Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/0c756c-4cf1-479b-974d-b232d7dafcac/1/xOCzjFm9QrKwfiqvsm2fVbqzgXo.mft
File: xOCzjFm9QrKwfiqvsm2fVbqzgXo.mft (raw, json)
Hash identifier: 0BNxVnBXvUFl2ozwT3nmLqsMrRBCpgDRam08SuIPz+g=
Subject key identifier: 22:35:59:53:37:15:F7:13:1A:DE:9D:C3:11:22:73:BB:B3:FB:65:00
Authority key identifier: C4:E0:B3:8C:59:BD:42:B2:B0:7E:2A:AF:B2:6D:9F:55:BA:B3:81:7A
Certificate issuer: /CN=c4e0b38c59bd42b2b07e2aafb26d9f55bab3817a
Certificate serial: 0198D54E4A07E4D348260E046CE41A929379
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xOCzjFm9QrKwfiqvsm2fVbqzgXo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/0c756c-4cf1-479b-974d-b232d7dafcac/1/xOCzjFm9QrKwfiqvsm2fVbqzgXo.mft
Manifest number: 113B
Signing time: Sat 23 Aug 2025 05:02:14 +0000
Manifest this update: Sat 23 Aug 2025 05:02:14 +0000
Manifest next update: Sun 24 Aug 2025 05:02:14 +0000
Files and hashes: 1: xOCzjFm9QrKwfiqvsm2fVbqzgXo.crl (hash: aptv/0+GXTskf65j/nhBHnraYxs40yI/X00NSiRLtlw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/0c756c-4cf1-479b-974d-b232d7dafcac/1/xOCzjFm9QrKwfiqvsm2fVbqzgXo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/0c756c-4cf1-479b-974d-b232d7dafcac/1/xOCzjFm9QrKwfiqvsm2fVbqzgXo.mft
rsync://rpki.ripe.net/repository/DEFAULT/xOCzjFm9QrKwfiqvsm2fVbqzgXo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:4a:07:e4:d3:48:26:0e:04:6c:e4:1a:92:93:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4e0b38c59bd42b2b07e2aafb26d9f55bab3817a
Validity
Not Before: Aug 23 05:02:14 2025 GMT
Not After : Aug 24 05:02:14 2025 GMT
Subject: CN=223559533715f7131ade9dc3112273bbb3fb6500
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:ff:45:23:20:69:10:14:e3:f2:51:0c:0f:0b:
5b:8c:ff:ab:37:08:92:dc:55:8e:47:6b:06:15:36:
f8:87:10:5c:06:b8:26:8e:fe:81:78:cc:ce:5d:e5:
9b:21:b0:c0:6e:ac:aa:6a:b7:9e:82:77:94:ca:30:
40:06:46:08:6d:6c:c8:1e:b9:ad:40:7b:35:79:f0:
2a:fd:1a:32:81:1b:54:65:02:fc:67:ec:06:8f:57:
8c:0a:16:0e:39:97:23:b9:14:70:4c:6b:4a:ff:64:
da:ed:88:24:16:af:11:c7:2e:ee:24:6c:4a:92:df:
44:bb:3c:75:94:64:bb:f3:0f:77:08:fc:27:1e:9d:
79:cf:d6:0d:74:7d:a7:98:f5:87:5b:4f:96:cc:99:
85:2b:f0:f3:7f:87:7d:7a:86:f6:f1:13:87:38:90:
78:89:e2:c9:95:d2:6e:97:dd:c8:bf:32:cd:9c:64:
6f:1e:f8:d1:90:09:0b:b0:f8:db:1c:4f:40:9c:1c:
3e:87:4c:64:ea:7b:2b:56:ac:fe:d8:21:ee:ac:83:
d4:23:de:4c:dc:eb:06:94:d4:06:02:e0:64:bd:49:
3c:ff:f0:a0:58:43:50:79:80:c7:99:1f:92:16:76:
42:1f:fb:66:fb:4f:e8:3d:97:88:f6:60:a7:a6:83:
b8:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:35:59:53:37:15:F7:13:1A:DE:9D:C3:11:22:73:BB:B3:FB:65:00
X509v3 Authority Key Identifier:
