Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/587b7b-071c-430b-9eb2-6ec62690b19b/1/mXIUjHNiwsk5m7OvdBWSxCUWxUc.mft
File: mXIUjHNiwsk5m7OvdBWSxCUWxUc.mft (raw, json)
Hash identifier: BeO6r5xq03yMkA8Izk73BG9ytLrJ7G8ScEs3D/ZM4xw=
Subject key identifier: 41:5B:28:49:37:46:0F:D6:89:A8:EA:2F:63:05:6D:63:7B:B6:01:F2
Authority key identifier: 99:72:14:8C:73:62:C2:C9:39:9B:B3:AF:74:15:92:C4:25:16:C5:47
Certificate issuer: /CN=9972148c7362c2c9399bb3af741592c42516c547
Certificate serial: 0199FD342BB533399C3B2AF5D2FBA055F848
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mXIUjHNiwsk5m7OvdBWSxCUWxUc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/587b7b-071c-430b-9eb2-6ec62690b19b/1/mXIUjHNiwsk5m7OvdBWSxCUWxUc.mft
Manifest number: 121E
Signing time: Sun 19 Oct 2025 16:01:18 +0000
Manifest this update: Sun 19 Oct 2025 16:01:18 +0000
Manifest next update: Mon 20 Oct 2025 16:01:18 +0000
Files and hashes: 1: mXIUjHNiwsk5m7OvdBWSxCUWxUc.crl (hash: Wxy7ZQuwd+guaZjD11+N0id8coNOChoYqR2hnRD49c0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/587b7b-071c-430b-9eb2-6ec62690b19b/1/mXIUjHNiwsk5m7OvdBWSxCUWxUc.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/587b7b-071c-430b-9eb2-6ec62690b19b/1/mXIUjHNiwsk5m7OvdBWSxCUWxUc.mft
rsync://rpki.ripe.net/repository/DEFAULT/mXIUjHNiwsk5m7OvdBWSxCUWxUc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:34:2b:b5:33:39:9c:3b:2a:f5:d2:fb:a0:55:f8:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9972148c7362c2c9399bb3af741592c42516c547
Validity
Not Before: Oct 19 16:01:18 2025 GMT
Not After : Oct 20 16:01:18 2025 GMT
Subject: CN=415b284937460fd689a8ea2f63056d637bb601f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:97:cc:c9:42:64:de:f7:4e:ff:41:10:79:a8:
24:19:ae:f6:bb:f0:f2:70:61:ec:6e:e2:65:58:3e:
1d:de:64:1c:bd:71:e8:24:fc:9f:19:9a:af:a1:11:
48:f9:a7:51:ec:45:6d:cf:9f:8c:3f:74:58:a2:24:
f9:30:ca:f7:ca:44:0b:05:25:19:da:3b:57:97:3a:
48:45:db:2b:62:b3:eb:3f:9b:a1:2d:3a:88:9a:3a:
14:87:01:90:c9:7b:53:90:3f:3b:2e:e4:53:58:82:
03:73:0b:02:35:f4:1c:92:05:1e:71:cd:85:9d:47:
13:73:fc:78:6c:c1:b9:ab:9b:73:cd:4a:9a:01:89:
71:d7:32:a1:c2:2d:ed:db:ab:f2:a3:61:67:a6:92:
e0:c1:f8:98:94:0a:47:a7:8a:24:89:92:3d:47:00:
6f:40:e7:68:31:52:79:48:6d:08:9e:f4:ec:92:ae:
40:60:dd:55:b2:64:c2:d9:ee:f5:68:31:0e:6b:cb:
aa:63:81:ad:bf:d9:5e:40:06:00:0b:db:55:d2:b6:
16:dc:62:f4:08:0c:df:ec:c9:5b:9f:bb:39:23:42:
b5:ff:b3:13:e9:f0:d5:f5:3b:83:3a:eb:d2:4e:b6:
d8:2a:85:63:67:43:f8:70:85:d8:72:a5:e8:06:71:
26:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:5B:28:49:37:46:0F:D6:89:A8:EA:2F:63:05:6D:63:7B:B6:01:F2
X509v3 Authority Key Identifier:
keyid:99:72:14:8C:73:62:C2:C9:39:9B:B3:AF:74:15:92:C4:25:16:C5:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mXIUjHNiwsk5m7OvdBWSxCUWxUc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/587b7b-071c-430b-9eb2-6ec62690b19b/1/mXIUjHNiwsk5m7OvdBWSxCUWxUc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/587b7b-071c-430b-9eb2-6ec62690b19b/1/mXIUjHNiwsk5m7OvdBWSxCUWxUc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:30:64:49:6c:9f:73:67:4e:a2:46:9b:76:22:c8:96:ed:02:
13:49:c2:27:c6:34:8c:b2:d4:ab:e2:f5:76:bf:7f:c4:d0:a0:
57:a3:87:41:29:69:1a:e9:b8:38:1d:ee:37:31:71:36:32:4c:
2e:ef:37:5c:b7:f6:a1:0a:8f:f7:f7:e7:8d:bb:b8:a5:d8:93:
e7:30:cb:53:33:0e:19:05:d1:40:08:07:1e:c8:1e:5b:10:e2:
f8:3a:c6:d1:7f:5c:00:4d:dc:f1:c2:d8:c3:67:9c:5a:b0:b4:
1b:bc:51:d2:d4:a4:30:f9:1a:93:d6:ec:dd:6c:58:be:1e:8b:
78:2b:2b:6e:ee:cf:e2:2b:5c:bf:31:af:1e:95:58:3d:10:00:
18:c3:e4:7a:0c:f7:01:df:d2:f5:08:58:26:b1:9b:dc:40:f6:
6f:8f:77:0e:b6:20:87:07:d3:df:5a:94:0a:06:6b:11:70:a8:
37:51:18:eb:01:c0:dc:54:1f:48:38:8a:6e:1e:c2:48:94:1d:
7d:de:04:e2:0a:89:df:82:60:4a:ab:9b:ef:51:a7:ff:f2:1f:
57:c7:c8:66:5a:4c:17:a2:d2:b8:9c:54:27:fa:73:91:8e:b8:
11:44:87:22:83:48:1f:42:f8:d2:6e:6a:24:77:72:40:fe:7e:
c4:af:7b:7a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn9NCu1MzmcOyr10vugVfhIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk5NzIxNDhjNzM2MmMyYzkzOTliYjNhZjc0MTU5MmM0MjUx
NmM1NDcwHhcNMjUxMDE5MTYwMTE4WhcNMjUxMDIwMTYwMTE4WjAzMTEwLwYDVQQD
Eyg0MTViMjg0OTM3NDYwZmQ2ODlhOGVhMmY2MzA1NmQ2MzdiYjYwMWYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAypfMyUJk3vdO/0EQeagkGa72u/Dy
cGHsbuJlWD4d3mQcvXHoJPyfGZqvoRFI+adR7EVtz5+MP3RYoiT5MMr3ykQLBSUZ
2jtXlzpIRdsrYrPrP5uhLTqImjoUhwGQyXtTkD87LuRTWIIDcwsCNfQckgUecc2F
nUcTc/x4bMG5q5tzzUqaAYlx1zKhwi3t26vyo2FnppLgwfiYlApHp4okiZI9RwBv
QOdoMVJ5SG0InvTskq5AYN1VsmTC2e71aDEOa8uqY4Gtv9leQAYAC9tV0rYW3GL0
CAzf7Mlbn7s5I0K1/7MT6fDV9TuDOuvSTrbYKoVjZ0P4cIXYcqXoBnEmpwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEFbKEk3Rg/WiajqL2MFbWN7tgHyMB8GA1UdIwQY
MBaAFJlyFIxzYsLJOZuzr3QVksQlFsVHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbVhJVWpITml3c2s1bTdPdmRCV1N4Q1VXeFVjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy81ODdiN2ItMDcxYy00MzBiLTllYjIt
NmVjNjI2OTBiMTliLzEvbVhJVWpITml3c2s1bTdPdmRCV1N4Q1VXeFVjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYy81ODdiN2ItMDcxYy00MzBiLTllYjItNmVjNjI2OTBiMTli
LzEvbVhJVWpITml3c2s1bTdPdmRCV1N4Q1VXeFVjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHDBkSWyf
c2dOokabdiLIlu0CE0nCJ8Y0jLLUq+L1dr9/xNCgV6OHQSlpGum4OB3uNzFxNjJM
Lu83XLf2oQqP9/fnjbu4pdiT5zDLUzMOGQXRQAgHHsgeWxDi+DrG0X9cAE3c8cLY
w2ecWrC0G7xR0tSkMPkak9bs3WxYvh6LeCsrbu7P4itcvzGvHpVYPRAAGMPkegz3
Ad/S9QhYJrGb3ED2b493DrYghwfT31qUCgZrEXCoN1EY6wHA3FQfSDiKbh7CSJQd
fd4E4gqJ34JgSqub71Gn//IfV8fIZlpMF6LSuJxUJ/pzkY64EUSHIoNIH0L40m5q
JHdyQP5+xK97eg==
-----END CERTIFICATE-----
Generated at Sun Oct 19 20:37:28 2025 by rpki-client