Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/43e70b-df62-4028-a386-a029fbb4be29/1/xoEG9ElX0ZQCAzWwv9YHfMvNyHg.mft
File: xoEG9ElX0ZQCAzWwv9YHfMvNyHg.mft (raw, json)
Hash identifier: nCCidTgVAhqk2Xm1qVb5nRcqLtxQIV8bY8TQ5e2rk1U=
Subject key identifier: 48:18:8B:B1:A5:2E:EF:D6:C7:10:18:F9:42:BB:E5:C3:11:78:6F:67
Authority key identifier: C6:81:06:F4:49:57:D1:94:02:03:35:B0:BF:D6:07:7C:CB:CD:C8:78
Certificate issuer: /CN=c68106f44957d194020335b0bfd6077ccbcdc878
Certificate serial: 019922FA1B06A970F1E0FE8C6B587A1BB564
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xoEG9ElX0ZQCAzWwv9YHfMvNyHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/43e70b-df62-4028-a386-a029fbb4be29/1/xoEG9ElX0ZQCAzWwv9YHfMvNyHg.mft
Manifest number: 166F
Signing time: Sun 07 Sep 2025 07:00:40 +0000
Manifest this update: Sun 07 Sep 2025 07:00:40 +0000
Manifest next update: Mon 08 Sep 2025 07:00:40 +0000
Files and hashes: 1: xoEG9ElX0ZQCAzWwv9YHfMvNyHg.crl (hash: QIIHZwY0b2VInlZO/MVuKn72IDvBmK10xJT631Nh/JI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/43e70b-df62-4028-a386-a029fbb4be29/1/xoEG9ElX0ZQCAzWwv9YHfMvNyHg.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/43e70b-df62-4028-a386-a029fbb4be29/1/xoEG9ElX0ZQCAzWwv9YHfMvNyHg.mft
rsync://rpki.ripe.net/repository/DEFAULT/xoEG9ElX0ZQCAzWwv9YHfMvNyHg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:fa:1b:06:a9:70:f1:e0:fe:8c:6b:58:7a:1b:b5:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c68106f44957d194020335b0bfd6077ccbcdc878
Validity
Not Before: Sep 7 07:00:40 2025 GMT
Not After : Sep 8 07:00:40 2025 GMT
Subject: CN=48188bb1a52eefd6c71018f942bbe5c311786f67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:50:f5:9f:11:f7:46:c0:6e:a9:87:62:0b:f9:
e3:23:09:1d:1b:12:57:1a:84:11:fa:c5:2b:e3:3c:
4f:99:26:ed:b6:e1:ac:3a:ae:6c:3e:8c:b8:98:ec:
a7:18:ab:7d:7e:e7:a8:ae:9e:10:c5:08:7c:06:56:
23:5f:04:26:4b:85:56:9c:1e:3e:80:f8:bf:ca:31:
47:dd:c1:11:6a:f6:ca:c3:10:79:f5:8c:55:ba:6d:
7b:e7:ef:b8:65:fb:37:75:21:f8:76:50:28:d1:0b:
ef:44:03:34:e3:09:f0:10:db:0e:1c:37:17:bf:06:
4e:b9:5f:b7:2e:69:b8:87:ef:ba:9a:81:f0:86:ea:
3e:85:ac:c6:f3:fd:8c:92:be:86:95:13:14:fb:a0:
9a:b3:5f:a4:51:bf:6d:44:35:bc:de:17:2a:5c:02:
f9:3f:5a:a4:0d:d7:b8:7b:4d:74:27:7e:cd:7c:c8:
bc:07:bb:8a:2b:04:b4:9c:78:5f:f9:73:4b:8d:15:
0d:80:8d:03:82:2e:db:40:9e:8e:d3:d9:d9:05:35:
67:3f:be:d0:81:a6:e2:0b:a4:f5:06:fe:44:00:6f:
8d:c8:07:57:ba:da:28:e5:f8:8b:cc:a2:44:ee:f7:
cb:f7:47:0d:7e:1f:97:8a:00:e7:b6:d0:ad:4a:d3:
da:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:18:8B:B1:A5:2E:EF:D6:C7:10:18:F9:42:BB:E5:C3:11:78:6F:67
X509v3 Authority Key Identifier:
