Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/dbb5e4-c558-4efe-9c9a-fa5d7b48aae9/1/xmCFijitXhG3sYk5KIO8g-trNh0.mft
File: xmCFijitXhG3sYk5KIO8g-trNh0.mft (raw, json)
Hash identifier: IB37qWhVFDPIOwnDubdoruMDWjlBFULBn6GJmfU/0g4=
Subject key identifier: E6:3E:13:12:DF:43:C9:B1:7C:34:4E:0D:81:BC:DD:2F:0F:34:8C:B9
Authority key identifier: C6:60:85:8A:38:AD:5E:11:B7:B1:89:39:28:83:BC:83:EB:6B:36:1D
Certificate issuer: /CN=c660858a38ad5e11b7b189392883bc83eb6b361d
Certificate serial: 0199FDD8EA90F6A48EA64B4B45CBF0C69BC0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmCFijitXhG3sYk5KIO8g-trNh0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/dbb5e4-c558-4efe-9c9a-fa5d7b48aae9/1/xmCFijitXhG3sYk5KIO8g-trNh0.mft
Manifest number: 16E1
Signing time: Sun 19 Oct 2025 19:01:15 +0000
Manifest this update: Sun 19 Oct 2025 19:01:15 +0000
Manifest next update: Mon 20 Oct 2025 19:01:15 +0000
Files and hashes: 1: xmCFijitXhG3sYk5KIO8g-trNh0.crl (hash: /yZ0OXIq8N5mPPbSfJQrWJKqWVysCX+y28+1niN3rPI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/dbb5e4-c558-4efe-9c9a-fa5d7b48aae9/1/xmCFijitXhG3sYk5KIO8g-trNh0.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/dbb5e4-c558-4efe-9c9a-fa5d7b48aae9/1/xmCFijitXhG3sYk5KIO8g-trNh0.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmCFijitXhG3sYk5KIO8g-trNh0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 19:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d8:ea:90:f6:a4:8e:a6:4b:4b:45:cb:f0:c6:9b:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c660858a38ad5e11b7b189392883bc83eb6b361d
Validity
Not Before: Oct 19 19:01:15 2025 GMT
Not After : Oct 20 19:01:15 2025 GMT
Subject: CN=e63e1312df43c9b17c344e0d81bcdd2f0f348cb9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:ae:4d:d3:23:9b:0a:f2:57:b5:9f:f7:fb:6e:
f9:da:73:66:fe:b0:a8:56:7e:c5:b3:3d:a3:9c:25:
72:cd:f3:19:fc:5d:4f:69:4c:f8:91:19:42:19:b1:
ad:93:4f:43:e6:01:d0:6f:74:9e:67:79:64:1e:46:
9d:88:9a:8b:da:57:95:61:c7:35:70:20:dd:d2:0f:
98:22:4c:ca:e7:88:8d:a0:13:02:5e:30:07:4c:21:
d8:43:db:3f:65:7e:cb:78:82:4b:e8:7b:e5:a3:5f:
18:6b:62:9e:3d:c9:03:35:23:a2:46:9c:93:3c:6a:
32:1a:78:40:99:a9:d3:36:3d:a4:76:a3:67:8a:fb:
07:71:98:fb:85:7d:b1:9f:81:67:39:73:cc:88:45:
bb:4e:25:50:42:30:7b:f8:b6:b2:21:ee:2f:bc:20:
67:77:52:6f:d2:bc:81:ad:72:5e:7c:17:4a:11:c2:
09:ea:bc:06:2e:e7:5a:cd:ca:d4:d8:e8:7b:be:ac:
96:b8:2f:80:d2:4f:31:5f:68:b8:dd:16:7c:70:0c:
bd:e1:09:a9:e8:68:e3:df:d9:56:43:a5:e3:0a:18:
c7:89:20:14:b9:ee:cb:64:2d:8e:98:1e:8d:ef:4c:
d2:13:80:ba:cb:d3:73:2d:14:e4:59:63:88:01:c6:
91:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:3E:13:12:DF:43:C9:B1:7C:34:4E:0D:81:BC:DD:2F:0F:34:8C:B9
X509v3 Authority Key Identifier:
keyid:C6:60:85:8A:38:AD:5E:11:B7:B1:89:39:28:83:BC:83:EB:6B:36:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmCFijitXhG3sYk5KIO8g-trNh0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/dbb5e4-c558-4efe-9c9a-fa5d7b48aae9/1/xmCFijitXhG3sYk5KIO8g-trNh0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/dbb5e4-c558-4efe-9c9a-fa5d7b48aae9/1/xmCFijitXhG3sYk5KIO8g-trNh0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:f4:74:8f:e7:ee:a1:23:02:12:6f:d4:f5:56:a0:a2:0a:c1:
7a:b7:85:25:ce:98:cf:0a:bf:85:65:90:09:db:af:0a:b6:ab:
a6:d1:1a:a3:33:00:4e:8b:f4:29:73:80:68:f0:d5:44:7b:8f:
b4:01:ec:69:6c:df:9c:ab:c1:0d:d0:ed:4d:8a:44:63:d0:7f:
5a:40:6f:4a:9d:73:0e:3a:1e:8b:af:25:eb:16:1c:15:b1:0d:
a9:92:14:00:f0:ea:d4:a2:6d:73:65:1c:96:ed:af:7f:d3:48:
60:91:47:a1:b6:f3:63:49:76:f2:53:3e:57:a0:79:d3:2c:b0:
e7:f0:ac:3b:2e:04:97:bc:ac:d1:7a:28:0d:31:88:ba:48:6d:
e5:7a:b2:16:30:9c:fe:0e:fc:d6:d0:fd:31:f1:e4:45:30:94:
46:6a:dc:ab:fe:05:11:b6:86:d4:96:d0:79:4c:74:78:4d:00:
f7:f1:f3:06:42:6c:09:7f:3f:99:e1:b4:6e:d6:86:65:62:90:
76:da:cd:e5:73:e9:67:d5:85:c9:0f:9a:dd:85:87:57:e1:97:
ce:76:40:67:a6:5f:f5:14:71:d4:a1:4a:ef:08:ac:dd:6a:e5:
b6:5f:53:ce:a2:54:be:c7:9c:99:2d:d4:e0:79:c8:c9:b3:b4:
00:b7:e3:d2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn92OqQ9qSOpktLRcvwxpvAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2NjA4NThhMzhhZDVlMTFiN2IxODkzOTI4ODNiYzgzZWI2
YjM2MWQwHhcNMjUxMDE5MTkwMTE1WhcNMjUxMDIwMTkwMTE1WjAzMTEwLwYDVQQD
EyhlNjNlMTMxMmRmNDNjOWIxN2MzNDRlMGQ4MWJjZGQyZjBmMzQ4Y2I5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt65N0yObCvJXtZ/3+2752nNm/rCo
Vn7Fsz2jnCVyzfMZ/F1PaUz4kRlCGbGtk09D5gHQb3SeZ3lkHkadiJqL2leVYcc1
cCDd0g+YIkzK54iNoBMCXjAHTCHYQ9s/ZX7LeIJL6Hvlo18Ya2KePckDNSOiRpyT
PGoyGnhAmanTNj2kdqNnivsHcZj7hX2xn4FnOXPMiEW7TiVQQjB7+LayIe4vvCBn
d1Jv0ryBrXJefBdKEcIJ6rwGLudazcrU2Oh7vqyWuC+A0k8xX2i43RZ8cAy94Qmp
6Gjj39lWQ6XjChjHiSAUue7LZC2OmB6N70zSE4C6y9NzLRTkWWOIAcaRnwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOY+ExLfQ8mxfDRODYG83S8PNIy5MB8GA1UdIwQY
MBaAFMZghYo4rV4Rt7GJOSiDvIPrazYdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveG1DRmlqaXRYaEczc1lrNUtJTzhnLXRyTmgwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS9kYmI1ZTQtYzU1OC00ZWZlLTljOWEt
ZmE1ZDdiNDhhYWU5LzEveG1DRmlqaXRYaEczc1lrNUtJTzhnLXRyTmgwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNS9kYmI1ZTQtYzU1OC00ZWZlLTljOWEtZmE1ZDdiNDhhYWU5
LzEveG1DRmlqaXRYaEczc1lrNUtJTzhnLXRyTmgwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEfR0j+fu
oSMCEm/U9VagogrBereFJc6Yzwq/hWWQCduvCrarptEaozMATov0KXOAaPDVRHuP
tAHsaWzfnKvBDdDtTYpEY9B/WkBvSp1zDjoei68l6xYcFbENqZIUAPDq1KJtc2Uc
lu2vf9NIYJFHobbzY0l28lM+V6B50yyw5/CsOy4El7ys0XooDTGIukht5XqyFjCc
/g781tD9MfHkRTCURmrcq/4FEbaG1JbQeUx0eE0A9/HzBkJsCX8/meG0btaGZWKQ
dtrN5XPpZ9WFyQ+a3YWHV+GXznZAZ6Zf9RRx1KFK7wis3Wrltl9TzqJUvsecmS3U
4HnIybO0ALfj0g==
-----END CERTIFICATE-----
Generated at Mon Oct 20 01:41:04 2025 by rpki-client