Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/38e121-a8ee-4112-8c4a-76f70d833dd4/1/xcymnU3Y7tz2A-NjKVsZtpAp71w.mft
File: xcymnU3Y7tz2A-NjKVsZtpAp71w.mft (raw, json)
Hash identifier: 24nGXVYk8sHEueJUYNIFvCv29P5LZke6sdqY5sW6RGY=
Subject key identifier: E8:2C:DD:57:26:01:49:0C:25:00:13:A9:0B:D3:A6:9D:3D:6B:FF:93
Authority key identifier: C5:CC:A6:9D:4D:D8:EE:DC:F6:03:E3:63:29:5B:19:B6:90:29:EF:5C
Certificate issuer: /CN=c5cca69d4dd8eedcf603e363295b19b69029ef5c
Certificate serial: 019A71B881E702E7A8D8C8A633BBD6B93469
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xcymnU3Y7tz2A-NjKVsZtpAp71w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/38e121-a8ee-4112-8c4a-76f70d833dd4/1/xcymnU3Y7tz2A-NjKVsZtpAp71w.mft
Manifest number: 171C
Signing time: Tue 11 Nov 2025 07:01:48 +0000
Manifest this update: Tue 11 Nov 2025 07:01:48 +0000
Manifest next update: Wed 12 Nov 2025 07:01:48 +0000
Files and hashes: 1: xcymnU3Y7tz2A-NjKVsZtpAp71w.crl (hash: F5ShazxKIkzsumnrw04tCWXM1qJJqYaVJD84l2Lv4+A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/38e121-a8ee-4112-8c4a-76f70d833dd4/1/xcymnU3Y7tz2A-NjKVsZtpAp71w.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/38e121-a8ee-4112-8c4a-76f70d833dd4/1/xcymnU3Y7tz2A-NjKVsZtpAp71w.mft
rsync://rpki.ripe.net/repository/DEFAULT/xcymnU3Y7tz2A-NjKVsZtpAp71w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:81:e7:02:e7:a8:d8:c8:a6:33:bb:d6:b9:34:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5cca69d4dd8eedcf603e363295b19b69029ef5c
Validity
Not Before: Nov 11 07:01:48 2025 GMT
Not After : Nov 12 07:01:48 2025 GMT
Subject: CN=e82cdd572601490c250013a90bd3a69d3d6bff93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:e3:95:9e:bf:f7:0b:e0:fa:4f:a7:a5:07:90:
19:e7:09:44:c5:24:27:bf:22:59:3b:5a:e0:71:91:
1f:ad:9d:54:79:c9:00:ed:ea:29:f9:dd:7a:73:35:
c6:5a:c0:cb:ec:b3:9f:f0:67:54:07:08:82:c1:59:
ce:40:9c:aa:1e:79:dd:8a:c4:14:89:db:97:50:42:
c3:a3:41:21:cc:9c:99:72:95:64:8f:22:1f:5e:b9:
86:cf:e0:38:76:9e:8f:ce:9f:74:0a:05:d1:34:a8:
f7:50:6b:ca:18:89:d7:91:01:4b:46:47:b3:f4:42:
2f:d0:c1:a8:c8:d8:eb:88:39:f8:50:7e:64:07:e2:
13:8f:20:d9:9f:22:eb:4e:1f:da:88:a3:fd:45:3f:
43:ba:a6:e5:7f:9b:d7:15:05:46:7f:48:b9:5d:5c:
b6:bd:b3:f1:9a:58:72:1c:82:33:98:79:0c:5c:fc:
69:8b:40:09:0e:c3:51:1e:c3:74:79:43:c2:9c:cb:
9f:a5:88:83:ae:ce:f5:1d:49:3c:b8:49:2e:81:18:
9a:ba:78:7b:41:1e:87:36:3e:e3:d9:04:44:84:e6:
44:86:ec:f0:6b:1c:e9:82:4e:dd:8f:42:cc:17:40:
13:d8:45:9d:f4:b1:09:55:47:f5:ed:60:20:80:8e:
05:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:2C:DD:57:26:01:49:0C:25:00:13:A9:0B:D3:A6:9D:3D:6B:FF:93
X509v3 Authority Key Identifier:
