:02:ab:88:9f:90:62:2e:80:
00:10:d3:09
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpN4cNqF2L4fAOoTxlIhCk+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIxNzc4N2FlZmNhY2VhNDJhYzY0Mzk5NDlhNTY4ZjBkZmZl
Nzc3ZWQwHhcNMjUxMTA0MDgwMDMyWhcNMjUxMTA1MDgwMDMyWjAzMTEwLwYDVQQD
EygyMTcxZmQ2ZDEzMmE1NzI5NTE2ZDg1YjUxOTQzMWI5NzdhOWNmZDE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqL+Nk0O/tqcvUefbI62eHA0JZLgB
qc54jm/obvDl1dlna09+19Uh3BBL8PKinwXBlASHLX9P23Yk2iRvQrn6qm5uhXTk
ODonY20aNN/8jXpaZ4UHDQhBhJ6aOxgoD7QgXzEmlfaaps/U6Loq6P1ioOv8CTyz
Qx0WsdjEV6vPVmRMjIYnnz2tI1Ja8twE3u2CtWTt1aRoSOyziQPqkQtrYLj7H7nJ
KbEPC27c+QV4s/5JazYxQBWxu2mI7hCqKPpv/3BCWbINvqBYrZAJizp95TqYcwWL
WoYGLNc+sYZSDMu+EIZ37QvOzhreQ6C/NOmEU2a1j19PvCLGVUF01Md5ZwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCFx/W0TKlcpUW2FtRlDG5d6nP0YMB8GA1UdIwQY
MBaAFLF3h678rOpCrGQ5lJpWjw3/53ftMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc1hlSHJ2eXM2a0tzWkRtVW1sYVBEZl9uZC0wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi80YzZlYmYtYWExYS00ZjFhLWIxOGYt
M2U4YjVmM2M0YzM2LzEvc1hlSHJ2eXM2a0tzWkRtVW1sYVBEZl9uZC0wLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYi80YzZlYmYtYWExYS00ZjFhLWIxOGYtM2U4YjVmM2M0YzM2
LzEvc1hlSHJ2eXM2a0tzWkRtVW1sYVBEZl9uZC0wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARCuyhex8
vdCeWg4PhiDeRWO2i6UBDx7J+IKMo8MJNzmi9tSy3M2UTHRRs1bcelZsiTfbBF7V
o1x7xukyKTwC94qG0yf77t335qxa0toepTdxPD+0erq9f2a1QQX7s+FHDZe/0wqZ
Y+vYQ0AOQHamaLp7LGqa+02uN0mv3uwsFfZLec0RhYoTaJh4WHCYOP5nl85v69ag
CBVhwZ9cHCXzz1+0dr/16y8lMb70aTZaFWkC4ymUvD0R5tgOY7+vFgF3cOrhK0Rc
KG6rCywJBxWT+SptB5JouBe2/n9lbPpUHq9PpGG5S1WTL3Gt6GBBJTeZeUqpIwKr
iJ+QYi6AABDTCQ==
-----END CERTIFICATE-----
Generated at Tue Nov 4 10:55:32 2025 by rpki-client