Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/c503d6-b6e4-43e2-91e6-71c570dcb0a4/1/XAAsRHm7TJbiI0OZznH1YDRSmdA.mft
File: XAAsRHm7TJbiI0OZznH1YDRSmdA.mft (raw, json)
Hash identifier: zT0fssWpluk1qRpXtv+ioNTw99Ha9aFYIXgr8jiA1Ug=
Subject key identifier: E8:63:DE:A6:92:58:C4:0F:D4:EE:B6:F3:3E:5B:0C:4B:D0:A1:05:5D
Authority key identifier: 5C:00:2C:44:79:BB:4C:96:E2:23:43:99:CE:71:F5:60:34:52:99:D0
Certificate issuer: /CN=5c002c4479bb4c96e2234399ce71f560345299d0
Certificate serial: 019A4EF4E14661571598D731084E34FF7515
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XAAsRHm7TJbiI0OZznH1YDRSmdA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/c503d6-b6e4-43e2-91e6-71c570dcb0a4/1/XAAsRHm7TJbiI0OZznH1YDRSmdA.mft
Manifest number: 09A1
Signing time: Tue 04 Nov 2025 13:01:02 +0000
Manifest this update: Tue 04 Nov 2025 13:01:02 +0000
Manifest next update: Wed 05 Nov 2025 13:01:02 +0000
Files and hashes: 1: XAAsRHm7TJbiI0OZznH1YDRSmdA.crl (hash: vK9fev/gIjOPDG8x85U+TBLo6MU3b5pTpBqqR++N4UY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/c503d6-b6e4-43e2-91e6-71c570dcb0a4/1/XAAsRHm7TJbiI0OZznH1YDRSmdA.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/c503d6-b6e4-43e2-91e6-71c570dcb0a4/1/XAAsRHm7TJbiI0OZznH1YDRSmdA.mft
rsync://rpki.ripe.net/repository/DEFAULT/XAAsRHm7TJbiI0OZznH1YDRSmdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:e1:46:61:57:15:98:d7:31:08:4e:34:ff:75:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c002c4479bb4c96e2234399ce71f560345299d0
Validity
Not Before: Nov 4 13:01:02 2025 GMT
Not After : Nov 5 13:01:02 2025 GMT
Subject: CN=e863dea69258c40fd4eeb6f33e5b0c4bd0a1055d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:d1:84:35:56:02:44:da:51:c3:06:53:3d:11:
39:5b:ae:82:72:04:f7:b1:2d:66:c8:bf:d2:08:8c:
d7:0e:8d:75:f1:48:03:dc:38:a4:f6:27:09:f5:42:
58:49:5f:3f:0d:65:68:14:e2:fa:fb:61:a5:82:f7:
fd:c8:58:f2:89:93:62:8b:af:1d:91:2e:c6:ed:8b:
09:9c:ee:57:b5:d1:fd:19:3b:9f:98:0d:d5:a3:a4:
58:4f:7a:cd:4f:5a:5c:10:1c:0a:32:a8:3e:26:61:
c0:ac:c8:5b:85:6c:43:4b:45:eb:c5:5a:78:12:84:
a4:6e:eb:59:d8:3f:54:4e:4a:a4:ee:11:89:39:16:
85:99:e8:3d:b5:98:a4:22:1b:90:25:f7:ad:95:a0:
78:15:63:ba:c1:53:d9:d6:94:05:b6:ae:de:e1:e0:
e7:1b:e5:49:6f:d6:a7:d9:2c:92:3b:18:2e:fe:87:
fb:a3:d8:e1:33:fd:d2:12:b4:ad:b0:91:b7:f8:0f:
e8:ce:52:12:b2:ca:08:32:95:10:85:1d:af:48:b5:
82:21:fb:c1:92:a8:39:d6:a9:6a:3b:3f:21:c7:d8:
48:f0:68:72:f5:8f:70:71:56:ec:64:d1:f0:34:95:
a9:12:92:fd:9b:1d:96:55:36:7e:76:f6:e9:1b:09:
e1:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:63:DE:A6:92:58:C4:0F:D4:EE:B6:F3:3E:5B:0C:4B:D0:A1:05:5D
X509v3 Authority Key Identifier:
