Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/90f61b-9542-4433-913e-3e9a8fbeaaa5/1/x9CAN66dCrMNEA0U2WFLeNY5Srw.mft
File: x9CAN66dCrMNEA0U2WFLeNY5Srw.mft (raw, json)
Hash identifier: Fxf9dZ1u83j5/6+/3s7IYfqC0pOKv5MWulioaMhQ+p8=
Subject key identifier: 6F:CE:F7:A6:64:0B:35:8C:4E:D9:A2:AE:84:5A:80:0B:9D:0C:74:76
Authority key identifier: C7:D0:80:37:AE:9D:0A:B3:0D:10:0D:14:D9:61:4B:78:D6:39:4A:BC
Certificate issuer: /CN=c7d08037ae9d0ab30d100d14d9614b78d6394abc
Certificate serial: 0199FD34397DD076725885683FABBFF91643
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x9CAN66dCrMNEA0U2WFLeNY5Srw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/90f61b-9542-4433-913e-3e9a8fbeaaa5/1/x9CAN66dCrMNEA0U2WFLeNY5Srw.mft
Manifest number: 0291
Signing time: Sun 19 Oct 2025 16:01:22 +0000
Manifest this update: Sun 19 Oct 2025 16:01:22 +0000
Manifest next update: Mon 20 Oct 2025 16:01:22 +0000
Files and hashes: 1: x9CAN66dCrMNEA0U2WFLeNY5Srw.crl (hash: 7jS87kkThK5ld/Ypxne12Ir+FVjMp0sLvgGbKpEGqFo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/90f61b-9542-4433-913e-3e9a8fbeaaa5/1/x9CAN66dCrMNEA0U2WFLeNY5Srw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/90f61b-9542-4433-913e-3e9a8fbeaaa5/1/x9CAN66dCrMNEA0U2WFLeNY5Srw.mft
rsync://rpki.ripe.net/repository/DEFAULT/x9CAN66dCrMNEA0U2WFLeNY5Srw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:34:39:7d:d0:76:72:58:85:68:3f:ab:bf:f9:16:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7d08037ae9d0ab30d100d14d9614b78d6394abc
Validity
Not Before: Oct 19 16:01:22 2025 GMT
Not After : Oct 20 16:01:22 2025 GMT
Subject: CN=6fcef7a6640b358c4ed9a2ae845a800b9d0c7476
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:90:5c:27:8f:be:67:67:fe:69:7a:57:af:e2:
e1:48:2e:2e:c2:7d:d1:6e:7a:64:af:a5:4f:2b:15:
6f:0d:b1:ac:56:a3:d2:56:33:6c:83:47:f3:42:cd:
d8:cc:0a:04:18:f9:f0:7e:81:6c:d9:cb:32:91:97:
98:a5:a5:1c:f4:79:ad:a7:2b:93:62:aa:1e:be:72:
af:89:55:26:3b:d4:59:db:55:28:e7:69:3f:f0:59:
f4:1c:eb:1b:b8:9d:0a:c9:61:bb:8f:b5:07:d0:94:
0f:83:1e:17:ff:55:d0:31:cd:f2:7c:08:73:ca:15:
1d:01:ef:78:77:d5:85:25:16:3b:19:f8:b0:9e:6f:
d5:65:ba:b9:8b:93:b6:49:23:43:6e:ab:8e:98:bf:
db:5f:65:7c:2b:29:32:4e:ac:24:55:10:a6:20:76:
57:3f:66:f4:59:0a:5c:d6:0d:5f:95:a2:47:67:9b:
f2:9a:b1:9c:55:42:90:67:92:eb:4f:b9:35:c2:cf:
2b:8e:24:e5:b1:a1:2b:d0:6c:16:36:0c:67:23:6f:
68:e2:26:7d:6f:a7:9d:d5:f7:af:13:9b:25:19:d9:
03:3b:06:af:63:1c:8e:da:d0:40:1a:f4:d7:08:2d:
0b:79:f6:a3:cc:7c:6d:50:e7:c0:37:66:c2:a9:4a:
5f:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:CE:F7:A6:64:0B:35:8C:4E:D9:A2:AE:84:5A:80:0B:9D:0C:74:76
X509v3 Authority Key Identifier:
