Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/e428da-0c18-4489-8ed2-93c44ac8414e/1/XsqkR_Cbyw3fivwQxz6OkbvwjlU.mft
File: XsqkR_Cbyw3fivwQxz6OkbvwjlU.mft (raw, json)
Hash identifier: r9MoIH1is2sNXedTbReiIFQxyHySwjMZFqKSSeuMAVU=
Subject key identifier: 51:19:38:76:71:98:EC:79:FD:75:3C:DD:B0:C9:B3:40:24:66:CD:46
Authority key identifier: 5E:CA:A4:47:F0:9B:CB:0D:DF:8A:FC:10:C7:3E:8E:91:BB:F0:8E:55
Certificate issuer: /CN=5ecaa447f09bcb0ddf8afc10c73e8e91bbf08e55
Certificate serial: 019A71B78E167165257CE78BE2FBA7589E15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XsqkR_Cbyw3fivwQxz6OkbvwjlU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/e428da-0c18-4489-8ed2-93c44ac8414e/1/XsqkR_Cbyw3fivwQxz6OkbvwjlU.mft
Manifest number: 0B2B
Signing time: Tue 11 Nov 2025 07:00:46 +0000
Manifest this update: Tue 11 Nov 2025 07:00:46 +0000
Manifest next update: Wed 12 Nov 2025 07:00:46 +0000
Files and hashes: 1: XsqkR_Cbyw3fivwQxz6OkbvwjlU.crl (hash: dDpfJlc2uUu7iBB4zeK3fykLcmkYBpgojE5IVB7ThTA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/e428da-0c18-4489-8ed2-93c44ac8414e/1/XsqkR_Cbyw3fivwQxz6OkbvwjlU.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/e428da-0c18-4489-8ed2-93c44ac8414e/1/XsqkR_Cbyw3fivwQxz6OkbvwjlU.mft
rsync://rpki.ripe.net/repository/DEFAULT/XsqkR_Cbyw3fivwQxz6OkbvwjlU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:8e:16:71:65:25:7c:e7:8b:e2:fb:a7:58:9e:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ecaa447f09bcb0ddf8afc10c73e8e91bbf08e55
Validity
Not Before: Nov 11 07:00:46 2025 GMT
Not After : Nov 12 07:00:46 2025 GMT
Subject: CN=511938767198ec79fd753cddb0c9b3402466cd46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:80:06:be:7f:29:0e:d3:45:8b:a4:6a:9b:07:
76:9b:7c:f2:12:56:19:59:b4:e8:39:7b:45:6c:57:
f9:b0:72:e3:13:12:a4:19:1a:ab:81:c1:de:70:05:
eb:5e:e2:ea:09:ae:28:38:e3:b6:62:9a:9e:b4:ed:
eb:de:21:53:0b:8c:98:fc:75:28:2b:4f:95:a2:6f:
15:86:26:37:f1:ac:5c:45:a3:0d:9c:55:8a:4c:d0:
2f:2a:f8:08:86:b7:61:c5:0a:1c:3d:e2:b9:bf:9f:
70:c1:31:a0:76:f4:7e:11:56:ae:92:ea:c4:14:06:
d4:90:6c:bf:40:b2:e5:7a:1b:ac:c7:1d:33:95:08:
21:0d:c3:33:bf:01:73:db:7e:b6:d3:51:4d:9b:c6:
25:d8:e8:cc:ec:e6:27:e3:5c:f7:4c:ed:8a:a8:3a:
73:53:92:bd:d2:31:f8:89:3a:b0:a9:53:89:9b:20:
84:9c:08:d9:3a:3c:c7:62:43:73:0f:44:d1:be:08:
14:20:e9:4b:4a:46:05:ca:95:86:66:30:9c:d2:ba:
91:4e:03:33:bd:a5:d9:a5:6c:a9:7e:65:ea:a3:6b:
ad:d8:50:cc:c1:79:95:00:ba:c8:a5:f2:37:83:c1:
54:de:d7:f2:c1:99:da:7b:5c:eb:16:1b:de:8c:28:
04:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:19:38:76:71:98:EC:79:FD:75:3C:DD:B0:C9:B3:40:24:66:CD:46
X509v3 Authority Key Identifier:
keyid:5E:CA:A4:47:F0:9B:CB:0D:DF:8A:FC:10:C7:3E:8E:91:BB:F0:8E:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XsqkR_Cbyw3fivwQxz6OkbvwjlU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/e428da-0c18-4489-8ed2-93c44ac8414e/1/XsqkR_Cbyw3fivwQxz6OkbvwjlU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/e428da-0c18-4489-8ed2-93c44ac8414e/1/XsqkR_Cbyw3fivwQxz6OkbvwjlU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:9c:42:c1:81:aa:33:0c:c6:45:bb:22:be:b0:4e:ab:ba:ba:
e9:94:cd:78:a8:6a:fd:82:cf:91:80:b0:8f:19:80:80:ec:e0:
b5:13:45:7a:04:82:2d:4b:9e:af:d9:ec:ee:71:a9:a9:e4:a5:
0b:5b:dd:39:9e:c5:4d:04:ae:51:aa:20:dd:23:4b:48:3b:12:
3f:0d:e1:32:8c:d0:0c:c5:5b:b1:5e:10:8a:d5:e7:0e:b8:7e:
36:ef:8c:44:13:6e:88:d9:8c:f5:65:9b:ee:2a:77:bd:7d:41:
77:6d:03:2e:0e:e0:69:8a:7f:4f:3b:81:ba:2b:e2:0c:cd:a9:
50:06:6a:60:9b:61:c7:97:a9:a5:12:34:a5:25:dc:a8:64:da:
a4:5a:19:a7:99:3c:d0:d5:76:4b:12:43:21:ce:8e:72:79:85:
af:56:23:98:bf:10:92:34:44:09:fa:e2:28:2d:19:9e:ab:5a:
d7:e9:4e:5a:b8:19:cf:64:12:4c:3e:35:c4:d1:d1:a9:8f:e6:
b2:58:86:f7:f4:75:4b:0e:f0:15:4e:3c:45:92:5a:c1:ef:01:
7a:25:a6:a4:4f:99:43:ca:29:c5:9b:bd:ec:a5:7b:0e:5a:c8:
a2:5a:93:ac:54:a2:4c:71:c0:d1:5b:13:30:4a:63:b2:14:a5:
53:52:d7:c6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxt44WcWUlfOeL4vunWJ4VMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVlY2FhNDQ3ZjA5YmNiMGRkZjhhZmMxMGM3M2U4ZTkxYmJm
MDhlNTUwHhcNMjUxMTExMDcwMDQ2WhcNMjUxMTEyMDcwMDQ2WjAzMTEwLwYDVQQD
Eyg1MTE5Mzg3NjcxOThlYzc5ZmQ3NTNjZGRiMGM5YjM0MDI0NjZjZDQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkYAGvn8pDtNFi6Rqmwd2m3zyElYZ
WbToOXtFbFf5sHLjExKkGRqrgcHecAXrXuLqCa4oOOO2YpqetO3r3iFTC4yY/HUo
K0+Vom8VhiY38axcRaMNnFWKTNAvKvgIhrdhxQocPeK5v59wwTGgdvR+EVaukurE
FAbUkGy/QLLlehusxx0zlQghDcMzvwFz236201FNm8Yl2OjM7OYn41z3TO2KqDpz
U5K90jH4iTqwqVOJmyCEnAjZOjzHYkNzD0TRvggUIOlLSkYFypWGZjCc0rqRTgMz
vaXZpWypfmXqo2ut2FDMwXmVALrIpfI3g8FU3tfywZnae1zrFhvejCgEwQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFEZOHZxmOx5/XU83bDJs0AkZs1GMB8GA1UdIwQY
MBaAFF7KpEfwm8sN34r8EMc+jpG78I5VMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWHNxa1JfQ2J5dzNmaXZ3UXh6Nk9rYnZ3amxVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OC9lNDI4ZGEtMGMxOC00NDg5LThlZDIt
OTNjNDRhYzg0MTRlLzEvWHNxa1JfQ2J5dzNmaXZ3UXh6Nk9rYnZ3amxVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84OC9lNDI4ZGEtMGMxOC00NDg5LThlZDItOTNjNDRhYzg0MTRl
LzEvWHNxa1JfQ2J5dzNmaXZ3UXh6Nk9rYnZ3amxVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsZxCwYGq
MwzGRbsivrBOq7q66ZTNeKhq/YLPkYCwjxmAgOzgtRNFegSCLUuer9ns7nGpqeSl
C1vdOZ7FTQSuUaog3SNLSDsSPw3hMozQDMVbsV4QitXnDrh+Nu+MRBNuiNmM9WWb
7ip3vX1Bd20DLg7gaYp/TzuBuiviDM2pUAZqYJthx5eppRI0pSXcqGTapFoZp5k8
0NV2SxJDIc6OcnmFr1YjmL8QkjRECfriKC0Znqta1+lOWrgZz2QSTD41xNHRqY/m
sliG9/R1Sw7wFU48RZJawe8BeiWmpE+ZQ8opxZu97KV7DlrIolqTrFSiTHHA0VsT
MEpjshSlU1LXxg==
-----END CERTIFICATE-----
Generated at Tue Nov 11 14:36:18 2025 by rpki-client