keyid:C5:CC:A6:9D:4D:D8:EE:DC:F6:03:E3:63:29:5B:19:B6:90:29:EF:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xcymnU3Y7tz2A-NjKVsZtpAp71w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/38e121-a8ee-4112-8c4a-76f70d833dd4/1/xcymnU3Y7tz2A-NjKVsZtpAp71w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/38e121-a8ee-4112-8c4a-76f70d833dd4/1/xcymnU3Y7tz2A-NjKVsZtpAp71w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:6f:58:ea:57:cc:f9:8e:bd:e1:44:6c:f8:25:b0:bb:1d:40:
ce:43:f9:e1:7c:ae:11:73:b1:ad:3c:42:9c:e8:26:d0:7d:f6:
8b:ed:a5:ee:b9:46:c3:92:4f:c0:f0:d7:7b:ea:c1:cf:ea:c7:
62:53:a2:00:01:1e:5c:e8:30:41:c4:26:db:dd:4a:ab:fa:8f:
9f:68:92:fd:ab:d0:b8:82:3c:7f:42:da:60:58:97:c4:81:b2:
6d:45:0f:41:ec:9b:2f:3d:03:5e:37:a0:dc:d4:98:54:1b:ec:
2a:f0:c6:90:8a:1c:1f:56:9d:40:44:b6:bc:76:7b:fa:fc:79:
9e:76:bd:36:1e:2b:ea:31:dd:f9:f2:49:f9:c3:2e:06:26:02:
c8:2b:a7:ea:47:99:e2:55:ae:32:17:74:4f:52:ba:28:b7:97:
cd:a6:85:bc:cd:40:8c:e1:0a:f5:47:72:1a:58:3c:26:09:1e:
34:18:10:cb:f4:5a:0b:e0:44:c8:e8:89:2c:ff:30:b9:d3:91:
d6:c8:69:c6:29:e0:00:fc:80:74:f0:1d:3e:21:46:71:d9:ba:
e8:ce:ce:45:9d:27:2b:16:74:14:9c:81:60:58:4d:c5:fa:a9:
d4:ce:e9:7f:2e:9e:a9:7f:97:55:cf:71:15:e3:17:4c:13:2b:
57:56:c2:f5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxuIHnAueo2MimM7vWuTRpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM1Y2NhNjlkNGRkOGVlZGNmNjAzZTM2MzI5NWIxOWI2OTAy
OWVmNWMwHhcNMjUxMTExMDcwMTQ4WhcNMjUxMTEyMDcwMTQ4WjAzMTEwLwYDVQQD
EyhlODJjZGQ1NzI2MDE0OTBjMjUwMDEzYTkwYmQzYTY5ZDNkNmJmZjkzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAseOVnr/3C+D6T6elB5AZ5wlExSQn
vyJZO1rgcZEfrZ1UeckA7eop+d16czXGWsDL7LOf8GdUBwiCwVnOQJyqHnndisQU
iduXUELDo0EhzJyZcpVkjyIfXrmGz+A4dp6Pzp90CgXRNKj3UGvKGInXkQFLRkez
9EIv0MGoyNjriDn4UH5kB+ITjyDZnyLrTh/aiKP9RT9Duqblf5vXFQVGf0i5XVy2
vbPxmlhyHIIzmHkMXPxpi0AJDsNRHsN0eUPCnMufpYiDrs71HUk8uEkugRiaunh7
QR6HNj7j2QREhOZEhuzwaxzpgk7dj0LMF0AT2EWd9LEJVUf17WAggI4FVQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOgs3VcmAUkMJQATqQvTpp09a/+TMB8GA1UdIwQY
MBaAFMXMpp1N2O7c9gPjYylbGbaQKe9cMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveGN5bW5VM1k3dHoyQS1OaktWc1p0cEFwNzF3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS8zOGUxMjEtYThlZS00MTEyLThjNGEt
NzZmNzBkODMzZGQ0LzEveGN5bW5VM1k3dHoyQS1OaktWc1p0cEFwNzF3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOS8zOGUxMjEtYThlZS00MTEyLThjNGEtNzZmNzBkODMzZGQ0
LzEveGN5bW5VM1k3dHoyQS1OaktWc1p0cEFwNzF3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHW9Y6lfM
+Y694URs+CWwux1AzkP54XyuEXOxrTxCnOgm0H32i+2l7rlGw5JPwPDXe+rBz+rH
YlOiAAEeXOgwQcQm291Kq/qPn2iS/avQuII8f0LaYFiXxIGybUUPQeybLz0DXjeg
3NSYVBvsKvDGkIocH1adQES2vHZ7+vx5nna9Nh4r6jHd+fJJ+cMuBiYCyCun6keZ
4lWuMhd0T1K6KLeXzaaFvM1AjOEK9UdyGlg8JgkeNBgQy/RaC+BEyOiJLP8wudOR
1shpxingAPyAdPAdPiFGcdm66M7ORZ0nKxZ0FJyBYFhNxfqp1M7pfy6eqX+XVc9x
FeMXTBMrV1bC9Q==
-----END CERTIFICATE-----
Generated at Tue Nov 11 15:26:52 2025 by rpki-client