Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/47d692-dd40-4bf2-893f-d38dd0b78909/1/0NxXC8HJZLq37VbGc6pAUY-FRXg.mft
File: 0NxXC8HJZLq37VbGc6pAUY-FRXg.mft (raw, json)
Hash identifier: IjqE8yqCB+VqpO8mXkf0QL/42er6FAu3EJ1QliWvFJ0=
Subject key identifier: E2:F3:19:65:9C:0E:34:1E:6E:C5:BE:78:50:FA:48:CC:B5:11:F5:E4
Authority key identifier: D0:DC:57:0B:C1:C9:64:BA:B7:ED:56:C6:73:AA:40:51:8F:85:45:78
Certificate issuer: /CN=d0dc570bc1c964bab7ed56c673aa40518f854578
Certificate serial: 0199FFC88E3132ED5228B109BE8F38AC7487
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0NxXC8HJZLq37VbGc6pAUY-FRXg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/47d692-dd40-4bf2-893f-d38dd0b78909/1/0NxXC8HJZLq37VbGc6pAUY-FRXg.mft
Manifest number: 16E2
Signing time: Mon 20 Oct 2025 04:02:37 +0000
Manifest this update: Mon 20 Oct 2025 04:02:37 +0000
Manifest next update: Tue 21 Oct 2025 04:02:37 +0000
Files and hashes: 1: 0NxXC8HJZLq37VbGc6pAUY-FRXg.crl (hash: 2ohwu93rr42VFHVBQjgtH7/BJ/aBXxya7S5IDpMmSMU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/47d692-dd40-4bf2-893f-d38dd0b78909/1/0NxXC8HJZLq37VbGc6pAUY-FRXg.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/47d692-dd40-4bf2-893f-d38dd0b78909/1/0NxXC8HJZLq37VbGc6pAUY-FRXg.mft
rsync://rpki.ripe.net/repository/DEFAULT/0NxXC8HJZLq37VbGc6pAUY-FRXg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:c8:8e:31:32:ed:52:28:b1:09:be:8f:38:ac:74:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0dc570bc1c964bab7ed56c673aa40518f854578
Validity
Not Before: Oct 20 04:02:37 2025 GMT
Not After : Oct 21 04:02:37 2025 GMT
Subject: CN=e2f319659c0e341e6ec5be7850fa48ccb511f5e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:49:b4:02:f5:c5:f6:82:99:f8:52:17:2c:e9:
7f:9a:f0:13:32:5b:f1:29:92:0f:b1:c9:91:ca:80:
37:c5:03:30:42:7b:d9:84:76:aa:d7:bd:12:fe:70:
ad:f8:13:8e:2a:40:c7:6e:f6:0b:94:81:5b:32:48:
f9:38:d5:46:d3:41:85:a1:8e:f9:97:a3:03:cb:1c:
e9:ca:35:c6:10:54:b1:ad:42:14:08:77:e6:6d:64:
2b:e3:7c:c0:2f:c0:1a:9e:da:d5:85:19:50:0e:1d:
f3:35:21:97:b2:bc:fa:3f:64:01:b6:53:9d:20:eb:
c9:0f:60:11:cf:98:15:19:6c:af:cb:7e:d9:4c:6d:
d9:be:bf:bc:78:60:f3:b2:b0:f3:7c:fa:ab:f8:90:
65:b7:0c:f7:97:7d:e5:49:14:5d:f8:c5:26:30:9e:
e9:1f:53:87:f9:f4:48:19:22:89:d2:1c:01:d9:3e:
b6:16:29:69:34:0a:77:09:22:48:9b:c8:41:e0:3e:
58:1e:dd:9e:63:08:14:83:be:0d:1d:b9:9f:75:aa:
71:06:4b:ae:6e:09:ba:c4:b1:c7:c6:26:3d:e1:c4:
a0:d6:d5:52:a3:61:59:70:e0:99:df:9a:ff:73:0c:
ce:e3:33:e2:4e:73:65:22:90:02:2c:99:82:1c:ee:
31:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:F3:19:65:9C:0E:34:1E:6E:C5:BE:78:50:FA:48:CC:B5:11:F5:E4
X509v3 Authority Key Identifier:
keyid:D0:DC:57:0B:C1:C9:64:BA:B7:ED:56:C6:73:AA:40:51:8F:85:45:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0NxXC8HJZLq37VbGc6pAUY-FRXg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/47d692-dd40-4bf2-893f-d38dd0b78909/1/0NxXC8HJZLq37VbGc6pAUY-FRXg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/47d692-dd40-4bf2-893f-d38dd0b78909/1/0NxXC8HJZLq37VbGc6pAUY-FRXg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:77:05:49:40:3e:b6:7b:62:64:ee:a3:ed:a0:2d:00:f7:84:
25:76:c4:16:48:c5:6a:63:97:3a:10:03:92:3c:9a:1c:33:72:
49:4c:05:3d:41:55:51:91:0b:07:da:9a:73:62:c8:f6:dc:a7:
2d:f2:b6:f7:65:23:52:1b:61:62:19:da:76:a9:94:fa:51:e7:
a4:eb:c6:8d:fd:72:20:a2:b1:fe:0a:2c:4a:a1:25:10:7a:a4:
69:a6:64:d6:78:f4:16:55:4d:dc:c3:11:7d:bf:d6:f3:26:c8:
e0:73:ef:96:47:57:24:bc:86:73:7a:31:a3:56:e1:d1:4c:da:
6a:d5:55:52:46:3c:fb:80:90:32:3d:37:0e:93:cb:4d:e5:8b:
db:80:51:b1:7e:29:07:47:3b:5f:6e:0c:9f:a1:60:53:43:d8:
4f:ea:61:1d:c4:be:8a:7a:cc:1b:69:15:ed:0e:43:f7:55:49:
2d:ff:68:23:1b:b7:fe:ca:e4:9f:f4:cc:75:85:45:ce:3d:ea:
0f:05:24:ce:b5:4c:db:b2:78:e1:9a:f9:41:8b:fa:ba:2d:48:
23:0b:35:70:01:8b:ee:bb:a8:da:7c:86:d9:a2:0c:f3:02:8c:
d9:ac:ed:31:8b:26:85:99:61:fb:66:74:4b:f5:d2:7f:af:cc:
fc:b1:b6:32
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn/yI4xMu1SKLEJvo84rHSHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQwZGM1NzBiYzFjOTY0YmFiN2VkNTZjNjczYWE0MDUxOGY4
NTQ1NzgwHhcNMjUxMDIwMDQwMjM3WhcNMjUxMDIxMDQwMjM3WjAzMTEwLwYDVQQD
EyhlMmYzMTk2NTljMGUzNDFlNmVjNWJlNzg1MGZhNDhjY2I1MTFmNWU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt0m0AvXF9oKZ+FIXLOl/mvATMlvx
KZIPscmRyoA3xQMwQnvZhHaq170S/nCt+BOOKkDHbvYLlIFbMkj5ONVG00GFoY75
l6MDyxzpyjXGEFSxrUIUCHfmbWQr43zAL8AantrVhRlQDh3zNSGXsrz6P2QBtlOd
IOvJD2ARz5gVGWyvy37ZTG3Zvr+8eGDzsrDzfPqr+JBltwz3l33lSRRd+MUmMJ7p
H1OH+fRIGSKJ0hwB2T62FilpNAp3CSJIm8hB4D5YHt2eYwgUg74NHbmfdapxBkuu
bgm6xLHHxiY94cSg1tVSo2FZcOCZ35r/cwzO4zPiTnNlIpACLJmCHO4xvwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOLzGWWcDjQebsW+eFD6SMy1EfXkMB8GA1UdIwQY
MBaAFNDcVwvByWS6t+1WxnOqQFGPhUV4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvME54WEM4SEpaTHEzN1ZiR2M2cEFVWS1GUlhnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi80N2Q2OTItZGQ0MC00YmYyLTg5M2Yt
ZDM4ZGQwYjc4OTA5LzEvME54WEM4SEpaTHEzN1ZiR2M2cEFVWS1GUlhnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Zi80N2Q2OTItZGQ0MC00YmYyLTg5M2YtZDM4ZGQwYjc4OTA5
LzEvME54WEM4SEpaTHEzN1ZiR2M2cEFVWS1GUlhnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALHcFSUA+
tntiZO6j7aAtAPeEJXbEFkjFamOXOhADkjyaHDNySUwFPUFVUZELB9qac2LI9tyn
LfK292UjUhthYhnadqmU+lHnpOvGjf1yIKKx/gosSqElEHqkaaZk1nj0FlVN3MMR
fb/W8ybI4HPvlkdXJLyGc3oxo1bh0UzaatVVUkY8+4CQMj03DpPLTeWL24BRsX4p
B0c7X24Mn6FgU0PYT+phHcS+inrMG2kV7Q5D91VJLf9oIxu3/srkn/TMdYVFzj3q
DwUkzrVM27J44Zr5QYv6ui1IIws1cAGL7ruo2nyG2aIM8wKM2aztMYsmhZlh+2Z0
S/XSf6/M/LG2Mg==
-----END CERTIFICATE-----
Generated at Mon Oct 20 08:48:16 2025 by rpki-client