Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/cb58eb-7c04-4cb9-8f33-8168cf472962/1/mXZKyKibCft4hQ10xo4dqo8-KvE.mft
File: mXZKyKibCft4hQ10xo4dqo8-KvE.mft (raw, json)
Hash identifier: Kmv9UQYANxJpvWeMYJJMLDub5HQsr0tZZZDMqU6H8qA=
Subject key identifier: 9E:3B:6B:34:91:97:88:1B:D5:7A:35:C6:81:EA:0F:8E:97:C1:DB:95
Authority key identifier: 99:76:4A:C8:A8:9B:09:FB:78:85:0D:74:C6:8E:1D:AA:8F:3E:2A:F1
Certificate issuer: /CN=99764ac8a89b09fb78850d74c68e1daa8f3e2af1
Certificate serial: 019A4F627C43A9D5E7A276608B1EC2C39283
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mXZKyKibCft4hQ10xo4dqo8-KvE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/cb58eb-7c04-4cb9-8f33-8168cf472962/1/mXZKyKibCft4hQ10xo4dqo8-KvE.mft
Manifest number: 0920
Signing time: Tue 04 Nov 2025 15:00:45 +0000
Manifest this update: Tue 04 Nov 2025 15:00:45 +0000
Manifest next update: Wed 05 Nov 2025 15:00:45 +0000
Files and hashes: 1: mXZKyKibCft4hQ10xo4dqo8-KvE.crl (hash: 0FosssKB6LmuzquWg/aFqN7gpowIqPeHaSHc9wGfZ7Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/cb58eb-7c04-4cb9-8f33-8168cf472962/1/mXZKyKibCft4hQ10xo4dqo8-KvE.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/cb58eb-7c04-4cb9-8f33-8168cf472962/1/mXZKyKibCft4hQ10xo4dqo8-KvE.mft
rsync://rpki.ripe.net/repository/DEFAULT/mXZKyKibCft4hQ10xo4dqo8-KvE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 15:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:62:7c:43:a9:d5:e7:a2:76:60:8b:1e:c2:c3:92:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99764ac8a89b09fb78850d74c68e1daa8f3e2af1
Validity
Not Before: Nov 4 15:00:45 2025 GMT
Not After : Nov 5 15:00:45 2025 GMT
Subject: CN=9e3b6b349197881bd57a35c681ea0f8e97c1db95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:f1:b9:1e:36:b0:b6:6d:d7:77:5f:9a:b6:49:
d1:98:ff:c8:97:01:96:6d:68:c8:58:2f:38:51:41:
23:69:16:0f:4b:fe:1b:64:78:00:37:fd:c9:ff:2f:
84:9e:82:dc:19:bf:c5:70:40:f7:c7:94:06:60:05:
f4:f4:61:f7:16:f1:1e:79:c9:53:ba:38:15:9f:bc:
cc:05:16:19:be:a4:fc:42:c3:cb:ad:10:18:52:5d:
70:f9:cd:6f:3f:fa:e4:9f:9c:29:9b:7c:8d:b9:c3:
a1:77:0c:5a:c8:cb:d6:d9:52:ba:fe:b9:25:96:ec:
aa:5f:e9:c1:a4:ff:c7:c1:63:19:10:23:5a:6e:a3:
16:ed:0a:42:0a:8d:bc:46:50:b2:cc:39:9d:0a:20:
98:00:3f:d2:ab:74:56:97:b1:00:48:45:dd:ad:d1:
25:c4:ce:19:db:0e:c3:45:f0:9d:13:1c:a9:84:d2:
a2:69:2c:35:8e:4f:20:1b:d4:33:2f:11:04:a9:05:
d4:f0:79:40:0d:05:f6:45:f5:59:f5:67:76:7e:1c:
96:3a:5b:08:e4:50:3d:f4:cd:c9:bb:7b:60:c1:7b:
12:61:a0:40:03:c8:be:18:74:b6:65:7c:23:a0:83:
a3:8c:52:d8:c4:f2:14:60:f2:ea:c4:44:85:3f:20:
19:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:3B:6B:34:91:97:88:1B:D5:7A:35:C6:81:EA:0F:8E:97:C1:DB:95
X509v3 Authority Key Identifier:
