Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/fd1fbc-cb90-4827-8ed0-00c3b612e98c/1/Xm0H9Lv9HbNwmWp192soq8TWs-o.mft
File: Xm0H9Lv9HbNwmWp192soq8TWs-o.mft (raw, json)
Hash identifier: juD23dmpGB96GAv5+u+sxH7dWhWvO+vE04R28DZ8jVo=
Subject key identifier: D1:9E:65:0D:DD:CD:61:14:36:A6:32:68:75:6F:03:21:F1:AA:33:97
Authority key identifier: 5E:6D:07:F4:BB:FD:1D:B3:70:99:6A:75:F7:6B:28:AB:C4:D6:B3:EA
Certificate issuer: /CN=5e6d07f4bbfd1db370996a75f76b28abc4d6b3ea
Certificate serial: 019A4DAA87402141708FCDF5EEF5E36C6188
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xm0H9Lv9HbNwmWp192soq8TWs-o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/fd1fbc-cb90-4827-8ed0-00c3b612e98c/1/Xm0H9Lv9HbNwmWp192soq8TWs-o.mft
Manifest number: 04F1
Signing time: Tue 04 Nov 2025 07:00:12 +0000
Manifest this update: Tue 04 Nov 2025 07:00:12 +0000
Manifest next update: Wed 05 Nov 2025 07:00:12 +0000
Files and hashes: 1: Xm0H9Lv9HbNwmWp192soq8TWs-o.crl (hash: 8cptAl24WIvJcqX5j/WaslJO4E09PorMfQlKcfHjR6E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/fd1fbc-cb90-4827-8ed0-00c3b612e98c/1/Xm0H9Lv9HbNwmWp192soq8TWs-o.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/fd1fbc-cb90-4827-8ed0-00c3b612e98c/1/Xm0H9Lv9HbNwmWp192soq8TWs-o.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xm0H9Lv9HbNwmWp192soq8TWs-o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 07:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:aa:87:40:21:41:70:8f:cd:f5:ee:f5:e3:6c:61:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e6d07f4bbfd1db370996a75f76b28abc4d6b3ea
Validity
Not Before: Nov 4 07:00:12 2025 GMT
Not After : Nov 5 07:00:12 2025 GMT
Subject: CN=d19e650dddcd611436a63268756f0321f1aa3397
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:fb:02:5b:1d:dd:19:87:f5:17:81:0d:5c:1c:
b0:75:f2:db:76:8a:4f:10:a5:65:cf:34:2d:a1:b9:
d3:93:49:17:84:34:72:7a:cf:e5:a4:1d:94:fb:24:
1e:e6:8c:42:cc:75:47:ba:0b:4a:03:d5:60:04:41:
14:32:1e:26:28:46:8f:6f:6d:26:d8:e5:4a:cb:8c:
53:57:3d:c0:da:be:1f:c1:18:03:20:05:a4:0e:d0:
da:0e:08:d7:6b:0a:b4:9c:74:b9:68:fa:4d:c9:56:
4d:28:9a:40:79:e0:15:29:7a:5a:c8:93:8f:6c:79:
93:ad:53:37:9b:79:ff:62:22:0b:87:4b:0c:ea:fa:
82:4e:00:b4:8e:34:ec:34:d3:2c:ff:24:67:1f:50:
43:95:85:ab:d6:33:0b:e6:fc:1b:86:04:3b:7a:28:
6c:d7:97:3b:be:b4:3b:f1:32:e3:b8:6b:03:88:7c:
14:16:f1:d7:dd:83:78:8c:91:da:1d:5b:02:22:51:
b4:49:15:2c:8b:a1:87:82:ec:16:58:aa:5d:19:44:
d2:44:13:70:60:f0:c3:e3:9b:23:10:19:f5:3a:3e:
f7:48:85:33:6f:be:09:3b:e2:3a:e1:cd:63:60:a3:
03:04:97:b1:36:b9:4a:5c:cf:4e:81:a8:e6:db:4c:
16:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:9E:65:0D:DD:CD:61:14:36:A6:32:68:75:6F:03:21:F1:AA:33:97
X509v3 Authority Key Identifier:
