Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/73c43f-be48-4957-ad38-cd2887b42667/1/Mxj1evB8TfWYXkpyC4DIm5fpCnk.mft
File: Mxj1evB8TfWYXkpyC4DIm5fpCnk.mft (raw, json)
Hash identifier: E7To/2MhvcCsy95YJe6XSyl9jQpnwV60uBFbAXMAY4U=
Subject key identifier: 6C:55:AD:A4:05:DB:24:3D:52:7A:7F:27:86:6C:EA:C3:B5:2A:2A:8B
Authority key identifier: 33:18:F5:7A:F0:7C:4D:F5:98:5E:4A:72:0B:80:C8:9B:97:E9:0A:79
Certificate issuer: /CN=3318f57af07c4df5985e4a720b80c89b97e90a79
Certificate serial: 019A7112D28AFC2935AB2CA39226EDA8C7EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mxj1evB8TfWYXkpyC4DIm5fpCnk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/73c43f-be48-4957-ad38-cd2887b42667/1/Mxj1evB8TfWYXkpyC4DIm5fpCnk.mft
Manifest number: 0140
Signing time: Tue 11 Nov 2025 04:00:50 +0000
Manifest this update: Tue 11 Nov 2025 04:00:50 +0000
Manifest next update: Wed 12 Nov 2025 04:00:50 +0000
Files and hashes: 1: Mxj1evB8TfWYXkpyC4DIm5fpCnk.crl (hash: 2xq/5hm+4edRZdeJHpZ6a3qS5g7EAWoxTpDycs4ASLU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/73c43f-be48-4957-ad38-cd2887b42667/1/Mxj1evB8TfWYXkpyC4DIm5fpCnk.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/73c43f-be48-4957-ad38-cd2887b42667/1/Mxj1evB8TfWYXkpyC4DIm5fpCnk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Mxj1evB8TfWYXkpyC4DIm5fpCnk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:12:d2:8a:fc:29:35:ab:2c:a3:92:26:ed:a8:c7:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3318f57af07c4df5985e4a720b80c89b97e90a79
Validity
Not Before: Nov 11 04:00:50 2025 GMT
Not After : Nov 12 04:00:50 2025 GMT
Subject: CN=6c55ada405db243d527a7f27866ceac3b52a2a8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:60:96:93:08:3b:6f:a6:c7:3a:0a:92:2e:e6:
83:43:e8:e0:91:b7:f9:95:61:09:3d:a5:c8:d8:ea:
be:97:96:c6:7b:e2:b7:79:a2:78:3b:4b:50:81:2f:
df:27:d1:31:b7:4c:e5:a1:31:08:1a:45:42:1b:e9:
b5:ce:16:6c:ea:5d:31:41:13:b0:95:aa:6c:90:0f:
65:d5:b9:c2:a0:f3:dd:dc:4a:31:11:de:12:78:c8:
e0:e4:8b:b0:28:89:2c:27:45:67:dd:78:4b:f6:b2:
75:27:da:ea:80:5c:20:3d:1e:71:eb:dd:89:54:ba:
68:8e:df:b1:ed:df:a7:6a:96:e6:a9:92:ce:a8:53:
5f:8a:a6:76:12:63:af:0d:03:5c:ab:0a:ad:56:12:
1a:10:f3:52:4b:2c:8a:59:90:1f:88:31:10:b2:7c:
19:61:9b:d7:1a:a7:f9:ab:49:f1:aa:99:a1:93:35:
d8:ec:d5:ff:a4:03:aa:48:40:5d:b9:dd:a8:b1:16:
fd:47:b1:ef:86:32:c4:74:22:8c:88:95:ad:20:e1:
95:65:09:a7:9e:93:01:a3:06:b6:45:b5:08:f1:fd:
19:5e:ea:4f:b0:b2:9a:fc:87:e9:4c:92:07:69:bf:
43:dd:a8:02:e4:0f:44:89:3f:cd:53:9a:f5:72:d0:
23:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:55:AD:A4:05:DB:24:3D:52:7A:7F:27:86:6C:EA:C3:B5:2A:2A:8B
X509v3 Authority Key Identifier:
keyid:33:18:F5:7A:F0:7C:4D:F5:98:5E:4A:72:0B:80:C8:9B:97:E9:0A:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mxj1evB8TfWYXkpyC4DIm5fpCnk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/73c43f-be48-4957-ad38-cd2887b42667/1/Mxj1evB8TfWYXkpyC4DIm5fpCnk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/73c43f-be48-4957-ad38-cd2887b42667/1/Mxj1evB8TfWYXkpyC4DIm5fpCnk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:07:fd:0b:e1:54:b5:28:39:14:b4:e0:bb:45:49:25:9e:c0:
87:21:b1:c9:ea:a8:0d:bd:64:8d:f7:2f:67:2d:dc:ec:1c:a3:
f9:d8:16:4a:b8:28:80:2d:a5:19:a1:57:42:0a:fa:34:38:b1:
b1:64:23:1c:f6:03:ac:2d:57:10:5e:0d:cd:51:59:b9:f7:7b:
57:60:a6:6f:eb:a1:24:f5:33:2e:a5:2f:04:44:30:f7:9c:3b:
f6:47:86:e3:8b:4d:86:d7:79:80:83:84:3a:3a:bd:fa:da:9d:
77:36:18:f1:25:04:28:ed:c9:55:c4:7a:05:a3:03:0f:c6:4d:
d7:b3:87:47:55:58:53:c3:60:ad:5b:5b:cc:a6:07:6b:af:21:
6d:86:d7:af:71:50:51:d9:75:8e:38:1f:6c:b8:53:ed:ba:48:
ec:d4:89:13:35:39:a8:e5:ca:d5:34:2f:21:73:4e:da:42:fd:
b1:6d:ae:9e:f7:2a:51:b5:48:ae:81:c8:20:0b:ab:55:65:07:
b2:9e:4c:40:a9:4d:d3:c3:c9:8e:05:10:7b:8d:9c:8f:c4:e2:
3d:98:df:cc:ec:67:d1:83:99:ab:20:4f:0a:13:ba:a6:40:93:
94:8f:8a:cd:6c:4c:b3:d5:1d:53:d8:7a:3c:f6:24:ad:15:64:
da:1f:40:bb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxEtKK/Ck1qyyjkibtqMfrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMzMThmNTdhZjA3YzRkZjU5ODVlNGE3MjBiODBjODliOTdl
OTBhNzkwHhcNMjUxMTExMDQwMDUwWhcNMjUxMTEyMDQwMDUwWjAzMTEwLwYDVQQD
Eyg2YzU1YWRhNDA1ZGIyNDNkNTI3YTdmMjc4NjZjZWFjM2I1MmEyYThiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnGCWkwg7b6bHOgqSLuaDQ+jgkbf5
lWEJPaXI2Oq+l5bGe+K3eaJ4O0tQgS/fJ9Ext0zloTEIGkVCG+m1zhZs6l0xQROw
lapskA9l1bnCoPPd3EoxEd4SeMjg5IuwKIksJ0Vn3XhL9rJ1J9rqgFwgPR5x692J
VLpojt+x7d+napbmqZLOqFNfiqZ2EmOvDQNcqwqtVhIaEPNSSyyKWZAfiDEQsnwZ
YZvXGqf5q0nxqpmhkzXY7NX/pAOqSEBdud2osRb9R7HvhjLEdCKMiJWtIOGVZQmn
npMBowa2RbUI8f0ZXupPsLKa/IfpTJIHab9D3agC5A9EiT/NU5r1ctAjiwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGxVraQF2yQ9Unp/J4Zs6sO1KiqLMB8GA1UdIwQY
MBaAFDMY9XrwfE31mF5KcguAyJuX6Qp5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTXhqMWV2QjhUZldZWGtweUM0REltNWZwQ25rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi83M2M0M2YtYmU0OC00OTU3LWFkMzgt
Y2QyODg3YjQyNjY3LzEvTXhqMWV2QjhUZldZWGtweUM0REltNWZwQ25rLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yi83M2M0M2YtYmU0OC00OTU3LWFkMzgtY2QyODg3YjQyNjY3
LzEvTXhqMWV2QjhUZldZWGtweUM0REltNWZwQ25rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMQf9C+FU
tSg5FLTgu0VJJZ7AhyGxyeqoDb1kjfcvZy3c7Byj+dgWSrgogC2lGaFXQgr6NDix
sWQjHPYDrC1XEF4NzVFZufd7V2Cmb+uhJPUzLqUvBEQw95w79keG44tNhtd5gIOE
Ojq9+tqddzYY8SUEKO3JVcR6BaMDD8ZN17OHR1VYU8NgrVtbzKYHa68hbYbXr3FQ
Udl1jjgfbLhT7bpI7NSJEzU5qOXK1TQvIXNO2kL9sW2unvcqUbVIroHIIAurVWUH
sp5MQKlN08PJjgUQe42cj8TiPZjfzOxn0YOZqyBPChO6pkCTlI+KzWxMs9UdU9h6
PPYkrRVk2h9Auw==
-----END CERTIFICATE-----
Generated at Tue Nov 11 14:10:16 2025 by rpki-client