keyid:99:76:4A:C8:A8:9B:09:FB:78:85:0D:74:C6:8E:1D:AA:8F:3E:2A:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mXZKyKibCft4hQ10xo4dqo8-KvE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/cb58eb-7c04-4cb9-8f33-8168cf472962/1/mXZKyKibCft4hQ10xo4dqo8-KvE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/cb58eb-7c04-4cb9-8f33-8168cf472962/1/mXZKyKibCft4hQ10xo4dqo8-KvE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:c0:6d:18:1b:5f:27:3e:a5:ea:42:14:68:46:88:a1:bb:82:
4a:e9:5b:2e:56:02:8d:e2:7a:cf:9a:92:c0:27:40:4b:ca:26:
56:94:01:02:6a:97:8a:b6:58:64:71:ec:fd:e9:ea:6d:71:85:
db:2a:fd:a5:40:ce:49:51:44:c5:30:e8:1a:c0:9c:80:b5:73:
28:6b:a4:35:e9:61:b0:82:af:ec:9f:ef:99:c7:58:88:32:d6:
f9:86:f2:f3:63:6d:6f:99:3f:ce:37:fd:98:31:b9:8e:30:4e:
9c:4e:5a:05:0e:49:7f:6f:54:84:9b:d1:51:34:6e:e3:e8:55:
2a:89:45:eb:33:8c:b8:ad:56:bd:b0:f8:52:88:4f:fd:e3:d2:
6a:9e:33:f9:8d:7d:18:30:f3:2b:3a:06:4b:b3:3d:87:f6:3d:
a2:f0:23:95:22:87:48:d4:03:b2:08:ce:15:12:50:80:95:79:
4f:6e:7a:d2:6d:08:fe:05:7c:8f:7e:bc:6f:c9:33:6d:7a:3d:
52:d6:fd:7c:2f:54:42:8e:61:66:65:36:73:4b:ae:63:30:95:
bc:04:93:fe:90:c2:3c:ee:ba:2a:bb:57:82:8f:65:64:da:4c:
c8:59:9b:17:39:bc:87:63:9e:2a:3c:d3:c1:69:ec:4a:2f:97:
b1:1f:2e:f5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpPYnxDqdXnonZgix7Cw5KDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk5NzY0YWM4YTg5YjA5ZmI3ODg1MGQ3NGM2OGUxZGFhOGYz
ZTJhZjEwHhcNMjUxMTA0MTUwMDQ1WhcNMjUxMTA1MTUwMDQ1WjAzMTEwLwYDVQQD
Eyg5ZTNiNmIzNDkxOTc4ODFiZDU3YTM1YzY4MWVhMGY4ZTk3YzFkYjk1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApfG5Hjawtm3Xd1+atknRmP/IlwGW
bWjIWC84UUEjaRYPS/4bZHgAN/3J/y+EnoLcGb/FcED3x5QGYAX09GH3FvEeeclT
ujgVn7zMBRYZvqT8QsPLrRAYUl1w+c1vP/rkn5wpm3yNucOhdwxayMvW2VK6/rkl
luyqX+nBpP/HwWMZECNabqMW7QpCCo28RlCyzDmdCiCYAD/Sq3RWl7EASEXdrdEl
xM4Z2w7DRfCdExyphNKiaSw1jk8gG9QzLxEEqQXU8HlADQX2RfVZ9Wd2fhyWOlsI
5FA99M3Ju3tgwXsSYaBAA8i+GHS2ZXwjoIOjjFLYxPIUYPLqxESFPyAZjwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ47azSRl4gb1Xo1xoHqD46XwduVMB8GA1UdIwQY
MBaAFJl2Ssiomwn7eIUNdMaOHaqPPirxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbVhaS3lLaWJDZnQ0aFExMHhvNGRxbzgtS3ZFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNi9jYjU4ZWItN2MwNC00Y2I5LThmMzMt
ODE2OGNmNDcyOTYyLzEvbVhaS3lLaWJDZnQ0aFExMHhvNGRxbzgtS3ZFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNi9jYjU4ZWItN2MwNC00Y2I5LThmMzMtODE2OGNmNDcyOTYy
LzEvbVhaS3lLaWJDZnQ0aFExMHhvNGRxbzgtS3ZFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAK8BtGBtf
Jz6l6kIUaEaIobuCSulbLlYCjeJ6z5qSwCdAS8omVpQBAmqXirZYZHHs/enqbXGF
2yr9pUDOSVFExTDoGsCcgLVzKGukNelhsIKv7J/vmcdYiDLW+Yby82Ntb5k/zjf9
mDG5jjBOnE5aBQ5Jf29UhJvRUTRu4+hVKolF6zOMuK1WvbD4UohP/ePSap4z+Y19
GDDzKzoGS7M9h/Y9ovAjlSKHSNQDsgjOFRJQgJV5T2560m0I/gV8j368b8kzbXo9
Utb9fC9UQo5hZmU2c0uuYzCVvAST/pDCPO66KrtXgo9lZNpMyFmbFzm8h2OeKjzT
wWnsSi+XsR8u9Q==
-----END CERTIFICATE-----
Generated at Wed Nov 5 00:47:58 2025 by rpki-client