keyid:C6:81:06:F4:49:57:D1:94:02:03:35:B0:BF:D6:07:7C:CB:CD:C8:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xoEG9ElX0ZQCAzWwv9YHfMvNyHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/43e70b-df62-4028-a386-a029fbb4be29/1/xoEG9ElX0ZQCAzWwv9YHfMvNyHg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/43e70b-df62-4028-a386-a029fbb4be29/1/xoEG9ElX0ZQCAzWwv9YHfMvNyHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:89:55:d3:07:8d:b5:fd:26:b4:d3:d7:ee:3f:72:c2:fc:ad:
1b:2b:65:b6:fe:66:22:4f:cc:58:da:08:86:9e:5e:20:53:af:
94:e1:1e:0d:c6:10:1b:66:f2:25:f5:e3:4d:28:4b:92:e4:46:
10:c0:b7:75:08:a1:69:80:8f:21:c2:2f:15:5a:54:bd:81:d4:
9c:c7:1d:ab:3a:8d:e0:31:b5:f1:46:cd:0f:9a:85:2f:60:fb:
61:15:23:9f:dc:a5:0f:c0:d4:af:93:c4:d9:bf:3d:f7:89:06:
80:3b:1d:ed:7d:9d:00:2c:10:e7:d8:c7:bc:0c:66:4d:dd:ee:
36:99:ea:1d:e6:46:3c:df:5e:bd:a8:95:3a:dd:d5:ca:98:c7:
5d:bd:ff:c0:57:cf:ee:ff:70:f5:e5:b5:f0:9e:80:17:f3:3e:
83:6d:29:ba:42:30:28:8e:08:3c:51:e6:89:91:3d:8d:eb:b2:
f5:22:85:dc:b5:a4:08:b8:9e:13:27:40:6a:5d:fe:76:d1:04:
3e:f4:d3:89:9f:50:61:6f:56:be:6a:dd:a5:b9:80:a7:62:b8:
d1:43:56:5e:70:ab:31:9a:5e:50:59:30:89:16:06:ea:35:de:
df:c9:bc:47:57:69:85:b1:3f:e2:dc:26:36:5d:70:3b:88:44:
a2:f5:b3:44
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZki+hsGqXDx4P6Ma1h6G7VkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2ODEwNmY0NDk1N2QxOTQwMjAzMzViMGJmZDYwNzdjY2Jj
ZGM4NzgwHhcNMjUwOTA3MDcwMDQwWhcNMjUwOTA4MDcwMDQwWjAzMTEwLwYDVQQD
Eyg0ODE4OGJiMWE1MmVlZmQ2YzcxMDE4Zjk0MmJiZTVjMzExNzg2ZjY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtlD1nxH3RsBuqYdiC/njIwkdGxJX
GoQR+sUr4zxPmSbttuGsOq5sPoy4mOynGKt9fueorp4QxQh8BlYjXwQmS4VWnB4+
gPi/yjFH3cERavbKwxB59YxVum175++4Zfs3dSH4dlAo0QvvRAM04wnwENsOHDcX
vwZOuV+3Lmm4h++6moHwhuo+hazG8/2Mkr6GlRMU+6Cas1+kUb9tRDW83hcqXAL5
P1qkDde4e010J37NfMi8B7uKKwS0nHhf+XNLjRUNgI0Dgi7bQJ6O09nZBTVnP77Q
gabiC6T1Bv5EAG+NyAdXutoo5fiLzKJE7vfL90cNfh+XigDnttCtStPa9QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEgYi7GlLu/WxxAY+UK75cMReG9nMB8GA1UdIwQY
MBaAFMaBBvRJV9GUAgM1sL/WB3zLzch4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveG9FRzlFbFgwWlFDQXpXd3Y5WUhmTXZOeUhnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS80M2U3MGItZGY2Mi00MDI4LWEzODYt
YTAyOWZiYjRiZTI5LzEveG9FRzlFbFgwWlFDQXpXd3Y5WUhmTXZOeUhnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82YS80M2U3MGItZGY2Mi00MDI4LWEzODYtYTAyOWZiYjRiZTI5
LzEveG9FRzlFbFgwWlFDQXpXd3Y5WUhmTXZOeUhnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMYlV0weN
tf0mtNPX7j9ywvytGytltv5mIk/MWNoIhp5eIFOvlOEeDcYQG2byJfXjTShLkuRG
EMC3dQihaYCPIcIvFVpUvYHUnMcdqzqN4DG18UbND5qFL2D7YRUjn9ylD8DUr5PE
2b8994kGgDsd7X2dACwQ59jHvAxmTd3uNpnqHeZGPN9evaiVOt3VypjHXb3/wFfP
7v9w9eW18J6AF/M+g20pukIwKI4IPFHmiZE9jeuy9SKF3LWkCLieEydAal3+dtEE
PvTTiZ9QYW9WvmrdpbmAp2K40UNWXnCrMZpeUFkwiRYG6jXe38m8R1dphbE/4twm
Nl1wO4hEovWzRA==
-----END CERTIFICATE-----
Generated at Sun Sep 7 13:53:41 2025 by rpki-client