Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/f27f40-a0c1-4f0a-917e-05b57d2d576c/1/xpmWI-0PDEn-q5V_zQJhSGlAh6g.mft
File: xpmWI-0PDEn-q5V_zQJhSGlAh6g.mft (raw, json)
Hash identifier: AtkJBFNK1xn0mzNI0dejQKeVRhISRfx2xyrBSvaUqo4=
Subject key identifier: D8:17:BA:28:E7:FE:B2:0B:63:DC:16:B8:7F:10:62:33:AB:71:0E:D9
Authority key identifier: C6:99:96:23:ED:0F:0C:49:FE:AB:95:7F:CD:02:61:48:69:40:87:A8
Certificate issuer: /CN=c6999623ed0f0c49feab957fcd026148694087a8
Certificate serial: 019A71B8885F8917D26BD5543A4F3D768F9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xpmWI-0PDEn-q5V_zQJhSGlAh6g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/f27f40-a0c1-4f0a-917e-05b57d2d576c/1/xpmWI-0PDEn-q5V_zQJhSGlAh6g.mft
Manifest number: 16F0
Signing time: Tue 11 Nov 2025 07:01:50 +0000
Manifest this update: Tue 11 Nov 2025 07:01:50 +0000
Manifest next update: Wed 12 Nov 2025 07:01:50 +0000
Files and hashes: 1: xpmWI-0PDEn-q5V_zQJhSGlAh6g.crl (hash: fBgsTG8nRDOtA7ahjtwo82cQtB5V3W2N+YKRDNyG0Fc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/f27f40-a0c1-4f0a-917e-05b57d2d576c/1/xpmWI-0PDEn-q5V_zQJhSGlAh6g.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/f27f40-a0c1-4f0a-917e-05b57d2d576c/1/xpmWI-0PDEn-q5V_zQJhSGlAh6g.mft
rsync://rpki.ripe.net/repository/DEFAULT/xpmWI-0PDEn-q5V_zQJhSGlAh6g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:88:5f:89:17:d2:6b:d5:54:3a:4f:3d:76:8f:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6999623ed0f0c49feab957fcd026148694087a8
Validity
Not Before: Nov 11 07:01:50 2025 GMT
Not After : Nov 12 07:01:50 2025 GMT
Subject: CN=d817ba28e7feb20b63dc16b87f106233ab710ed9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:ed:0e:cb:0e:5f:cd:7f:22:75:d3:06:a3:da:
c9:5d:f6:33:e4:d8:89:e8:e1:7b:c0:3e:49:b9:47:
87:d7:d2:1a:83:46:86:ed:ef:3f:0f:ee:ec:9b:58:
38:08:3a:16:4d:f4:60:b7:c2:44:9f:b0:3c:57:fe:
2f:25:91:98:52:41:27:a6:4a:f2:5a:7e:97:0a:28:
b4:8b:04:bb:4a:49:28:ed:b2:6f:cf:d9:5e:55:1d:
f4:f0:a9:34:d5:58:7b:49:6f:dd:4a:93:46:e4:0d:
ee:95:26:de:cb:ce:46:b2:bd:af:2c:6d:5b:bc:9f:
78:b8:cc:c3:3d:46:6c:42:1a:fc:55:a5:9e:7e:c5:
05:1b:99:1a:27:c9:ec:a8:b7:fe:70:62:67:75:5c:
ed:c6:5e:12:22:ed:9d:cc:78:03:47:bb:06:7e:29:
d8:eb:03:67:35:55:e4:21:1d:3f:5f:8c:de:89:79:
94:d8:ba:3e:62:d7:a0:83:8c:9e:83:8e:d3:bb:81:
6d:c3:9a:fa:68:52:40:fe:ae:36:ba:59:16:b3:4b:
2d:76:0d:19:6d:15:d8:5f:6b:58:85:fe:94:c0:8a:
d7:c8:f4:91:fb:c3:b8:94:c4:31:00:73:26:86:b7:
0c:1c:90:73:9f:21:f7:d4:c6:4b:20:49:e1:c8:99:
5d:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:17:BA:28:E7:FE:B2:0B:63:DC:16:B8:7F:10:62:33:AB:71:0E:D9
X509v3 Authority Key Identifier:
keyid:C6:99:96:23:ED:0F:0C:49:FE:AB:95:7F:CD:02:61:48:69:40:87:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xpmWI-0PDEn-q5V_zQJhSGlAh6g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/f27f40-a0c1-4f0a-917e-05b57d2d576c/1/xpmWI-0PDEn-q5V_zQJhSGlAh6g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/f27f40-a0c1-4f0a-917e-05b57d2d576c/1/xpmWI-0PDEn-q5V_zQJhSGlAh6g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:7d:cd:7a:2d:c1:09:2a:f1:13:86:49:7b:3c:c0:c6:2f:ca:
cb:49:17:99:15:30:d7:0c:73:f2:b2:0c:b1:90:70:e0:ad:cf:
fa:52:88:ae:e9:b7:dc:cd:e3:26:fd:be:12:da:17:17:a2:c1:
67:d1:84:d9:14:f0:3d:1c:5d:5a:b5:b8:68:e4:06:ad:f7:bb:
22:1c:ac:94:91:55:9e:b3:e5:bf:68:32:9f:da:af:e9:a1:81:
cb:4a:8d:7b:d9:11:96:88:49:22:a9:fb:8c:9b:53:dd:37:58:
ea:ae:f2:24:09:72:a4:a9:29:bc:d3:67:e1:16:5e:52:9c:40:
57:48:a4:ea:a0:cf:fe:94:cf:d9:26:85:40:03:75:a4:6b:56:
43:a1:a8:73:10:29:0c:29:3a:f2:c3:c6:d7:ef:3a:0b:7f:9a:
3a:6f:a4:54:c8:cd:0c:cc:8d:5a:b1:56:62:be:a6:4f:9a:6d:
7d:fa:b8:3e:20:26:6c:fb:cd:9c:ae:ee:93:38:d9:42:64:6c:
85:83:7d:80:fa:26:dd:ef:1e:54:15:06:1e:cd:53:2d:a5:af:
8a:9d:50:3b:de:c5:d1:85:0a:ac:4f:65:f8:8b:f4:08:65:f2:
63:ca:4f:e9:d9:2b:f4:f8:be:fa:39:e3:d6:c6:00:16:0b:a9:
a3:c3:bf:92
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxuIhfiRfSa9VUOk89do+fMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2OTk5NjIzZWQwZjBjNDlmZWFiOTU3ZmNkMDI2MTQ4Njk0
MDg3YTgwHhcNMjUxMTExMDcwMTUwWhcNMjUxMTEyMDcwMTUwWjAzMTEwLwYDVQQD
EyhkODE3YmEyOGU3ZmViMjBiNjNkYzE2Yjg3ZjEwNjIzM2FiNzEwZWQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw+0Oyw5fzX8iddMGo9rJXfYz5NiJ
6OF7wD5JuUeH19Iag0aG7e8/D+7sm1g4CDoWTfRgt8JEn7A8V/4vJZGYUkEnpkry
Wn6XCii0iwS7Skko7bJvz9leVR308Kk01Vh7SW/dSpNG5A3ulSbey85Gsr2vLG1b
vJ94uMzDPUZsQhr8VaWefsUFG5kaJ8nsqLf+cGJndVztxl4SIu2dzHgDR7sGfinY
6wNnNVXkIR0/X4zeiXmU2Lo+Ytegg4yeg47Tu4Ftw5r6aFJA/q42ulkWs0stdg0Z
bRXYX2tYhf6UwIrXyPSR+8O4lMQxAHMmhrcMHJBznyH31MZLIEnhyJldiwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNgXuijn/rILY9wWuH8QYjOrcQ7ZMB8GA1UdIwQY
MBaAFMaZliPtDwxJ/quVf80CYUhpQIeoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveHBtV0ktMFBERW4tcTVWX3pRSmhTR2xBaDZnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS9mMjdmNDAtYTBjMS00ZjBhLTkxN2Ut
MDViNTdkMmQ1NzZjLzEveHBtV0ktMFBERW4tcTVWX3pRSmhTR2xBaDZnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNS9mMjdmNDAtYTBjMS00ZjBhLTkxN2UtMDViNTdkMmQ1NzZj
LzEveHBtV0ktMFBERW4tcTVWX3pRSmhTR2xBaDZnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbX3Nei3B
CSrxE4ZJezzAxi/Ky0kXmRUw1wxz8rIMsZBw4K3P+lKIrum33M3jJv2+EtoXF6LB
Z9GE2RTwPRxdWrW4aOQGrfe7IhyslJFVnrPlv2gyn9qv6aGBy0qNe9kRlohJIqn7
jJtT3TdY6q7yJAlypKkpvNNn4RZeUpxAV0ik6qDP/pTP2SaFQAN1pGtWQ6GocxAp
DCk68sPG1+86C3+aOm+kVMjNDMyNWrFWYr6mT5ptffq4PiAmbPvNnK7ukzjZQmRs
hYN9gPom3e8eVBUGHs1TLaWvip1QO97F0YUKrE9l+Iv0CGXyY8pP6dkr9Pi++jnj
1sYAFgupo8O/kg==
-----END CERTIFICATE-----
Generated at Tue Nov 11 12:46:19 2025 by rpki-client