keyid:C7:D0:80:37:AE:9D:0A:B3:0D:10:0D:14:D9:61:4B:78:D6:39:4A:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x9CAN66dCrMNEA0U2WFLeNY5Srw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/90f61b-9542-4433-913e-3e9a8fbeaaa5/1/x9CAN66dCrMNEA0U2WFLeNY5Srw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/90f61b-9542-4433-913e-3e9a8fbeaaa5/1/x9CAN66dCrMNEA0U2WFLeNY5Srw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:1a:ce:1e:92:fa:66:06:e6:7e:77:67:97:dd:cf:07:2d:fa:
96:24:9a:0c:01:01:bd:0e:30:c6:9d:e9:61:dc:53:88:59:7b:
64:57:31:d4:f8:69:34:b2:86:d2:96:c6:d8:fd:09:46:df:2f:
54:02:75:95:dd:c2:06:2c:28:de:8e:47:b8:c4:cd:60:5a:9f:
65:2c:d4:da:9d:19:e4:47:44:5b:a8:49:b6:a9:10:0e:3f:c9:
d4:d1:d1:fc:fa:ae:21:e2:7e:86:e6:ce:4e:43:4d:8a:ca:ca:
52:1f:55:8d:31:6d:a0:96:d0:23:9c:86:69:0d:a0:c2:b6:8f:
89:24:b7:f4:1a:19:b9:b0:76:ae:fa:7b:f7:d9:4a:67:87:ce:
f1:4e:85:62:c3:29:43:1f:e8:a3:34:c7:69:83:2c:67:2f:b1:
b4:78:99:2a:d0:0a:8e:81:3f:d0:9a:a1:d8:cb:8f:54:49:c5:
59:03:f8:4e:c4:4b:7d:02:3a:71:e3:c0:94:24:2c:3f:3c:f0:
be:27:5b:87:c6:d8:90:0b:31:b2:18:96:cb:e5:2d:cb:98:8f:
6d:e1:6c:0f:73:15:28:35:42:06:97:d2:b4:c7:ea:60:56:c4:
24:a2:44:4c:21:00:ba:7b:73:7c:6f:11:d8:d2:52:57:26:bd:
81:89:f4:0d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn9NDl90HZyWIVoP6u/+RZDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM3ZDA4MDM3YWU5ZDBhYjMwZDEwMGQxNGQ5NjE0Yjc4ZDYz
OTRhYmMwHhcNMjUxMDE5MTYwMTIyWhcNMjUxMDIwMTYwMTIyWjAzMTEwLwYDVQQD
Eyg2ZmNlZjdhNjY0MGIzNThjNGVkOWEyYWU4NDVhODAwYjlkMGM3NDc2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAspBcJ4++Z2f+aXpXr+LhSC4uwn3R
bnpkr6VPKxVvDbGsVqPSVjNsg0fzQs3YzAoEGPnwfoFs2csykZeYpaUc9HmtpyuT
YqoevnKviVUmO9RZ21Uo52k/8Fn0HOsbuJ0KyWG7j7UH0JQPgx4X/1XQMc3yfAhz
yhUdAe94d9WFJRY7Gfiwnm/VZbq5i5O2SSNDbquOmL/bX2V8KykyTqwkVRCmIHZX
P2b0WQpc1g1flaJHZ5vymrGcVUKQZ5LrT7k1ws8rjiTlsaEr0GwWNgxnI29o4iZ9
b6ed1fevE5slGdkDOwavYxyO2tBAGvTXCC0LefajzHxtUOfAN2bCqUpfUwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG/O96ZkCzWMTtmiroRagAudDHR2MB8GA1UdIwQY
MBaAFMfQgDeunQqzDRANFNlhS3jWOUq8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveDlDQU42NmRDck1ORUEwVTJXRkxlTlk1U3J3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy85MGY2MWItOTU0Mi00NDMzLTkxM2Ut
M2U5YThmYmVhYWE1LzEveDlDQU42NmRDck1ORUEwVTJXRkxlTlk1U3J3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYy85MGY2MWItOTU0Mi00NDMzLTkxM2UtM2U5YThmYmVhYWE1
LzEveDlDQU42NmRDck1ORUEwVTJXRkxlTlk1U3J3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVhrOHpL6
Zgbmfndnl93PBy36liSaDAEBvQ4wxp3pYdxTiFl7ZFcx1PhpNLKG0pbG2P0JRt8v
VAJ1ld3CBiwo3o5HuMTNYFqfZSzU2p0Z5EdEW6hJtqkQDj/J1NHR/PquIeJ+hubO
TkNNisrKUh9VjTFtoJbQI5yGaQ2gwraPiSS39BoZubB2rvp799lKZ4fO8U6FYsMp
Qx/oozTHaYMsZy+xtHiZKtAKjoE/0Jqh2MuPVEnFWQP4TsRLfQI6cePAlCQsPzzw
vidbh8bYkAsxshiWy+Uty5iPbeFsD3MVKDVCBpfStMfqYFbEJKJETCEAuntzfG8R
2NJSVya9gYn0DQ==
-----END CERTIFICATE-----
Generated at Sun Oct 19 20:44:43 2025 by rpki-client