Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/83e5ea-9fe4-4814-83c6-1bb430606535/1/xRvfUzN6yxiydpUsNX6RmAvMWww.mft
File: xRvfUzN6yxiydpUsNX6RmAvMWww.mft (raw, json)
Hash identifier: REiHMfCozxjV2jOXRqezD4vOW0Eqd60Gcx6JSQRGMDQ=
Subject key identifier: 38:6B:CB:15:A0:26:F5:2B:01:D9:F5:92:89:AE:BB:2A:99:5C:4E:62
Authority key identifier: C5:1B:DF:53:33:7A:CB:18:B2:76:95:2C:35:7E:91:98:0B:CC:5B:0C
Certificate issuer: /CN=c51bdf53337acb18b276952c357e91980bcc5b0c
Certificate serial: 019A71B8FA41A169338DEB4080A93FFECF83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xRvfUzN6yxiydpUsNX6RmAvMWww.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/83e5ea-9fe4-4814-83c6-1bb430606535/1/xRvfUzN6yxiydpUsNX6RmAvMWww.mft
Manifest number: 0B2E
Signing time: Tue 11 Nov 2025 07:02:19 +0000
Manifest this update: Tue 11 Nov 2025 07:02:19 +0000
Manifest next update: Wed 12 Nov 2025 07:02:19 +0000
Files and hashes: 1: xRvfUzN6yxiydpUsNX6RmAvMWww.crl (hash: JtodQPb92V7/JI2KgT9K+ZltxG6qJBjpjNq5ggTffbY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/83e5ea-9fe4-4814-83c6-1bb430606535/1/xRvfUzN6yxiydpUsNX6RmAvMWww.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/83e5ea-9fe4-4814-83c6-1bb430606535/1/xRvfUzN6yxiydpUsNX6RmAvMWww.mft
rsync://rpki.ripe.net/repository/DEFAULT/xRvfUzN6yxiydpUsNX6RmAvMWww.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:fa:41:a1:69:33:8d:eb:40:80:a9:3f:fe:cf:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c51bdf53337acb18b276952c357e91980bcc5b0c
Validity
Not Before: Nov 11 07:02:19 2025 GMT
Not After : Nov 12 07:02:19 2025 GMT
Subject: CN=386bcb15a026f52b01d9f59289aebb2a995c4e62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:10:ee:48:51:70:73:f8:76:f1:90:4a:bd:9f:
60:d0:a3:28:b9:f9:58:59:24:3c:1b:7a:eb:73:61:
fa:ed:6f:7c:94:1c:e4:4f:e7:be:82:89:d8:54:18:
c9:9b:ce:ed:19:e9:53:45:b5:a4:8b:f9:5d:5b:d0:
66:d8:22:da:f6:9c:a0:87:ce:12:3f:fc:0b:53:60:
44:1e:74:36:8f:53:e8:6a:a8:57:d4:98:47:7e:ba:
66:c0:7f:1c:bc:47:7a:72:5a:93:09:8d:01:4b:8b:
fb:49:a5:56:39:8f:ee:55:ff:8a:8a:af:9b:a3:0e:
a0:bf:d3:e7:80:97:fa:98:b5:3d:2b:9d:b4:9a:02:
d7:02:9b:bd:e0:af:54:de:90:ef:e1:6d:58:50:64:
dc:5e:7b:8c:d4:2a:22:a2:25:4e:04:99:ba:fd:af:
8e:c9:f0:21:38:63:e2:9c:af:1d:18:d4:40:e9:b8:
1b:30:11:36:f6:00:28:0a:e6:df:12:04:7a:89:0f:
7e:07:d6:9a:2c:93:16:f3:80:59:88:62:55:3c:ce:
44:5a:38:a0:5c:ec:c0:9a:6b:2a:f5:84:34:ba:55:
a1:87:95:db:a2:04:bb:9b:1e:69:12:a9:e8:b9:51:
1a:0e:05:66:b9:85:d2:f9:9e:15:29:50:b7:d9:e5:
b8:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:6B:CB:15:A0:26:F5:2B:01:D9:F5:92:89:AE:BB:2A:99:5C:4E:62
X509v3 Authority Key Identifier:
keyid:C5:1B:DF:53:33:7A:CB:18:B2:76:95:2C:35:7E:91:98:0B:CC:5B:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xRvfUzN6yxiydpUsNX6RmAvMWww.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/83e5ea-9fe4-4814-83c6-1bb430606535/1/xRvfUzN6yxiydpUsNX6RmAvMWww.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/83e5ea-9fe4-4814-83c6-1bb430606535/1/xRvfUzN6yxiydpUsNX6RmAvMWww.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:23:51:3e:48:be:80:79:0b:47:3e:09:49:20:77:49:b9:f3:
4d:05:a5:06:01:51:9e:93:95:48:6d:f3:be:22:26:e4:a8:d6:
bb:4d:b9:1a:bd:3b:78:4e:e4:42:42:ed:1a:74:1f:18:3a:c5:
40:14:dd:bf:01:00:14:0c:2f:4a:24:0a:7b:e4:81:93:da:5a:
3a:bb:1e:25:27:36:68:df:37:96:6b:e2:67:cd:a8:15:b1:cd:
9a:7b:a1:17:04:f0:68:86:19:e3:0e:24:0d:9b:aa:2d:ed:03:
50:5a:38:cb:5f:e3:1f:ec:ab:24:ed:55:88:f3:82:25:a3:68:
f8:2c:99:ba:74:af:5c:a4:aa:60:2b:bf:65:c4:c1:0c:76:27:
c2:5f:dd:01:92:de:dc:0a:e7:82:71:e5:2d:73:eb:fa:76:89:
6d:82:23:59:d7:b1:2f:16:a7:d8:5a:3f:d2:73:e3:d8:2a:85:
8e:6b:85:e2:c3:2f:31:78:fe:86:84:e4:2a:9d:b1:c6:11:39:
21:ec:ed:94:9f:f2:45:48:a1:78:40:d7:06:36:3c:3c:b3:da:
cc:69:e8:0d:af:9b:a6:40:13:52:f8:1f:03:c3:5a:73:02:81:
f4:85:52:af:8a:eb:30:2f:01:62:ac:da:c3:a5:ac:df:c0:7a:
35:91:3e:f5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxuPpBoWkzjetAgKk//s+DMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM1MWJkZjUzMzM3YWNiMThiMjc2OTUyYzM1N2U5MTk4MGJj
YzViMGMwHhcNMjUxMTExMDcwMjE5WhcNMjUxMTEyMDcwMjE5WjAzMTEwLwYDVQQD
EygzODZiY2IxNWEwMjZmNTJiMDFkOWY1OTI4OWFlYmIyYTk5NWM0ZTYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxBDuSFFwc/h28ZBKvZ9g0KMouflY
WSQ8G3rrc2H67W98lBzkT+e+gonYVBjJm87tGelTRbWki/ldW9Bm2CLa9pygh84S
P/wLU2BEHnQ2j1PoaqhX1JhHfrpmwH8cvEd6clqTCY0BS4v7SaVWOY/uVf+Kiq+b
ow6gv9PngJf6mLU9K520mgLXApu94K9U3pDv4W1YUGTcXnuM1CoioiVOBJm6/a+O
yfAhOGPinK8dGNRA6bgbMBE29gAoCubfEgR6iQ9+B9aaLJMW84BZiGJVPM5EWjig
XOzAmmsq9YQ0ulWhh5XbogS7mx5pEqnouVEaDgVmuYXS+Z4VKVC32eW4FQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDhryxWgJvUrAdn1komuuyqZXE5iMB8GA1UdIwQY
MBaAFMUb31MzessYsnaVLDV+kZgLzFsMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveFJ2ZlV6TjZ5eGl5ZHBVc05YNlJtQXZNV3d3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS84M2U1ZWEtOWZlNC00ODE0LTgzYzYt
MWJiNDMwNjA2NTM1LzEveFJ2ZlV6TjZ5eGl5ZHBVc05YNlJtQXZNV3d3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS84M2U1ZWEtOWZlNC00ODE0LTgzYzYtMWJiNDMwNjA2NTM1
LzEveFJ2ZlV6TjZ5eGl5ZHBVc05YNlJtQXZNV3d3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARSNRPki+
gHkLRz4JSSB3SbnzTQWlBgFRnpOVSG3zviIm5KjWu025Gr07eE7kQkLtGnQfGDrF
QBTdvwEAFAwvSiQKe+SBk9paOrseJSc2aN83lmviZ82oFbHNmnuhFwTwaIYZ4w4k
DZuqLe0DUFo4y1/jH+yrJO1ViPOCJaNo+CyZunSvXKSqYCu/ZcTBDHYnwl/dAZLe
3ArngnHlLXPr+naJbYIjWdexLxan2Fo/0nPj2CqFjmuF4sMvMXj+hoTkKp2xxhE5
IeztlJ/yRUiheEDXBjY8PLPazGnoDa+bpkATUvgfA8NacwKB9IVSr4rrMC8BYqza
w6Ws38B6NZE+9Q==
-----END CERTIFICATE-----
Generated at Tue Nov 11 16:48:25 2025 by rpki-client