Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/e2fa5c-8847-44e4-a95d-61e8dc1f1459/1/XPwPm_ekSrNWe6z5Ke5MnAV1MDM.mft
File: XPwPm_ekSrNWe6z5Ke5MnAV1MDM.mft (raw, json)
Hash identifier: u2ChOiEc2X/CrGTYG6bRcrCQqbhNRLczI2AaVCcXmZw=
Subject key identifier: 96:54:1A:13:D5:AA:D2:C9:A6:50:5A:56:44:17:59:88:D3:3D:F5:48
Authority key identifier: 5C:FC:0F:9B:F7:A4:4A:B3:56:7B:AC:F9:29:EE:4C:9C:05:75:30:33
Certificate issuer: /CN=5cfc0f9bf7a44ab3567bacf929ee4c9c05753033
Certificate serial: 019A7225C55A64FE2328E4B2F2A013948F64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XPwPm_ekSrNWe6z5Ke5MnAV1MDM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/e2fa5c-8847-44e4-a95d-61e8dc1f1459/1/XPwPm_ekSrNWe6z5Ke5MnAV1MDM.mft
Manifest number: 11E4
Signing time: Tue 11 Nov 2025 09:01:09 +0000
Manifest this update: Tue 11 Nov 2025 09:01:09 +0000
Manifest next update: Wed 12 Nov 2025 09:01:09 +0000
Files and hashes: 1: XPwPm_ekSrNWe6z5Ke5MnAV1MDM.crl (hash: YAKCZkV38tm+cvf/GDx1CGHjNWLMR0WvhHjp1VZtpns=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/e2fa5c-8847-44e4-a95d-61e8dc1f1459/1/XPwPm_ekSrNWe6z5Ke5MnAV1MDM.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/e2fa5c-8847-44e4-a95d-61e8dc1f1459/1/XPwPm_ekSrNWe6z5Ke5MnAV1MDM.mft
rsync://rpki.ripe.net/repository/DEFAULT/XPwPm_ekSrNWe6z5Ke5MnAV1MDM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:25:c5:5a:64:fe:23:28:e4:b2:f2:a0:13:94:8f:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5cfc0f9bf7a44ab3567bacf929ee4c9c05753033
Validity
Not Before: Nov 11 09:01:09 2025 GMT
Not After : Nov 12 09:01:09 2025 GMT
Subject: CN=96541a13d5aad2c9a6505a5644175988d33df548
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:ef:45:df:76:cb:e9:a3:84:03:15:cc:c6:5e:
26:d0:9d:d2:41:46:e5:1a:e0:9a:35:92:0e:13:68:
eb:34:4e:2f:7f:90:53:89:fe:5b:c7:08:15:00:e4:
44:b3:20:88:a3:49:dc:ab:54:7a:9f:b2:aa:3c:1d:
8b:80:4b:70:c7:21:d8:09:4f:78:7c:75:00:0c:c8:
65:25:e8:26:83:a1:7e:88:ec:77:18:80:62:71:54:
b5:b1:fb:1d:78:cb:1f:ea:82:67:a1:c6:bd:b7:2d:
8c:61:fb:1f:fb:28:ef:64:a9:99:f4:4d:88:33:6a:
32:04:fd:21:12:0f:b8:5f:52:fb:9b:05:13:b9:07:
05:b9:c1:59:d6:f0:9b:2e:52:40:cb:04:a8:6c:bb:
70:a7:bb:11:24:ac:32:dc:2f:5f:9d:a2:4b:50:80:
04:ec:6a:54:4a:b8:95:71:93:d3:19:0a:43:f3:19:
30:59:c4:53:27:8e:c1:da:f9:c2:61:db:f7:8b:1f:
77:2e:59:a1:e2:88:91:aa:55:fe:d1:c9:51:c5:81:
01:29:44:2a:e6:b5:a6:e3:3f:5a:1c:92:96:1d:39:
46:6a:ba:85:62:0f:45:88:c7:64:60:84:0e:0f:14:
a3:d6:e1:f4:d2:f7:68:9a:81:fe:3d:20:e3:fa:04:
c3:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:54:1A:13:D5:AA:D2:C9:A6:50:5A:56:44:17:59:88:D3:3D:F5:48
X509v3 Authority Key Identifier:
keyid:5C:FC:0F:9B:F7:A4:4A:B3:56:7B:AC:F9:29:EE:4C:9C:05:75:30:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XPwPm_ekSrNWe6z5Ke5MnAV1MDM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/e2fa5c-8847-44e4-a95d-61e8dc1f1459/1/XPwPm_ekSrNWe6z5Ke5MnAV1MDM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/e2fa5c-8847-44e4-a95d-61e8dc1f1459/1/XPwPm_ekSrNWe6z5Ke5MnAV1MDM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:92:3f:09:01:76:8a:b8:18:45:10:2f:8c:1b:35:00:57:d1:
0d:f7:31:8d:f3:b1:9b:d1:76:15:42:f7:a6:e3:24:aa:c0:3b:
80:76:dd:06:d7:66:38:de:d6:e2:e4:54:69:1b:1f:18:34:e3:
d6:8b:1f:b0:dc:3d:97:05:a1:d0:90:2b:4c:5e:91:ff:e2:8b:
d0:90:50:ae:81:b7:ac:3c:70:c4:b4:bb:32:08:d7:11:cc:07:
72:c2:71:eb:18:ae:da:c0:6c:ab:45:0b:fe:fa:5e:57:c5:d6:
74:8c:d5:c7:a9:96:40:c2:e4:19:de:a9:34:93:76:db:96:03:
79:13:bf:d4:d9:f5:bb:4b:24:8f:aa:0f:36:9a:bc:44:6c:9b:
e5:37:8d:d6:4a:74:79:7a:aa:15:86:27:8a:51:8e:7b:98:2d:
45:88:94:f1:5f:7e:d7:ca:72:98:a3:95:0d:04:2c:d1:dd:70:
74:88:71:a0:dc:43:62:00:0a:88:5c:e8:76:cb:16:25:b3:c2:
d6:25:d9:e5:6b:ea:03:f2:34:51:2e:a4:bd:28:35:94:ab:71:
4f:ed:c9:b7:45:e9:9b:82:99:fd:1c:65:22:3c:f8:5f:c9:40:
64:f5:31:2a:6e:5f:df:16:2b:af:56:0e:de:55:ce:3b:0c:b7:
13:25:e3:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:03:42 2025 by rpki-client