Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/a992fe-c1cf-4de8-bbb0-f96f6f769838/1/XlIUFYrzEP-pwxUpg0P0w-Zq7Jo.mft
File: XlIUFYrzEP-pwxUpg0P0w-Zq7Jo.mft (raw, json)
Hash identifier: 1lSZ+thCaExnqRnmkZfXK1G0tEJQuNRaLNk1UEGawxw=
Subject key identifier: 40:0B:31:10:4A:58:20:3E:D4:F2:C6:A9:77:ED:50:FF:78:C1:C8:D5
Authority key identifier: 5E:52:14:15:8A:F3:10:FF:A9:C3:15:29:83:43:F4:C3:E6:6A:EC:9A
Certificate issuer: /CN=5e5214158af310ffa9c315298343f4c3e66aec9a
Certificate serial: 019A722614835D455F6CBD087036B0EAF629
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XlIUFYrzEP-pwxUpg0P0w-Zq7Jo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/a992fe-c1cf-4de8-bbb0-f96f6f769838/1/XlIUFYrzEP-pwxUpg0P0w-Zq7Jo.mft
Manifest number: 076B
Signing time: Tue 11 Nov 2025 09:01:29 +0000
Manifest this update: Tue 11 Nov 2025 09:01:29 +0000
Manifest next update: Wed 12 Nov 2025 09:01:29 +0000
Files and hashes: 1: XlIUFYrzEP-pwxUpg0P0w-Zq7Jo.crl (hash: Zno+rmb1MohXThrlzKQEM9kiWHUz4nCiOSg7EsVuNmo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/a992fe-c1cf-4de8-bbb0-f96f6f769838/1/XlIUFYrzEP-pwxUpg0P0w-Zq7Jo.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/a992fe-c1cf-4de8-bbb0-f96f6f769838/1/XlIUFYrzEP-pwxUpg0P0w-Zq7Jo.mft
rsync://rpki.ripe.net/repository/DEFAULT/XlIUFYrzEP-pwxUpg0P0w-Zq7Jo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:26:14:83:5d:45:5f:6c:bd:08:70:36:b0:ea:f6:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e5214158af310ffa9c315298343f4c3e66aec9a
Validity
Not Before: Nov 11 09:01:29 2025 GMT
Not After : Nov 12 09:01:29 2025 GMT
Subject: CN=400b31104a58203ed4f2c6a977ed50ff78c1c8d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:90:ce:92:69:b6:45:09:8a:ea:10:a6:98:86:
07:f1:06:ec:13:53:9f:5c:a2:f3:0f:92:2d:9a:60:
ab:39:67:e1:c6:4d:73:88:d1:8d:ad:1d:64:11:e5:
31:7c:6c:8c:2a:ab:07:f0:df:68:a7:d0:35:01:2c:
3b:a2:83:95:11:02:ef:21:3d:13:cd:02:cd:73:a3:
52:7d:29:3f:fb:a0:3f:11:c6:76:7e:a8:db:ed:82:
21:74:64:bb:58:d4:7a:67:b5:1b:81:54:5e:a9:69:
26:df:ea:f8:70:2a:11:89:5f:df:ac:2a:87:c0:1e:
d3:b4:af:d3:fd:f5:fe:33:f2:f0:6e:86:4d:4f:84:
80:d6:a3:ab:14:8e:85:e5:ba:38:8a:c6:d3:3c:fb:
ab:92:3e:4b:48:2b:bd:ec:eb:d1:22:2c:64:6b:c1:
d3:39:91:0e:56:80:f8:eb:2d:05:3b:49:b4:f9:23:
59:63:d8:b6:f5:6f:e6:d5:15:d1:8a:84:38:54:16:
27:57:82:24:d1:89:4c:4e:4f:4e:0f:cf:57:c0:9c:
a0:bb:1d:f7:3d:36:d4:32:eb:07:d2:8d:b9:75:db:
76:65:f2:b7:44:1f:10:b1:8d:16:46:ba:6b:12:14:
dc:3e:33:c5:4d:4a:9b:25:df:a6:ff:42:78:56:ed:
c2:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:0B:31:10:4A:58:20:3E:D4:F2:C6:A9:77:ED:50:FF:78:C1:C8:D5
X509v3 Authority Key Identifier:
keyid:5E:52:14:15:8A:F3:10:FF:A9:C3:15:29:83:43:F4:C3:E6:6A:EC:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XlIUFYrzEP-pwxUpg0P0w-Zq7Jo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/a992fe-c1cf-4de8-bbb0-f96f6f769838/1/XlIUFYrzEP-pwxUpg0P0w-Zq7Jo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/a992fe-c1cf-4de8-bbb0-f96f6f769838/1/XlIUFYrzEP-pwxUpg0P0w-Zq7Jo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:98:09:de:18:56:f5:a8:7d:a4:68:4f:46:c6:81:37:50:2e:
ea:72:81:80:02:be:11:5b:84:d2:33:29:b8:15:82:ca:0d:a1:
80:17:40:2c:37:52:e2:e0:d7:89:dd:80:10:f6:1e:27:72:ac:
0e:ee:65:77:8c:c9:6c:31:16:f0:68:fc:b3:4f:61:2b:6d:08:
01:0d:79:36:b3:45:37:e5:5f:cc:42:6f:e9:2d:8f:4c:61:35:
6f:f9:74:88:e2:f2:14:b8:8b:1e:84:54:ff:4c:5f:c1:03:a1:
5f:24:ea:eb:b5:53:be:e6:ff:d4:cf:3e:c8:f8:5d:ff:26:b9:
46:e2:01:11:03:42:fe:fa:d9:2c:45:06:63:13:d2:1b:db:45:
13:cc:ac:d8:4e:00:e6:8c:ae:c6:bf:b6:aa:fa:9e:6e:7b:c4:
e0:82:f8:f1:90:70:76:54:43:95:4b:e9:d5:f0:0f:c4:f5:0f:
ab:77:78:6d:fc:e6:ac:dd:ad:3f:87:6f:b1:f0:9c:73:f1:20:
e9:2e:81:4b:eb:c7:9f:43:8b:71:f1:3c:a7:d8:2c:9a:20:28:
a4:50:3c:21:a4:96:fb:1d:80:99:44:27:85:95:e6:34:d0:b2:
55:14:d8:86:10:e7:6f:27:d5:4f:38:a9:7d:e5:a2:b6:29:70:
e9:6e:b2:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 18:36:48 2025 by rpki-client