keyid:C4:E0:B3:8C:59:BD:42:B2:B0:7E:2A:AF:B2:6D:9F:55:BA:B3:81:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xOCzjFm9QrKwfiqvsm2fVbqzgXo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/0c756c-4cf1-479b-974d-b232d7dafcac/1/xOCzjFm9QrKwfiqvsm2fVbqzgXo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/0c756c-4cf1-479b-974d-b232d7dafcac/1/xOCzjFm9QrKwfiqvsm2fVbqzgXo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:05:74:eb:93:e8:f6:2e:eb:8c:b3:05:4e:d3:91:ff:42:a6:
43:8e:37:6a:f2:51:f6:c3:ff:d7:9f:f0:6e:f0:5f:21:da:39:
1f:28:3e:51:7b:29:b8:92:d6:d9:bf:2f:5e:a7:90:3a:f5:ed:
6d:68:e7:7c:fc:14:2a:34:11:6d:45:5d:73:e4:5f:56:ed:d2:
40:c9:f6:c3:08:7e:40:4d:46:2b:69:94:bb:78:b5:23:d4:92:
19:3c:90:86:cb:64:ef:43:62:00:48:8b:00:1e:bf:4a:2e:ae:
30:ac:a1:31:9d:d7:2c:16:94:cb:41:28:59:66:5a:b3:e7:7b:
b3:38:68:ff:79:1a:f2:01:d7:88:87:71:28:53:57:9d:c9:93:
54:b3:0f:88:f3:25:fe:27:41:d6:e4:fe:3c:3e:be:e6:98:3c:
4e:d4:ec:bb:d0:96:e5:42:14:3b:30:a5:a8:2a:77:f8:0a:d2:
54:c1:d7:4a:b8:14:94:0b:e5:91:d4:fe:ef:96:4b:9e:a0:c8:
89:2f:ad:b1:ec:2e:d4:e8:b8:1b:68:5c:9f:4e:3f:73:ce:49:
86:66:dd:3f:c0:14:cf:49:d2:94:25:01:f1:4c:3e:1c:bb:64:
24:1f:7f:a3:27:0d:d1:0d:74:69:ce:d7:ac:de:df:01:c4:b1:
b5:80:00:b7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVTkoH5NNIJg4EbOQakpN5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM0ZTBiMzhjNTliZDQyYjJiMDdlMmFhZmIyNmQ5ZjU1YmFi
MzgxN2EwHhcNMjUwODIzMDUwMjE0WhcNMjUwODI0MDUwMjE0WjAzMTEwLwYDVQQD
EygyMjM1NTk1MzM3MTVmNzEzMWFkZTlkYzMxMTIyNzNiYmIzZmI2NTAwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyv9FIyBpEBTj8lEMDwtbjP+rNwiS
3FWOR2sGFTb4hxBcBrgmjv6BeMzOXeWbIbDAbqyqareegneUyjBABkYIbWzIHrmt
QHs1efAq/RoygRtUZQL8Z+wGj1eMChYOOZcjuRRwTGtK/2Ta7YgkFq8Rxy7uJGxK
kt9Euzx1lGS78w93CPwnHp15z9YNdH2nmPWHW0+WzJmFK/Dzf4d9eob28ROHOJB4
ieLJldJul93IvzLNnGRvHvjRkAkLsPjbHE9AnBw+h0xk6nsrVqz+2CHurIPUI95M
3OsGlNQGAuBkvUk8//CgWENQeYDHmR+SFnZCH/tm+0/oPZeI9mCnpoO4fQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCI1WVM3FfcTGt6dwxEic7uz+2UAMB8GA1UdIwQY
MBaAFMTgs4xZvUKysH4qr7Jtn1W6s4F6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveE9DempGbTlRckt3ZmlxdnNtMmZWYnF6Z1hvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS8wYzc1NmMtNGNmMS00NzliLTk3NGQt
YjIzMmQ3ZGFmY2FjLzEveE9DempGbTlRckt3ZmlxdnNtMmZWYnF6Z1hvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZS8wYzc1NmMtNGNmMS00NzliLTk3NGQtYjIzMmQ3ZGFmY2Fj
LzEveE9DempGbTlRckt3ZmlxdnNtMmZWYnF6Z1hvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFAV065Po
9i7rjLMFTtOR/0KmQ443avJR9sP/15/wbvBfIdo5Hyg+UXspuJLW2b8vXqeQOvXt
bWjnfPwUKjQRbUVdc+RfVu3SQMn2wwh+QE1GK2mUu3i1I9SSGTyQhstk70NiAEiL
AB6/Si6uMKyhMZ3XLBaUy0EoWWZas+d7szho/3ka8gHXiIdxKFNXncmTVLMPiPMl
/idB1uT+PD6+5pg8TtTsu9CW5UIUOzClqCp3+ArSVMHXSrgUlAvlkdT+75ZLnqDI
iS+tsewu1Oi4G2hcn04/c85JhmbdP8AUz0nSlCUB8Uw+HLtkJB9/oycN0Q10ac7X
rN7fAcSxtYAAtw==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:36:28 2025 by rpki-client