Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/edd7af-2ff0-45dc-b14b-77d516be7a87/1/xCl41TJpj7IIQPlCsCR8Acj1eLI.mft
File: xCl41TJpj7IIQPlCsCR8Acj1eLI.mft (raw, json)
Hash identifier: lzImBbd9IlHm/LPgaCgVjgVeG3M6tyx9hjqz71QYYkg=
Subject key identifier: 95:17:AD:27:BE:75:CC:DE:D2:4E:5B:2E:F6:0F:DF:62:29:47:7B:F4
Authority key identifier: C4:29:78:D5:32:69:8F:B2:08:40:F9:42:B0:24:7C:01:C8:F5:78:B2
Certificate issuer: /CN=c42978d532698fb20840f942b0247c01c8f578b2
Certificate serial: 019A0035E397F1B029F64C74228611AB1FB4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xCl41TJpj7IIQPlCsCR8Acj1eLI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/edd7af-2ff0-45dc-b14b-77d516be7a87/1/xCl41TJpj7IIQPlCsCR8Acj1eLI.mft
Manifest number: 13D2
Signing time: Mon 20 Oct 2025 06:02:02 +0000
Manifest this update: Mon 20 Oct 2025 06:02:02 +0000
Manifest next update: Tue 21 Oct 2025 06:02:02 +0000
Files and hashes: 1: sUz3CUFPMP6K6odB4EEfathIrJc.roa (hash: 1ZdcoiC8lHKCzYuENUSvIoHg+7T85+kAy12nWc2yMX0=)
2: xCl41TJpj7IIQPlCsCR8Acj1eLI.crl (hash: 6aJkvFwBal0OXBcXGor7mA/xK5+njti0yYEjIxx2cjk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/edd7af-2ff0-45dc-b14b-77d516be7a87/1/xCl41TJpj7IIQPlCsCR8Acj1eLI.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/edd7af-2ff0-45dc-b14b-77d516be7a87/1/xCl41TJpj7IIQPlCsCR8Acj1eLI.mft
rsync://rpki.ripe.net/repository/DEFAULT/xCl41TJpj7IIQPlCsCR8Acj1eLI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 06:02:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:00:35:e3:97:f1:b0:29:f6:4c:74:22:86:11:ab:1f:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c42978d532698fb20840f942b0247c01c8f578b2
Validity
Not Before: Oct 20 06:02:02 2025 GMT
Not After : Oct 21 06:02:02 2025 GMT
Subject: CN=9517ad27be75ccded24e5b2ef60fdf6229477bf4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:19:f8:0a:1f:5e:1b:82:52:02:29:38:ef:67:
1e:0e:c1:0c:34:8f:73:69:f4:75:66:ae:08:cb:31:
74:7e:16:e8:ea:46:01:ea:4c:d0:89:44:48:e6:6a:
08:41:ee:58:2e:6d:98:8e:cb:5f:47:e1:bb:57:87:
93:4b:23:ec:a4:cb:c2:c7:d2:12:6a:d7:6c:6f:51:
48:64:a5:20:51:56:77:e4:3a:10:1b:2e:e0:a4:a7:
dd:bf:bf:42:2c:0d:f4:7a:04:6a:73:45:67:82:9a:
26:3e:40:93:e4:d7:14:d7:da:b1:20:5b:89:b0:f6:
ab:4e:32:27:1c:40:c6:d1:e7:a1:3b:78:17:6a:48:
e6:be:ec:e4:2c:36:7c:e5:64:2d:59:5a:ab:45:98:
ab:b1:58:ec:4a:41:d7:74:2b:db:c3:9f:83:d1:9c:
93:17:d0:d3:af:61:b4:08:a4:e4:d1:0f:8c:8f:a3:
39:9a:be:82:27:c7:42:a9:b5:49:54:b5:9c:bd:59:
97:0d:da:66:98:df:86:7e:a7:1f:dc:e8:54:52:00:
c8:21:b9:37:3a:c9:05:39:1c:45:05:b4:5a:a6:fa:
cb:9a:cd:a5:5f:ad:e2:f6:4d:fb:f7:b9:a4:a2:2e:
be:8e:2f:2a:60:6c:96:d0:e7:17:4d:74:72:26:cc:
df:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:17:AD:27:BE:75:CC:DE:D2:4E:5B:2E:F6:0F:DF:62:29:47:7B:F4
X509v3 Authority Key Identifier:
