Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/4b4df7-d72b-474f-963f-59e6a6d4d576/1/CxsxjlBXocEDQWB83d2ttG1xq_U.mft
File: CxsxjlBXocEDQWB83d2ttG1xq_U.mft (raw, json)
Hash identifier: WeKgZKlUhUIDrrejYqMYxAK64zTAJtXLne8ZUx6CDxU=
Subject key identifier: 17:02:7B:DC:F1:97:AA:56:51:B6:94:86:83:97:E8:78:4A:5B:23:6F
Authority key identifier: 0B:1B:31:8E:50:57:A1:C1:03:41:60:7C:DD:DD:AD:B4:6D:71:AB:F5
Certificate issuer: /CN=0b1b318e5057a1c10341607cddddadb46d71abf5
Certificate serial: 019A722611B0196A4228C69CE4E0DDD93561
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CxsxjlBXocEDQWB83d2ttG1xq_U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/4b4df7-d72b-474f-963f-59e6a6d4d576/1/CxsxjlBXocEDQWB83d2ttG1xq_U.mft
Manifest number: 1721
Signing time: Tue 11 Nov 2025 09:01:28 +0000
Manifest this update: Tue 11 Nov 2025 09:01:28 +0000
Manifest next update: Wed 12 Nov 2025 09:01:28 +0000
Files and hashes: 1: CxsxjlBXocEDQWB83d2ttG1xq_U.crl (hash: /gSuwjATqUbpAL97cJa+E4OVIL4jSpsDMcdMONq5CZw=)
2: TO80eqDFXQYl6CGIoinTDRQ723A.roa (hash: s5/qxS+QcBwb4YurVep+bFST0F2tBLYaOg/4Lpz+Qgk=)
3: bQ7_HzmWbxe1bpqsnmG8t2z9J54.roa (hash: uTKgZb6MWbd79qCA3p5te2MUGcoD6xRmcaj1CluWZYI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/4b4df7-d72b-474f-963f-59e6a6d4d576/1/CxsxjlBXocEDQWB83d2ttG1xq_U.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/4b4df7-d72b-474f-963f-59e6a6d4d576/1/CxsxjlBXocEDQWB83d2ttG1xq_U.mft
rsync://rpki.ripe.net/repository/DEFAULT/CxsxjlBXocEDQWB83d2ttG1xq_U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:26:11:b0:19:6a:42:28:c6:9c:e4:e0:dd:d9:35:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b1b318e5057a1c10341607cddddadb46d71abf5
Validity
Not Before: Nov 11 09:01:28 2025 GMT
Not After : Nov 12 09:01:28 2025 GMT
Subject: CN=17027bdcf197aa5651b694868397e8784a5b236f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:e3:1b:db:e2:fe:de:59:35:a2:f7:bf:ba:4a:
07:72:fc:a3:e9:4c:3a:91:68:aa:cc:15:78:0c:2c:
2a:59:31:db:a8:9f:f5:86:44:5b:c5:77:c0:e4:91:
64:10:76:65:db:84:d2:a6:5f:79:f0:b9:f3:7a:40:
9b:1c:df:a1:e1:52:42:14:f2:f7:76:13:4c:30:fe:
73:30:98:3e:80:4d:ee:a8:d4:c2:a8:3e:fd:c3:52:
28:24:5a:99:bf:32:96:ce:9f:9c:9c:62:1b:e9:5a:
da:4d:3b:db:2e:36:dd:91:b9:eb:a4:db:fc:82:c1:
58:af:f1:be:88:f8:b5:36:79:3e:ea:49:78:49:c1:
58:7d:50:8c:6c:ea:3b:db:44:4c:e8:fb:9e:85:f6:
18:6b:94:c3:f8:0b:17:e2:8f:cb:76:f3:0a:a6:d1:
07:bf:6b:e3:28:81:71:63:b7:4f:2d:c1:35:40:4a:
3a:07:eb:8d:fd:0a:1a:8c:20:76:06:75:da:a5:95:
64:08:d8:ba:0d:55:9a:a1:35:4e:b6:30:6f:87:e3:
b6:2f:f9:73:43:3c:8c:9d:12:55:61:4b:c1:5f:b9:
b6:95:5d:87:db:be:47:f6:9d:9f:92:fe:76:14:60:
ca:9a:93:00:0b:7e:16:79:54:2f:5c:68:dc:25:d6:
60:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:02:7B:DC:F1:97:AA:56:51:B6:94:86:83:97:E8:78:4A:5B:23:6F
X509v3 Authority Key Identifier:
keyid:0B:1B:31:8E:50:57:A1:C1:03:41:60:7C:DD:DD:AD:B4:6D:71:AB:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CxsxjlBXocEDQWB83d2ttG1xq_U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/4b4df7-d72b-474f-963f-59e6a6d4d576/1/CxsxjlBXocEDQWB83d2ttG1xq_U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/4b4df7-d72b-474f-963f-59e6a6d4d576/1/CxsxjlBXocEDQWB83d2ttG1xq_U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:eb:6d:55:c4:46:d2:41:f7:2b:33:90:94:25:47:20:0d:f2:
a3:44:1e:14:7b:7a:91:83:97:6e:d1:05:34:d3:70:81:2d:e8:
48:3c:fb:97:15:b9:b3:f1:55:20:0e:eb:c8:56:22:28:eb:82:
a2:1f:6e:cc:47:6b:32:4f:40:4a:de:d3:01:79:89:58:45:08:
aa:5f:31:d7:f8:a6:67:f1:e2:87:a0:7a:79:d2:ff:c8:8e:e9:
36:78:5c:7a:f3:98:72:e8:a8:d1:10:3c:ef:c8:95:46:0e:91:
4b:be:d2:17:12:4a:77:ba:0f:e0:43:b8:6f:b5:30:59:ba:6a:
91:13:91:81:48:05:6b:c1:8e:27:2f:08:bd:e2:84:ec:8f:ae:
d0:fe:84:28:a9:5d:ea:94:f9:0c:c6:de:ce:1f:3e:72:77:d5:
86:67:6a:59:85:a5:c4:fc:4b:b4:5e:f3:07:9d:c2:13:c0:6e:
fb:cd:a7:f3:61:e7:c7:f9:38:a5:19:6f:ec:db:b3:03:dd:a9:
6a:4d:d1:ba:4a:82:8e:43:9b:84:18:34:36:66:ab:a1:dc:0a:
f7:45:19:38:6e:ac:a5:8f:ac:0e:5b:09:7c:f2:09:e4:c6:cc:
a3:dd:44:ff:91:ef:61:9e:58:aa:3d:a8:4c:bb:27:99:c2:e2:
e0:1c:27:2b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpyJhGwGWpCKMac5ODd2TVhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBiMWIzMThlNTA1N2ExYzEwMzQxNjA3Y2RkZGRhZGI0NmQ3
MWFiZjUwHhcNMjUxMTExMDkwMTI4WhcNMjUxMTEyMDkwMTI4WjAzMTEwLwYDVQQD
EygxNzAyN2JkY2YxOTdhYTU2NTFiNjk0ODY4Mzk3ZTg3ODRhNWIyMzZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyOMb2+L+3lk1ove/ukoHcvyj6Uw6
kWiqzBV4DCwqWTHbqJ/1hkRbxXfA5JFkEHZl24TSpl958LnzekCbHN+h4VJCFPL3
dhNMMP5zMJg+gE3uqNTCqD79w1IoJFqZvzKWzp+cnGIb6VraTTvbLjbdkbnrpNv8
gsFYr/G+iPi1Nnk+6kl4ScFYfVCMbOo720RM6PuehfYYa5TD+AsX4o/LdvMKptEH
v2vjKIFxY7dPLcE1QEo6B+uN/QoajCB2BnXapZVkCNi6DVWaoTVOtjBvh+O2L/lz
QzyMnRJVYUvBX7m2lV2H275H9p2fkv52FGDKmpMAC34WeVQvXGjcJdZgzwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBcCe9zxl6pWUbaUhoOX6HhKWyNvMB8GA1UdIwQY
MBaAFAsbMY5QV6HBA0FgfN3drbRtcav1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ3hzeGpsQlhvY0VEUVdCODNkMnR0RzF4cV9VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS80YjRkZjctZDcyYi00NzRmLTk2M2Yt
NTllNmE2ZDRkNTc2LzEvQ3hzeGpsQlhvY0VEUVdCODNkMnR0RzF4cV9VLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOS80YjRkZjctZDcyYi00NzRmLTk2M2YtNTllNmE2ZDRkNTc2
LzEvQ3hzeGpsQlhvY0VEUVdCODNkMnR0RzF4cV9VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAh+ttVcRG
0kH3KzOQlCVHIA3yo0QeFHt6kYOXbtEFNNNwgS3oSDz7lxW5s/FVIA7ryFYiKOuC
oh9uzEdrMk9ASt7TAXmJWEUIql8x1/imZ/Hih6B6edL/yI7pNnhcevOYcuio0RA8
78iVRg6RS77SFxJKd7oP4EO4b7UwWbpqkRORgUgFa8GOJy8IveKE7I+u0P6EKKld
6pT5DMbezh8+cnfVhmdqWYWlxPxLtF7zB53CE8Bu+82n82Hnx/k4pRlv7NuzA92p
ak3RukqCjkObhBg0NmarodwK90UZOG6spY+sDlsJfPIJ5MbMo91E/5HvYZ5Yqj2o
TLsnmcLi4BwnKw==
-----END CERTIFICATE-----
Generated at Tue Nov 11 15:25:02 2025 by rpki-client