Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/523988-5a00-40a6-b044-a27e74f75d26/1/C1XbSaXB_JAcoahcjSXxPxhuL_o.mft
File: C1XbSaXB_JAcoahcjSXxPxhuL_o.mft (raw, json)
Hash identifier: YXkZ5RRWvN9DxjZsfuuAyM8Hslmk+k8l3n0R4HPQmOk=
Subject key identifier: 28:91:B5:1E:16:94:BA:13:0F:A0:82:0E:07:D6:F4:2A:89:B6:10:9C
Authority key identifier: 0B:55:DB:49:A5:C1:FC:90:1C:A1:A8:5C:8D:25:F1:3F:18:6E:2F:FA
Certificate issuer: /CN=0b55db49a5c1fc901ca1a85c8d25f13f186e2ffa
Certificate serial: 0199240D98813FBC596D40EA7AF998856AC6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C1XbSaXB_JAcoahcjSXxPxhuL_o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/523988-5a00-40a6-b044-a27e74f75d26/1/C1XbSaXB_JAcoahcjSXxPxhuL_o.mft
Manifest number: 166F
Signing time: Sun 07 Sep 2025 12:01:34 +0000
Manifest this update: Sun 07 Sep 2025 12:01:34 +0000
Manifest next update: Mon 08 Sep 2025 12:01:34 +0000
Files and hashes: 1: C1XbSaXB_JAcoahcjSXxPxhuL_o.crl (hash: BjU2YtVq4HJfIJCwe7bpg8PZKsxSf7Ja5aqnx1Av74g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/523988-5a00-40a6-b044-a27e74f75d26/1/C1XbSaXB_JAcoahcjSXxPxhuL_o.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/523988-5a00-40a6-b044-a27e74f75d26/1/C1XbSaXB_JAcoahcjSXxPxhuL_o.mft
rsync://rpki.ripe.net/repository/DEFAULT/C1XbSaXB_JAcoahcjSXxPxhuL_o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:24:0d:98:81:3f:bc:59:6d:40:ea:7a:f9:98:85:6a:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b55db49a5c1fc901ca1a85c8d25f13f186e2ffa
Validity
Not Before: Sep 7 12:01:34 2025 GMT
Not After : Sep 8 12:01:34 2025 GMT
Subject: CN=2891b51e1694ba130fa0820e07d6f42a89b6109c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:bc:4e:e2:b8:e5:70:cb:1e:2d:13:1a:36:26:
d9:ae:76:8f:f8:09:b7:35:2f:82:68:e2:86:d7:80:
67:ee:07:bf:5d:d4:00:3e:cc:6b:59:1d:6d:7d:34:
92:36:0d:b1:20:af:00:66:8a:1b:51:ab:43:80:98:
fd:14:39:95:b3:d8:a4:ef:2e:30:b5:a9:09:bf:17:
39:e3:30:71:ac:b8:43:80:3c:52:a8:61:09:d0:27:
ef:33:96:45:69:c2:0b:37:16:be:21:25:ac:e0:93:
f8:77:99:bf:32:e8:20:00:3f:ff:a4:04:b4:08:2f:
ca:b5:9d:c5:f4:51:4c:6b:12:4b:8a:27:58:8e:8d:
59:e6:66:47:e8:57:ed:a0:e3:66:8d:43:9f:69:36:
b7:0a:37:1c:3a:1d:58:b8:29:13:11:c2:49:3e:1b:
6a:d8:d4:82:88:0a:aa:8f:35:11:c9:05:3a:7f:75:
3f:1a:02:6c:c7:6c:9e:ca:0a:04:27:84:f1:a8:42:
8f:8c:62:98:ee:e0:9a:ea:ab:fb:f3:f0:14:5b:bc:
f1:29:8f:69:77:62:26:0a:5a:ff:f2:3b:77:7e:f7:
dd:0a:f2:fd:1f:85:ce:fd:90:5f:3c:34:ca:31:a5:
61:f7:7d:3e:e2:6e:1e:7a:8d:77:3e:7a:5c:2f:5e:
ff:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:91:B5:1E:16:94:BA:13:0F:A0:82:0E:07:D6:F4:2A:89:B6:10:9C
X509v3 Authority Key Identifier:
keyid:0B:55:DB:49:A5:C1:FC:90:1C:A1:A8:5C:8D:25:F1:3F:18:6E:2F:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C1XbSaXB_JAcoahcjSXxPxhuL_o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/523988-5a00-40a6-b044-a27e74f75d26/1/C1XbSaXB_JAcoahcjSXxPxhuL_o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/523988-5a00-40a6-b044-a27e74f75d26/1/C1XbSaXB_JAcoahcjSXxPxhuL_o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:ed:ca:2d:c5:48:06:3b:18:fb:eb:47:91:02:49:ec:60:75:
e8:71:85:76:73:5d:71:3a:76:7b:f5:ea:1f:a1:ed:b0:85:a5:
ad:12:9c:bd:1c:76:cc:39:4a:44:1b:e7:35:5c:e9:4b:2c:85:
31:6e:91:1d:c7:85:c8:f8:52:7c:20:3e:74:2a:f9:e0:5d:4e:
2b:aa:44:af:d1:3a:39:0f:f0:08:cc:6d:ac:1a:95:70:f7:3f:
dd:4f:aa:9d:4f:43:59:8a:04:8d:0e:b0:91:69:12:84:a7:b7:
55:25:24:ab:4a:11:13:40:6f:f8:e5:3f:df:98:0c:11:88:bb:
3a:87:33:b5:df:fb:e6:c5:a8:ca:88:6b:e9:d4:3f:b3:88:83:
42:72:f8:05:16:69:27:0b:81:cc:ff:dc:b9:01:4d:11:ca:06:
30:31:77:1d:4f:04:e3:20:30:db:fa:27:25:6b:30:08:61:a7:
df:72:24:ea:23:09:14:0d:98:a3:05:e1:2d:ef:2e:41:45:1f:
b0:54:db:81:a1:09:85:a4:86:f4:d0:3e:46:6e:ba:0c:50:32:
57:1c:1b:a4:31:17:1e:1c:d2:c0:5c:73:ba:43:24:58:24:65:
66:13:7e:a7:a6:d1:a4:fa:8c:2b:b2:4b:7d:bc:2b:2c:ea:ce:
eb:87:95:a7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkkDZiBP7xZbUDqevmYhWrGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBiNTVkYjQ5YTVjMWZjOTAxY2ExYTg1YzhkMjVmMTNmMTg2
ZTJmZmEwHhcNMjUwOTA3MTIwMTM0WhcNMjUwOTA4MTIwMTM0WjAzMTEwLwYDVQQD
EygyODkxYjUxZTE2OTRiYTEzMGZhMDgyMGUwN2Q2ZjQyYTg5YjYxMDljMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3LxO4rjlcMseLRMaNibZrnaP+Am3
NS+CaOKG14Bn7ge/XdQAPsxrWR1tfTSSNg2xIK8AZoobUatDgJj9FDmVs9ik7y4w
takJvxc54zBxrLhDgDxSqGEJ0CfvM5ZFacILNxa+ISWs4JP4d5m/MuggAD//pAS0
CC/KtZ3F9FFMaxJLiidYjo1Z5mZH6FftoONmjUOfaTa3CjccOh1YuCkTEcJJPhtq
2NSCiAqqjzURyQU6f3U/GgJsx2yeygoEJ4TxqEKPjGKY7uCa6qv78/AUW7zxKY9p
d2ImClr/8jt3fvfdCvL9H4XO/ZBfPDTKMaVh930+4m4eeo13PnpcL17/XwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCiRtR4WlLoTD6CCDgfW9CqJthCcMB8GA1UdIwQY
MBaAFAtV20mlwfyQHKGoXI0l8T8Ybi/6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQzFYYlNhWEJfSkFjb2FoY2pTWHhQeGh1TF9vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC81MjM5ODgtNWEwMC00MGE2LWIwNDQt
YTI3ZTc0Zjc1ZDI2LzEvQzFYYlNhWEJfSkFjb2FoY2pTWHhQeGh1TF9vLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOC81MjM5ODgtNWEwMC00MGE2LWIwNDQtYTI3ZTc0Zjc1ZDI2
LzEvQzFYYlNhWEJfSkFjb2FoY2pTWHhQeGh1TF9vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMO3KLcVI
BjsY++tHkQJJ7GB16HGFdnNdcTp2e/XqH6HtsIWlrRKcvRx2zDlKRBvnNVzpSyyF
MW6RHceFyPhSfCA+dCr54F1OK6pEr9E6OQ/wCMxtrBqVcPc/3U+qnU9DWYoEjQ6w
kWkShKe3VSUkq0oRE0Bv+OU/35gMEYi7Oocztd/75sWoyohr6dQ/s4iDQnL4BRZp
JwuBzP/cuQFNEcoGMDF3HU8E4yAw2/onJWswCGGn33Ik6iMJFA2YowXhLe8uQUUf
sFTbgaEJhaSG9NA+Rm66DFAyVxwbpDEXHhzSwFxzukMkWCRlZhN+p6bRpPqMK7JL
fbwrLOrO64eVpw==
-----END CERTIFICATE-----
Generated at Sun Sep 7 13:47:47 2025 by rpki-client