Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/0a3944-1a69-4dd1-837b-ef579f2ad63a/1/xEuito7PJQE5XMZUCOiTWsnYbJc.mft
File: xEuito7PJQE5XMZUCOiTWsnYbJc.mft (raw, json)
Hash identifier: C4FZMXQLrZvsx0XS+Z0SEdmYPrZ7+yVajavyTHoOTkw=
Subject key identifier: 2C:FD:B0:F7:96:34:3E:65:A9:9C:58:61:AB:3A:41:21:3E:0D:E8:52
Authority key identifier: C4:4B:A2:B6:8E:CF:25:01:39:5C:C6:54:08:E8:93:5A:C9:D8:6C:97
Certificate issuer: /CN=c44ba2b68ecf2501395cc65408e8935ac9d86c97
Certificate serial: 019A70A596A668087212C955C793AF77FC2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xEuito7PJQE5XMZUCOiTWsnYbJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/0a3944-1a69-4dd1-837b-ef579f2ad63a/1/xEuito7PJQE5XMZUCOiTWsnYbJc.mft
Manifest number: 03F9
Signing time: Tue 11 Nov 2025 02:01:31 +0000
Manifest this update: Tue 11 Nov 2025 02:01:31 +0000
Manifest next update: Wed 12 Nov 2025 02:01:31 +0000
Files and hashes: 1: xEuito7PJQE5XMZUCOiTWsnYbJc.crl (hash: mS9NdnrtPYwHfUNq/rEyX2oblxfhMZRBKelgZ2BJToM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/0a3944-1a69-4dd1-837b-ef579f2ad63a/1/xEuito7PJQE5XMZUCOiTWsnYbJc.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/0a3944-1a69-4dd1-837b-ef579f2ad63a/1/xEuito7PJQE5XMZUCOiTWsnYbJc.mft
rsync://rpki.ripe.net/repository/DEFAULT/xEuito7PJQE5XMZUCOiTWsnYbJc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 02:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:a5:96:a6:68:08:72:12:c9:55:c7:93:af:77:fc:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c44ba2b68ecf2501395cc65408e8935ac9d86c97
Validity
Not Before: Nov 11 02:01:31 2025 GMT
Not After : Nov 12 02:01:31 2025 GMT
Subject: CN=2cfdb0f796343e65a99c5861ab3a41213e0de852
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:f8:77:b9:8b:0e:64:f8:6c:6c:bb:4e:8a:61:
8d:b3:c6:55:a8:74:ac:0e:67:24:f8:1d:a7:4c:a4:
c1:a4:a1:79:de:86:22:65:50:61:bf:5d:71:0c:a0:
4c:ad:89:c5:2f:a0:0e:fa:65:2c:47:d2:d2:35:88:
26:f0:af:41:5e:dc:5b:95:bd:05:70:e0:07:ee:13:
3c:2c:18:1a:bc:da:71:70:0c:79:b1:f0:60:1f:fc:
9d:4e:b0:9e:16:05:14:c0:a3:36:b6:b8:08:63:aa:
d9:4f:9d:fb:d5:0c:de:2e:b4:67:60:66:f5:03:94:
da:5b:1f:d1:0c:dd:33:d9:78:ef:e1:24:e5:f0:8c:
04:b6:f8:e0:0b:ef:9e:d3:04:81:95:bc:0d:c0:3d:
b9:2b:85:f2:5f:4c:99:7c:16:e7:d6:60:f6:66:54:
e7:2c:7a:73:a2:05:1f:ec:40:d7:9f:d7:fb:45:86:
83:7f:cf:b8:f4:ee:d4:20:18:c3:04:88:1a:78:81:
10:58:0f:75:9b:25:ce:f8:ca:9a:da:e9:36:92:18:
a1:b0:4c:6a:55:07:d0:22:2a:55:e1:6a:f2:be:97:
f7:f9:3d:a5:98:c4:70:24:b3:be:80:0e:74:c4:be:
d9:e4:95:fb:a1:f7:21:f9:6c:22:65:a3:99:6e:5b:
8f:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:FD:B0:F7:96:34:3E:65:A9:9C:58:61:AB:3A:41:21:3E:0D:E8:52
X509v3 Authority Key Identifier:
