Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/0f970f-6ac3-41bc-b6ff-7058f11fac82/1/XqxQs0srr9xG3Ft105vA3Ymmjyw.mft
File: XqxQs0srr9xG3Ft105vA3Ymmjyw.mft (raw, json)
Hash identifier: Gd66Evt6Nkv5a5rSVJVkDuAHIVBSUxEHllgzidB8Z+Y=
Subject key identifier: 08:4B:0B:7C:01:9B:32:F7:8B:23:C5:3F:00:C5:4E:9E:63:1A:C3:DC
Authority key identifier: 5E:AC:50:B3:4B:2B:AF:DC:46:DC:5B:75:D3:9B:C0:DD:89:A6:8F:2C
Certificate issuer: /CN=5eac50b34b2bafdc46dc5b75d39bc0dd89a68f2c
Certificate serial: 019A725C5AF33E836D51A3C8212C23FFA1C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XqxQs0srr9xG3Ft105vA3Ymmjyw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/0f970f-6ac3-41bc-b6ff-7058f11fac82/1/XqxQs0srr9xG3Ft105vA3Ymmjyw.mft
Manifest number: 01DE
Signing time: Tue 11 Nov 2025 10:00:46 +0000
Manifest this update: Tue 11 Nov 2025 10:00:46 +0000
Manifest next update: Wed 12 Nov 2025 10:00:46 +0000
Files and hashes: 1: XqxQs0srr9xG3Ft105vA3Ymmjyw.crl (hash: 1H+5ecJkND2je5n1Pqfhrw+Pwazkv4ZWJdUGbdGD8TY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/0f970f-6ac3-41bc-b6ff-7058f11fac82/1/XqxQs0srr9xG3Ft105vA3Ymmjyw.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/0f970f-6ac3-41bc-b6ff-7058f11fac82/1/XqxQs0srr9xG3Ft105vA3Ymmjyw.mft
rsync://rpki.ripe.net/repository/DEFAULT/XqxQs0srr9xG3Ft105vA3Ymmjyw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:5a:f3:3e:83:6d:51:a3:c8:21:2c:23:ff:a1:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5eac50b34b2bafdc46dc5b75d39bc0dd89a68f2c
Validity
Not Before: Nov 11 10:00:46 2025 GMT
Not After : Nov 12 10:00:46 2025 GMT
Subject: CN=084b0b7c019b32f78b23c53f00c54e9e631ac3dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:38:fa:33:09:8d:91:4c:5e:6d:b5:8e:62:b7:
41:d5:93:18:44:27:a1:c7:82:54:56:d4:78:5b:8c:
5a:bb:0f:f2:84:d6:1d:7e:5c:e0:6f:ab:c0:8a:e8:
49:b0:d9:91:7c:fe:98:c2:f8:a6:61:13:de:ed:ab:
5f:f2:1a:88:40:bd:29:73:e5:33:4d:b8:73:d9:e9:
11:c5:ea:3e:53:05:68:11:4b:f3:2b:bf:75:c3:f3:
08:6f:15:b2:c7:f3:3b:c6:79:2d:d7:92:6c:ae:e0:
60:da:ca:d4:e9:64:00:54:3e:ac:e9:ba:dc:c4:d7:
a1:b9:4c:9b:02:02:98:a5:11:08:82:6e:5f:cf:41:
b3:93:58:31:63:c0:8a:f1:4b:a5:2b:a6:e7:16:ee:
67:fd:cc:cf:79:af:5e:25:63:2a:fa:c3:18:11:55:
e0:f4:93:8a:a8:85:80:3e:b6:1a:c2:15:c3:17:8a:
01:a1:47:fc:6a:35:9c:44:b5:12:1e:b1:41:2b:91:
80:d9:72:2b:a9:4b:27:43:a7:48:7d:fd:36:7c:43:
a3:a3:4f:de:19:3b:c9:d6:24:e9:8b:ed:90:aa:36:
85:2d:44:a1:13:b3:7a:7b:cc:b4:50:2f:9c:4b:1e:
2e:58:92:98:4a:fb:b5:3a:43:64:c9:f0:66:c0:78:
44:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:4B:0B:7C:01:9B:32:F7:8B:23:C5:3F:00:C5:4E:9E:63:1A:C3:DC
X509v3 Authority Key Identifier:
keyid:5E:AC:50:B3:4B:2B:AF:DC:46:DC:5B:75:D3:9B:C0:DD:89:A6:8F:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XqxQs0srr9xG3Ft105vA3Ymmjyw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/0f970f-6ac3-41bc-b6ff-7058f11fac82/1/XqxQs0srr9xG3Ft105vA3Ymmjyw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/0f970f-6ac3-41bc-b6ff-7058f11fac82/1/XqxQs0srr9xG3Ft105vA3Ymmjyw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:b7:cd:85:a7:8d:c0:74:b1:0f:d2:e8:54:05:ca:b9:43:bb:
c2:2d:4b:0f:64:9b:12:b8:54:39:7d:ed:88:62:13:cc:cc:32:
15:4a:5b:b1:08:ea:81:d2:44:e4:b1:14:19:af:b7:33:e8:5f:
b2:23:92:c5:57:c6:2b:73:b8:f2:c6:21:9f:43:02:99:e6:d6:
3f:a7:12:08:6a:d8:1b:a2:bd:59:49:12:82:65:d6:b7:f0:fc:
78:27:fd:0a:ab:6c:cb:87:9d:f7:ee:29:f0:e1:65:4d:ba:c4:
46:c7:76:02:36:47:04:71:b7:c2:43:71:08:9e:95:e3:9e:c8:
54:d6:7d:5c:f0:b5:54:4a:22:e0:a0:e1:8f:b8:0c:89:2e:b1:
5b:09:47:1d:f9:71:d5:48:c3:80:45:e9:99:d4:7b:1a:7d:95:
09:be:73:ac:ff:e0:93:47:49:1f:21:e7:12:da:96:a9:78:fc:
cf:fb:67:39:bb:c1:33:6d:c4:79:c5:2e:20:d3:57:f9:af:89:
fc:9b:9d:7f:a7:d2:67:39:c0:7c:cd:4a:9e:f2:69:ac:de:3c:
87:da:65:ca:12:f8:79:b0:96:56:29:2c:ee:cb:83:3e:94:fd:
0a:29:82:97:8f:d4:97:4d:ac:e9:4b:40:12:0c:c9:78:79:bb:
d0:a3:e2:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:51:57 2025 by rpki-client