Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/76c4ed-4461-4a5d-a70f-232eb451d277/1/X1Vwzj2C4pVWi3QX1VaqOwYSlhA.mft
File: X1Vwzj2C4pVWi3QX1VaqOwYSlhA.mft (raw, json)
Hash identifier: gigqGL+CcNDT99CeCjNM3fZlelbKXAppWOKzvCC6BZE=
Subject key identifier: E1:8C:F0:53:EF:E2:C9:08:40:8B:F8:B6:4A:4B:F3:2B:41:80:C8:EC
Authority key identifier: 5F:55:70:CE:3D:82:E2:95:56:8B:74:17:D5:56:AA:3B:06:12:96:10
Certificate issuer: /CN=5f5570ce3d82e295568b7417d556aa3b06129610
Certificate serial: 0199FBEA9FAE875E649FDD33C4866EB75966
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X1Vwzj2C4pVWi3QX1VaqOwYSlhA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/76c4ed-4461-4a5d-a70f-232eb451d277/1/X1Vwzj2C4pVWi3QX1VaqOwYSlhA.mft
Manifest number: 0DC2
Signing time: Sun 19 Oct 2025 10:01:21 +0000
Manifest this update: Sun 19 Oct 2025 10:01:21 +0000
Manifest next update: Mon 20 Oct 2025 10:01:21 +0000
Files and hashes: 1: X1Vwzj2C4pVWi3QX1VaqOwYSlhA.crl (hash: 9j0vUYXS5dSiDCojy7oVLZcHarnzc7nTCIRsTMvi3eA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/76c4ed-4461-4a5d-a70f-232eb451d277/1/X1Vwzj2C4pVWi3QX1VaqOwYSlhA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/76c4ed-4461-4a5d-a70f-232eb451d277/1/X1Vwzj2C4pVWi3QX1VaqOwYSlhA.mft
rsync://rpki.ripe.net/repository/DEFAULT/X1Vwzj2C4pVWi3QX1VaqOwYSlhA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ea:9f:ae:87:5e:64:9f:dd:33:c4:86:6e:b7:59:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f5570ce3d82e295568b7417d556aa3b06129610
Validity
Not Before: Oct 19 10:01:21 2025 GMT
Not After : Oct 20 10:01:21 2025 GMT
Subject: CN=e18cf053efe2c908408bf8b64a4bf32b4180c8ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:9f:e7:d2:d2:8f:1f:35:70:ce:52:6d:91:52:
85:e7:05:44:b6:a0:d6:65:75:73:7f:79:f0:ef:13:
59:b8:48:11:f3:f7:50:e4:3f:89:22:fe:dc:d9:fc:
14:9f:76:f4:bb:b2:5c:84:67:ed:ed:57:88:a1:49:
a8:8f:3d:e7:41:81:de:0d:bd:5e:9d:3a:00:91:32:
73:e9:04:a9:ce:f2:8b:e0:d3:82:b5:55:dd:5e:60:
15:16:07:94:5c:43:f4:4a:f8:ef:3b:2e:15:0b:5c:
e3:92:21:a8:e2:c2:d8:7f:90:b2:4c:25:c9:4f:6f:
51:a6:68:60:0e:a9:56:ef:93:d7:c6:12:45:b5:c9:
58:d9:50:d7:eb:36:42:9a:a6:79:3f:19:73:a5:9b:
c4:88:e8:be:df:a1:93:0e:bd:95:24:07:98:73:22:
4f:0b:b5:c5:8c:e3:18:34:3f:c5:70:58:ef:4f:f6:
e3:33:fa:57:20:cc:0a:80:2d:56:85:34:af:aa:4c:
cf:db:d3:a0:44:c7:8b:94:e6:60:9c:34:59:f1:6c:
36:1b:0b:bc:0b:8a:5c:4c:92:15:a4:4c:8e:c1:6a:
2b:05:54:f5:06:0a:89:f3:8a:1d:d7:f5:84:53:9c:
49:59:1f:35:59:58:13:1a:7b:db:48:a2:68:5a:3b:
6f:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:8C:F0:53:EF:E2:C9:08:40:8B:F8:B6:4A:4B:F3:2B:41:80:C8:EC
X509v3 Authority Key Identifier:
keyid:5F:55:70:CE:3D:82:E2:95:56:8B:74:17:D5:56:AA:3B:06:12:96:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X1Vwzj2C4pVWi3QX1VaqOwYSlhA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/76c4ed-4461-4a5d-a70f-232eb451d277/1/X1Vwzj2C4pVWi3QX1VaqOwYSlhA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/76c4ed-4461-4a5d-a70f-232eb451d277/1/X1Vwzj2C4pVWi3QX1VaqOwYSlhA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:85:d4:83:08:76:91:23:32:e6:f0:28:8d:2d:29:e8:81:77:
c7:67:19:37:42:9b:32:c0:9f:6d:05:52:37:19:da:ba:9f:2b:
ed:87:c1:8e:bd:90:a7:58:b3:5a:24:a5:85:0c:e7:0a:88:95:
3f:d3:8c:83:4c:ec:3f:68:30:8e:2c:cc:7c:44:28:e1:5b:de:
cd:38:aa:a4:a5:3b:9f:6b:72:5f:12:3d:16:0a:7a:9b:5c:0a:
de:2a:24:19:df:73:28:65:80:d3:90:70:76:40:ff:7a:4b:fe:
5b:a0:ff:5e:b0:8b:ef:b8:05:70:a6:a5:f1:d8:cc:3a:84:41:
1a:c7:5e:2b:d5:14:cb:49:97:13:8b:2f:bc:3e:b8:f3:a0:68:
ef:15:f7:25:22:7d:13:ca:0a:0b:97:d8:ce:37:33:2a:3e:8f:
98:c2:37:b8:ba:37:b7:5f:02:e1:cd:7c:54:29:75:c3:93:4e:
f6:0a:9a:0f:96:57:d2:f0:06:a8:9b:82:b4:f8:42:a5:7f:de:
d2:e7:cb:22:73:24:a7:c1:c3:86:aa:40:c3:92:8a:9b:4b:1e:
4c:82:3e:7f:61:90:f9:8d:5d:3e:db:ba:1e:0c:58:ef:4e:43:
03:c1:cf:ec:f1:76:37:47:0d:91:b4:c3:a1:80:0e:c8:e1:2b:
e5:b2:30:ea
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn76p+uh15kn90zxIZut1lmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVmNTU3MGNlM2Q4MmUyOTU1NjhiNzQxN2Q1NTZhYTNiMDYx
Mjk2MTAwHhcNMjUxMDE5MTAwMTIxWhcNMjUxMDIwMTAwMTIxWjAzMTEwLwYDVQQD
EyhlMThjZjA1M2VmZTJjOTA4NDA4YmY4YjY0YTRiZjMyYjQxODBjOGVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5Z/n0tKPHzVwzlJtkVKF5wVEtqDW
ZXVzf3nw7xNZuEgR8/dQ5D+JIv7c2fwUn3b0u7JchGft7VeIoUmojz3nQYHeDb1e
nToAkTJz6QSpzvKL4NOCtVXdXmAVFgeUXEP0SvjvOy4VC1zjkiGo4sLYf5CyTCXJ
T29RpmhgDqlW75PXxhJFtclY2VDX6zZCmqZ5PxlzpZvEiOi+36GTDr2VJAeYcyJP
C7XFjOMYND/FcFjvT/bjM/pXIMwKgC1WhTSvqkzP29OgRMeLlOZgnDRZ8Ww2Gwu8
C4pcTJIVpEyOwWorBVT1BgqJ84od1/WEU5xJWR81WVgTGnvbSKJoWjtvawIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOGM8FPv4skIQIv4tkpL8ytBgMjsMB8GA1UdIwQY
MBaAFF9VcM49guKVVot0F9VWqjsGEpYQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWDFWd3pqMkM0cFZXaTNRWDFWYXFPd1lTbGhBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC83NmM0ZWQtNDQ2MS00YTVkLWE3MGYt
MjMyZWI0NTFkMjc3LzEvWDFWd3pqMkM0cFZXaTNRWDFWYXFPd1lTbGhBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOC83NmM0ZWQtNDQ2MS00YTVkLWE3MGYtMjMyZWI0NTFkMjc3
LzEvWDFWd3pqMkM0cFZXaTNRWDFWYXFPd1lTbGhBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIoXUgwh2
kSMy5vAojS0p6IF3x2cZN0KbMsCfbQVSNxnaup8r7YfBjr2Qp1izWiSlhQznCoiV
P9OMg0zsP2gwjizMfEQo4VvezTiqpKU7n2tyXxI9Fgp6m1wK3iokGd9zKGWA05Bw
dkD/ekv+W6D/XrCL77gFcKal8djMOoRBGsdeK9UUy0mXE4svvD6486Bo7xX3JSJ9
E8oKC5fYzjczKj6PmMI3uLo3t18C4c18VCl1w5NO9gqaD5ZX0vAGqJuCtPhCpX/e
0ufLInMkp8HDhqpAw5KKm0seTII+f2GQ+Y1dPtu6HgxY705DA8HP7PF2N0cNkbTD
oYAOyOEr5bIw6g==
-----END CERTIFICATE-----
Generated at Sun Oct 19 18:39:14 2025 by rpki-client