Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/49a802-636e-4f06-b779-7c782f6a46c7/1/x3sZadmt3xmWMrTeBeiiDj3ntsQ.mft
File: x3sZadmt3xmWMrTeBeiiDj3ntsQ.mft (raw, json)
Hash identifier: 3nA7sQxFLh6nbXBV34+v+dks9Dgg2Yo8Z/FCWPb8MFg=
Subject key identifier: 89:A6:FA:84:D3:D5:05:1B:4E:D1:CC:00:13:DE:F1:BF:3E:6E:13:19
Authority key identifier: C7:7B:19:69:D9:AD:DF:19:96:32:B4:DE:05:E8:A2:0E:3D:E7:B6:C4
Certificate issuer: /CN=c77b1969d9addf199632b4de05e8a20e3de7b6c4
Certificate serial: 0199FE4753E15E1B5F6ECA425C9744201BE5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x3sZadmt3xmWMrTeBeiiDj3ntsQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/49a802-636e-4f06-b779-7c782f6a46c7/1/x3sZadmt3xmWMrTeBeiiDj3ntsQ.mft
Manifest number: 071B
Signing time: Sun 19 Oct 2025 21:01:51 +0000
Manifest this update: Sun 19 Oct 2025 21:01:51 +0000
Manifest next update: Mon 20 Oct 2025 21:01:51 +0000
Files and hashes: 1: x3sZadmt3xmWMrTeBeiiDj3ntsQ.crl (hash: F/WBpOIJpyy1HJsBBEeM7eN9U9hBDMcMyoL0rVbrAx8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/49a802-636e-4f06-b779-7c782f6a46c7/1/x3sZadmt3xmWMrTeBeiiDj3ntsQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/49a802-636e-4f06-b779-7c782f6a46c7/1/x3sZadmt3xmWMrTeBeiiDj3ntsQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/x3sZadmt3xmWMrTeBeiiDj3ntsQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:47:53:e1:5e:1b:5f:6e:ca:42:5c:97:44:20:1b:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c77b1969d9addf199632b4de05e8a20e3de7b6c4
Validity
Not Before: Oct 19 21:01:51 2025 GMT
Not After : Oct 20 21:01:51 2025 GMT
Subject: CN=89a6fa84d3d5051b4ed1cc0013def1bf3e6e1319
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:2a:2f:86:4f:00:cc:f4:09:8c:1a:4b:4b:02:
78:71:ee:0e:e5:8a:21:37:b7:69:b4:a6:00:cd:6b:
af:63:77:5d:cc:8e:75:f7:e0:5a:3b:9d:ee:75:a6:
f1:15:82:d8:f2:bc:22:6a:2d:98:ca:ec:e8:cd:20:
25:96:c7:f3:91:de:09:b3:fe:2c:7f:b0:27:75:01:
be:26:a1:a1:c5:1c:f6:58:c0:83:28:2a:40:0a:1a:
59:38:4a:a7:c4:68:6d:05:8b:e3:64:a9:94:a1:7f:
b4:8f:1c:71:3a:d0:96:c5:f8:00:90:f0:46:81:42:
21:7b:c9:0d:1a:e3:e5:6e:5a:52:e2:44:ad:a5:08:
fd:56:d5:54:11:cb:2c:ce:20:0f:c8:68:a5:69:c8:
8f:45:12:25:8f:60:56:c1:9f:f2:ec:b6:30:51:0d:
b1:9f:e7:c6:69:f1:0c:85:f4:f1:52:51:6e:ed:bf:
1a:26:a6:44:9b:74:eb:37:31:0d:db:a4:22:8a:44:
56:4c:6d:d9:65:fb:53:2f:a3:7c:90:bf:25:b7:ba:
e0:88:f6:11:fa:c6:5d:fe:ac:07:90:ba:f2:3e:69:
1e:3a:9f:2d:f1:49:13:2f:e4:3e:78:5b:7d:01:ff:
5d:d3:2f:90:3f:85:e3:30:5e:6d:4c:23:6e:2d:f6:
b5:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:A6:FA:84:D3:D5:05:1B:4E:D1:CC:00:13:DE:F1:BF:3E:6E:13:19
X509v3 Authority Key Identifier:
keyid:C7:7B:19:69:D9:AD:DF:19:96:32:B4:DE:05:E8:A2:0E:3D:E7:B6:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x3sZadmt3xmWMrTeBeiiDj3ntsQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/49a802-636e-4f06-b779-7c782f6a46c7/1/x3sZadmt3xmWMrTeBeiiDj3ntsQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/49a802-636e-4f06-b779-7c782f6a46c7/1/x3sZadmt3xmWMrTeBeiiDj3ntsQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d0:ef:f8:27:e3:f6:28:f8:c0:06:5c:67:ee:e4:e3:09:5a:8f:
be:95:88:c6:eb:53:4a:60:ea:a4:fa:59:9a:a4:1c:e5:89:f8:
23:99:07:2c:6d:d2:05:2c:3f:ad:aa:2e:5b:8f:70:d6:08:ba:
33:4c:d0:63:39:4a:f7:61:34:82:58:a1:c3:1f:0e:08:1d:6c:
00:46:98:ea:1b:c6:34:da:7b:9b:03:7a:12:32:50:0f:cd:92:
a1:21:33:72:28:2f:9d:08:e5:d0:44:98:88:bc:48:76:80:3f:
2c:34:eb:d2:72:ca:c7:00:25:1c:9b:4b:45:d1:d4:a0:a4:61:
b7:53:7b:bc:fb:9d:32:b1:24:94:53:d5:15:c0:ea:02:f2:96:
81:1b:a7:95:5e:f9:f4:2d:4e:70:ad:d1:00:75:f7:ad:41:bb:
a1:83:56:9a:fe:c4:58:3e:4e:2c:da:4e:ae:97:fc:08:a1:ca:
67:f4:30:27:a0:c4:00:20:0a:40:ad:c8:eb:23:85:79:c3:53:
2f:e0:26:76:8a:8f:91:8c:eb:df:3b:81:06:bc:ee:2e:d1:d1:
98:68:6e:f6:a4:05:98:8e:3b:13:5d:ed:73:e3:05:1e:e1:fb:
7a:02:ae:2d:5a:47:a3:8f:74:8f:59:5d:2f:34:ea:92:18:5e:
eb:fc:c0:22
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn+R1PhXhtfbspCXJdEIBvlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM3N2IxOTY5ZDlhZGRmMTk5NjMyYjRkZTA1ZThhMjBlM2Rl
N2I2YzQwHhcNMjUxMDE5MjEwMTUxWhcNMjUxMDIwMjEwMTUxWjAzMTEwLwYDVQQD
Eyg4OWE2ZmE4NGQzZDUwNTFiNGVkMWNjMDAxM2RlZjFiZjNlNmUxMzE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxCovhk8AzPQJjBpLSwJ4ce4O5Yoh
N7dptKYAzWuvY3ddzI519+BaO53udabxFYLY8rwiai2YyuzozSAllsfzkd4Js/4s
f7AndQG+JqGhxRz2WMCDKCpAChpZOEqnxGhtBYvjZKmUoX+0jxxxOtCWxfgAkPBG
gUIhe8kNGuPlblpS4kStpQj9VtVUEcssziAPyGilaciPRRIlj2BWwZ/y7LYwUQ2x
n+fGafEMhfTxUlFu7b8aJqZEm3TrNzEN26QiikRWTG3ZZftTL6N8kL8lt7rgiPYR
+sZd/qwHkLryPmkeOp8t8UkTL+Q+eFt9Af9d0y+QP4XjMF5tTCNuLfa1VwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFImm+oTT1QUbTtHMABPe8b8+bhMZMB8GA1UdIwQY
MBaAFMd7GWnZrd8ZljK03gXoog4957bEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveDNzWmFkbXQzeG1XTXJUZUJlaWlEajNudHNRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy80OWE4MDItNjM2ZS00ZjA2LWI3Nzkt
N2M3ODJmNmE0NmM3LzEveDNzWmFkbXQzeG1XTXJUZUJlaWlEajNudHNRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy80OWE4MDItNjM2ZS00ZjA2LWI3NzktN2M3ODJmNmE0NmM3
LzEveDNzWmFkbXQzeG1XTXJUZUJlaWlEajNudHNRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA0O/4J+P2
KPjABlxn7uTjCVqPvpWIxutTSmDqpPpZmqQc5Yn4I5kHLG3SBSw/raouW49w1gi6
M0zQYzlK92E0glihwx8OCB1sAEaY6hvGNNp7mwN6EjJQD82SoSEzcigvnQjl0ESY
iLxIdoA/LDTr0nLKxwAlHJtLRdHUoKRht1N7vPudMrEklFPVFcDqAvKWgRunlV75
9C1OcK3RAHX3rUG7oYNWmv7EWD5OLNpOrpf8CKHKZ/QwJ6DEACAKQK3I6yOFecNT
L+AmdoqPkYzr3zuBBrzuLtHRmGhu9qQFmI47E13tc+MFHuH7egKuLVpHo490j1ld
LzTqkhhe6/zAIg==
-----END CERTIFICATE-----
Generated at Mon Oct 20 01:11:15 2025 by rpki-client