Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/509710-8815-4a20-8c2e-286adbdde6d3/1/Xozn6kHZTYedYkvDFUaZni23w-U.mft
File: Xozn6kHZTYedYkvDFUaZni23w-U.mft (raw, json)
Hash identifier: BE3UIdaRuh/DlyeOT9gJGuEKXyj/OGlCPB9YlJqX39o=
Subject key identifier: A1:AF:FF:CF:CD:39:CB:ED:37:0F:A0:4E:36:2A:9D:93:D2:7B:02:14
Authority key identifier: 5E:8C:E7:EA:41:D9:4D:87:9D:62:4B:C3:15:46:99:9E:2D:B7:C3:E5
Certificate issuer: /CN=5e8ce7ea41d94d879d624bc31546999e2db7c3e5
Certificate serial: 0199FDD9CDBE50D333BC3592BC9E36165F42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xozn6kHZTYedYkvDFUaZni23w-U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/509710-8815-4a20-8c2e-286adbdde6d3/1/Xozn6kHZTYedYkvDFUaZni23w-U.mft
Manifest number: 02E4
Signing time: Sun 19 Oct 2025 19:02:13 +0000
Manifest this update: Sun 19 Oct 2025 19:02:13 +0000
Manifest next update: Mon 20 Oct 2025 19:02:13 +0000
Files and hashes: 1: Xozn6kHZTYedYkvDFUaZni23w-U.crl (hash: 81zt2nhfiD5Q7Gqb4ZdVEpFIFaJWTsKks13mD6vnZRQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/509710-8815-4a20-8c2e-286adbdde6d3/1/Xozn6kHZTYedYkvDFUaZni23w-U.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/509710-8815-4a20-8c2e-286adbdde6d3/1/Xozn6kHZTYedYkvDFUaZni23w-U.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xozn6kHZTYedYkvDFUaZni23w-U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d9:cd:be:50:d3:33:bc:35:92:bc:9e:36:16:5f:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e8ce7ea41d94d879d624bc31546999e2db7c3e5
Validity
Not Before: Oct 19 19:02:13 2025 GMT
Not After : Oct 20 19:02:13 2025 GMT
Subject: CN=a1afffcfcd39cbed370fa04e362a9d93d27b0214
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:c3:18:86:90:10:03:56:79:69:76:16:e5:98:
9a:38:a4:ea:f1:01:18:0d:48:8b:ab:4d:47:40:b1:
9b:f9:e0:cf:6a:18:74:f5:81:ad:1b:55:fc:bd:54:
7e:ad:d6:6c:6e:5d:1e:7a:c1:38:89:ad:39:58:cc:
97:bd:18:a0:d8:e0:62:d3:d6:27:30:63:24:39:f0:
89:12:91:65:cd:5f:a9:ee:ad:fe:e6:38:44:ce:10:
9d:e6:60:6f:e3:58:63:27:5e:f0:e5:7d:67:20:62:
a2:73:4f:9c:26:32:0f:37:f1:78:16:d6:55:83:89:
29:2f:f6:c6:ec:59:03:ef:16:0f:24:3b:ef:15:9a:
86:9d:a0:b5:1b:ee:c6:e9:2b:b7:72:45:76:21:49:
49:0d:f5:64:a4:a5:a9:86:a5:5a:79:7e:23:98:22:
8a:d4:65:84:fc:cd:b8:f4:14:4e:3e:a8:bb:4f:b4:
75:b9:54:b1:41:0d:96:38:a2:29:66:a9:d0:b7:d6:
a4:42:83:31:ac:6c:1b:ba:17:e4:49:b6:30:98:11:
75:26:b4:af:3c:ac:9a:db:7c:f0:cf:4e:c9:c1:6f:
34:47:c1:6f:7b:01:2a:e5:81:d4:65:55:09:57:27:
69:1e:a8:9e:77:4e:dc:d0:fc:83:98:52:4d:b5:be:
90:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:AF:FF:CF:CD:39:CB:ED:37:0F:A0:4E:36:2A:9D:93:D2:7B:02:14
X509v3 Authority Key Identifier:
keyid:5E:8C:E7:EA:41:D9:4D:87:9D:62:4B:C3:15:46:99:9E:2D:B7:C3:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xozn6kHZTYedYkvDFUaZni23w-U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/509710-8815-4a20-8c2e-286adbdde6d3/1/Xozn6kHZTYedYkvDFUaZni23w-U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/509710-8815-4a20-8c2e-286adbdde6d3/1/Xozn6kHZTYedYkvDFUaZni23w-U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:38:8a:32:6d:42:db:ed:ff:7f:a9:dc:bd:9e:33:35:8c:04:
7e:7f:91:79:52:16:7c:09:25:2f:b3:e7:f2:5e:3e:03:93:c6:
b9:1d:c1:f4:20:c7:74:97:0c:13:cb:90:8d:81:c3:89:9e:71:
fc:22:57:1e:fd:ed:ae:87:45:07:f2:70:9f:56:8c:ad:12:61:
b6:38:05:7c:f5:d7:3c:77:d8:49:c7:5e:e0:ff:34:98:88:a0:
ff:e3:81:71:15:ab:3c:ed:43:77:1e:c6:e7:35:2f:65:fb:75:
11:4a:9f:85:0e:53:23:bf:f4:a6:fc:1b:de:4c:84:da:89:15:
b4:7c:74:8f:7b:99:b4:9f:2c:e0:05:6c:c6:84:eb:ab:3c:7b:
10:8c:10:20:e9:66:c0:5f:5d:b0:ef:d2:27:94:33:9e:77:47:
1a:16:f5:01:ae:7f:ea:77:c7:dd:28:1e:4d:c5:8b:5d:cb:18:
43:f6:50:e7:de:b1:49:f1:7f:1f:33:31:83:47:47:0e:b5:ee:
f9:96:42:c0:d9:d0:f9:ed:2e:f8:39:84:a3:19:37:18:bf:86:
ea:d0:4d:fb:c9:66:49:e5:10:68:4a:ce:df:1b:05:91:62:1b:
31:9c:12:09:98:08:18:52:19:9f:a1:fb:58:e9:1c:f2:62:1f:
7e:db:52:a2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn92c2+UNMzvDWSvJ42Fl9CMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVlOGNlN2VhNDFkOTRkODc5ZDYyNGJjMzE1NDY5OTllMmRi
N2MzZTUwHhcNMjUxMDE5MTkwMjEzWhcNMjUxMDIwMTkwMjEzWjAzMTEwLwYDVQQD
EyhhMWFmZmZjZmNkMzljYmVkMzcwZmEwNGUzNjJhOWQ5M2QyN2IwMjE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv8MYhpAQA1Z5aXYW5ZiaOKTq8QEY
DUiLq01HQLGb+eDPahh09YGtG1X8vVR+rdZsbl0eesE4ia05WMyXvRig2OBi09Yn
MGMkOfCJEpFlzV+p7q3+5jhEzhCd5mBv41hjJ17w5X1nIGKic0+cJjIPN/F4FtZV
g4kpL/bG7FkD7xYPJDvvFZqGnaC1G+7G6Su3ckV2IUlJDfVkpKWphqVaeX4jmCKK
1GWE/M249BROPqi7T7R1uVSxQQ2WOKIpZqnQt9akQoMxrGwbuhfkSbYwmBF1JrSv
PKya23zwz07JwW80R8FvewEq5YHUZVUJVydpHqied07c0PyDmFJNtb6QywIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKGv/8/NOcvtNw+gTjYqnZPSewIUMB8GA1UdIwQY
MBaAFF6M5+pB2U2HnWJLwxVGmZ4tt8PlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWG96bjZrSFpUWWVkWWt2REZVYVpuaTIzdy1VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy81MDk3MTAtODgxNS00YTIwLThjMmUt
Mjg2YWRiZGRlNmQzLzEvWG96bjZrSFpUWWVkWWt2REZVYVpuaTIzdy1VLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMy81MDk3MTAtODgxNS00YTIwLThjMmUtMjg2YWRiZGRlNmQz
LzEvWG96bjZrSFpUWWVkWWt2REZVYVpuaTIzdy1VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZDiKMm1C
2+3/f6ncvZ4zNYwEfn+ReVIWfAklL7Pn8l4+A5PGuR3B9CDHdJcME8uQjYHDiZ5x
/CJXHv3trodFB/Jwn1aMrRJhtjgFfPXXPHfYScde4P80mIig/+OBcRWrPO1Ddx7G
5zUvZft1EUqfhQ5TI7/0pvwb3kyE2okVtHx0j3uZtJ8s4AVsxoTrqzx7EIwQIOlm
wF9dsO/SJ5QznndHGhb1Aa5/6nfH3SgeTcWLXcsYQ/ZQ596xSfF/HzMxg0dHDrXu
+ZZCwNnQ+e0u+DmEoxk3GL+G6tBN+8lmSeUQaErO3xsFkWIbMZwSCZgIGFIZn6H7
WOkc8mIffttSog==
-----END CERTIFICATE-----
Generated at Sun Oct 19 20:59:45 2025 by rpki-client