Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/fd1fbc-cb90-4827-8ed0-00c3b612e98c/1/Xm0H9Lv9HbNwmWp192soq8TWs-o.mft
File: Xm0H9Lv9HbNwmWp192soq8TWs-o.mft (raw, json)
Hash identifier: CfsJnyTYvNhUryqA3ddyGxTI12oWli5JMohNidw0xqI=
Subject key identifier: 02:C1:29:D0:C1:E4:37:D0:B5:F4:42:F1:99:4E:06:CF:FF:D5:6E:25
Authority key identifier: 5E:6D:07:F4:BB:FD:1D:B3:70:99:6A:75:F7:6B:28:AB:C4:D6:B3:EA
Certificate issuer: /CN=5e6d07f4bbfd1db370996a75f76b28abc4d6b3ea
Certificate serial: 01992255E24C88FD23542B37AE2B92A711A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xm0H9Lv9HbNwmWp192soq8TWs-o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/fd1fbc-cb90-4827-8ed0-00c3b612e98c/1/Xm0H9Lv9HbNwmWp192soq8TWs-o.mft
Manifest number: 0456
Signing time: Sun 07 Sep 2025 04:01:17 +0000
Manifest this update: Sun 07 Sep 2025 04:01:17 +0000
Manifest next update: Mon 08 Sep 2025 04:01:17 +0000
Files and hashes: 1: Xm0H9Lv9HbNwmWp192soq8TWs-o.crl (hash: qBmV1bXGoxQjVaYeJfcIgs8gf4OEI7x574KatBcy4Zk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/fd1fbc-cb90-4827-8ed0-00c3b612e98c/1/Xm0H9Lv9HbNwmWp192soq8TWs-o.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/fd1fbc-cb90-4827-8ed0-00c3b612e98c/1/Xm0H9Lv9HbNwmWp192soq8TWs-o.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xm0H9Lv9HbNwmWp192soq8TWs-o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 04:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:55:e2:4c:88:fd:23:54:2b:37:ae:2b:92:a7:11:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e6d07f4bbfd1db370996a75f76b28abc4d6b3ea
Validity
Not Before: Sep 7 04:01:17 2025 GMT
Not After : Sep 8 04:01:17 2025 GMT
Subject: CN=02c129d0c1e437d0b5f442f1994e06cfffd56e25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:60:61:f4:27:71:47:63:39:6b:cd:3b:d9:7d:
da:77:64:5b:28:59:0e:52:cc:f7:31:da:95:99:68:
b9:9a:4e:90:73:81:64:e3:d0:08:b4:05:53:8c:4a:
a0:02:c3:24:54:64:1a:5f:20:26:fc:7d:3a:3c:9e:
3f:98:7b:b0:17:b6:c8:bd:07:2d:f6:42:39:bb:d3:
c3:cb:af:97:8e:db:cb:f4:8c:9a:a5:ae:4e:28:fd:
34:fc:38:77:c4:46:e6:6c:73:70:84:e3:13:83:77:
a0:74:9f:68:a1:d4:65:75:a9:1f:9c:4e:d6:be:7d:
92:f6:d2:5e:24:a1:86:67:1e:bd:b3:4d:7a:3d:b2:
94:04:ac:32:04:46:4b:e7:54:aa:64:02:b4:73:9b:
20:0d:e6:00:d6:74:08:c9:24:a6:1b:56:70:6b:fa:
0e:5e:43:df:a6:1e:14:86:32:54:dc:61:3b:f0:fa:
aa:7a:12:93:27:f8:33:fb:ec:2e:7e:bd:e7:d6:cc:
37:a2:78:ec:ba:f3:e6:31:a7:1e:78:b9:cf:46:a3:
1e:7a:cf:21:fc:d8:c1:87:47:10:1f:74:a8:17:7f:
b1:e5:48:9b:5b:64:93:5a:fa:6e:4f:be:9d:5b:43:
62:07:51:d7:b4:fb:a6:0e:6c:e9:85:6c:c4:3c:4c:
c1:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:C1:29:D0:C1:E4:37:D0:B5:F4:42:F1:99:4E:06:CF:FF:D5:6E:25
X509v3 Authority Key Identifier:
keyid:5E:6D:07:F4:BB:FD:1D:B3:70:99:6A:75:F7:6B:28:AB:C4:D6:B3:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xm0H9Lv9HbNwmWp192soq8TWs-o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/fd1fbc-cb90-4827-8ed0-00c3b612e98c/1/Xm0H9Lv9HbNwmWp192soq8TWs-o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/fd1fbc-cb90-4827-8ed0-00c3b612e98c/1/Xm0H9Lv9HbNwmWp192soq8TWs-o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:76:3e:33:f4:42:17:a2:28:63:89:3a:86:d1:b1:70:75:d3:
d1:f2:5c:f2:6c:e1:ca:48:7c:74:ca:47:ee:83:5c:94:bd:e2:
38:a3:2e:c8:97:1a:01:b3:6c:db:96:87:b8:c2:94:bb:38:6c:
e0:85:46:13:f0:19:9b:62:79:fb:b1:c0:5d:2c:a8:03:bf:2a:
58:a0:1c:d6:df:48:f3:dd:12:24:20:a5:c4:82:63:e9:f7:da:
aa:cf:04:c0:ee:db:5d:dd:57:2a:87:3a:b2:01:82:89:ac:bd:
a2:dc:47:e4:a7:1f:a3:a7:ff:1d:ab:a9:98:a9:cc:a2:33:97:
6e:13:2a:f9:5a:74:68:17:b4:e0:31:6e:d2:a2:8b:82:36:37:
e5:48:42:75:96:48:44:7f:71:03:80:46:f0:ba:bd:01:a4:ba:
40:4c:21:ec:ab:30:75:77:84:d5:a3:a7:43:03:4a:d5:ff:55:
d1:a6:e3:07:fa:41:d4:03:e9:8d:15:14:66:fb:67:ba:ab:26:
b5:5d:6f:32:93:64:b6:52:31:59:93:db:96:b2:f2:14:2c:3e:
9d:59:23:b5:84:55:1c:12:61:cc:8d:64:b1:20:02:2c:c7:99:
25:17:06:aa:77:d2:67:0b:23:fb:3f:83:2f:96:b0:59:04:19:
39:8c:b2:b3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkiVeJMiP0jVCs3riuSpxGhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVlNmQwN2Y0YmJmZDFkYjM3MDk5NmE3NWY3NmIyOGFiYzRk
NmIzZWEwHhcNMjUwOTA3MDQwMTE3WhcNMjUwOTA4MDQwMTE3WjAzMTEwLwYDVQQD
EygwMmMxMjlkMGMxZTQzN2QwYjVmNDQyZjE5OTRlMDZjZmZmZDU2ZTI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzmBh9CdxR2M5a8072X3ad2RbKFkO
Usz3MdqVmWi5mk6Qc4Fk49AItAVTjEqgAsMkVGQaXyAm/H06PJ4/mHuwF7bIvQct
9kI5u9PDy6+XjtvL9Iyapa5OKP00/Dh3xEbmbHNwhOMTg3egdJ9oodRldakfnE7W
vn2S9tJeJKGGZx69s016PbKUBKwyBEZL51SqZAK0c5sgDeYA1nQIySSmG1Zwa/oO
XkPfph4UhjJU3GE78PqqehKTJ/gz++wufr3n1sw3onjsuvPmMaceeLnPRqMees8h
/NjBh0cQH3SoF3+x5UibW2STWvpuT76dW0NiB1HXtPumDmzphWzEPEzBPwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFALBKdDB5DfQtfRC8ZlOBs//1W4lMB8GA1UdIwQY
MBaAFF5tB/S7/R2zcJlqdfdrKKvE1rPqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWG0wSDlMdjlIYk53bVdwMTkyc29xOFRXcy1vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy9mZDFmYmMtY2I5MC00ODI3LThlZDAt
MDBjM2I2MTJlOThjLzEvWG0wSDlMdjlIYk53bVdwMTkyc29xOFRXcy1vLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYy9mZDFmYmMtY2I5MC00ODI3LThlZDAtMDBjM2I2MTJlOThj
LzEvWG0wSDlMdjlIYk53bVdwMTkyc29xOFRXcy1vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAonY+M/RC
F6IoY4k6htGxcHXT0fJc8mzhykh8dMpH7oNclL3iOKMuyJcaAbNs25aHuMKUuzhs
4IVGE/AZm2J5+7HAXSyoA78qWKAc1t9I890SJCClxIJj6ffaqs8EwO7bXd1XKoc6
sgGCiay9otxH5Kcfo6f/HaupmKnMojOXbhMq+Vp0aBe04DFu0qKLgjY35UhCdZZI
RH9xA4BG8Lq9AaS6QEwh7KswdXeE1aOnQwNK1f9V0abjB/pB1APpjRUUZvtnuqsm
tV1vMpNktlIxWZPblrLyFCw+nVkjtYRVHBJhzI1ksSACLMeZJRcGqnfSZwsj+z+D
L5awWQQZOYyysw==
-----END CERTIFICATE-----
Generated at Sun Sep 7 12:25:02 2025 by rpki-client