keyid:5C:00:2C:44:79:BB:4C:96:E2:23:43:99:CE:71:F5:60:34:52:99:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XAAsRHm7TJbiI0OZznH1YDRSmdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/c503d6-b6e4-43e2-91e6-71c570dcb0a4/1/XAAsRHm7TJbiI0OZznH1YDRSmdA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/c503d6-b6e4-43e2-91e6-71c570dcb0a4/1/XAAsRHm7TJbiI0OZznH1YDRSmdA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:7d:7a:e0:b6:8b:f1:07:01:11:cb:a7:a0:0b:82:7b:dd:2d:
51:29:15:d7:81:81:ea:3f:79:f1:79:37:14:a9:19:52:04:00:
e6:3e:30:fc:9b:fd:5e:47:7a:f8:23:8c:b6:53:bd:93:a5:f3:
be:6c:f3:02:d8:ae:16:01:ab:e3:60:55:bd:fc:c8:17:52:a5:
ba:ce:89:15:5b:4f:ca:46:9a:79:b2:93:f5:bb:5b:dc:57:c2:
1c:57:b1:c4:53:04:6a:ec:67:02:78:09:e7:ab:de:02:7e:0d:
0c:4e:cf:9b:cb:ff:d6:71:09:a7:f8:54:ef:db:dd:16:65:fc:
36:bf:99:80:4a:4f:b9:f2:c4:6f:50:75:63:55:b7:fb:47:2a:
cc:51:92:cc:67:44:72:01:49:73:d5:c7:62:e6:8b:35:82:58:
cc:1b:3e:78:e1:6e:0e:bb:b6:2b:9a:c6:ad:28:a1:cf:88:9e:
bd:3d:d4:04:f9:dc:5b:ff:d2:de:55:2c:ad:f8:db:c1:ee:6d:
c4:de:35:bb:b4:e4:4f:66:f8:3c:af:cd:8d:0a:a5:0d:88:4e:
72:87:55:38:25:fc:f7:82:2c:d1:45:ed:20:04:49:21:74:80:
c4:7b:76:af:78:4f:47:fd:24:5e:5b:39:61:cb:32:4a:36:cc:
be:f2:74:93
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpO9OFGYVcVmNcxCE40/3UVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVjMDAyYzQ0NzliYjRjOTZlMjIzNDM5OWNlNzFmNTYwMzQ1
Mjk5ZDAwHhcNMjUxMTA0MTMwMTAyWhcNMjUxMTA1MTMwMTAyWjAzMTEwLwYDVQQD
EyhlODYzZGVhNjkyNThjNDBmZDRlZWI2ZjMzZTViMGM0YmQwYTEwNTVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu9GENVYCRNpRwwZTPRE5W66CcgT3
sS1myL/SCIzXDo118UgD3Dik9icJ9UJYSV8/DWVoFOL6+2Glgvf9yFjyiZNii68d
kS7G7YsJnO5XtdH9GTufmA3Vo6RYT3rNT1pcEBwKMqg+JmHArMhbhWxDS0XrxVp4
EoSkbutZ2D9UTkqk7hGJORaFmeg9tZikIhuQJfetlaB4FWO6wVPZ1pQFtq7e4eDn
G+VJb9an2SySOxgu/of7o9jhM/3SErStsJG3+A/ozlISssoIMpUQhR2vSLWCIfvB
kqg51qlqOz8hx9hI8Ghy9Y9wcVbsZNHwNJWpEpL9mx2WVTZ+dvbpGwnhnQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOhj3qaSWMQP1O628z5bDEvQoQVdMB8GA1UdIwQY
MBaAFFwALER5u0yW4iNDmc5x9WA0UpnQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWEFBc1JIbTdUSmJpSTBPWnpuSDFZRFJTbWRBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS9jNTAzZDYtYjZlNC00M2UyLTkxZTYt
NzFjNTcwZGNiMGE0LzEvWEFBc1JIbTdUSmJpSTBPWnpuSDFZRFJTbWRBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZS9jNTAzZDYtYjZlNC00M2UyLTkxZTYtNzFjNTcwZGNiMGE0
LzEvWEFBc1JIbTdUSmJpSTBPWnpuSDFZRFJTbWRBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc3164LaL
8QcBEcunoAuCe90tUSkV14GB6j958Xk3FKkZUgQA5j4w/Jv9Xkd6+COMtlO9k6Xz
vmzzAtiuFgGr42BVvfzIF1Klus6JFVtPykaaebKT9btb3FfCHFexxFMEauxnAngJ
56veAn4NDE7Pm8v/1nEJp/hU79vdFmX8Nr+ZgEpPufLEb1B1Y1W3+0cqzFGSzGdE
cgFJc9XHYuaLNYJYzBs+eOFuDru2K5rGrSihz4ievT3UBPncW//S3lUsrfjbwe5t
xN41u7TkT2b4PK/NjQqlDYhOcodVOCX894Is0UXtIARJIXSAxHt2r3hPR/0kXls5
YcsySjbMvvJ0kw==
-----END CERTIFICATE-----
Generated at Tue Nov 4 14:58:13 2025 by rpki-client