Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/646296-e4bd-4feb-9f9d-527cb24dbd40/1/xVRM5A0R1h07gKfRAyMBI_t9aKU.mft
File: xVRM5A0R1h07gKfRAyMBI_t9aKU.mft (raw, json)
Hash identifier: iaVpJ0xVyZVQRHWPQZX6NnvP40JqSrg1psvVa4l2Ex8=
Subject key identifier: DA:28:53:27:65:EA:B7:E5:6E:09:81:FF:4F:1F:75:77:C9:90:77:ED
Authority key identifier: C5:54:4C:E4:0D:11:D6:1D:3B:80:A7:D1:03:23:01:23:FB:7D:68:A5
Certificate issuer: /CN=c5544ce40d11d61d3b80a7d103230123fb7d68a5
Certificate serial: 0198D5BB7FC83E26B233D1535E45BE911C07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xVRM5A0R1h07gKfRAyMBI_t9aKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/646296-e4bd-4feb-9f9d-527cb24dbd40/1/xVRM5A0R1h07gKfRAyMBI_t9aKU.mft
Manifest number: 0F69
Signing time: Sat 23 Aug 2025 07:01:31 +0000
Manifest this update: Sat 23 Aug 2025 07:01:31 +0000
Manifest next update: Sun 24 Aug 2025 07:01:31 +0000
Files and hashes: 1: xVRM5A0R1h07gKfRAyMBI_t9aKU.crl (hash: 67vBRDliONPsg7U0g0jVwtJrS0jPTXlrMckHwrPVKaA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/646296-e4bd-4feb-9f9d-527cb24dbd40/1/xVRM5A0R1h07gKfRAyMBI_t9aKU.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/646296-e4bd-4feb-9f9d-527cb24dbd40/1/xVRM5A0R1h07gKfRAyMBI_t9aKU.mft
rsync://rpki.ripe.net/repository/DEFAULT/xVRM5A0R1h07gKfRAyMBI_t9aKU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 07:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:7f:c8:3e:26:b2:33:d1:53:5e:45:be:91:1c:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5544ce40d11d61d3b80a7d103230123fb7d68a5
Validity
Not Before: Aug 23 07:01:31 2025 GMT
Not After : Aug 24 07:01:31 2025 GMT
Subject: CN=da28532765eab7e56e0981ff4f1f7577c99077ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:c3:ea:5e:8b:e5:ea:89:94:36:85:4b:2e:ce:
5b:a9:f5:7f:dc:9c:ef:24:52:61:23:d0:80:15:45:
ba:b7:b9:e8:41:87:73:2c:e9:e0:9e:fe:2c:8f:c6:
7e:55:a5:68:25:de:d4:c3:21:8f:ae:d5:81:8e:16:
61:29:cb:ab:e2:f6:d6:c9:a1:d3:60:f6:e7:0a:40:
1d:c8:69:a3:63:d4:0d:c5:c7:4d:7e:80:e4:aa:db:
9c:55:41:70:db:c9:02:c5:33:59:b4:eb:e1:e1:05:
b2:54:c3:30:8e:40:1e:3a:8a:bd:04:08:bc:9e:51:
3f:b3:fd:8c:a5:71:a2:d2:01:87:c5:fc:13:d5:53:
e6:91:cf:25:79:9d:5f:5b:e3:e0:b8:2c:13:17:18:
e8:8f:60:b8:0e:17:d0:51:7d:b1:79:93:ca:da:4b:
b4:fe:b5:3c:d8:9f:26:1c:6b:fb:86:60:02:1e:6d:
43:3e:6a:04:cb:a8:7d:3a:ff:bc:31:3a:82:ba:96:
5c:c0:df:de:6e:c6:be:f2:1b:c8:59:d4:d0:2b:b3:
23:a0:1a:7c:92:8c:e1:86:e5:00:d9:e0:dc:b3:76:
e5:50:18:6d:7f:59:94:76:7e:1a:53:cd:07:1e:19:
02:b4:d3:8d:46:e5:f5:65:5f:12:c2:1a:22:ab:61:
95:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:28:53:27:65:EA:B7:E5:6E:09:81:FF:4F:1F:75:77:C9:90:77:ED
X509v3 Authority Key Identifier:
