Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/edd551-baf0-4a57-97a8-745e500d8fcf/1/rexYoAJJXQOtXZ0R3RQh8ZUShSQ.mft
File: rexYoAJJXQOtXZ0R3RQh8ZUShSQ.mft (raw, json)
Hash identifier: 3rE7Gi/6SJfNpXmW4nrrSL7lOpm6YO1FZx5x8PVFZzE=
Subject key identifier: 95:C3:5A:60:F9:E4:B7:E6:16:7D:2D:3B:23:7B:C0:48:F6:72:72:88
Authority key identifier: AD:EC:58:A0:02:49:5D:03:AD:5D:9D:11:DD:14:21:F1:95:12:85:24
Certificate issuer: /CN=adec58a002495d03ad5d9d11dd1421f195128524
Certificate serial: 0199FCC6A43E72A3378ED62E81328188C9EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rexYoAJJXQOtXZ0R3RQh8ZUShSQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/edd551-baf0-4a57-97a8-745e500d8fcf/1/rexYoAJJXQOtXZ0R3RQh8ZUShSQ.mft
Manifest number: 05DC
Signing time: Sun 19 Oct 2025 14:01:40 +0000
Manifest this update: Sun 19 Oct 2025 14:01:40 +0000
Manifest next update: Mon 20 Oct 2025 14:01:40 +0000
Files and hashes: 1: rexYoAJJXQOtXZ0R3RQh8ZUShSQ.crl (hash: 351aGJXo30uu6pTf8tbdSMIQ11hj86Z+eq0fgscXIvU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/edd551-baf0-4a57-97a8-745e500d8fcf/1/rexYoAJJXQOtXZ0R3RQh8ZUShSQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/edd551-baf0-4a57-97a8-745e500d8fcf/1/rexYoAJJXQOtXZ0R3RQh8ZUShSQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/rexYoAJJXQOtXZ0R3RQh8ZUShSQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:a4:3e:72:a3:37:8e:d6:2e:81:32:81:88:c9:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=adec58a002495d03ad5d9d11dd1421f195128524
Validity
Not Before: Oct 19 14:01:40 2025 GMT
Not After : Oct 20 14:01:40 2025 GMT
Subject: CN=95c35a60f9e4b7e6167d2d3b237bc048f6727288
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:27:85:ac:91:68:bf:12:b4:ee:20:55:26:1e:
c7:dc:31:44:38:be:d3:d2:81:0e:42:8b:ef:78:a3:
5f:ca:f4:eb:4a:6e:86:13:a7:86:fa:de:04:de:3d:
81:86:cd:1d:a4:fa:a7:60:eb:40:7a:ba:95:5f:e8:
7f:c0:2c:84:1e:8b:71:99:e9:54:5d:95:48:c7:65:
2d:a0:bc:5e:f8:07:c9:10:ec:ee:a7:77:dc:63:17:
18:c2:90:d1:46:57:3d:50:60:4e:3b:a0:df:a0:f9:
e0:1d:65:81:70:12:bd:74:bd:96:24:80:26:5f:f9:
8a:f5:ba:19:12:81:57:5a:11:7e:59:8f:82:f8:2d:
0f:db:32:1d:c0:dd:cd:6b:49:d3:2a:15:d0:87:fc:
33:69:79:fa:d5:52:e7:90:af:7c:c3:c8:26:30:fd:
d3:aa:39:4c:99:b9:8b:0a:2e:e6:94:c3:f1:ef:90:
f4:69:6f:25:e5:91:5b:d8:50:32:e0:51:10:53:3b:
39:99:83:af:5f:64:c2:b5:53:81:3d:d1:72:9d:3f:
8d:89:e4:41:48:62:31:61:2f:5f:84:9b:08:3c:2a:
a9:d9:f5:d5:7b:07:cb:0c:73:50:89:19:34:3c:f4:
33:05:f6:7b:13:59:53:5a:30:07:fd:59:2c:b8:a2:
b4:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:C3:5A:60:F9:E4:B7:E6:16:7D:2D:3B:23:7B:C0:48:F6:72:72:88
X509v3 Authority Key Identifier:
keyid:AD:EC:58:A0:02:49:5D:03:AD:5D:9D:11:DD:14:21:F1:95:12:85:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rexYoAJJXQOtXZ0R3RQh8ZUShSQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/edd551-baf0-4a57-97a8-745e500d8fcf/1/rexYoAJJXQOtXZ0R3RQh8ZUShSQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/edd551-baf0-4a57-97a8-745e500d8fcf/1/rexYoAJJXQOtXZ0R3RQh8ZUShSQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:d7:95:e4:64:ae:ad:5e:2f:ca:da:d1:82:ef:39:42:97:fd:
38:13:11:fe:00:8a:7b:38:5e:bf:03:1f:ba:9c:bd:74:0f:bc:
9d:4d:e0:33:1b:da:74:47:1d:2a:67:a4:28:1b:f4:9c:ee:2b:
d1:49:6a:76:4b:c8:7b:27:e0:4f:08:bf:e2:d6:29:4c:46:75:
21:61:51:92:e8:f4:06:a9:f1:e1:1b:b1:e2:dd:0d:07:23:79:
3d:46:6d:af:53:15:ac:4b:97:6e:0a:06:f8:9b:71:61:96:2b:
c9:c9:f3:67:c9:9b:5f:b8:59:90:9a:15:d2:c5:bf:c8:da:f3:
22:5a:bb:cc:ba:f4:9a:64:71:72:3d:82:29:41:d1:d8:b1:b8:
f8:ea:2b:0b:42:b0:b0:17:c6:ef:44:2b:94:fc:ff:fa:c9:f0:
98:48:1b:d8:a7:07:30:27:99:2e:ed:47:b5:bc:80:75:2f:2d:
23:e8:c1:ad:51:94:25:64:bb:81:62:fd:b7:da:ed:78:9e:c0:
27:5b:5b:b7:1e:77:6d:53:b2:84:b1:b1:57:53:9c:45:db:e3:
c4:ef:25:17:fe:65:b7:d7:a2:a0:f6:5d:42:38:92:c2:fe:54:
5a:07:1d:77:1a:9d:d4:f0:6b:b3:d6:42:e9:82:d8:82:37:1a:
7c:57:17:f5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8xqQ+cqM3jtYugTKBiMnqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFkZWM1OGEwMDI0OTVkMDNhZDVkOWQxMWRkMTQyMWYxOTUx
Mjg1MjQwHhcNMjUxMDE5MTQwMTQwWhcNMjUxMDIwMTQwMTQwWjAzMTEwLwYDVQQD
Eyg5NWMzNWE2MGY5ZTRiN2U2MTY3ZDJkM2IyMzdiYzA0OGY2NzI3Mjg4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0SeFrJFovxK07iBVJh7H3DFEOL7T
0oEOQovveKNfyvTrSm6GE6eG+t4E3j2Bhs0dpPqnYOtAerqVX+h/wCyEHotxmelU
XZVIx2UtoLxe+AfJEOzup3fcYxcYwpDRRlc9UGBOO6DfoPngHWWBcBK9dL2WJIAm
X/mK9boZEoFXWhF+WY+C+C0P2zIdwN3Na0nTKhXQh/wzaXn61VLnkK98w8gmMP3T
qjlMmbmLCi7mlMPx75D0aW8l5ZFb2FAy4FEQUzs5mYOvX2TCtVOBPdFynT+NieRB
SGIxYS9fhJsIPCqp2fXVewfLDHNQiRk0PPQzBfZ7E1lTWjAH/VksuKK0RwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJXDWmD55LfmFn0tOyN7wEj2cnKIMB8GA1UdIwQY
MBaAFK3sWKACSV0DrV2dEd0UIfGVEoUkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcmV4WW9BSkpYUU90WFowUjNSUWg4WlVTaFNRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Mi9lZGQ1NTEtYmFmMC00YTU3LTk3YTgt
NzQ1ZTUwMGQ4ZmNmLzEvcmV4WW9BSkpYUU90WFowUjNSUWg4WlVTaFNRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Mi9lZGQ1NTEtYmFmMC00YTU3LTk3YTgtNzQ1ZTUwMGQ4ZmNm
LzEvcmV4WW9BSkpYUU90WFowUjNSUWg4WlVTaFNRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANteV5GSu
rV4vytrRgu85Qpf9OBMR/gCKezhevwMfupy9dA+8nU3gMxvadEcdKmekKBv0nO4r
0UlqdkvIeyfgTwi/4tYpTEZ1IWFRkuj0Bqnx4Rux4t0NByN5PUZtr1MVrEuXbgoG
+JtxYZYrycnzZ8mbX7hZkJoV0sW/yNrzIlq7zLr0mmRxcj2CKUHR2LG4+OorC0Kw
sBfG70QrlPz/+snwmEgb2KcHMCeZLu1HtbyAdS8tI+jBrVGUJWS7gWL9t9rteJ7A
J1tbtx53bVOyhLGxV1OcRdvjxO8lF/5lt9eioPZdQjiSwv5UWgcddxqd1PBrs9ZC
6YLYgjcafFcX9Q==
-----END CERTIFICATE-----
Generated at Sun Oct 19 20:47:22 2025 by rpki-client