Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/1000b6-e217-4b0c-9cb1-6d5279c2fe07/1/xQCr8-yqCjNSDFbmruzkS-r6J1Q.mft
File: xQCr8-yqCjNSDFbmruzkS-r6J1Q.mft (raw, json)
Hash identifier: k8Ufvs49xQLPfwFIZuKB0GA+hmI7QWKnzkiGW1HWYqQ=
Subject key identifier: 0C:09:3F:53:E0:3B:02:DE:3F:44:03:47:72:AF:CD:46:B6:0B:D4:45
Authority key identifier: C5:00:AB:F3:EC:AA:0A:33:52:0C:56:E6:AE:EC:E4:4B:EA:FA:27:54
Certificate issuer: /CN=c500abf3ecaa0a33520c56e6aeece44beafa2754
Certificate serial: 019923A0D086BDD01D0DE1E2DC78752FFB06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xQCr8-yqCjNSDFbmruzkS-r6J1Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/1000b6-e217-4b0c-9cb1-6d5279c2fe07/1/xQCr8-yqCjNSDFbmruzkS-r6J1Q.mft
Manifest number: 13CA
Signing time: Sun 07 Sep 2025 10:02:45 +0000
Manifest this update: Sun 07 Sep 2025 10:02:45 +0000
Manifest next update: Mon 08 Sep 2025 10:02:45 +0000
Files and hashes: 1: xQCr8-yqCjNSDFbmruzkS-r6J1Q.crl (hash: n2WmUpreVLtg6hti02S2yb1T+vFLQ88B++JukAuSJr8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/1000b6-e217-4b0c-9cb1-6d5279c2fe07/1/xQCr8-yqCjNSDFbmruzkS-r6J1Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/1000b6-e217-4b0c-9cb1-6d5279c2fe07/1/xQCr8-yqCjNSDFbmruzkS-r6J1Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/xQCr8-yqCjNSDFbmruzkS-r6J1Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:a0:d0:86:bd:d0:1d:0d:e1:e2:dc:78:75:2f:fb:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c500abf3ecaa0a33520c56e6aeece44beafa2754
Validity
Not Before: Sep 7 10:02:45 2025 GMT
Not After : Sep 8 10:02:45 2025 GMT
Subject: CN=0c093f53e03b02de3f44034772afcd46b60bd445
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:99:4a:f5:67:95:d3:ee:59:87:3a:2d:18:fe:
93:22:6f:88:d3:16:b8:52:50:5a:f3:57:28:b1:c0:
bc:e7:34:82:ea:76:6d:d3:a5:4e:4a:8c:41:1a:8a:
a9:49:b3:56:4d:44:2b:99:98:16:2d:0d:42:35:71:
7f:38:da:48:3a:96:cc:74:d8:bc:d7:0d:50:f6:f4:
99:54:71:1b:fb:4b:3a:1d:f1:26:9a:56:5d:b1:62:
9f:5e:5a:01:74:74:8f:91:e7:d7:7f:36:1c:b8:f5:
43:c2:e5:81:62:b8:c0:6c:be:b4:7f:74:37:d3:81:
f1:60:3e:f8:76:3b:0f:6b:90:44:01:32:29:d9:de:
4d:0b:10:8a:23:ae:3b:22:51:9a:b0:b3:b1:48:4d:
89:f4:ae:ed:08:d3:87:88:ba:85:f6:82:88:84:12:
26:44:08:97:9f:a0:65:23:a6:7c:81:47:93:dc:5f:
93:2a:c7:73:0a:a0:73:c0:d7:2c:4f:bc:a4:fa:6e:
c1:4d:f5:8b:cd:51:0d:1b:28:51:bb:29:29:f7:ea:
1d:80:bd:56:07:2b:52:12:12:ac:27:f2:2b:6b:44:
ee:77:0a:07:23:e9:46:f7:b6:ff:69:b2:11:b7:b1:
64:19:b0:91:64:41:e1:f9:c9:2a:63:cf:08:66:7f:
95:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:09:3F:53:E0:3B:02:DE:3F:44:03:47:72:AF:CD:46:B6:0B:D4:45
X509v3 Authority Key Identifier:
keyid:C5:00:AB:F3:EC:AA:0A:33:52:0C:56:E6:AE:EC:E4:4B:EA:FA:27:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xQCr8-yqCjNSDFbmruzkS-r6J1Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/1000b6-e217-4b0c-9cb1-6d5279c2fe07/1/xQCr8-yqCjNSDFbmruzkS-r6J1Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/1000b6-e217-4b0c-9cb1-6d5279c2fe07/1/xQCr8-yqCjNSDFbmruzkS-r6J1Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:b3:1a:44:de:d1:c4:7b:65:b6:7b:63:f5:fe:7c:bc:cb:71:
06:1e:42:26:a3:77:f1:fe:9f:ea:28:45:3c:dd:55:61:f3:90:
d1:3f:d5:4c:b8:40:ea:ff:cf:31:ca:3b:5e:52:4d:d4:40:e7:
c5:86:d5:ee:ed:51:c2:aa:a7:1b:5a:93:18:75:ee:17:ee:7a:
65:c9:a5:aa:2d:12:77:9c:01:d6:dd:52:c5:42:e1:35:5d:35:
e6:45:12:22:37:60:f3:d8:84:e8:6d:5d:ba:85:b3:95:19:88:
5b:50:42:40:09:a1:7a:1f:88:40:35:61:07:ce:d2:dd:3e:22:
d0:8e:7f:84:7d:26:e9:2d:cc:74:5b:d3:2d:2d:3a:e9:c7:26:
5e:e5:d8:ab:89:e0:f4:43:9c:8f:eb:c4:11:02:b8:f8:ad:de:
95:1a:ae:00:37:76:9a:e7:cd:d9:c9:79:19:13:5e:df:0e:37:
91:c9:0d:3b:0c:18:0d:98:7b:4f:93:f6:84:4f:0c:41:b6:1c:
37:ef:59:c9:f1:21:c5:2d:4b:d1:c4:2e:ee:f1:18:96:5f:71:
c4:d3:ce:85:c5:b6:97:fd:5e:f8:92:c5:85:0a:1e:da:0c:ed:
b4:ac:b3:c5:6c:df:a6:f9:b7:c9:16:51:76:01:63:7c:e3:f4:
9d:ee:d9:ab
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkjoNCGvdAdDeHi3Hh1L/sGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM1MDBhYmYzZWNhYTBhMzM1MjBjNTZlNmFlZWNlNDRiZWFm
YTI3NTQwHhcNMjUwOTA3MTAwMjQ1WhcNMjUwOTA4MTAwMjQ1WjAzMTEwLwYDVQQD
EygwYzA5M2Y1M2UwM2IwMmRlM2Y0NDAzNDc3MmFmY2Q0NmI2MGJkNDQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA15lK9WeV0+5ZhzotGP6TIm+I0xa4
UlBa81coscC85zSC6nZt06VOSoxBGoqpSbNWTUQrmZgWLQ1CNXF/ONpIOpbMdNi8
1w1Q9vSZVHEb+0s6HfEmmlZdsWKfXloBdHSPkefXfzYcuPVDwuWBYrjAbL60f3Q3
04HxYD74djsPa5BEATIp2d5NCxCKI647IlGasLOxSE2J9K7tCNOHiLqF9oKIhBIm
RAiXn6BlI6Z8gUeT3F+TKsdzCqBzwNcsT7yk+m7BTfWLzVENGyhRuykp9+odgL1W
BytSEhKsJ/Ira0TudwoHI+lG97b/abIRt7FkGbCRZEHh+ckqY88IZn+VOwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAwJP1PgOwLeP0QDR3KvzUa2C9RFMB8GA1UdIwQY
MBaAFMUAq/PsqgozUgxW5q7s5Evq+idUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveFFDcjgteXFDak5TREZibXJ1emtTLXI2SjFRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC8xMDAwYjYtZTIxNy00YjBjLTljYjEt
NmQ1Mjc5YzJmZTA3LzEveFFDcjgteXFDak5TREZibXJ1emtTLXI2SjFRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC8xMDAwYjYtZTIxNy00YjBjLTljYjEtNmQ1Mjc5YzJmZTA3
LzEveFFDcjgteXFDak5TREZibXJ1emtTLXI2SjFRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASrMaRN7R
xHtltntj9f58vMtxBh5CJqN38f6f6ihFPN1VYfOQ0T/VTLhA6v/PMco7XlJN1EDn
xYbV7u1RwqqnG1qTGHXuF+56Zcmlqi0Sd5wB1t1SxULhNV015kUSIjdg89iE6G1d
uoWzlRmIW1BCQAmheh+IQDVhB87S3T4i0I5/hH0m6S3MdFvTLS066ccmXuXYq4ng
9EOcj+vEEQK4+K3elRquADd2mufN2cl5GRNe3w43kckNOwwYDZh7T5P2hE8MQbYc
N+9ZyfEhxS1L0cQu7vEYll9xxNPOhcW2l/1e+JLFhQoe2gzttKyzxWzfpvm3yRZR
dgFjfOP0ne7Zqw==
-----END CERTIFICATE-----
Generated at Sun Sep 7 11:45:09 2025 by rpki-client