keyid:5E:6D:07:F4:BB:FD:1D:B3:70:99:6A:75:F7:6B:28:AB:C4:D6:B3:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xm0H9Lv9HbNwmWp192soq8TWs-o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/fd1fbc-cb90-4827-8ed0-00c3b612e98c/1/Xm0H9Lv9HbNwmWp192soq8TWs-o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/fd1fbc-cb90-4827-8ed0-00c3b612e98c/1/Xm0H9Lv9HbNwmWp192soq8TWs-o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:ad:d9:c0:28:1f:03:a1:b5:a7:eb:70:f4:be:9f:e7:2f:cb:
bf:c4:76:8a:9c:28:a6:7b:f4:86:39:2f:db:ea:d8:71:33:fb:
66:48:48:6b:12:98:f8:e4:a7:4d:bb:de:55:ab:7f:50:bf:b1:
28:96:e1:09:fc:d8:90:6b:e1:97:25:53:1c:c0:2f:74:5d:3d:
e3:d0:d9:18:f9:98:b1:ca:3a:37:24:b9:46:11:51:38:39:df:
5e:d9:52:ea:59:18:2d:b2:47:7e:4d:e2:78:5b:81:89:c2:37:
d2:d0:24:13:0d:d3:4a:56:e0:04:64:3b:bb:d9:4f:d6:d3:c3:
ee:24:e9:73:a8:99:7f:c2:ff:d8:88:46:d1:ad:50:fa:d9:c9:
0a:b5:ba:c2:b0:4e:85:11:fe:ce:08:8c:db:37:00:26:9c:9d:
81:6e:6c:0a:7a:b0:05:1e:1e:73:49:99:f4:56:ba:92:e4:b4:
70:e2:74:27:d4:bb:03:3b:05:61:12:92:39:72:53:01:d3:37:
a5:1f:c5:cf:2f:06:3a:61:9e:ab:5e:76:fe:1f:25:ec:e2:09:
c5:f1:c6:1d:be:ac:cb:b4:29:0c:31:bf:ca:ae:49:66:f8:4f:
18:7d:02:07:f9:fb:36:2b:68:e0:e6:e4:39:77:bd:4f:4b:be:
ad:13:35:63
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpNqodAIUFwj8317vXjbGGIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVlNmQwN2Y0YmJmZDFkYjM3MDk5NmE3NWY3NmIyOGFiYzRk
NmIzZWEwHhcNMjUxMTA0MDcwMDEyWhcNMjUxMTA1MDcwMDEyWjAzMTEwLwYDVQQD
EyhkMTllNjUwZGRkY2Q2MTE0MzZhNjMyNjg3NTZmMDMyMWYxYWEzMzk3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqvsCWx3dGYf1F4ENXBywdfLbdopP
EKVlzzQtobnTk0kXhDRyes/lpB2U+yQe5oxCzHVHugtKA9VgBEEUMh4mKEaPb20m
2OVKy4xTVz3A2r4fwRgDIAWkDtDaDgjXawq0nHS5aPpNyVZNKJpAeeAVKXpayJOP
bHmTrVM3m3n/YiILh0sM6vqCTgC0jjTsNNMs/yRnH1BDlYWr1jML5vwbhgQ7eihs
15c7vrQ78TLjuGsDiHwUFvHX3YN4jJHaHVsCIlG0SRUsi6GHguwWWKpdGUTSRBNw
YPDD45sjEBn1Oj73SIUzb74JO+I64c1jYKMDBJexNrlKXM9Ogajm20wWNQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNGeZQ3dzWEUNqYyaHVvAyHxqjOXMB8GA1UdIwQY
MBaAFF5tB/S7/R2zcJlqdfdrKKvE1rPqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWG0wSDlMdjlIYk53bVdwMTkyc29xOFRXcy1vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy9mZDFmYmMtY2I5MC00ODI3LThlZDAt
MDBjM2I2MTJlOThjLzEvWG0wSDlMdjlIYk53bVdwMTkyc29xOFRXcy1vLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYy9mZDFmYmMtY2I5MC00ODI3LThlZDAtMDBjM2I2MTJlOThj
LzEvWG0wSDlMdjlIYk53bVdwMTkyc29xOFRXcy1vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADK3ZwCgf
A6G1p+tw9L6f5y/Lv8R2ipwopnv0hjkv2+rYcTP7ZkhIaxKY+OSnTbveVat/UL+x
KJbhCfzYkGvhlyVTHMAvdF0949DZGPmYsco6NyS5RhFRODnfXtlS6lkYLbJHfk3i
eFuBicI30tAkEw3TSlbgBGQ7u9lP1tPD7iTpc6iZf8L/2IhG0a1Q+tnJCrW6wrBO
hRH+zgiM2zcAJpydgW5sCnqwBR4ec0mZ9Fa6kuS0cOJ0J9S7AzsFYRKSOXJTAdM3
pR/Fzy8GOmGeq152/h8l7OIJxfHGHb6sy7QpDDG/yq5JZvhPGH0CB/n7Nito4Obk
OXe9T0u+rRM1Yw==
-----END CERTIFICATE-----
Generated at Tue Nov 4 14:50:06 2025 by rpki-client