Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/fd1fbc-cb90-4827-8ed0-00c3b612e98c/1/Xm0H9Lv9HbNwmWp192soq8TWs-o.mft
File: Xm0H9Lv9HbNwmWp192soq8TWs-o.mft (raw, json)
Hash identifier: AjzsIr/8EldXI7SYCIFO2LhgzvX5LCS3481gdap+c2Y=
Subject key identifier: 46:FE:9C:0D:94:4F:16:E5:F0:AA:88:2A:71:37:9D:34:8F:8C:FA:33
Authority key identifier: 5E:6D:07:F4:BB:FD:1D:B3:70:99:6A:75:F7:6B:28:AB:C4:D6:B3:EA
Certificate issuer: /CN=5e6d07f4bbfd1db370996a75f76b28abc4d6b3ea
Certificate serial: 01988DA203B00C291D8D3F10B987083E3959
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xm0H9Lv9HbNwmWp192soq8TWs-o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/fd1fbc-cb90-4827-8ed0-00c3b612e98c/1/Xm0H9Lv9HbNwmWp192soq8TWs-o.mft
Manifest number: 0409
Signing time: Sat 09 Aug 2025 07:01:01 +0000
Manifest this update: Sat 09 Aug 2025 07:01:01 +0000
Manifest next update: Sun 10 Aug 2025 07:01:01 +0000
Files and hashes: 1: Xm0H9Lv9HbNwmWp192soq8TWs-o.crl (hash: YkX8rToxrL64inBhvMVZQCovLsK9d5oBz18cA6xHJPU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/fd1fbc-cb90-4827-8ed0-00c3b612e98c/1/Xm0H9Lv9HbNwmWp192soq8TWs-o.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/fd1fbc-cb90-4827-8ed0-00c3b612e98c/1/Xm0H9Lv9HbNwmWp192soq8TWs-o.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xm0H9Lv9HbNwmWp192soq8TWs-o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 05:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8d:a2:03:b0:0c:29:1d:8d:3f:10:b9:87:08:3e:39:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e6d07f4bbfd1db370996a75f76b28abc4d6b3ea
Validity
Not Before: Aug 9 07:01:01 2025 GMT
Not After : Aug 10 07:01:01 2025 GMT
Subject: CN=46fe9c0d944f16e5f0aa882a71379d348f8cfa33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:a7:5c:e6:8b:e1:34:04:1a:0f:e9:99:54:c5:
b6:c4:7f:73:ca:59:0e:89:77:07:45:20:64:65:3e:
33:4b:f0:3e:47:22:62:ff:a7:a6:9e:46:a2:6a:4c:
1f:c2:a9:e9:d2:34:b3:df:04:03:3d:b5:ba:8d:9c:
f4:f9:22:34:55:1e:fe:e0:68:2c:3b:ae:90:6d:9e:
86:df:e5:c3:58:58:00:d0:47:6c:c4:24:2f:49:8f:
56:6c:8c:91:b9:8f:6d:16:ef:7a:7e:2d:2c:35:70:
05:91:d8:d3:e4:de:27:b8:08:5a:a6:90:14:44:31:
74:ce:ee:84:83:64:5b:65:da:bc:c4:37:ed:68:77:
39:f6:46:28:48:d8:de:71:be:10:d5:9c:ac:af:66:
47:1d:19:ad:9f:cc:81:66:a6:07:b0:58:9c:86:67:
ec:a3:5f:65:87:07:c7:f7:15:2f:db:d9:02:e2:a9:
f3:23:32:9f:dc:3f:44:89:ec:58:0e:43:f8:84:e5:
f8:3c:1b:99:e3:e6:73:83:cb:c5:a5:31:4c:b6:a6:
63:72:e3:38:58:92:8f:74:9e:0f:5b:d2:f9:a3:47:
a9:b0:18:e7:a1:64:e6:10:9e:12:91:73:de:1f:46:
ed:13:65:d5:29:da:e2:ca:5d:5f:0f:1c:0a:70:6d:
8d:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:FE:9C:0D:94:4F:16:E5:F0:AA:88:2A:71:37:9D:34:8F:8C:FA:33
X509v3 Authority Key Identifier:
keyid:5E:6D:07:F4:BB:FD:1D:B3:70:99:6A:75:F7:6B:28:AB:C4:D6:B3:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xm0H9Lv9HbNwmWp192soq8TWs-o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/fd1fbc-cb90-4827-8ed0-00c3b612e98c/1/Xm0H9Lv9HbNwmWp192soq8TWs-o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/fd1fbc-cb90-4827-8ed0-00c3b612e98c/1/Xm0H9Lv9HbNwmWp192soq8TWs-o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:a8:85:ea:56:5c:4b:4f:c0:06:62:2b:bf:ac:12:af:27:40:
a4:b3:5a:4d:84:5a:d0:ed:aa:62:72:f8:13:b9:68:73:d9:54:
d9:88:d9:5c:b8:07:8c:a3:22:54:e6:2f:ef:bb:cd:a3:50:4f:
bb:cd:d7:65:fa:30:1e:26:a8:5b:8d:aa:3d:dd:ba:73:d4:83:
de:76:b1:af:a8:17:7a:f7:02:67:45:a6:0b:25:d4:d9:88:f1:
bc:ae:e9:85:ee:80:d3:10:6e:9f:75:7c:81:bf:02:ea:96:6f:
3c:7f:64:4c:90:15:be:4d:75:b6:f6:e6:e8:c5:b7:b0:f8:bc:
49:46:58:33:fc:fa:d0:68:88:f8:3e:a0:97:38:01:54:e3:ab:
9b:5f:39:1e:2b:36:73:aa:7f:fc:de:a5:9b:12:04:bd:7e:8c:
55:da:39:9a:d3:b3:42:fc:b0:a4:70:cf:63:f8:14:25:f2:ca:
ae:34:3f:6e:90:29:78:7e:d9:eb:4a:45:11:1a:b0:a9:59:5e:
c4:0e:c5:c4:e8:2d:d2:d6:0b:77:f2:35:3c:29:ef:1d:93:f5:
77:82:76:99:f4:ee:cf:22:6e:d7:f8:96:0e:bd:ec:0a:a5:15:
f2:00:31:46:f3:43:c5:0e:1e:d7:de:82:f5:dc:85:0c:9b:04:
a9:c6:99:78
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiNogOwDCkdjT8QuYcIPjlZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVlNmQwN2Y0YmJmZDFkYjM3MDk5NmE3NWY3NmIyOGFiYzRk
NmIzZWEwHhcNMjUwODA5MDcwMTAxWhcNMjUwODEwMDcwMTAxWjAzMTEwLwYDVQQD
Eyg0NmZlOWMwZDk0NGYxNmU1ZjBhYTg4MmE3MTM3OWQzNDhmOGNmYTMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0qdc5ovhNAQaD+mZVMW2xH9zylkO
iXcHRSBkZT4zS/A+RyJi/6emnkaiakwfwqnp0jSz3wQDPbW6jZz0+SI0VR7+4Ggs
O66QbZ6G3+XDWFgA0EdsxCQvSY9WbIyRuY9tFu96fi0sNXAFkdjT5N4nuAhappAU
RDF0zu6Eg2RbZdq8xDftaHc59kYoSNjecb4Q1Zysr2ZHHRmtn8yBZqYHsFichmfs
o19lhwfH9xUv29kC4qnzIzKf3D9EiexYDkP4hOX4PBuZ4+Zzg8vFpTFMtqZjcuM4
WJKPdJ4PW9L5o0epsBjnoWTmEJ4SkXPeH0btE2XVKdriyl1fDxwKcG2N5wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEb+nA2UTxbl8KqIKnE3nTSPjPozMB8GA1UdIwQY
MBaAFF5tB/S7/R2zcJlqdfdrKKvE1rPqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWG0wSDlMdjlIYk53bVdwMTkyc29xOFRXcy1vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy9mZDFmYmMtY2I5MC00ODI3LThlZDAt
MDBjM2I2MTJlOThjLzEvWG0wSDlMdjlIYk53bVdwMTkyc29xOFRXcy1vLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYy9mZDFmYmMtY2I5MC00ODI3LThlZDAtMDBjM2I2MTJlOThj
LzEvWG0wSDlMdjlIYk53bVdwMTkyc29xOFRXcy1vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUaiF6lZc
S0/ABmIrv6wSrydApLNaTYRa0O2qYnL4E7loc9lU2YjZXLgHjKMiVOYv77vNo1BP
u83XZfowHiaoW42qPd26c9SD3naxr6gXevcCZ0WmCyXU2YjxvK7phe6A0xBun3V8
gb8C6pZvPH9kTJAVvk11tvbm6MW3sPi8SUZYM/z60GiI+D6glzgBVOOrm185His2
c6p//N6lmxIEvX6MVdo5mtOzQvywpHDPY/gUJfLKrjQ/bpApeH7Z60pFERqwqVle
xA7FxOgt0tYLd/I1PCnvHZP1d4J2mfTuzyJu1/iWDr3sCqUV8gAxRvNDxQ4e196C
9dyFDJsEqcaZeA==
-----END CERTIFICATE-----
Generated at Sat Aug 9 10:35:16 2025 by rpki-client