Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/303a43-1003-42d6-96b0-66b86fc781a2/1/XjPdpt78k8-CUWSU2fNIjWxK2dw.mft
File: XjPdpt78k8-CUWSU2fNIjWxK2dw.mft (raw, json)
Hash identifier: iTjMuKypeF1++uGyvDA6pQJxPHYjChPnDCBDxYaW1o8=
Subject key identifier: 8A:02:2C:BD:1A:24:F8:CA:19:08:A9:7C:1E:56:0F:4B:66:D6:2F:5F
Authority key identifier: 5E:33:DD:A6:DE:FC:93:CF:82:51:64:94:D9:F3:48:8D:6C:4A:D9:DC
Certificate issuer: /CN=5e33dda6defc93cf82516494d9f3488d6c4ad9dc
Certificate serial: 019A70A508C403D0B5E56C290FE40E635DC0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XjPdpt78k8-CUWSU2fNIjWxK2dw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/303a43-1003-42d6-96b0-66b86fc781a2/1/XjPdpt78k8-CUWSU2fNIjWxK2dw.mft
Manifest number: 0985
Signing time: Tue 11 Nov 2025 02:00:55 +0000
Manifest this update: Tue 11 Nov 2025 02:00:55 +0000
Manifest next update: Wed 12 Nov 2025 02:00:55 +0000
Files and hashes: 1: XjPdpt78k8-CUWSU2fNIjWxK2dw.crl (hash: 4Mmnzw8DF4Cfoyp/GWdVbz4DNg4BFM08/D///PCX6MI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/303a43-1003-42d6-96b0-66b86fc781a2/1/XjPdpt78k8-CUWSU2fNIjWxK2dw.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/303a43-1003-42d6-96b0-66b86fc781a2/1/XjPdpt78k8-CUWSU2fNIjWxK2dw.mft
rsync://rpki.ripe.net/repository/DEFAULT/XjPdpt78k8-CUWSU2fNIjWxK2dw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 02:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:a5:08:c4:03:d0:b5:e5:6c:29:0f:e4:0e:63:5d:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e33dda6defc93cf82516494d9f3488d6c4ad9dc
Validity
Not Before: Nov 11 02:00:55 2025 GMT
Not After : Nov 12 02:00:55 2025 GMT
Subject: CN=8a022cbd1a24f8ca1908a97c1e560f4b66d62f5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:5e:93:2f:3e:0f:2e:9b:31:f4:3b:70:f4:10:
f2:4d:1d:59:ca:8a:fc:23:aa:f3:89:f0:fa:39:a0:
8a:54:a6:32:5e:df:60:ab:49:e5:63:2f:c5:ea:3e:
58:29:3f:aa:da:5b:41:0a:cf:c7:0f:e7:1c:a3:9c:
3e:3b:ed:8d:6e:cb:ac:2f:d0:ac:1e:14:b9:58:7a:
4d:88:2b:dd:c2:5a:9e:e1:57:ec:ef:87:fe:ab:dd:
05:5a:3b:bc:e1:5a:5b:66:f1:b1:c5:56:11:0e:f8:
b4:1b:7c:07:ab:14:8e:c3:b2:5b:60:35:8f:d0:f7:
f4:5a:fb:19:2f:51:8d:b8:17:18:7a:e9:1a:5d:87:
67:91:78:f8:8d:6c:03:34:0f:ca:46:ee:fc:01:a1:
8c:2d:3d:03:c6:4b:5c:48:a7:ac:ef:7b:31:6e:b0:
9f:40:12:eb:42:0b:1b:77:2a:69:33:04:af:65:9e:
f6:ba:79:81:52:ff:c6:4f:44:a3:4d:8d:b6:88:9e:
ba:7f:48:b2:60:e3:0c:44:e9:2a:ae:a8:d9:74:fa:
64:b0:22:3e:99:b0:ae:fc:39:0a:80:33:1d:04:27:
d8:9c:97:2d:d7:40:1f:42:1e:75:61:30:6c:b9:35:
86:17:a5:a5:69:e9:b7:a8:6d:96:77:4d:7d:5c:ec:
22:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:02:2C:BD:1A:24:F8:CA:19:08:A9:7C:1E:56:0F:4B:66:D6:2F:5F
X509v3 Authority Key Identifier:
keyid:5E:33:DD:A6:DE:FC:93:CF:82:51:64:94:D9:F3:48:8D:6C:4A:D9:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XjPdpt78k8-CUWSU2fNIjWxK2dw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/303a43-1003-42d6-96b0-66b86fc781a2/1/XjPdpt78k8-CUWSU2fNIjWxK2dw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/303a43-1003-42d6-96b0-66b86fc781a2/1/XjPdpt78k8-CUWSU2fNIjWxK2dw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:07:6c:ce:6d:57:71:ec:6c:04:a7:df:7f:d2:a7:60:8d:64:
41:be:11:44:fa:e7:bf:d3:d6:83:bd:f1:b7:43:4e:3d:d7:ff:
4f:b6:d9:1c:92:2c:b2:be:f6:68:48:9f:6e:84:6b:35:ed:db:
4a:94:4d:9b:5d:1e:8a:43:7a:e8:4e:bc:02:cd:50:84:57:d1:
00:b4:2e:db:d9:d0:b7:a0:80:6a:44:8b:14:bc:ad:57:26:67:
5a:a7:ed:07:63:1a:d2:7a:a6:1a:78:9a:ed:d5:ef:fc:38:5e:
98:80:9a:95:2d:08:37:cf:10:13:38:e9:42:70:02:5e:89:a6:
0b:7c:8a:e0:da:db:86:da:06:0a:57:ea:7e:0b:3f:ed:49:20:
e9:df:d1:e8:e6:1e:8d:1a:92:54:54:67:26:71:d8:28:3e:81:
b3:61:ad:3b:39:2f:64:0d:45:28:36:4d:3d:69:32:59:fc:2f:
f2:92:55:cf:36:3a:08:5b:55:28:0f:87:c0:db:9e:ef:fc:9a:
4a:ac:c7:bf:85:e2:e5:03:19:5d:43:b5:85:9f:9f:77:a2:36:
fd:3a:b3:f7:1a:0f:49:db:24:a7:ac:7e:71:6a:78:4d:df:03:
26:ca:9c:e0:29:e8:c8:06:8e:d6:86:66:7f:9e:22:82:93:13:
23:8b:a5:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:28:16 2025 by rpki-client