Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/993364-d85f-4007-96ec-49ac28142318/1/iXlCagvNkDpVJkksxa97TysO2wQ.mft
File: iXlCagvNkDpVJkksxa97TysO2wQ.mft (raw, json)
Hash identifier: vnIAI+yxucWVY4IerwBdeTu2yNNzDofpczbHU/yoJCQ=
Subject key identifier: 86:19:24:55:A5:41:13:A1:2C:A5:40:15:3E:36:0A:99:3F:A7:DE:62
Authority key identifier: 89:79:42:6A:0B:CD:90:3A:55:26:49:2C:C5:AF:7B:4F:2B:0E:DB:04
Certificate issuer: /CN=8979426a0bcd903a5526492cc5af7b4f2b0edb04
Certificate serial: 019A72CA27868AB7D014443A3DD7303065D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iXlCagvNkDpVJkksxa97TysO2wQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/993364-d85f-4007-96ec-49ac28142318/1/iXlCagvNkDpVJkksxa97TysO2wQ.mft
Manifest number: 06A1
Signing time: Tue 11 Nov 2025 12:00:42 +0000
Manifest this update: Tue 11 Nov 2025 12:00:42 +0000
Manifest next update: Wed 12 Nov 2025 12:00:42 +0000
Files and hashes: 1: iXlCagvNkDpVJkksxa97TysO2wQ.crl (hash: wfjD9PdG2UUZzt7JIJElOoYnxR2NunQ1Ee2Tvg2mcNI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/993364-d85f-4007-96ec-49ac28142318/1/iXlCagvNkDpVJkksxa97TysO2wQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/993364-d85f-4007-96ec-49ac28142318/1/iXlCagvNkDpVJkksxa97TysO2wQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/iXlCagvNkDpVJkksxa97TysO2wQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:ca:27:86:8a:b7:d0:14:44:3a:3d:d7:30:30:65:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8979426a0bcd903a5526492cc5af7b4f2b0edb04
Validity
Not Before: Nov 11 12:00:42 2025 GMT
Not After : Nov 12 12:00:42 2025 GMT
Subject: CN=86192455a54113a12ca540153e360a993fa7de62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:61:54:f0:ec:88:fa:94:ed:2c:31:54:b3:a2:
c5:6a:bf:82:97:8d:3f:fa:fa:8d:4c:21:1d:3b:41:
4c:d6:e3:5f:a9:f4:f4:e4:52:c3:eb:dd:8d:1c:10:
33:c9:41:d0:4b:72:13:35:e4:0f:7d:9f:99:73:63:
af:62:6d:d5:c9:73:00:e8:af:ef:2c:b1:bb:76:f5:
6e:f3:78:18:b2:d1:63:01:89:45:b7:58:51:3a:24:
20:81:40:6f:dd:a8:bd:fa:9e:b8:f8:ff:99:5f:d6:
7e:e8:2a:d3:ab:e4:4e:5a:90:91:48:eb:f2:61:2c:
c0:43:83:0e:8d:0b:33:63:25:13:d6:c7:f4:88:97:
1d:3c:0a:82:31:e4:9e:e7:ab:97:8f:f2:57:51:f6:
99:f3:b1:76:bb:b1:51:6a:41:40:e0:68:4a:ee:a3:
b0:7a:a6:68:96:67:8c:9b:6c:de:9d:4d:2c:51:99:
a5:9b:d0:1b:f4:95:4f:c6:cc:7f:61:c3:8c:23:c1:
af:08:20:43:67:69:78:07:3c:8d:03:25:94:60:51:
f9:28:d3:16:da:51:82:c9:d8:dc:89:5f:6a:15:e3:
b0:b9:75:95:46:db:bf:98:94:9f:c5:d2:46:51:d9:
0d:52:f8:04:3a:ed:dc:0e:67:b8:9c:98:65:a2:40:
e8:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:19:24:55:A5:41:13:A1:2C:A5:40:15:3E:36:0A:99:3F:A7:DE:62
X509v3 Authority Key Identifier:
