Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/549774-0b7e-4b88-8981-1f0aac1495ac/1/xGtE1wczJKsoQWNn3gQPDkYzSNE.mft
File: xGtE1wczJKsoQWNn3gQPDkYzSNE.mft (raw, json)
Hash identifier: SBDmKjI9cfM9Jb6D0It74QtjSen6mdoM9PRUZkTfcz4=
Subject key identifier: 13:88:5C:AF:53:8F:CA:A5:D2:79:8D:03:3B:79:67:0F:09:58:FF:E9
Authority key identifier: C4:6B:44:D7:07:33:24:AB:28:41:63:67:DE:04:0F:0E:46:33:48:D1
Certificate issuer: /CN=c46b44d7073324ab28416367de040f0e463348d1
Certificate serial: 019A72265F6B9BD22EB4441155094A7DADB9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xGtE1wczJKsoQWNn3gQPDkYzSNE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/549774-0b7e-4b88-8981-1f0aac1495ac/1/xGtE1wczJKsoQWNn3gQPDkYzSNE.mft
Manifest number: 0F49
Signing time: Tue 11 Nov 2025 09:01:48 +0000
Manifest this update: Tue 11 Nov 2025 09:01:48 +0000
Manifest next update: Wed 12 Nov 2025 09:01:48 +0000
Files and hashes: 1: xGtE1wczJKsoQWNn3gQPDkYzSNE.crl (hash: I4lvK5qNv6sfhVeJh4gg4pCGmCmSKZF7TfiiWtwlCYY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/549774-0b7e-4b88-8981-1f0aac1495ac/1/xGtE1wczJKsoQWNn3gQPDkYzSNE.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/549774-0b7e-4b88-8981-1f0aac1495ac/1/xGtE1wczJKsoQWNn3gQPDkYzSNE.mft
rsync://rpki.ripe.net/repository/DEFAULT/xGtE1wczJKsoQWNn3gQPDkYzSNE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:26:5f:6b:9b:d2:2e:b4:44:11:55:09:4a:7d:ad:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c46b44d7073324ab28416367de040f0e463348d1
Validity
Not Before: Nov 11 09:01:48 2025 GMT
Not After : Nov 12 09:01:48 2025 GMT
Subject: CN=13885caf538fcaa5d2798d033b79670f0958ffe9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:a4:ea:0f:ac:2b:d9:de:35:b6:81:f6:16:30:
32:dd:23:c0:3c:eb:d8:e9:aa:e1:4b:00:94:12:e3:
74:9c:32:1f:d5:70:bf:6d:a5:f7:8e:cf:b7:f0:0c:
48:d0:5a:cb:01:dc:22:3d:9a:ee:13:0b:cd:c0:8a:
30:5d:f4:59:6a:0b:8b:ea:b6:2e:57:39:0e:06:10:
48:85:30:bb:29:09:ae:ab:8f:af:68:48:c0:98:e1:
57:97:b9:eb:43:a9:c3:f8:a6:1c:12:89:ed:7c:1f:
c8:95:2c:69:b1:f1:08:a4:7d:c0:a6:82:5b:58:5f:
91:36:80:cd:03:7d:95:c1:db:2f:7e:75:97:e7:41:
2f:a5:c9:2f:03:d6:4b:b3:5f:e7:58:ed:64:30:7f:
23:6e:ee:98:2b:98:f7:9d:7c:26:2e:4e:00:9c:bc:
9d:e4:fc:d4:4d:2a:66:40:fd:c5:dd:5b:81:e4:08:
06:0f:84:93:5b:78:d5:15:d4:66:7e:7b:f9:79:bf:
de:3d:5a:a6:27:dc:42:25:a8:ef:bc:2c:2e:ba:49:
5c:98:d3:25:cd:8f:c2:47:ee:60:65:2c:55:e0:24:
f3:16:e6:b7:d8:b5:5a:b9:be:71:28:ec:5b:0f:0b:
9c:7f:75:2b:55:dc:ba:78:e5:1c:a7:50:1a:f7:11:
40:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:88:5C:AF:53:8F:CA:A5:D2:79:8D:03:3B:79:67:0F:09:58:FF:E9
X509v3 Authority Key Identifier:
keyid:C4:6B:44:D7:07:33:24:AB:28:41:63:67:DE:04:0F:0E:46:33:48:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xGtE1wczJKsoQWNn3gQPDkYzSNE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/549774-0b7e-4b88-8981-1f0aac1495ac/1/xGtE1wczJKsoQWNn3gQPDkYzSNE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/549774-0b7e-4b88-8981-1f0aac1495ac/1/xGtE1wczJKsoQWNn3gQPDkYzSNE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:a4:8e:5c:db:cf:15:92:05:e1:bf:3b:6e:58:7a:5b:b3:1c:
12:41:42:40:8d:e2:be:0a:cb:78:d4:b5:d2:6d:dd:d2:24:5c:
98:00:ca:09:44:c2:76:16:5c:23:95:12:bc:16:0a:57:f9:86:
2c:c2:de:d1:59:5d:49:0e:73:c1:89:7e:d6:63:fe:1e:75:69:
c8:f5:4e:2b:a7:48:cb:7b:a0:fd:83:9c:c2:91:e5:18:67:66:
4a:ff:7e:da:0f:2c:13:fb:de:5c:1a:25:a8:a1:32:e0:60:e5:
96:c8:7d:18:40:75:e5:4c:23:65:51:b2:11:29:28:76:6f:8f:
91:42:ed:65:58:3d:ba:0e:76:73:07:1e:5c:87:1c:d1:67:c0:
2a:18:a0:d1:99:0e:41:76:2d:10:90:d9:34:e2:dc:c5:b5:99:
b2:94:05:30:83:86:0e:ed:d9:c4:ef:c4:f6:d6:9c:39:d2:3c:
fe:d2:b6:57:b5:da:3e:5a:bb:49:9e:97:2e:76:1e:77:b0:39:
65:00:81:97:7f:53:de:ae:2f:ad:15:fb:f9:91:59:fe:f8:0a:
4e:2c:aa:2d:5f:aa:06:31:8a:ef:c3:90:b8:2a:d6:d9:8a:73:
f3:28:9e:8a:a4:42:1b:3b:e4:58:19:78:6f:18:7a:fa:e9:c4:
25:1d:7f:01
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpyJl9rm9IutEQRVQlKfa25MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM0NmI0NGQ3MDczMzI0YWIyODQxNjM2N2RlMDQwZjBlNDYz
MzQ4ZDEwHhcNMjUxMTExMDkwMTQ4WhcNMjUxMTEyMDkwMTQ4WjAzMTEwLwYDVQQD
EygxMzg4NWNhZjUzOGZjYWE1ZDI3OThkMDMzYjc5NjcwZjA5NThmZmU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2qTqD6wr2d41toH2FjAy3SPAPOvY
6arhSwCUEuN0nDIf1XC/baX3js+38AxI0FrLAdwiPZruEwvNwIowXfRZaguL6rYu
VzkOBhBIhTC7KQmuq4+vaEjAmOFXl7nrQ6nD+KYcEontfB/IlSxpsfEIpH3ApoJb
WF+RNoDNA32VwdsvfnWX50EvpckvA9ZLs1/nWO1kMH8jbu6YK5j3nXwmLk4AnLyd
5PzUTSpmQP3F3VuB5AgGD4STW3jVFdRmfnv5eb/ePVqmJ9xCJajvvCwuuklcmNMl
zY/CR+5gZSxV4CTzFua32LVaub5xKOxbDwucf3UrVdy6eOUcp1Aa9xFAYwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBOIXK9Tj8ql0nmNAzt5Zw8JWP/pMB8GA1UdIwQY
MBaAFMRrRNcHMySrKEFjZ94EDw5GM0jRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveEd0RTF3Y3pKS3NvUVdObjNnUVBEa1l6U05FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC81NDk3NzQtMGI3ZS00Yjg4LTg5ODEt
MWYwYWFjMTQ5NWFjLzEveEd0RTF3Y3pKS3NvUVdObjNnUVBEa1l6U05FLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MC81NDk3NzQtMGI3ZS00Yjg4LTg5ODEtMWYwYWFjMTQ5NWFj
LzEveEd0RTF3Y3pKS3NvUVdObjNnUVBEa1l6U05FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADaSOXNvP
FZIF4b87blh6W7McEkFCQI3ivgrLeNS10m3d0iRcmADKCUTCdhZcI5USvBYKV/mG
LMLe0VldSQ5zwYl+1mP+HnVpyPVOK6dIy3ug/YOcwpHlGGdmSv9+2g8sE/veXBol
qKEy4GDllsh9GEB15UwjZVGyESkodm+PkULtZVg9ug52cwceXIcc0WfAKhig0ZkO
QXYtEJDZNOLcxbWZspQFMIOGDu3ZxO/E9tacOdI8/tK2V7XaPlq7SZ6XLnYed7A5
ZQCBl39T3q4vrRX7+ZFZ/vgKTiyqLV+qBjGK78OQuCrW2Ypz8yieiqRCGzvkWBl4
bxh6+unEJR1/AQ==
-----END CERTIFICATE-----
Generated at Tue Nov 11 13:01:34 2025 by rpki-client