Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/1000b6-e217-4b0c-9cb1-6d5279c2fe07/1/xQCr8-yqCjNSDFbmruzkS-r6J1Q.mft
File: xQCr8-yqCjNSDFbmruzkS-r6J1Q.mft (raw, json)
Hash identifier: Od2jBig2fJUTYw9fPMZPSCvywdTYcMozI9ge3UCibBc=
Subject key identifier: 1F:48:A9:F5:59:B4:E6:54:5A:33:BC:13:0C:2A:FE:81:2C:73:41:40
Authority key identifier: C5:00:AB:F3:EC:AA:0A:33:52:0C:56:E6:AE:EC:E4:4B:EA:FA:27:54
Certificate issuer: /CN=c500abf3ecaa0a33520c56e6aeece44beafa2754
Certificate serial: 0198D65FD9CF9E89D04CA247482A6BFA6C4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xQCr8-yqCjNSDFbmruzkS-r6J1Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/1000b6-e217-4b0c-9cb1-6d5279c2fe07/1/xQCr8-yqCjNSDFbmruzkS-r6J1Q.mft
Manifest number: 13A2
Signing time: Sat 23 Aug 2025 10:01:02 +0000
Manifest this update: Sat 23 Aug 2025 10:01:02 +0000
Manifest next update: Sun 24 Aug 2025 10:01:02 +0000
Files and hashes: 1: xQCr8-yqCjNSDFbmruzkS-r6J1Q.crl (hash: N06G8jrEVceRMRKzM8rBZxjmu5QQKHqDdjSHqudQ6KQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/1000b6-e217-4b0c-9cb1-6d5279c2fe07/1/xQCr8-yqCjNSDFbmruzkS-r6J1Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/1000b6-e217-4b0c-9cb1-6d5279c2fe07/1/xQCr8-yqCjNSDFbmruzkS-r6J1Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/xQCr8-yqCjNSDFbmruzkS-r6J1Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:d9:cf:9e:89:d0:4c:a2:47:48:2a:6b:fa:6c:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c500abf3ecaa0a33520c56e6aeece44beafa2754
Validity
Not Before: Aug 23 10:01:02 2025 GMT
Not After : Aug 24 10:01:02 2025 GMT
Subject: CN=1f48a9f559b4e6545a33bc130c2afe812c734140
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:c7:89:c9:48:5c:13:90:1f:4c:2d:d2:7b:c0:
e2:3b:4c:fd:91:b1:1f:e3:54:8d:59:bd:35:88:9d:
87:8d:8a:1b:83:23:f5:bb:44:b9:4d:e8:ab:fc:86:
96:9c:39:cd:63:29:0e:24:f0:73:02:23:7a:1b:4e:
61:c1:60:ae:8f:b2:7f:bf:b4:90:89:fa:8b:6b:d0:
d7:56:d1:ca:64:9a:af:1b:e7:85:9c:b7:f9:e4:39:
7b:d5:14:71:f9:6a:cf:f5:2e:a9:f5:85:c8:7b:4c:
a6:35:b3:08:1d:d5:0a:cf:8b:7c:eb:f4:ee:d2:b3:
45:39:b6:26:b0:e8:ec:02:ca:5c:f2:f0:90:52:5e:
4e:cf:06:73:94:29:7a:ed:f6:7c:d6:62:9e:77:d2:
93:32:c5:e3:82:bc:d4:0b:0e:4d:65:69:44:80:d1:
54:ca:9d:b0:13:2a:58:1f:ba:2d:f1:db:c3:f0:85:
fd:a3:eb:56:04:40:4e:3e:58:6e:24:6b:18:4e:45:
c8:1c:5a:65:67:d1:44:bd:9e:8e:98:c4:28:d4:68:
52:e0:f3:64:8a:fc:fe:c7:02:02:34:1b:55:80:58:
a2:33:b0:de:f9:67:2e:5b:cb:84:80:c7:01:f7:91:
39:e7:23:29:ab:e1:fd:9a:6f:9c:2b:19:3c:9c:27:
03:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:48:A9:F5:59:B4:E6:54:5A:33:BC:13:0C:2A:FE:81:2C:73:41:40
X509v3 Authority Key Identifier:
keyid:C5:00:AB:F3:EC:AA:0A:33:52:0C:56:E6:AE:EC:E4:4B:EA:FA:27:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xQCr8-yqCjNSDFbmruzkS-r6J1Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/1000b6-e217-4b0c-9cb1-6d5279c2fe07/1/xQCr8-yqCjNSDFbmruzkS-r6J1Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/1000b6-e217-4b0c-9cb1-6d5279c2fe07/1/xQCr8-yqCjNSDFbmruzkS-r6J1Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:20:be:3b:df:50:b8:29:21:d2:2e:15:63:98:a7:2b:33:0f:
96:ad:41:2a:f3:70:28:77:ce:63:b9:a6:8e:2e:33:7b:e2:8f:
1c:36:77:89:eb:76:15:27:4c:ea:b1:96:85:63:3c:7f:7a:a9:
e6:63:79:d8:a0:95:b0:be:70:7e:71:55:33:31:7b:b5:a8:98:
86:74:1d:45:74:57:97:d1:ed:c8:30:30:83:7b:25:d4:a0:57:
77:a7:a2:b1:31:87:90:7d:76:f8:05:fa:a5:3a:d2:14:91:cb:
46:0a:ac:2e:dd:07:6a:e8:ab:45:0f:55:bc:9d:dd:ee:46:18:
db:ef:65:ad:a4:89:64:f8:4f:21:6e:7b:e0:da:a9:e4:e1:83:
93:ee:af:55:be:6e:68:fb:34:a9:72:fa:3f:1d:84:73:eb:17:
7a:62:23:48:91:29:e3:a6:09:45:94:75:f6:09:ed:91:17:5b:
7e:88:b2:00:32:a1:08:15:8b:a2:20:23:90:48:12:17:47:b8:
0d:f0:74:ef:17:77:f6:35:60:ff:fd:5f:d3:f2:0f:0b:e1:c8:
c3:cf:6b:0b:17:72:43:bc:e8:b0:39:be:e7:f5:c0:3e:f2:4c:
3f:ce:4a:c1:a9:e2:4c:88:43:d4:d0:2b:07:75:f7:b7:8e:73:
fc:ae:69:60
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjWX9nPnonQTKJHSCpr+mxOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM1MDBhYmYzZWNhYTBhMzM1MjBjNTZlNmFlZWNlNDRiZWFm
YTI3NTQwHhcNMjUwODIzMTAwMTAyWhcNMjUwODI0MTAwMTAyWjAzMTEwLwYDVQQD
EygxZjQ4YTlmNTU5YjRlNjU0NWEzM2JjMTMwYzJhZmU4MTJjNzM0MTQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2MeJyUhcE5AfTC3Se8DiO0z9kbEf
41SNWb01iJ2HjYobgyP1u0S5Teir/IaWnDnNYykOJPBzAiN6G05hwWCuj7J/v7SQ
ifqLa9DXVtHKZJqvG+eFnLf55Dl71RRx+WrP9S6p9YXIe0ymNbMIHdUKz4t86/Tu
0rNFObYmsOjsAspc8vCQUl5OzwZzlCl67fZ81mKed9KTMsXjgrzUCw5NZWlEgNFU
yp2wEypYH7ot8dvD8IX9o+tWBEBOPlhuJGsYTkXIHFplZ9FEvZ6OmMQo1GhS4PNk
ivz+xwICNBtVgFiiM7De+WcuW8uEgMcB95E55yMpq+H9mm+cKxk8nCcD2wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB9IqfVZtOZUWjO8Ewwq/oEsc0FAMB8GA1UdIwQY
MBaAFMUAq/PsqgozUgxW5q7s5Evq+idUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveFFDcjgteXFDak5TREZibXJ1emtTLXI2SjFRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC8xMDAwYjYtZTIxNy00YjBjLTljYjEt
NmQ1Mjc5YzJmZTA3LzEveFFDcjgteXFDak5TREZibXJ1emtTLXI2SjFRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC8xMDAwYjYtZTIxNy00YjBjLTljYjEtNmQ1Mjc5YzJmZTA3
LzEveFFDcjgteXFDak5TREZibXJ1emtTLXI2SjFRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfyC+O99Q
uCkh0i4VY5inKzMPlq1BKvNwKHfOY7mmji4ze+KPHDZ3iet2FSdM6rGWhWM8f3qp
5mN52KCVsL5wfnFVMzF7taiYhnQdRXRXl9HtyDAwg3sl1KBXd6eisTGHkH12+AX6
pTrSFJHLRgqsLt0HauirRQ9VvJ3d7kYY2+9lraSJZPhPIW574Nqp5OGDk+6vVb5u
aPs0qXL6Px2Ec+sXemIjSJEp46YJRZR19gntkRdbfoiyADKhCBWLoiAjkEgSF0e4
DfB07xd39jVg//1f0/IPC+HIw89rCxdyQ7zosDm+5/XAPvJMP85KwaniTIhD1NAr
B3X3t45z/K5pYA==
-----END CERTIFICATE-----
Generated at Sat Aug 23 12:30:38 2025 by rpki-client