keyid:89:79:42:6A:0B:CD:90:3A:55:26:49:2C:C5:AF:7B:4F:2B:0E:DB:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iXlCagvNkDpVJkksxa97TysO2wQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/993364-d85f-4007-96ec-49ac28142318/1/iXlCagvNkDpVJkksxa97TysO2wQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/993364-d85f-4007-96ec-49ac28142318/1/iXlCagvNkDpVJkksxa97TysO2wQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:b7:d4:cb:e7:a6:df:ba:a5:8a:5d:c2:62:89:3b:0f:50:1b:
fd:4f:44:a7:cb:45:fa:db:50:d7:71:0d:3a:b9:76:b3:43:16:
ed:e1:67:36:eb:a5:e7:d6:59:04:51:70:95:c2:f8:f0:11:f7:
fd:87:7e:74:d6:bb:2a:d9:48:30:56:bc:50:8c:8f:a3:de:98:
07:bc:7c:2a:17:d6:b9:66:4c:db:30:20:06:36:0e:ba:87:ce:
33:3a:56:38:2b:12:c0:f2:24:6b:92:61:88:ed:ba:41:60:70:
1f:88:b2:22:4d:39:2a:5b:5a:78:c8:df:f9:be:c2:98:dd:8b:
05:82:fe:35:c0:7a:f1:15:a1:4d:e4:7b:7d:9a:16:bf:d4:97:
d2:83:75:96:ec:b8:af:c3:a4:0b:3b:84:cc:7a:f6:0d:6d:d3:
24:6d:cb:6c:09:73:b3:d8:d8:15:5e:4e:db:e5:43:9b:83:68:
7b:08:e1:51:71:80:f3:b1:eb:75:09:21:23:75:00:41:e2:38:
f7:a0:a6:a3:72:84:26:49:66:eb:a5:fb:bf:c2:21:b4:33:9a:
85:3e:81:4b:35:73:31:90:45:7f:91:c4:22:d6:4d:33:4b:d8:
e2:b0:27:0e:8e:6a:35:58:52:2b:31:d7:0d:5b:73:60:6e:97:
28:0b:c9:94
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpyyieGirfQFEQ6PdcwMGXYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg5Nzk0MjZhMGJjZDkwM2E1NTI2NDkyY2M1YWY3YjRmMmIw
ZWRiMDQwHhcNMjUxMTExMTIwMDQyWhcNMjUxMTEyMTIwMDQyWjAzMTEwLwYDVQQD
Eyg4NjE5MjQ1NWE1NDExM2ExMmNhNTQwMTUzZTM2MGE5OTNmYTdkZTYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtWFU8OyI+pTtLDFUs6LFar+Cl40/
+vqNTCEdO0FM1uNfqfT05FLD692NHBAzyUHQS3ITNeQPfZ+Zc2OvYm3VyXMA6K/v
LLG7dvVu83gYstFjAYlFt1hROiQggUBv3ai9+p64+P+ZX9Z+6CrTq+ROWpCRSOvy
YSzAQ4MOjQszYyUT1sf0iJcdPAqCMeSe56uXj/JXUfaZ87F2u7FRakFA4GhK7qOw
eqZolmeMm2zenU0sUZmlm9Ab9JVPxsx/YcOMI8GvCCBDZ2l4BzyNAyWUYFH5KNMW
2lGCydjciV9qFeOwuXWVRtu/mJSfxdJGUdkNUvgEOu3cDme4nJhlokDoawIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIYZJFWlQROhLKVAFT42Cpk/p95iMB8GA1UdIwQY
MBaAFIl5QmoLzZA6VSZJLMWve08rDtsEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaVhsQ2Fndk5rRHBWSmtrc3hhOTdUeXNPMndRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi85OTMzNjQtZDg1Zi00MDA3LTk2ZWMt
NDlhYzI4MTQyMzE4LzEvaVhsQ2Fndk5rRHBWSmtrc3hhOTdUeXNPMndRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Mi85OTMzNjQtZDg1Zi00MDA3LTk2ZWMtNDlhYzI4MTQyMzE4
LzEvaVhsQ2Fndk5rRHBWSmtrc3hhOTdUeXNPMndRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAp7fUy+em
37qlil3CYok7D1Ab/U9Ep8tF+ttQ13ENOrl2s0MW7eFnNuul59ZZBFFwlcL48BH3
/Yd+dNa7KtlIMFa8UIyPo96YB7x8KhfWuWZM2zAgBjYOuofOMzpWOCsSwPIka5Jh
iO26QWBwH4iyIk05KltaeMjf+b7CmN2LBYL+NcB68RWhTeR7fZoWv9SX0oN1luy4
r8OkCzuEzHr2DW3TJG3LbAlzs9jYFV5O2+VDm4NoewjhUXGA87HrdQkhI3UAQeI4
96Cmo3KEJklm66X7v8IhtDOahT6BSzVzMZBFf5HEItZNM0vY4rAnDo5qNVhSKzHX
DVtzYG6XKAvJlA==
-----END CERTIFICATE-----
Generated at Tue Nov 11 14:19:45 2025 by rpki-client