Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/1a530f-efe3-4d8b-903a-a7136a145f1c/1/a1xW3Y1JexBoE6IloYFxST7jKoU.mft
File: a1xW3Y1JexBoE6IloYFxST7jKoU.mft (raw, json)
Hash identifier: mpWooqenf2pKYBxOJZR/bYyVqus5WypS9l5Uubu71lQ=
Subject key identifier: CC:60:97:6E:1E:2D:8E:8F:98:78:32:37:21:71:F8:47:78:87:CE:A8
Authority key identifier: 6B:5C:56:DD:8D:49:7B:10:68:13:A2:25:A1:81:71:49:3E:E3:2A:85
Certificate issuer: /CN=6b5c56dd8d497b106813a225a18171493ee32a85
Certificate serial: 019A70DBE892A61A1FA1C05FDDC10DA2A8AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a1xW3Y1JexBoE6IloYFxST7jKoU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/1a530f-efe3-4d8b-903a-a7136a145f1c/1/a1xW3Y1JexBoE6IloYFxST7jKoU.mft
Manifest number: 015F
Signing time: Tue 11 Nov 2025 03:00:51 +0000
Manifest this update: Tue 11 Nov 2025 03:00:51 +0000
Manifest next update: Wed 12 Nov 2025 03:00:51 +0000
Files and hashes: 1: a1xW3Y1JexBoE6IloYFxST7jKoU.crl (hash: DnvsxRkwGsF79SVUehmJ9ZAE5y2cH6ot7FfjaFdIp2Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/1a530f-efe3-4d8b-903a-a7136a145f1c/1/a1xW3Y1JexBoE6IloYFxST7jKoU.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/1a530f-efe3-4d8b-903a-a7136a145f1c/1/a1xW3Y1JexBoE6IloYFxST7jKoU.mft
rsync://rpki.ripe.net/repository/DEFAULT/a1xW3Y1JexBoE6IloYFxST7jKoU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 03:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:db:e8:92:a6:1a:1f:a1:c0:5f:dd:c1:0d:a2:a8:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b5c56dd8d497b106813a225a18171493ee32a85
Validity
Not Before: Nov 11 03:00:51 2025 GMT
Not After : Nov 12 03:00:51 2025 GMT
Subject: CN=cc60976e1e2d8e8f987832372171f8477887cea8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:00:9d:3a:17:e0:57:bd:15:9a:0c:cd:0c:e3:
ab:19:3d:64:e2:cf:8e:27:08:16:20:c0:b1:77:a2:
70:8c:21:12:45:ec:01:64:09:04:00:54:c5:df:76:
a3:16:3f:8c:00:de:29:03:d1:17:10:0c:b1:88:54:
f0:0d:dd:77:c3:3a:10:65:30:79:01:af:26:b3:b0:
af:90:e5:96:43:9a:71:05:e7:a9:16:b9:ba:5d:24:
aa:ba:ce:9b:b6:dd:ac:d1:4b:d5:37:bd:fa:1c:f5:
9b:16:60:13:1d:a3:08:6f:dd:0a:88:19:57:78:30:
69:1e:2e:9c:0c:83:fe:fb:fd:fb:7c:e0:29:d5:78:
60:49:28:51:68:7c:d0:5b:00:05:49:e6:5d:47:6d:
86:ff:ea:35:51:e3:b4:97:88:57:b4:63:79:97:ec:
7d:6b:14:d6:6b:66:cb:73:b7:85:3c:93:cb:c7:40:
06:89:be:b3:4e:c5:50:d9:18:36:38:c3:44:c1:67:
f2:7a:1f:86:bf:0b:f5:e1:50:b8:b8:41:d8:24:53:
05:2d:d8:29:07:8c:d3:0b:72:db:d8:83:66:73:a0:
45:fe:cd:f1:99:ef:b6:31:b8:37:0a:48:45:bd:34:
25:71:5a:19:27:58:67:d0:e1:22:f5:11:9a:65:19:
8f:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:60:97:6E:1E:2D:8E:8F:98:78:32:37:21:71:F8:47:78:87:CE:A8
X509v3 Authority Key Identifier:
keyid:6B:5C:56:DD:8D:49:7B:10:68:13:A2:25:A1:81:71:49:3E:E3:2A:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1xW3Y1JexBoE6IloYFxST7jKoU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/1a530f-efe3-4d8b-903a-a7136a145f1c/1/a1xW3Y1JexBoE6IloYFxST7jKoU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/1a530f-efe3-4d8b-903a-a7136a145f1c/1/a1xW3Y1JexBoE6IloYFxST7jKoU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c6:f7:5d:dd:6c:3f:60:ae:f2:5f:6d:4b:a7:78:0d:e1:50:29:
71:62:d0:b7:bb:8a:48:b0:65:b2:a8:85:21:cf:f4:c2:de:e2:
05:ff:61:c2:3b:e8:3f:3a:a2:80:29:de:f1:82:db:1e:3c:f9:
e7:17:10:b9:53:ca:25:cf:b2:56:04:04:56:f0:b4:c4:17:08:
88:6c:4e:f6:08:66:fc:5e:a4:72:91:09:7a:e6:1c:f0:79:b3:
3b:3f:35:71:23:29:70:75:96:05:63:38:3f:d6:f1:67:e2:97:
82:7b:19:4d:f6:93:5a:5e:5f:3d:a2:c2:3a:71:e9:bf:8e:6b:
bc:12:59:72:b3:c6:7c:5c:ca:ab:7b:36:98:6a:17:6b:a4:87:
0b:92:04:03:10:d4:22:86:a3:59:17:d9:3b:b0:ed:f0:12:38:
2a:d1:06:55:5e:d0:4b:bc:c4:75:e8:5d:5d:4a:63:23:be:55:
d8:8f:b4:58:c1:8b:95:7d:02:11:4d:eb:d2:b0:7b:34:31:20:
05:66:51:df:d8:5d:84:9d:b2:90:a3:40:72:ae:cd:c1:00:1c:
34:7c:0f:1b:4e:81:62:d7:5b:71:89:19:46:3a:3e:33:79:5b:
02:ac:64:a3:16:e6:45:59:3b:7e:e9:43:f9:64:0a:5d:67:da:
28:75:eb:f5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpw2+iSphofocBf3cENoqitMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZiNWM1NmRkOGQ0OTdiMTA2ODEzYTIyNWExODE3MTQ5M2Vl
MzJhODUwHhcNMjUxMTExMDMwMDUxWhcNMjUxMTEyMDMwMDUxWjAzMTEwLwYDVQQD
EyhjYzYwOTc2ZTFlMmQ4ZThmOTg3ODMyMzcyMTcxZjg0Nzc4ODdjZWE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmwCdOhfgV70VmgzNDOOrGT1k4s+O
JwgWIMCxd6JwjCESRewBZAkEAFTF33ajFj+MAN4pA9EXEAyxiFTwDd13wzoQZTB5
Aa8ms7CvkOWWQ5pxBeepFrm6XSSqus6btt2s0UvVN736HPWbFmATHaMIb90KiBlX
eDBpHi6cDIP++/37fOAp1XhgSShRaHzQWwAFSeZdR22G/+o1UeO0l4hXtGN5l+x9
axTWa2bLc7eFPJPLx0AGib6zTsVQ2Rg2OMNEwWfyeh+Gvwv14VC4uEHYJFMFLdgp
B4zTC3Lb2INmc6BF/s3xme+2Mbg3CkhFvTQlcVoZJ1hn0OEi9RGaZRmP8wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMxgl24eLY6PmHgyNyFx+Ed4h86oMB8GA1UdIwQY
MBaAFGtcVt2NSXsQaBOiJaGBcUk+4yqFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYTF4VzNZMUpleEJvRTZJbG9ZRnhTVDdqS29VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS8xYTUzMGYtZWZlMy00ZDhiLTkwM2Et
YTcxMzZhMTQ1ZjFjLzEvYTF4VzNZMUpleEJvRTZJbG9ZRnhTVDdqS29VLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS8xYTUzMGYtZWZlMy00ZDhiLTkwM2EtYTcxMzZhMTQ1ZjFj
LzEvYTF4VzNZMUpleEJvRTZJbG9ZRnhTVDdqS29VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxvdd3Ww/
YK7yX21Lp3gN4VApcWLQt7uKSLBlsqiFIc/0wt7iBf9hwjvoPzqigCne8YLbHjz5
5xcQuVPKJc+yVgQEVvC0xBcIiGxO9ghm/F6kcpEJeuYc8HmzOz81cSMpcHWWBWM4
P9bxZ+KXgnsZTfaTWl5fPaLCOnHpv45rvBJZcrPGfFzKq3s2mGoXa6SHC5IEAxDU
IoajWRfZO7Dt8BI4KtEGVV7QS7zEdehdXUpjI75V2I+0WMGLlX0CEU3r0rB7NDEg
BWZR39hdhJ2ykKNAcq7NwQAcNHwPG06BYtdbcYkZRjo+M3lbAqxkoxbmRVk7fulD
+WQKXWfaKHXr9Q==
-----END CERTIFICATE-----
Generated at Tue Nov 11 11:33:55 2025 by rpki-client