Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/26abf3-5b31-4181-a3f7-e7acb5b44eee/1/x0oNp1cJLW7M99lO3idYdToc14Q.mft
File: x0oNp1cJLW7M99lO3idYdToc14Q.mft (raw, json)
Hash identifier: 9dLQ6u3O1YYiCQiFceUuJ+/+xQX6BQvcrdRFFgfg5Tk=
Subject key identifier: 58:1C:85:93:E3:27:C6:90:AA:8C:D5:82:F5:9A:CC:DB:74:AC:D7:DE
Authority key identifier: C7:4A:0D:A7:57:09:2D:6E:CC:F7:D9:4E:DE:27:58:75:3A:1C:D7:84
Certificate issuer: /CN=c74a0da757092d6eccf7d94ede2758753a1cd784
Certificate serial: 019A26D43AE19B5CC2195465CE2040850EAD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x0oNp1cJLW7M99lO3idYdToc14Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/26abf3-5b31-4181-a3f7-e7acb5b44eee/1/x0oNp1cJLW7M99lO3idYdToc14Q.mft
Manifest number: 15F0
Signing time: Mon 27 Oct 2025 18:00:34 +0000
Manifest this update: Mon 27 Oct 2025 18:00:34 +0000
Manifest next update: Tue 28 Oct 2025 18:00:34 +0000
Files and hashes: 1: x0oNp1cJLW7M99lO3idYdToc14Q.crl (hash: 6whNbVHzr9rEQjQ3cKWGCgYtihrrn5i3cnHRgZ4ZTBY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/26abf3-5b31-4181-a3f7-e7acb5b44eee/1/x0oNp1cJLW7M99lO3idYdToc14Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/26abf3-5b31-4181-a3f7-e7acb5b44eee/1/x0oNp1cJLW7M99lO3idYdToc14Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/x0oNp1cJLW7M99lO3idYdToc14Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 18:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:26:d4:3a:e1:9b:5c:c2:19:54:65:ce:20:40:85:0e:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c74a0da757092d6eccf7d94ede2758753a1cd784
Validity
Not Before: Oct 27 18:00:34 2025 GMT
Not After : Oct 28 18:00:34 2025 GMT
Subject: CN=581c8593e327c690aa8cd582f59accdb74acd7de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:7e:8b:14:ea:67:df:4d:49:7f:e4:2b:13:bf:
8d:4a:ee:26:5f:98:d7:da:49:26:80:28:4e:92:cd:
5b:34:2b:1a:8b:ef:e4:d9:e1:69:aa:96:e7:ab:25:
20:40:a8:c7:14:ef:0e:dc:ca:c0:19:5c:47:b2:b1:
90:8d:af:fc:12:cd:8f:c8:af:33:0c:e2:66:d8:b2:
80:7c:b4:54:27:79:ea:00:b0:0e:13:87:9f:dc:12:
01:79:21:d2:0c:d3:79:eb:1f:e8:e6:a6:6d:1d:3e:
27:8e:4a:3a:ae:dd:57:a9:a0:00:78:a8:b8:1a:93:
48:1f:1b:e9:c2:a0:5d:66:f7:5a:5b:7e:5d:da:d9:
03:13:c8:79:2d:67:04:5a:fb:62:18:13:d4:6a:00:
d6:6c:71:76:c3:c0:ce:1a:66:c5:a6:b0:8a:53:f5:
66:a3:86:f8:87:8b:4d:62:a4:b6:89:e6:bb:eb:ee:
62:a9:20:26:45:e0:3b:1b:7b:13:20:e9:97:39:44:
98:fb:88:88:66:74:be:fb:04:83:25:ec:86:03:40:
08:59:c5:d2:0d:20:cd:b2:b9:17:a6:ac:fb:d9:14:
46:42:7a:29:f3:5b:f4:d1:cd:df:65:09:07:db:5e:
c4:9e:05:bd:9f:92:a8:6b:91:9a:75:51:67:64:5c:
05:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:1C:85:93:E3:27:C6:90:AA:8C:D5:82:F5:9A:CC:DB:74:AC:D7:DE
X509v3 Authority Key Identifier:
keyid:C7:4A:0D:A7:57:09:2D:6E:CC:F7:D9:4E:DE:27:58:75:3A:1C:D7:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x0oNp1cJLW7M99lO3idYdToc14Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/26abf3-5b31-4181-a3f7-e7acb5b44eee/1/x0oNp1cJLW7M99lO3idYdToc14Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/26abf3-5b31-4181-a3f7-e7acb5b44eee/1/x0oNp1cJLW7M99lO3idYdToc14Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:ae:ca:99:14:35:8b:5e:fa:11:1e:02:c5:11:99:cd:41:c4:
e9:55:95:76:40:2d:cc:e5:7c:3a:94:2c:f9:70:59:6b:f4:fa:
56:98:2f:ab:10:af:78:49:28:51:f9:ff:b8:6b:19:74:52:13:
e4:a9:ea:05:5b:45:67:40:00:03:69:24:e9:66:5a:48:cb:c0:
53:95:8d:bb:04:36:9a:0e:0e:c1:75:de:ab:d0:15:43:72:55:
d5:4a:cd:52:35:6a:9a:2d:00:56:92:38:cf:a7:d6:a0:3b:d6:
5d:47:da:bb:99:84:6b:8a:96:6d:03:3d:20:e1:de:66:54:af:
f5:70:5b:62:af:d1:f8:66:4d:82:3c:93:42:a7:01:b0:8f:1d:
57:22:07:20:24:e2:21:d5:b6:74:a9:60:10:6b:f7:a9:8a:2a:
6d:0a:96:e1:94:ad:fa:7a:4d:8e:d7:9c:72:53:bd:1d:5e:d3:
49:e1:45:15:8b:c8:9f:72:52:42:2c:4a:04:e4:44:41:bd:cc:
de:25:c6:d9:91:5c:9b:bf:ad:a2:84:01:e9:b6:4a:fa:5d:eb:
67:a0:46:94:18:55:56:ce:74:3f:fa:03:06:ac:39:be:38:7f:
ae:7b:d2:04:0f:d5:fa:82:66:28:2c:3b:0f:b1:20:b5:79:59:
f9:0c:8f:be
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZom1Drhm1zCGVRlziBAhQ6tMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM3NGEwZGE3NTcwOTJkNmVjY2Y3ZDk0ZWRlMjc1ODc1M2Ex
Y2Q3ODQwHhcNMjUxMDI3MTgwMDM0WhcNMjUxMDI4MTgwMDM0WjAzMTEwLwYDVQQD
Eyg1ODFjODU5M2UzMjdjNjkwYWE4Y2Q1ODJmNTlhY2NkYjc0YWNkN2RlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy36LFOpn301Jf+QrE7+NSu4mX5jX
2kkmgChOks1bNCsai+/k2eFpqpbnqyUgQKjHFO8O3MrAGVxHsrGQja/8Es2PyK8z
DOJm2LKAfLRUJ3nqALAOE4ef3BIBeSHSDNN56x/o5qZtHT4njko6rt1XqaAAeKi4
GpNIHxvpwqBdZvdaW35d2tkDE8h5LWcEWvtiGBPUagDWbHF2w8DOGmbFprCKU/Vm
o4b4h4tNYqS2iea76+5iqSAmReA7G3sTIOmXOUSY+4iIZnS++wSDJeyGA0AIWcXS
DSDNsrkXpqz72RRGQnop81v00c3fZQkH217EngW9n5Koa5GadVFnZFwFnQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFgchZPjJ8aQqozVgvWazNt0rNfeMB8GA1UdIwQY
MBaAFMdKDadXCS1uzPfZTt4nWHU6HNeEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveDBvTnAxY0pMVzdNOTlsTzNpZFlkVG9jMTRRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83My8yNmFiZjMtNWIzMS00MTgxLWEzZjct
ZTdhY2I1YjQ0ZWVlLzEveDBvTnAxY0pMVzdNOTlsTzNpZFlkVG9jMTRRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83My8yNmFiZjMtNWIzMS00MTgxLWEzZjctZTdhY2I1YjQ0ZWVl
LzEveDBvTnAxY0pMVzdNOTlsTzNpZFlkVG9jMTRRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaK7KmRQ1
i176ER4CxRGZzUHE6VWVdkAtzOV8OpQs+XBZa/T6VpgvqxCveEkoUfn/uGsZdFIT
5KnqBVtFZ0AAA2kk6WZaSMvAU5WNuwQ2mg4OwXXeq9AVQ3JV1UrNUjVqmi0AVpI4
z6fWoDvWXUfau5mEa4qWbQM9IOHeZlSv9XBbYq/R+GZNgjyTQqcBsI8dVyIHICTi
IdW2dKlgEGv3qYoqbQqW4ZSt+npNjtecclO9HV7TSeFFFYvIn3JSQixKBOREQb3M
3iXG2ZFcm7+tooQB6bZK+l3rZ6BGlBhVVs50P/oDBqw5vjh/rnvSBA/V+oJmKCw7
D7EgtXlZ+QyPvg==
-----END CERTIFICATE-----
Generated at Tue Oct 28 03:34:56 2025 by rpki-client