Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/0c756c-4cf1-479b-974d-b232d7dafcac/1/xOCzjFm9QrKwfiqvsm2fVbqzgXo.mft
File: xOCzjFm9QrKwfiqvsm2fVbqzgXo.mft (raw, json)
Hash identifier: UEAhBUM3mzD5us63TBIVvRjKdjjuU6NuQltI4ZxtSuU=
Subject key identifier: 61:D6:81:32:4F:AA:81:C6:38:6D:8B:D7:14:E6:2F:56:9D:37:95:A2
Authority key identifier: C4:E0:B3:8C:59:BD:42:B2:B0:7E:2A:AF:B2:6D:9F:55:BA:B3:81:7A
Certificate issuer: /CN=c4e0b38c59bd42b2b07e2aafb26d9f55bab3817a
Certificate serial: 0199228CAD25E32DDC291E4B89B12E9170D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xOCzjFm9QrKwfiqvsm2fVbqzgXo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/0c756c-4cf1-479b-974d-b232d7dafcac/1/xOCzjFm9QrKwfiqvsm2fVbqzgXo.mft
Manifest number: 1163
Signing time: Sun 07 Sep 2025 05:01:08 +0000
Manifest this update: Sun 07 Sep 2025 05:01:08 +0000
Manifest next update: Mon 08 Sep 2025 05:01:08 +0000
Files and hashes: 1: xOCzjFm9QrKwfiqvsm2fVbqzgXo.crl (hash: Vzb7b7Fm4CdlVghGLzchKgI7EH7hlZoXoW2Y2U7Ws3s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/0c756c-4cf1-479b-974d-b232d7dafcac/1/xOCzjFm9QrKwfiqvsm2fVbqzgXo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/0c756c-4cf1-479b-974d-b232d7dafcac/1/xOCzjFm9QrKwfiqvsm2fVbqzgXo.mft
rsync://rpki.ripe.net/repository/DEFAULT/xOCzjFm9QrKwfiqvsm2fVbqzgXo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:8c:ad:25:e3:2d:dc:29:1e:4b:89:b1:2e:91:70:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4e0b38c59bd42b2b07e2aafb26d9f55bab3817a
Validity
Not Before: Sep 7 05:01:08 2025 GMT
Not After : Sep 8 05:01:08 2025 GMT
Subject: CN=61d681324faa81c6386d8bd714e62f569d3795a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:cb:ac:07:09:14:c7:c3:20:b4:d3:ff:90:44:
04:95:ef:5e:c4:f1:46:7a:51:51:af:72:b0:57:fd:
e5:9d:3a:b4:c8:40:58:44:da:80:22:8c:44:02:2f:
33:e5:51:4e:11:40:43:d1:c2:24:75:7f:62:fb:36:
a0:d9:2b:31:9a:16:ec:3d:ae:cb:c2:0c:2c:f8:c4:
09:8b:fd:f5:9a:e0:0f:ed:89:82:ac:1d:04:47:4c:
ad:ca:14:c6:1e:80:a4:49:ba:06:02:49:11:5c:5e:
da:0e:fd:00:f5:79:e5:83:85:c3:b4:49:a5:24:b4:
94:0b:88:5d:29:74:c4:1a:26:5e:c4:78:02:3a:04:
85:3b:56:e0:45:e8:58:81:60:8a:35:35:c0:bd:3b:
2b:23:76:dc:a7:7c:40:8d:66:51:44:b0:b3:f4:40:
9f:79:38:03:60:ba:03:c2:e1:bf:db:a4:62:a4:8b:
3f:ab:3b:79:64:a1:cb:95:27:f5:1d:db:3a:7f:51:
31:c5:0e:ec:0e:a1:58:49:13:2e:ed:1a:54:76:d5:
44:b7:24:57:94:3e:ff:92:fe:1d:cc:8d:82:6e:47:
35:1a:68:64:64:af:81:8c:e9:d0:ce:1e:d1:60:c3:
56:a1:17:0a:32:9c:41:a2:df:84:ad:47:e5:9f:5b:
59:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:D6:81:32:4F:AA:81:C6:38:6D:8B:D7:14:E6:2F:56:9D:37:95:A2
X509v3 Authority Key Identifier:
keyid:C4:E0:B3:8C:59:BD:42:B2:B0:7E:2A:AF:B2:6D:9F:55:BA:B3:81:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xOCzjFm9QrKwfiqvsm2fVbqzgXo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/0c756c-4cf1-479b-974d-b232d7dafcac/1/xOCzjFm9QrKwfiqvsm2fVbqzgXo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/0c756c-4cf1-479b-974d-b232d7dafcac/1/xOCzjFm9QrKwfiqvsm2fVbqzgXo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:de:5f:b8:80:ff:89:34:52:16:20:31:af:32:2d:7d:c5:bc:
31:0e:87:24:8f:12:09:87:65:ec:e0:7d:b3:9e:e2:d0:6f:ba:
af:eb:bb:86:ef:32:03:e9:bb:56:48:0e:4c:a5:09:ba:87:19:
e3:7d:28:9b:65:52:f2:2a:b1:66:8a:a9:cb:81:19:53:31:a8:
32:26:2f:71:b1:9c:e7:7a:c9:b9:24:c7:5e:64:99:8d:c7:a8:
bc:30:2e:5e:2e:20:b3:e2:fa:f0:62:56:96:75:87:24:35:62:
10:3f:c9:fe:b0:e3:b4:71:81:ee:b6:5d:77:45:61:e2:be:e3:
a3:dd:bb:a8:8a:aa:e2:34:02:4b:62:3d:97:48:64:d5:20:e7:
f8:d9:e1:30:c5:ba:94:36:3c:29:1d:0e:cc:40:d3:b9:bf:87:
b1:96:4f:16:e7:c1:7e:e5:a1:8c:f4:8b:0b:0a:bd:9a:22:1b:
64:7f:6a:bc:5e:5f:28:58:0d:49:6a:0c:7d:ba:74:aa:31:e3:
7a:ff:37:e9:0d:cb:4c:8c:82:8c:38:88:b8:0d:53:9a:4c:99:
f7:5f:7a:b2:d8:0c:c6:0c:ba:bb:ff:89:ae:d4:8e:22:63:68:
da:a0:42:6a:7e:45:46:2c:17:a3:ef:66:3d:7e:ff:fb:36:c9:
bd:53:09:70
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkijK0l4y3cKR5LibEukXDXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM0ZTBiMzhjNTliZDQyYjJiMDdlMmFhZmIyNmQ5ZjU1YmFi
MzgxN2EwHhcNMjUwOTA3MDUwMTA4WhcNMjUwOTA4MDUwMTA4WjAzMTEwLwYDVQQD
Eyg2MWQ2ODEzMjRmYWE4MWM2Mzg2ZDhiZDcxNGU2MmY1NjlkMzc5NWEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAususBwkUx8MgtNP/kEQEle9exPFG
elFRr3KwV/3lnTq0yEBYRNqAIoxEAi8z5VFOEUBD0cIkdX9i+zag2SsxmhbsPa7L
wgws+MQJi/31muAP7YmCrB0ER0ytyhTGHoCkSboGAkkRXF7aDv0A9Xnlg4XDtEml
JLSUC4hdKXTEGiZexHgCOgSFO1bgRehYgWCKNTXAvTsrI3bcp3xAjWZRRLCz9ECf
eTgDYLoDwuG/26RipIs/qzt5ZKHLlSf1Hds6f1ExxQ7sDqFYSRMu7RpUdtVEtyRX
lD7/kv4dzI2Cbkc1GmhkZK+BjOnQzh7RYMNWoRcKMpxBot+ErUfln1tZoQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGHWgTJPqoHGOG2L1xTmL1adN5WiMB8GA1UdIwQY
MBaAFMTgs4xZvUKysH4qr7Jtn1W6s4F6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveE9DempGbTlRckt3ZmlxdnNtMmZWYnF6Z1hvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS8wYzc1NmMtNGNmMS00NzliLTk3NGQt
YjIzMmQ3ZGFmY2FjLzEveE9DempGbTlRckt3ZmlxdnNtMmZWYnF6Z1hvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZS8wYzc1NmMtNGNmMS00NzliLTk3NGQtYjIzMmQ3ZGFmY2Fj
LzEveE9DempGbTlRckt3ZmlxdnNtMmZWYnF6Z1hvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADt5fuID/
iTRSFiAxrzItfcW8MQ6HJI8SCYdl7OB9s57i0G+6r+u7hu8yA+m7VkgOTKUJuocZ
430om2VS8iqxZoqpy4EZUzGoMiYvcbGc53rJuSTHXmSZjceovDAuXi4gs+L68GJW
lnWHJDViED/J/rDjtHGB7rZdd0Vh4r7jo927qIqq4jQCS2I9l0hk1SDn+NnhMMW6
lDY8KR0OzEDTub+HsZZPFufBfuWhjPSLCwq9miIbZH9qvF5fKFgNSWoMfbp0qjHj
ev836Q3LTIyCjDiIuA1TmkyZ9196stgMxgy6u/+JrtSOImNo2qBCan5FRiwXo+9m
PX7/+zbJvVMJcA==
-----END CERTIFICATE-----
Generated at Sun Sep 7 11:48:43 2025 by rpki-client