Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/8e4da6-ecb2-4056-8f85-4499b6072af2/1/RPXBZ5XtiCVQC69Xp6cFtRN1qL4.mft
File: RPXBZ5XtiCVQC69Xp6cFtRN1qL4.mft (raw, json)
Hash identifier: DQe1+xynUcBbHFEVuifVDGbABAhL16N4TR2ux+UyQSg=
Subject key identifier: FC:4E:66:45:C2:5F:0C:81:77:E6:D0:B7:D8:0C:D8:EC:20:EE:9C:5E
Authority key identifier: 44:F5:C1:67:95:ED:88:25:50:0B:AF:57:A7:A7:05:B5:13:75:A8:BE
Certificate issuer: /CN=44f5c16795ed8825500baf57a7a705b51375a8be
Certificate serial: 019A71B85C1D489A3D867A4F435E6D35322A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RPXBZ5XtiCVQC69Xp6cFtRN1qL4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/8e4da6-ecb2-4056-8f85-4499b6072af2/1/RPXBZ5XtiCVQC69Xp6cFtRN1qL4.mft
Manifest number: 171C
Signing time: Tue 11 Nov 2025 07:01:38 +0000
Manifest this update: Tue 11 Nov 2025 07:01:38 +0000
Manifest next update: Wed 12 Nov 2025 07:01:38 +0000
Files and hashes: 1: RPXBZ5XtiCVQC69Xp6cFtRN1qL4.crl (hash: 63DafzmO0d1tcRONInDC1Y2/TR2o+3omfY12N4Nrfvc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/8e4da6-ecb2-4056-8f85-4499b6072af2/1/RPXBZ5XtiCVQC69Xp6cFtRN1qL4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/8e4da6-ecb2-4056-8f85-4499b6072af2/1/RPXBZ5XtiCVQC69Xp6cFtRN1qL4.mft
rsync://rpki.ripe.net/repository/DEFAULT/RPXBZ5XtiCVQC69Xp6cFtRN1qL4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:5c:1d:48:9a:3d:86:7a:4f:43:5e:6d:35:32:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44f5c16795ed8825500baf57a7a705b51375a8be
Validity
Not Before: Nov 11 07:01:38 2025 GMT
Not After : Nov 12 07:01:38 2025 GMT
Subject: CN=fc4e6645c25f0c8177e6d0b7d80cd8ec20ee9c5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:ba:7a:08:4f:c0:fe:cf:41:6f:39:90:48:c1:
36:cb:60:9c:3f:47:68:f8:18:0f:ae:96:1e:0d:34:
5d:b2:3e:60:8d:29:57:cb:b6:ec:7b:28:07:28:ee:
17:d6:86:4e:34:87:d2:54:6a:0f:ff:8f:a7:51:c4:
3a:c4:e0:0c:f6:21:24:bb:f8:0e:e7:61:1c:1d:51:
34:39:73:a2:a3:71:8f:23:67:38:55:5f:7c:5f:c8:
d4:c2:a2:fb:e2:dc:f1:1e:65:b0:fd:5f:23:30:2e:
15:5f:7a:2d:96:13:87:30:f3:a8:fa:ad:28:90:70:
9f:c4:69:26:4c:81:6c:cf:a3:0e:dc:ad:98:54:5d:
0e:51:d3:4b:b4:8b:43:eb:7b:7e:80:3a:1e:ea:d4:
3b:77:e1:9d:31:2e:06:78:d8:a8:3c:9a:98:5f:48:
fd:57:90:72:b6:d0:cd:99:ae:39:be:ea:5b:3b:af:
ca:ef:ba:4d:30:51:db:4a:cc:63:60:ab:b9:22:62:
4c:2f:be:63:d4:e3:60:65:5e:27:d7:00:1c:7e:71:
a7:87:fd:85:5d:31:05:5d:bf:11:07:6f:80:d7:fa:
5a:6f:50:89:64:fc:8d:9f:e0:c2:f3:a5:ad:29:7f:
01:a5:2c:e8:e4:a4:aa:b3:01:1d:96:fa:3e:94:cc:
d3:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:4E:66:45:C2:5F:0C:81:77:E6:D0:B7:D8:0C:D8:EC:20:EE:9C:5E
X509v3 Authority Key Identifier:
keyid:44:F5:C1:67:95:ED:88:25:50:0B:AF:57:A7:A7:05:B5:13:75:A8:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RPXBZ5XtiCVQC69Xp6cFtRN1qL4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/8e4da6-ecb2-4056-8f85-4499b6072af2/1/RPXBZ5XtiCVQC69Xp6cFtRN1qL4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/8e4da6-ecb2-4056-8f85-4499b6072af2/1/RPXBZ5XtiCVQC69Xp6cFtRN1qL4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:f5:65:6c:d0:ad:47:a9:80:eb:c8:b3:8d:ca:c5:ba:c4:5c:
cd:87:ce:a8:98:42:59:e7:4d:3c:85:59:26:e8:6b:d1:7c:20:
e1:e0:5c:4d:6f:b3:28:ec:fd:90:1f:da:04:5e:b2:e1:c8:48:
1b:02:85:a7:80:f5:2e:db:fe:86:fa:8e:34:7f:a1:e0:7e:b2:
25:71:c4:38:8c:57:f6:b5:09:c6:e9:7c:de:fa:25:83:9e:c0:
00:2a:29:74:a2:ae:ab:4a:2b:8f:f4:e9:24:bd:10:eb:d5:b0:
18:e5:6a:5c:1c:18:95:d6:a9:4f:84:97:e9:4e:21:8b:f3:0f:
83:35:04:48:e6:f6:eb:b7:d0:ab:61:63:bf:80:f6:54:be:3b:
24:eb:5b:b6:99:f7:4b:e0:50:97:0d:99:85:f5:bc:c8:d1:0b:
92:00:35:0c:8a:0d:89:a4:a8:f4:db:f2:cb:8d:46:3e:99:5f:
d9:74:bc:c3:2a:df:a2:54:d1:0a:93:3e:51:cf:43:e9:ce:ef:
50:22:af:fe:cf:62:31:cc:2e:fd:a2:4a:de:d0:72:05:2c:6d:
ce:30:e3:5e:eb:f0:d5:5d:59:b4:dc:e9:37:e2:63:32:f2:21:
2d:e4:fd:eb:39:82:d0:8a:b7:a9:e0:99:aa:6b:6c:aa:3e:32:
be:84:a6:6e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxuFwdSJo9hnpPQ15tNTIqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ0ZjVjMTY3OTVlZDg4MjU1MDBiYWY1N2E3YTcwNWI1MTM3
NWE4YmUwHhcNMjUxMTExMDcwMTM4WhcNMjUxMTEyMDcwMTM4WjAzMTEwLwYDVQQD
EyhmYzRlNjY0NWMyNWYwYzgxNzdlNmQwYjdkODBjZDhlYzIwZWU5YzVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA27p6CE/A/s9BbzmQSME2y2CcP0do
+BgPrpYeDTRdsj5gjSlXy7bseygHKO4X1oZONIfSVGoP/4+nUcQ6xOAM9iEku/gO
52EcHVE0OXOio3GPI2c4VV98X8jUwqL74tzxHmWw/V8jMC4VX3otlhOHMPOo+q0o
kHCfxGkmTIFsz6MO3K2YVF0OUdNLtItD63t+gDoe6tQ7d+GdMS4GeNioPJqYX0j9
V5ByttDNma45vupbO6/K77pNMFHbSsxjYKu5ImJML75j1ONgZV4n1wAcfnGnh/2F
XTEFXb8RB2+A1/pab1CJZPyNn+DC86WtKX8BpSzo5KSqswEdlvo+lMzTswIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPxOZkXCXwyBd+bQt9gM2Owg7pxeMB8GA1UdIwQY
MBaAFET1wWeV7YglUAuvV6enBbUTdai+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUlBYQlo1WHRpQ1ZRQzY5WHA2Y0Z0Uk4xcUw0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy84ZTRkYTYtZWNiMi00MDU2LThmODUt
NDQ5OWI2MDcyYWYyLzEvUlBYQlo1WHRpQ1ZRQzY5WHA2Y0Z0Uk4xcUw0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy84ZTRkYTYtZWNiMi00MDU2LThmODUtNDQ5OWI2MDcyYWYy
LzEvUlBYQlo1WHRpQ1ZRQzY5WHA2Y0Z0Uk4xcUw0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkfVlbNCt
R6mA68izjcrFusRczYfOqJhCWedNPIVZJuhr0Xwg4eBcTW+zKOz9kB/aBF6y4chI
GwKFp4D1Ltv+hvqONH+h4H6yJXHEOIxX9rUJxul83volg57AACopdKKuq0orj/Tp
JL0Q69WwGOVqXBwYldapT4SX6U4hi/MPgzUESOb267fQq2Fjv4D2VL47JOtbtpn3
S+BQlw2ZhfW8yNELkgA1DIoNiaSo9Nvyy41GPplf2XS8wyrfolTRCpM+Uc9D6c7v
UCKv/s9iMcwu/aJK3tByBSxtzjDjXuvw1V1ZtNzpN+JjMvIhLeT96zmC0Iq3qeCZ
qmtsqj4yvoSmbg==
-----END CERTIFICATE-----
Generated at Tue Nov 11 11:33:56 2025 by rpki-client