Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/c485d9-2736-49b1-9a44-1b95819cfc9c/1/kXWIXPl40u9mE3YhRTC57WjFtFg.mft
File: kXWIXPl40u9mE3YhRTC57WjFtFg.mft (raw, json)
Hash identifier: Zs0Hw0TxpZZDjFsfT7/DVIa1g0J6MnaYDmhSbN1dmGw=
Subject key identifier: 66:12:D5:77:65:C6:1E:03:9D:8B:DD:68:3B:BD:7D:3F:3B:0F:42:48
Authority key identifier: 91:75:88:5C:F9:78:D2:EF:66:13:76:21:45:30:B9:ED:68:C5:B4:58
Certificate issuer: /CN=9175885cf978d2ef661376214530b9ed68c5b458
Certificate serial: 019A4EF4ECEB3A67126006A801C606518EE6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kXWIXPl40u9mE3YhRTC57WjFtFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/c485d9-2736-49b1-9a44-1b95819cfc9c/1/kXWIXPl40u9mE3YhRTC57WjFtFg.mft
Manifest number: 0A2A
Signing time: Tue 04 Nov 2025 13:01:05 +0000
Manifest this update: Tue 04 Nov 2025 13:01:05 +0000
Manifest next update: Wed 05 Nov 2025 13:01:05 +0000
Files and hashes: 1: kXWIXPl40u9mE3YhRTC57WjFtFg.crl (hash: HxiLITqvBYAbWNmLrU9Igi178B/at80JHfaVHeWotvE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/c485d9-2736-49b1-9a44-1b95819cfc9c/1/kXWIXPl40u9mE3YhRTC57WjFtFg.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/c485d9-2736-49b1-9a44-1b95819cfc9c/1/kXWIXPl40u9mE3YhRTC57WjFtFg.mft
rsync://rpki.ripe.net/repository/DEFAULT/kXWIXPl40u9mE3YhRTC57WjFtFg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:ec:eb:3a:67:12:60:06:a8:01:c6:06:51:8e:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9175885cf978d2ef661376214530b9ed68c5b458
Validity
Not Before: Nov 4 13:01:05 2025 GMT
Not After : Nov 5 13:01:05 2025 GMT
Subject: CN=6612d57765c61e039d8bdd683bbd7d3f3b0f4248
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:e7:46:12:2f:b5:80:24:67:36:a0:60:30:9c:
19:e3:34:bc:26:ca:cb:6e:d2:0b:1b:cd:0b:10:8f:
3f:99:8a:6b:a5:81:4b:f5:4a:e8:e5:7a:c6:59:3e:
3d:f7:93:aa:71:8c:a7:03:e6:41:8b:2b:75:51:10:
95:60:0b:68:42:cc:9f:0e:71:3f:db:2a:02:05:1c:
87:90:52:da:f0:dd:47:de:55:85:fe:a8:1d:c9:18:
f9:ee:a6:8b:2d:36:62:35:74:9d:3a:57:74:96:b0:
d7:bc:52:93:8c:b6:75:34:6c:ee:2b:11:f6:6a:2b:
09:a8:d3:f4:9a:f3:d6:5f:2c:e8:d6:11:a2:1f:bf:
f8:63:d5:c7:17:33:48:2c:85:8f:3d:f6:63:b7:cb:
8d:8c:6e:79:c3:85:fe:45:0e:68:f3:bb:76:30:34:
51:35:32:de:d1:1e:cf:e2:fe:e5:45:45:c2:cb:0a:
f9:32:60:95:e7:71:07:9f:25:50:8d:f5:2c:6a:8a:
4c:34:85:c1:4c:e0:a4:3b:1a:eb:e5:d6:93:d3:bd:
5f:c1:b1:45:24:28:f0:6d:33:5d:b9:90:04:f8:af:
23:3e:01:8f:36:a0:f7:c6:ad:0e:8f:e6:bc:6e:2e:
60:e7:dd:cd:b9:d6:8b:ea:37:87:d3:3a:95:dd:9b:
5b:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:12:D5:77:65:C6:1E:03:9D:8B:DD:68:3B:BD:7D:3F:3B:0F:42:48
X509v3 Authority Key Identifier:
keyid:91:75:88:5C:F9:78:D2:EF:66:13:76:21:45:30:B9:ED:68:C5:B4:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kXWIXPl40u9mE3YhRTC57WjFtFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/c485d9-2736-49b1-9a44-1b95819cfc9c/1/kXWIXPl40u9mE3YhRTC57WjFtFg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/c485d9-2736-49b1-9a44-1b95819cfc9c/1/kXWIXPl40u9mE3YhRTC57WjFtFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:36:05:f7:a4:2f:cb:7f:a1:e9:56:7b:08:99:40:9e:67:2f:
34:89:68:2b:e8:a7:09:5f:bd:5c:38:86:96:cf:0f:7f:9c:63:
5d:16:72:e7:ce:65:b5:33:20:2a:51:4b:d7:8e:f0:ed:a9:65:
45:ae:d5:7d:eb:1d:25:f4:e6:c2:df:1a:69:2c:f3:fc:25:aa:
a3:7a:46:8a:5a:de:49:c0:fd:dd:70:09:07:79:fa:9d:44:c3:
60:68:a9:3c:11:61:62:e7:e7:b7:eb:09:94:e3:d1:d9:15:8d:
76:c4:a0:35:e8:86:14:78:58:79:4a:6c:6b:42:f2:65:de:fe:
18:cc:81:51:e1:57:5a:33:7c:b8:99:d7:cd:b4:33:64:1b:9c:
2d:ec:62:ac:7c:7b:e6:2c:e1:74:a2:9b:a5:f4:88:3c:3b:b5:
66:b8:0c:bf:31:8d:5e:f7:d3:91:ad:4b:11:b5:2b:d2:59:fb:
22:1e:9c:60:d2:e0:b8:38:9d:0d:b1:bf:d1:ba:aa:a0:df:7c:
96:fb:4d:6b:78:48:4d:bc:e7:5a:f7:77:a4:bb:52:06:cf:77:
66:48:99:3b:48:a1:11:ae:3c:92:7a:10:16:72:4c:bb:dd:04:
f9:e0:50:22:0c:d1:6d:bd:5c:01:87:ba:3b:b8:84:0b:a1:2f:
e5:0b:b4:61
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpO9OzrOmcSYAaoAcYGUY7mMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkxNzU4ODVjZjk3OGQyZWY2NjEzNzYyMTQ1MzBiOWVkNjhj
NWI0NTgwHhcNMjUxMTA0MTMwMTA1WhcNMjUxMTA1MTMwMTA1WjAzMTEwLwYDVQQD
Eyg2NjEyZDU3NzY1YzYxZTAzOWQ4YmRkNjgzYmJkN2QzZjNiMGY0MjQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7OdGEi+1gCRnNqBgMJwZ4zS8JsrL
btILG80LEI8/mYprpYFL9Uro5XrGWT4995OqcYynA+ZBiyt1URCVYAtoQsyfDnE/
2yoCBRyHkFLa8N1H3lWF/qgdyRj57qaLLTZiNXSdOld0lrDXvFKTjLZ1NGzuKxH2
aisJqNP0mvPWXyzo1hGiH7/4Y9XHFzNILIWPPfZjt8uNjG55w4X+RQ5o87t2MDRR
NTLe0R7P4v7lRUXCywr5MmCV53EHnyVQjfUsaopMNIXBTOCkOxrr5daT071fwbFF
JCjwbTNduZAE+K8jPgGPNqD3xq0Oj+a8bi5g593NudaL6jeH0zqV3ZtbHQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGYS1Xdlxh4DnYvdaDu9fT87D0JIMB8GA1UdIwQY
MBaAFJF1iFz5eNLvZhN2IUUwue1oxbRYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva1hXSVhQbDQwdTltRTNZaFJUQzU3V2pGdEZnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS9jNDg1ZDktMjczNi00OWIxLTlhNDQt
MWI5NTgxOWNmYzljLzEva1hXSVhQbDQwdTltRTNZaFJUQzU3V2pGdEZnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZS9jNDg1ZDktMjczNi00OWIxLTlhNDQtMWI5NTgxOWNmYzlj
LzEva1hXSVhQbDQwdTltRTNZaFJUQzU3V2pGdEZnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAczYF96Qv
y3+h6VZ7CJlAnmcvNIloK+inCV+9XDiGls8Pf5xjXRZy585ltTMgKlFL147w7all
Ra7VfesdJfTmwt8aaSzz/CWqo3pGilreScD93XAJB3n6nUTDYGipPBFhYufnt+sJ
lOPR2RWNdsSgNeiGFHhYeUpsa0LyZd7+GMyBUeFXWjN8uJnXzbQzZBucLexirHx7
5izhdKKbpfSIPDu1ZrgMvzGNXvfTka1LEbUr0ln7Ih6cYNLguDidDbG/0bqqoN98
lvtNa3hITbznWvd3pLtSBs93ZkiZO0ihEa48knoQFnJMu90E+eBQIgzRbb1cAYe6
O7iEC6Ev5Qu0YQ==
-----END CERTIFICATE-----
Generated at Tue Nov 4 15:07:39 2025 by rpki-client