keyid:C4:29:78:D5:32:69:8F:B2:08:40:F9:42:B0:24:7C:01:C8:F5:78:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xCl41TJpj7IIQPlCsCR8Acj1eLI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/edd7af-2ff0-45dc-b14b-77d516be7a87/1/xCl41TJpj7IIQPlCsCR8Acj1eLI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/edd7af-2ff0-45dc-b14b-77d516be7a87/1/xCl41TJpj7IIQPlCsCR8Acj1eLI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:dc:d0:66:2a:de:49:85:2e:64:39:47:f9:ed:d3:57:0e:e7:
40:6d:89:8f:59:10:61:69:89:83:bb:0b:b1:db:61:9d:19:ca:
24:75:f4:4b:9a:47:7b:84:71:9a:62:25:b0:97:23:cd:6c:17:
24:54:6b:c6:e5:a1:cf:e1:2b:e2:9a:8b:bd:9c:2e:86:10:75:
70:99:26:eb:56:6f:b5:3f:78:4c:15:b7:f1:0d:9d:cc:9a:7c:
75:1b:e6:c0:0a:83:ed:90:9f:54:76:07:63:04:55:69:96:44:
bf:4b:b7:8f:b0:a1:15:ca:60:37:a6:3b:88:ee:c7:3a:b7:d3:
34:f7:9a:50:34:08:76:40:e5:c2:d0:5f:b4:71:25:9e:47:81:
8d:bd:98:04:71:64:1e:9c:0d:5b:9f:ba:8d:49:ff:6d:02:0f:
a0:20:8b:df:ac:0d:7c:e2:37:e4:6b:df:79:0c:56:46:cf:02:
34:74:27:37:83:f5:0c:7c:ba:b2:94:da:d0:cb:b5:d5:1f:0a:
dd:fc:28:81:d4:f7:08:21:a2:92:92:25:48:81:da:04:ae:ea:
c0:69:78:13:e8:e7:0e:35:04:26:04:1d:84:13:65:bf:0f:60:
1b:9d:50:42:d2:9d:9c:d9:0f:c7:3a:fe:c3:30:6d:17:cc:ce:
a0:cc:6c:e8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoANeOX8bAp9kx0IoYRqx+0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM0Mjk3OGQ1MzI2OThmYjIwODQwZjk0MmIwMjQ3YzAxYzhm
NTc4YjIwHhcNMjUxMDIwMDYwMjAyWhcNMjUxMDIxMDYwMjAyWjAzMTEwLwYDVQQD
Eyg5NTE3YWQyN2JlNzVjY2RlZDI0ZTViMmVmNjBmZGY2MjI5NDc3YmY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3xn4Ch9eG4JSAik472ceDsEMNI9z
afR1Zq4IyzF0fhbo6kYB6kzQiURI5moIQe5YLm2YjstfR+G7V4eTSyPspMvCx9IS
atdsb1FIZKUgUVZ35DoQGy7gpKfdv79CLA30egRqc0VngpomPkCT5NcU19qxIFuJ
sParTjInHEDG0eehO3gXakjmvuzkLDZ85WQtWVqrRZirsVjsSkHXdCvbw5+D0ZyT
F9DTr2G0CKTk0Q+Mj6M5mr6CJ8dCqbVJVLWcvVmXDdpmmN+Gfqcf3OhUUgDIIbk3
OskFORxFBbRapvrLms2lX63i9k3797mkoi6+ji8qYGyW0OcXTXRyJszfDwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJUXrSe+dcze0k5bLvYP32IpR3v0MB8GA1UdIwQY
MBaAFMQpeNUyaY+yCED5QrAkfAHI9XiyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveENsNDFUSnBqN0lJUVBsQ3NDUjhBY2oxZUxJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy9lZGQ3YWYtMmZmMC00NWRjLWIxNGIt
NzdkNTE2YmU3YTg3LzEveENsNDFUSnBqN0lJUVBsQ3NDUjhBY2oxZUxJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNy9lZGQ3YWYtMmZmMC00NWRjLWIxNGItNzdkNTE2YmU3YTg3
LzEveENsNDFUSnBqN0lJUVBsQ3NDUjhBY2oxZUxJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAn9zQZire
SYUuZDlH+e3TVw7nQG2Jj1kQYWmJg7sLsdthnRnKJHX0S5pHe4RxmmIlsJcjzWwX
JFRrxuWhz+Er4pqLvZwuhhB1cJkm61ZvtT94TBW38Q2dzJp8dRvmwAqD7ZCfVHYH
YwRVaZZEv0u3j7ChFcpgN6Y7iO7HOrfTNPeaUDQIdkDlwtBftHElnkeBjb2YBHFk
HpwNW5+6jUn/bQIPoCCL36wNfOI35GvfeQxWRs8CNHQnN4P1DHy6spTa0Mu11R8K
3fwogdT3CCGikpIlSIHaBK7qwGl4E+jnDjUEJgQdhBNlvw9gG51QQtKdnNkPxzr+
wzBtF8zOoMxs6A==
-----END CERTIFICATE-----
Generated at Mon Oct 20 14:39:58 2025 by rpki-client