keyid:C4:4B:A2:B6:8E:CF:25:01:39:5C:C6:54:08:E8:93:5A:C9:D8:6C:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xEuito7PJQE5XMZUCOiTWsnYbJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/0a3944-1a69-4dd1-837b-ef579f2ad63a/1/xEuito7PJQE5XMZUCOiTWsnYbJc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/0a3944-1a69-4dd1-837b-ef579f2ad63a/1/xEuito7PJQE5XMZUCOiTWsnYbJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:31:da:6e:9b:43:98:a2:f5:6f:95:79:9e:34:69:9d:a4:da:
54:63:dd:7d:6e:c8:7c:39:87:74:2b:ac:49:77:5d:03:f8:13:
61:64:d3:b4:54:a0:7c:96:82:91:d2:ad:9a:d0:9c:b8:44:6c:
af:d1:25:13:6a:c0:45:54:5e:59:86:b7:e9:f1:aa:d3:ea:29:
6f:ca:27:74:05:bb:5f:d7:0d:c9:2e:b1:4a:19:49:d3:c9:c5:
2c:61:96:8d:4f:9e:86:79:8f:64:68:f2:ff:54:10:c8:4a:b1:
98:68:23:52:a6:72:0d:33:30:ac:ef:be:30:c3:ae:68:61:84:
20:45:f2:19:6b:10:3e:c7:68:18:1f:58:e6:cd:9b:01:fa:f0:
4b:b5:c3:36:9b:c0:95:81:93:e9:e1:5d:2f:57:7c:f8:8b:69:
6f:e3:ec:e2:15:dc:ff:59:39:4e:52:8d:70:f3:ea:d8:41:1a:
28:0c:cf:9b:a3:cc:51:7d:0d:4e:62:b2:1b:56:a8:6a:c4:da:
4b:81:6e:8e:2b:96:ec:56:da:29:fd:4e:7b:08:ba:20:01:23:
32:5c:50:5f:57:bc:35:2f:f7:e5:2d:b9:61:0d:06:ca:ee:4d:
c5:74:d0:3f:01:05:f1:12:4c:d7:2b:0b:f4:65:b3:89:3e:19:
69:01:15:ac
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpwpZamaAhyEslVx5Ovd/wqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM0NGJhMmI2OGVjZjI1MDEzOTVjYzY1NDA4ZTg5MzVhYzlk
ODZjOTcwHhcNMjUxMTExMDIwMTMxWhcNMjUxMTEyMDIwMTMxWjAzMTEwLwYDVQQD
EygyY2ZkYjBmNzk2MzQzZTY1YTk5YzU4NjFhYjNhNDEyMTNlMGRlODUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnfh3uYsOZPhsbLtOimGNs8ZVqHSs
Dmck+B2nTKTBpKF53oYiZVBhv11xDKBMrYnFL6AO+mUsR9LSNYgm8K9BXtxblb0F
cOAH7hM8LBgavNpxcAx5sfBgH/ydTrCeFgUUwKM2trgIY6rZT5371QzeLrRnYGb1
A5TaWx/RDN0z2Xjv4STl8IwEtvjgC++e0wSBlbwNwD25K4XyX0yZfBbn1mD2ZlTn
LHpzogUf7EDXn9f7RYaDf8+49O7UIBjDBIgaeIEQWA91myXO+Mqa2uk2khihsExq
VQfQIipV4Wryvpf3+T2lmMRwJLO+gA50xL7Z5JX7ofch+WwiZaOZbluPhQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCz9sPeWND5lqZxYYas6QSE+DehSMB8GA1UdIwQY
MBaAFMRLoraOzyUBOVzGVAjok1rJ2GyXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveEV1aXRvN1BKUUU1WE1aVUNPaVRXc25ZYkpjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny8wYTM5NDQtMWE2OS00ZGQxLTgzN2It
ZWY1NzlmMmFkNjNhLzEveEV1aXRvN1BKUUU1WE1aVUNPaVRXc25ZYkpjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ny8wYTM5NDQtMWE2OS00ZGQxLTgzN2ItZWY1NzlmMmFkNjNh
LzEveEV1aXRvN1BKUUU1WE1aVUNPaVRXc25ZYkpjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXjHabptD
mKL1b5V5njRpnaTaVGPdfW7IfDmHdCusSXddA/gTYWTTtFSgfJaCkdKtmtCcuERs
r9ElE2rARVReWYa36fGq0+opb8ondAW7X9cNyS6xShlJ08nFLGGWjU+ehnmPZGjy
/1QQyEqxmGgjUqZyDTMwrO++MMOuaGGEIEXyGWsQPsdoGB9Y5s2bAfrwS7XDNpvA
lYGT6eFdL1d8+Itpb+Ps4hXc/1k5TlKNcPPq2EEaKAzPm6PMUX0NTmKyG1aoasTa
S4FujiuW7FbaKf1Oewi6IAEjMlxQX1e8NS/35S25YQ0Gyu5NxXTQPwEF8RJM1ysL
9GWziT4ZaQEVrA==
-----END CERTIFICATE-----
Generated at Tue Nov 11 11:35:06 2025 by rpki-client