keyid:C5:54:4C:E4:0D:11:D6:1D:3B:80:A7:D1:03:23:01:23:FB:7D:68:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xVRM5A0R1h07gKfRAyMBI_t9aKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/646296-e4bd-4feb-9f9d-527cb24dbd40/1/xVRM5A0R1h07gKfRAyMBI_t9aKU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/646296-e4bd-4feb-9f9d-527cb24dbd40/1/xVRM5A0R1h07gKfRAyMBI_t9aKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:34:44:e9:f7:76:b6:73:93:ad:36:91:50:72:9a:68:0d:75:
f5:18:ca:da:43:49:36:25:45:fe:b4:13:91:75:f4:a6:59:17:
8d:7f:6c:7b:09:d0:4e:f7:a0:cc:e4:ef:c8:1c:51:0e:8d:fe:
a4:6f:b7:a0:53:e3:a1:89:63:3e:af:b3:c9:f6:f9:09:7a:4f:
1b:84:5e:72:45:d3:1c:85:57:2f:d6:3f:58:b5:41:21:8d:a8:
04:5b:36:0a:b6:44:0f:e1:dc:12:8e:fc:ba:0a:60:a8:14:bf:
cc:28:4f:71:ba:aa:e5:cc:03:e2:c8:34:28:b4:ef:d4:3f:08:
3b:81:3e:e1:83:6a:a0:b4:17:4a:d8:8e:d7:06:2c:df:57:6b:
d2:0f:11:a2:0a:8f:13:83:52:a5:38:4c:06:3d:63:7b:6b:ab:
3c:1e:e5:c4:ee:52:92:ac:34:a3:b4:c4:94:11:bc:6b:3e:30:
48:d8:6b:dd:8f:2f:19:06:28:0c:ce:be:24:0f:21:5c:7f:1a:
0e:72:92:5d:46:1a:18:a3:8d:72:ae:e3:c2:7e:dd:1d:35:8e:
4b:4b:39:84:57:ef:5a:9a:b0:de:ea:fc:76:2d:bb:f6:d4:61:
86:e8:09:fc:2a:66:7e:0a:05:6d:b3:e1:e0:d6:de:d5:37:ff:
40:f1:ae:4c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVu3/IPiayM9FTXkW+kRwHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM1NTQ0Y2U0MGQxMWQ2MWQzYjgwYTdkMTAzMjMwMTIzZmI3
ZDY4YTUwHhcNMjUwODIzMDcwMTMxWhcNMjUwODI0MDcwMTMxWjAzMTEwLwYDVQQD
EyhkYTI4NTMyNzY1ZWFiN2U1NmUwOTgxZmY0ZjFmNzU3N2M5OTA3N2VkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvsPqXovl6omUNoVLLs5bqfV/3Jzv
JFJhI9CAFUW6t7noQYdzLOngnv4sj8Z+VaVoJd7UwyGPrtWBjhZhKcur4vbWyaHT
YPbnCkAdyGmjY9QNxcdNfoDkqtucVUFw28kCxTNZtOvh4QWyVMMwjkAeOoq9BAi8
nlE/s/2MpXGi0gGHxfwT1VPmkc8leZ1fW+PguCwTFxjoj2C4DhfQUX2xeZPK2ku0
/rU82J8mHGv7hmACHm1DPmoEy6h9Ov+8MTqCupZcwN/ebsa+8hvIWdTQK7MjoBp8
kozhhuUA2eDcs3blUBhtf1mUdn4aU80HHhkCtNONRuX1ZV8Swhoiq2GVGwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNooUydl6rflbgmB/08fdXfJkHftMB8GA1UdIwQY
MBaAFMVUTOQNEdYdO4Cn0QMjASP7fWilMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveFZSTTVBMFIxaDA3Z0tmUkF5TUJJX3Q5YUtVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy82NDYyOTYtZTRiZC00ZmViLTlmOWQt
NTI3Y2IyNGRiZDQwLzEveFZSTTVBMFIxaDA3Z0tmUkF5TUJJX3Q5YUtVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYy82NDYyOTYtZTRiZC00ZmViLTlmOWQtNTI3Y2IyNGRiZDQw
LzEveFZSTTVBMFIxaDA3Z0tmUkF5TUJJX3Q5YUtVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABTRE6fd2
tnOTrTaRUHKaaA119RjK2kNJNiVF/rQTkXX0plkXjX9sewnQTvegzOTvyBxRDo3+
pG+3oFPjoYljPq+zyfb5CXpPG4ReckXTHIVXL9Y/WLVBIY2oBFs2CrZED+HcEo78
ugpgqBS/zChPcbqq5cwD4sg0KLTv1D8IO4E+4YNqoLQXStiO1wYs31dr0g8RogqP
E4NSpThMBj1je2urPB7lxO5Skqw0o7TElBG8az4wSNhr3Y8vGQYoDM6+JA8hXH8a
DnKSXUYaGKONcq7jwn7dHTWOS0s5hFfvWpqw3ur8di279tRhhugJ/CpmfgoFbbPh
4Nbe1Tf/QPGuTA==
-----END CERTIFICATE-----
Generated at Sat Aug 23 16:45:18 2025 by rpki-client