Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/1b089c-d74b-49a7-89f7-28a56ea5cf0b/1/XL6eQwJOzGksM1OYuy2WcRaqwtk.mft
File: XL6eQwJOzGksM1OYuy2WcRaqwtk.mft (raw, json)
Hash identifier: wisuGW/oL9DjnOfYFNpCnsbSf5rqNMFWopFTocv0GPU=
Subject key identifier: C2:FE:04:9B:69:FE:EC:06:E1:0C:09:EB:B1:F8:E9:51:68:A7:0B:17
Authority key identifier: 5C:BE:9E:43:02:4E:CC:69:2C:33:53:98:BB:2D:96:71:16:AA:C2:D9
Certificate issuer: /CN=5cbe9e43024ecc692c335398bb2d967116aac2d9
Certificate serial: 019A27427417322F879ED872D351762A5FD6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XL6eQwJOzGksM1OYuy2WcRaqwtk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/1b089c-d74b-49a7-89f7-28a56ea5cf0b/1/XL6eQwJOzGksM1OYuy2WcRaqwtk.mft
Manifest number: 0CAA
Signing time: Mon 27 Oct 2025 20:00:57 +0000
Manifest this update: Mon 27 Oct 2025 20:00:57 +0000
Manifest next update: Tue 28 Oct 2025 20:00:57 +0000
Files and hashes: 1: XL6eQwJOzGksM1OYuy2WcRaqwtk.crl (hash: vPQZDADQjDwpMEdZPBEBrn94spzAMcQ1T2CHSWjxaKg=)
2: fR8nd7Ui5M0TTCClOFZarT85ISQ.roa (hash: +LwloUzxUq85xV+wKMtA7KHt9ERuAgEUO4GtKVQXsDs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/1b089c-d74b-49a7-89f7-28a56ea5cf0b/1/XL6eQwJOzGksM1OYuy2WcRaqwtk.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/1b089c-d74b-49a7-89f7-28a56ea5cf0b/1/XL6eQwJOzGksM1OYuy2WcRaqwtk.mft
rsync://rpki.ripe.net/repository/DEFAULT/XL6eQwJOzGksM1OYuy2WcRaqwtk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 15:57:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:27:42:74:17:32:2f:87:9e:d8:72:d3:51:76:2a:5f:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5cbe9e43024ecc692c335398bb2d967116aac2d9
Validity
Not Before: Oct 27 20:00:57 2025 GMT
Not After : Oct 28 20:00:57 2025 GMT
Subject: CN=c2fe049b69feec06e10c09ebb1f8e95168a70b17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:41:b0:33:84:19:88:32:ad:0c:54:50:0a:16:
6a:4b:2f:fb:85:b7:a8:ba:ed:8b:db:64:b5:26:62:
93:89:03:8b:64:03:dd:b9:da:6e:2c:c2:53:52:4e:
2a:4c:b3:62:6e:11:37:5a:43:96:e7:21:3a:bf:44:
01:1c:fb:ed:34:ef:06:ea:56:3b:7f:d4:e0:e5:de:
4a:33:0c:cc:b2:1b:84:fa:cf:19:16:24:8f:99:04:
4c:2c:4a:d8:f5:28:00:9f:14:91:2f:dc:83:38:24:
67:d6:25:aa:a0:a5:f7:35:a1:14:18:94:fe:27:91:
b0:a4:f0:e9:ed:30:57:29:85:76:74:b2:f7:81:97:
47:a2:b5:25:d8:62:40:a9:54:0e:5e:43:b2:60:c4:
09:6d:df:09:11:b0:35:20:ee:aa:36:55:03:98:2f:
93:0d:a7:af:77:8a:a7:6f:b2:09:4f:9c:f2:49:8c:
ef:ea:31:b8:06:32:41:b2:de:42:03:75:01:54:c2:
8f:9a:29:ca:45:89:cc:c8:ef:e9:5a:c6:27:bc:02:
36:10:39:ec:85:0b:24:6a:79:57:31:7c:d7:cc:8e:
75:6a:00:7f:44:bf:50:a3:0f:7b:51:0a:7c:3c:6b:
71:95:3b:f9:8a:64:09:ed:25:0c:0a:cf:dc:d2:e3:
86:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:FE:04:9B:69:FE:EC:06:E1:0C:09:EB:B1:F8:E9:51:68:A7:0B:17
X509v3 Authority Key Identifier:
keyid:5C:BE:9E:43:02:4E:CC:69:2C:33:53:98:BB:2D:96:71:16:AA:C2:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XL6eQwJOzGksM1OYuy2WcRaqwtk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/1b089c-d74b-49a7-89f7-28a56ea5cf0b/1/XL6eQwJOzGksM1OYuy2WcRaqwtk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/1b089c-d74b-49a7-89f7-28a56ea5cf0b/1/XL6eQwJOzGksM1OYuy2WcRaqwtk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:d1:44:67:5a:9a:6a:a3:91:2d:5f:5b:eb:b3:b0:07:af:d3:
b4:97:33:01:31:3f:08:0d:ab:5a:1e:68:5f:93:4b:d2:6c:9c:
74:fe:53:1c:ad:fa:30:8e:9b:28:2c:96:8a:3c:b6:8f:b7:94:
f5:08:2e:31:7e:b9:82:5d:d6:13:7e:69:d3:96:da:60:17:e9:
93:50:0f:95:3d:c1:c6:e1:14:07:24:85:fd:57:6d:3c:fa:fc:
12:03:05:c6:8e:bc:54:01:f9:d2:36:af:58:dc:2b:f6:1c:6a:
e7:ad:ee:f4:40:73:24:ea:ff:72:6d:1d:f1:75:c4:41:db:48:
38:f3:06:6a:4c:01:7e:d0:7e:e0:80:45:f2:95:b7:3a:c5:8a:
4f:3c:6c:c5:d1:81:84:78:00:fa:34:6e:72:b4:0a:b7:0f:69:
81:3d:8f:87:d2:33:8f:7b:d2:3d:d7:b8:70:01:69:b5:90:ff:
b3:2c:2c:06:d0:82:59:9f:4a:e0:85:39:5b:e7:00:a2:e3:8b:
58:19:28:f4:83:67:7d:8c:93:73:6e:cc:6b:f2:7b:9e:7a:a7:
84:8d:ee:0b:00:c6:b5:0d:f9:d9:26:8a:d4:40:ba:15:db:82:
6e:06:03:ba:65:c5:7d:51:d1:3c:bd:33:c3:c6:b6:88:5c:20:
df:7b:7f:1f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZonQnQXMi+Hnthy01F2Kl/WMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVjYmU5ZTQzMDI0ZWNjNjkyYzMzNTM5OGJiMmQ5NjcxMTZh
YWMyZDkwHhcNMjUxMDI3MjAwMDU3WhcNMjUxMDI4MjAwMDU3WjAzMTEwLwYDVQQD
EyhjMmZlMDQ5YjY5ZmVlYzA2ZTEwYzA5ZWJiMWY4ZTk1MTY4YTcwYjE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq0GwM4QZiDKtDFRQChZqSy/7hbeo
uu2L22S1JmKTiQOLZAPdudpuLMJTUk4qTLNibhE3WkOW5yE6v0QBHPvtNO8G6lY7
f9Tg5d5KMwzMshuE+s8ZFiSPmQRMLErY9SgAnxSRL9yDOCRn1iWqoKX3NaEUGJT+
J5GwpPDp7TBXKYV2dLL3gZdHorUl2GJAqVQOXkOyYMQJbd8JEbA1IO6qNlUDmC+T
Daevd4qnb7IJT5zySYzv6jG4BjJBst5CA3UBVMKPminKRYnMyO/pWsYnvAI2EDns
hQskanlXMXzXzI51agB/RL9Qow97UQp8PGtxlTv5imQJ7SUMCs/c0uOGOwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFML+BJtp/uwG4QwJ67H46VFopwsXMB8GA1UdIwQY
MBaAFFy+nkMCTsxpLDNTmLstlnEWqsLZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWEw2ZVF3Sk96R2tzTTFPWXV5MldjUmFxd3RrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS8xYjA4OWMtZDc0Yi00OWE3LTg5Zjct
MjhhNTZlYTVjZjBiLzEvWEw2ZVF3Sk96R2tzTTFPWXV5MldjUmFxd3RrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOS8xYjA4OWMtZDc0Yi00OWE3LTg5ZjctMjhhNTZlYTVjZjBi
LzEvWEw2ZVF3Sk96R2tzTTFPWXV5MldjUmFxd3RrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmtFEZ1qa
aqORLV9b67OwB6/TtJczATE/CA2rWh5oX5NL0mycdP5THK36MI6bKCyWijy2j7eU
9QguMX65gl3WE35p05baYBfpk1APlT3BxuEUBySF/VdtPPr8EgMFxo68VAH50jav
WNwr9hxq563u9EBzJOr/cm0d8XXEQdtIOPMGakwBftB+4IBF8pW3OsWKTzxsxdGB
hHgA+jRucrQKtw9pgT2Ph9Izj3vSPde4cAFptZD/sywsBtCCWZ9K4IU5W+cAouOL
WBko9INnfYyTc27Ma/J7nnqnhI3uCwDGtQ352SaK1EC6FduCbgYDumXFfVHRPL0z
w8a2iFwg33t/Hw==
-----END CERTIFICATE-----
Generated at Mon Oct 27 22:01:56 2025 by rpki-client