Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/e873bc-95f4-4dca-b96e-a037d57444e3/1/xI9vTNWSgKZUi7IyAXtKPIp1EW4.mft
File: xI9vTNWSgKZUi7IyAXtKPIp1EW4.mft (raw, json)
Hash identifier: K15nMff9SuwaOFox3yH68BSKJpwgGBHp9FNPYbeiwEs=
Subject key identifier: 66:25:0C:C3:94:36:06:48:B2:17:AE:E4:F4:D2:4C:63:69:75:95:38
Authority key identifier: C4:8F:6F:4C:D5:92:80:A6:54:8B:B2:32:01:7B:4A:3C:8A:75:11:6E
Certificate issuer: /CN=c48f6f4cd59280a6548bb232017b4a3c8a75116e
Certificate serial: 019A72267D6E9E5AD359ECCAA7A5E770B00E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xI9vTNWSgKZUi7IyAXtKPIp1EW4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/e873bc-95f4-4dca-b96e-a037d57444e3/1/xI9vTNWSgKZUi7IyAXtKPIp1EW4.mft
Manifest number: 04A9
Signing time: Tue 11 Nov 2025 09:01:56 +0000
Manifest this update: Tue 11 Nov 2025 09:01:56 +0000
Manifest next update: Wed 12 Nov 2025 09:01:56 +0000
Files and hashes: 1: xI9vTNWSgKZUi7IyAXtKPIp1EW4.crl (hash: fQkLPVaAETI76JzaIHqE9d0pdGGg5EKIftxbHarkp6A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/e873bc-95f4-4dca-b96e-a037d57444e3/1/xI9vTNWSgKZUi7IyAXtKPIp1EW4.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/e873bc-95f4-4dca-b96e-a037d57444e3/1/xI9vTNWSgKZUi7IyAXtKPIp1EW4.mft
rsync://rpki.ripe.net/repository/DEFAULT/xI9vTNWSgKZUi7IyAXtKPIp1EW4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:26:7d:6e:9e:5a:d3:59:ec:ca:a7:a5:e7:70:b0:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c48f6f4cd59280a6548bb232017b4a3c8a75116e
Validity
Not Before: Nov 11 09:01:56 2025 GMT
Not After : Nov 12 09:01:56 2025 GMT
Subject: CN=66250cc394360648b217aee4f4d24c6369759538
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:0b:fd:cc:2c:65:b1:9f:da:67:38:28:39:e5:
42:9d:70:e6:f1:9b:b7:61:44:0d:e6:e1:3e:5e:e3:
55:9e:77:73:df:69:71:37:c0:2b:e5:c8:e0:9d:17:
75:98:b0:9d:ed:13:07:43:61:b3:6f:a2:4b:24:59:
3a:cb:92:fe:c4:3d:df:b6:de:a0:4e:99:f1:96:62:
23:91:28:d6:e0:d1:f2:e4:d9:e2:ff:54:4a:29:01:
f3:d4:18:88:e0:8c:b4:a8:43:df:aa:23:6a:bb:d1:
c2:b9:f4:9f:31:e6:a2:8d:eb:b2:dd:e7:a7:f9:fb:
d5:7f:83:e4:90:a5:43:76:84:bd:6e:32:64:32:47:
e2:c1:a5:3e:e0:64:12:28:7b:c4:ed:eb:b7:c7:51:
ce:19:51:19:1c:bf:40:46:8c:ab:b5:de:12:26:6c:
d5:32:e7:ca:72:4e:f7:8b:73:c8:ef:6b:c8:bc:46:
54:ac:1f:4e:1a:7b:6f:6e:00:b6:ae:11:e0:2b:1e:
fb:de:7b:53:8d:20:0b:c4:55:c7:30:89:d1:18:9e:
c9:2f:bb:4f:fd:ab:19:e7:67:ec:7f:b5:61:2b:39:
8b:78:8a:b0:bf:a9:18:39:83:c9:dd:fe:bc:46:2f:
aa:54:57:e2:73:e6:01:7e:f1:5c:6c:96:ee:c3:a2:
b7:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:25:0C:C3:94:36:06:48:B2:17:AE:E4:F4:D2:4C:63:69:75:95:38
X509v3 Authority Key Identifier:
keyid:C4:8F:6F:4C:D5:92:80:A6:54:8B:B2:32:01:7B:4A:3C:8A:75:11:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xI9vTNWSgKZUi7IyAXtKPIp1EW4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/e873bc-95f4-4dca-b96e-a037d57444e3/1/xI9vTNWSgKZUi7IyAXtKPIp1EW4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/e873bc-95f4-4dca-b96e-a037d57444e3/1/xI9vTNWSgKZUi7IyAXtKPIp1EW4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:10:47:9f:3a:7e:47:0f:7f:e6:af:1e:93:46:43:9a:09:b8:
32:b1:cb:5a:39:8b:ce:e7:16:1c:5a:43:46:43:17:5d:3c:33:
b9:a8:6c:15:eb:18:05:3c:a2:72:47:c2:b5:c5:89:64:a9:a2:
9b:91:26:51:b4:0b:d2:2e:a9:1e:73:eb:2e:9a:15:26:88:5f:
7a:b5:fe:c4:3d:e8:07:1d:e5:e5:2b:a9:34:3b:a5:df:70:08:
a4:44:cd:eb:f6:be:bd:b0:ae:5b:eb:c0:13:66:93:dd:ae:15:
42:f7:c2:6d:42:a5:ae:ce:20:7e:48:ee:df:cf:aa:12:7d:d0:
a8:6a:89:5e:1c:6d:76:a8:fe:22:1b:99:84:77:e9:85:83:3b:
9a:f1:1c:07:81:28:7c:44:c6:60:68:8a:ae:9e:1f:0e:4b:04:
4c:ba:d5:64:d2:3b:d0:a2:b5:75:93:6a:41:f3:74:8e:1b:12:
a4:a1:44:cd:4c:7c:9c:56:a8:eb:4d:c3:8c:4a:b1:dd:07:07:
c3:31:f1:59:8d:3c:01:c8:0c:9b:cf:4b:01:49:5f:4a:0c:0a:
5a:f4:2f:33:e1:9a:e5:7b:ff:aa:bc:c3:af:4e:8d:70:b9:d0:
81:11:44:47:b1:03:77:b7:01:cd:c8:b6:32:e1:2a:1a:fe:09:
ef:58:83:d3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpyJn1unlrTWezKp6XncLAOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM0OGY2ZjRjZDU5MjgwYTY1NDhiYjIzMjAxN2I0YTNjOGE3
NTExNmUwHhcNMjUxMTExMDkwMTU2WhcNMjUxMTEyMDkwMTU2WjAzMTEwLwYDVQQD
Eyg2NjI1MGNjMzk0MzYwNjQ4YjIxN2FlZTRmNGQyNGM2MzY5NzU5NTM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6Qv9zCxlsZ/aZzgoOeVCnXDm8Zu3
YUQN5uE+XuNVnndz32lxN8Ar5cjgnRd1mLCd7RMHQ2Gzb6JLJFk6y5L+xD3ftt6g
TpnxlmIjkSjW4NHy5Nni/1RKKQHz1BiI4Iy0qEPfqiNqu9HCufSfMeaijeuy3een
+fvVf4PkkKVDdoS9bjJkMkfiwaU+4GQSKHvE7eu3x1HOGVEZHL9ARoyrtd4SJmzV
MufKck73i3PI72vIvEZUrB9OGntvbgC2rhHgKx773ntTjSALxFXHMInRGJ7JL7tP
/asZ52fsf7VhKzmLeIqwv6kYOYPJ3f68Ri+qVFfic+YBfvFcbJbuw6K34QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGYlDMOUNgZIsheu5PTSTGNpdZU4MB8GA1UdIwQY
MBaAFMSPb0zVkoCmVIuyMgF7SjyKdRFuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveEk5dlROV1NnS1pVaTdJeUFYdEtQSXAxRVc0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy9lODczYmMtOTVmNC00ZGNhLWI5NmUt
YTAzN2Q1NzQ0NGUzLzEveEk5dlROV1NnS1pVaTdJeUFYdEtQSXAxRVc0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy9lODczYmMtOTVmNC00ZGNhLWI5NmUtYTAzN2Q1NzQ0NGUz
LzEveEk5dlROV1NnS1pVaTdJeUFYdEtQSXAxRVc0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANxBHnzp+
Rw9/5q8ek0ZDmgm4MrHLWjmLzucWHFpDRkMXXTwzuahsFesYBTyickfCtcWJZKmi
m5EmUbQL0i6pHnPrLpoVJohferX+xD3oBx3l5SupNDul33AIpETN6/a+vbCuW+vA
E2aT3a4VQvfCbUKlrs4gfkju38+qEn3QqGqJXhxtdqj+IhuZhHfphYM7mvEcB4Eo
fETGYGiKrp4fDksETLrVZNI70KK1dZNqQfN0jhsSpKFEzUx8nFao603DjEqx3QcH
wzHxWY08AcgMm89LAUlfSgwKWvQvM+Ga5Xv/qrzDr06NcLnQgRFER7EDd7cBzci2
MuEqGv4J71iD0w==
-----END CERTIFICATE-----
Generated at Tue Nov 11 12:46:24 2025 by rpki-client