Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/b900ee-0007-47a3-9f6f-8670fbea3989/1/x_MfTFLp6rWIMOOH0LOQkwaExBo.mft
File: x_MfTFLp6rWIMOOH0LOQkwaExBo.mft (raw, json)
Hash identifier: 9hZ6vDzyQstep29IFA8Q9XZeHoNnWMJ6w7A2KwHkEsk=
Subject key identifier: 8C:33:80:54:F3:2B:C6:2F:52:40:F9:F7:F1:47:EA:B5:3E:5E:74:22
Authority key identifier: C7:F3:1F:4C:52:E9:EA:B5:88:30:E3:87:D0:B3:90:93:06:84:C4:1A
Certificate issuer: /CN=c7f31f4c52e9eab58830e387d0b390930684c41a
Certificate serial: 019A70A4D5E9FDBA418E25271E03EFCF7FC8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x_MfTFLp6rWIMOOH0LOQkwaExBo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/b900ee-0007-47a3-9f6f-8670fbea3989/1/x_MfTFLp6rWIMOOH0LOQkwaExBo.mft
Manifest number: 171A
Signing time: Tue 11 Nov 2025 02:00:42 +0000
Manifest this update: Tue 11 Nov 2025 02:00:42 +0000
Manifest next update: Wed 12 Nov 2025 02:00:42 +0000
Files and hashes: 1: x_MfTFLp6rWIMOOH0LOQkwaExBo.crl (hash: i6jTl3svcr8sePVwq7AgaICb9LO8nMR22KZ7NPJ9IaM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/b900ee-0007-47a3-9f6f-8670fbea3989/1/x_MfTFLp6rWIMOOH0LOQkwaExBo.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/b900ee-0007-47a3-9f6f-8670fbea3989/1/x_MfTFLp6rWIMOOH0LOQkwaExBo.mft
rsync://rpki.ripe.net/repository/DEFAULT/x_MfTFLp6rWIMOOH0LOQkwaExBo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 02:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:a4:d5:e9:fd:ba:41:8e:25:27:1e:03:ef:cf:7f:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7f31f4c52e9eab58830e387d0b390930684c41a
Validity
Not Before: Nov 11 02:00:42 2025 GMT
Not After : Nov 12 02:00:42 2025 GMT
Subject: CN=8c338054f32bc62f5240f9f7f147eab53e5e7422
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:48:7c:4c:e9:d1:6f:1d:36:2c:ef:6e:0e:97:
45:10:a3:10:12:7d:45:28:7f:b8:74:31:bb:2e:5e:
69:3e:cb:28:f8:58:d1:6a:95:97:23:68:cb:ed:36:
a0:e0:95:5c:08:f3:16:93:9e:fd:1b:08:e8:a7:a8:
4a:12:ae:8e:5a:66:11:25:88:2c:35:7c:3e:3a:5f:
60:e0:56:48:bd:e6:bc:f9:27:40:55:dc:53:12:bd:
6c:91:47:12:07:75:03:dc:68:b7:5f:8a:b3:4b:a6:
3c:2a:fc:7e:20:80:94:b2:56:be:c6:74:6b:da:a1:
8d:f4:7d:4e:bc:9d:4d:77:88:9c:b2:6d:63:62:de:
cb:4e:52:e7:12:b6:30:17:2b:65:6f:6c:83:15:df:
da:44:24:39:ab:4a:19:fb:a7:a7:4e:3d:2c:ca:54:
ab:f9:b9:99:a1:7e:af:df:5b:9a:b5:87:20:28:20:
34:16:aa:f3:51:b0:ef:53:cf:03:93:7a:41:12:71:
3a:fb:98:2e:cd:4a:52:85:b8:1c:16:2c:81:eb:9a:
c5:d6:e2:e7:cc:45:74:64:77:34:2c:f7:85:7e:57:
98:94:ad:cd:68:5f:aa:3f:6d:e1:10:d4:ef:8a:f5:
7e:07:5c:1c:cf:36:25:e5:14:01:41:3f:fb:12:d8:
9d:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:33:80:54:F3:2B:C6:2F:52:40:F9:F7:F1:47:EA:B5:3E:5E:74:22
X509v3 Authority Key Identifier:
keyid:C7:F3:1F:4C:52:E9:EA:B5:88:30:E3:87:D0:B3:90:93:06:84:C4:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x_MfTFLp6rWIMOOH0LOQkwaExBo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/b900ee-0007-47a3-9f6f-8670fbea3989/1/x_MfTFLp6rWIMOOH0LOQkwaExBo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/b900ee-0007-47a3-9f6f-8670fbea3989/1/x_MfTFLp6rWIMOOH0LOQkwaExBo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:6b:ca:ca:f6:49:6c:c3:29:8f:be:66:e1:cd:d7:50:5e:8c:
14:5b:5a:43:34:d1:4d:cc:44:2b:1d:e3:57:c1:f3:4f:4a:f8:
1e:a4:bc:74:67:04:19:c1:25:13:ba:01:29:0e:6b:01:44:8a:
94:20:25:74:35:14:bb:78:e0:6c:01:94:7c:e6:eb:38:10:dc:
21:ad:23:6e:f3:02:12:ae:3f:4d:7d:fb:47:6b:c3:ff:b2:fb:
9e:92:0b:e4:86:9e:38:e0:a2:00:f3:48:14:36:37:dd:e1:9b:
b9:34:8e:01:77:a8:39:b6:4c:6d:cd:4c:77:02:ed:82:a9:21:
cd:7f:81:c4:20:4f:47:f4:f6:0a:49:38:9b:2d:53:1b:d8:d3:
f8:d4:05:71:8b:2e:ce:62:e1:93:6b:bb:12:71:a8:cd:0d:34:
25:8c:f0:b2:4f:5b:5a:73:b4:fb:85:59:06:25:9c:d4:27:c1:
05:91:e4:22:3a:c5:b3:a3:d1:ae:ce:2f:c7:c4:60:ba:f3:7d:
97:d8:4f:4f:59:b3:60:bb:77:39:04:63:88:a6:a6:e5:f8:24:
8d:b9:2e:2b:a5:05:d0:dc:07:6d:6f:04:56:b2:3a:cb:84:92:
12:13:ac:b5:4d:95:4f:1a:eb:d7:9e:71:ee:76:b9:87:33:2b:
83:b9:e1:79
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpwpNXp/bpBjiUnHgPvz3/IMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM3ZjMxZjRjNTJlOWVhYjU4ODMwZTM4N2QwYjM5MDkzMDY4
NGM0MWEwHhcNMjUxMTExMDIwMDQyWhcNMjUxMTEyMDIwMDQyWjAzMTEwLwYDVQQD
Eyg4YzMzODA1NGYzMmJjNjJmNTI0MGY5ZjdmMTQ3ZWFiNTNlNWU3NDIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzEh8TOnRbx02LO9uDpdFEKMQEn1F
KH+4dDG7Ll5pPsso+FjRapWXI2jL7Tag4JVcCPMWk579Gwjop6hKEq6OWmYRJYgs
NXw+Ol9g4FZIvea8+SdAVdxTEr1skUcSB3UD3Gi3X4qzS6Y8Kvx+IICUsla+xnRr
2qGN9H1OvJ1Nd4icsm1jYt7LTlLnErYwFytlb2yDFd/aRCQ5q0oZ+6enTj0sylSr
+bmZoX6v31uatYcgKCA0FqrzUbDvU88Dk3pBEnE6+5guzUpShbgcFiyB65rF1uLn
zEV0ZHc0LPeFfleYlK3NaF+qP23hENTvivV+B1wczzYl5RQBQT/7EtidFwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIwzgFTzK8YvUkD59/FH6rU+XnQiMB8GA1UdIwQY
MBaAFMfzH0xS6eq1iDDjh9CzkJMGhMQaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveF9NZlRGTHA2cldJTU9PSDBMT1Frd2FFeEJvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi9iOTAwZWUtMDAwNy00N2EzLTlmNmYt
ODY3MGZiZWEzOTg5LzEveF9NZlRGTHA2cldJTU9PSDBMT1Frd2FFeEJvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYi9iOTAwZWUtMDAwNy00N2EzLTlmNmYtODY3MGZiZWEzOTg5
LzEveF9NZlRGTHA2cldJTU9PSDBMT1Frd2FFeEJvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZGvKyvZJ
bMMpj75m4c3XUF6MFFtaQzTRTcxEKx3jV8HzT0r4HqS8dGcEGcElE7oBKQ5rAUSK
lCAldDUUu3jgbAGUfObrOBDcIa0jbvMCEq4/TX37R2vD/7L7npIL5IaeOOCiAPNI
FDY33eGbuTSOAXeoObZMbc1MdwLtgqkhzX+BxCBPR/T2Ckk4my1TG9jT+NQFcYsu
zmLhk2u7EnGozQ00JYzwsk9bWnO0+4VZBiWc1CfBBZHkIjrFs6PRrs4vx8RguvN9
l9hPT1mzYLt3OQRjiKam5fgkjbkuK6UF0NwHbW8EVrI6y4SSEhOstU2VTxrr155x
7na5hzMrg7nheQ==
-----END CERTIFICATE-----
Generated at Tue Nov 11 11:47:42 2025 by rpki-client