Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/216f0d-347b-4cd9-a09f-a9d2e6a3d0f1/1/xkjL_ecaUwXKv9TnnObe5xSCgVE.mft
File: xkjL_ecaUwXKv9TnnObe5xSCgVE.mft (raw, json)
Hash identifier: 9gwWf1VzNqVMIx2v/NMN/mamheQYu4oo3ulOhoeKUWY=
Subject key identifier: B5:24:3A:55:AC:1B:CF:40:C6:59:CD:C7:D8:4B:01:0D:17:90:AB:80
Authority key identifier: C6:48:CB:FD:E7:1A:53:05:CA:BF:D4:E7:9C:E6:DE:E7:14:82:81:51
Certificate issuer: /CN=c648cbfde71a5305cabfd4e79ce6dee714828151
Certificate serial: 019A71B804FA0115E5F3C931D52C35A10B4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xkjL_ecaUwXKv9TnnObe5xSCgVE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/216f0d-347b-4cd9-a09f-a9d2e6a3d0f1/1/xkjL_ecaUwXKv9TnnObe5xSCgVE.mft
Manifest number: 046B
Signing time: Tue 11 Nov 2025 07:01:16 +0000
Manifest this update: Tue 11 Nov 2025 07:01:16 +0000
Manifest next update: Wed 12 Nov 2025 07:01:16 +0000
Files and hashes: 1: xkjL_ecaUwXKv9TnnObe5xSCgVE.crl (hash: cwPrXjsCe7ia64auo5xrEggLLjLOx44s+fE8HZlGaTY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/216f0d-347b-4cd9-a09f-a9d2e6a3d0f1/1/xkjL_ecaUwXKv9TnnObe5xSCgVE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/216f0d-347b-4cd9-a09f-a9d2e6a3d0f1/1/xkjL_ecaUwXKv9TnnObe5xSCgVE.mft
rsync://rpki.ripe.net/repository/DEFAULT/xkjL_ecaUwXKv9TnnObe5xSCgVE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:04:fa:01:15:e5:f3:c9:31:d5:2c:35:a1:0b:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c648cbfde71a5305cabfd4e79ce6dee714828151
Validity
Not Before: Nov 11 07:01:16 2025 GMT
Not After : Nov 12 07:01:16 2025 GMT
Subject: CN=b5243a55ac1bcf40c659cdc7d84b010d1790ab80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fe:ca:0f:82:61:ac:46:c6:c7:62:3e:0d:01:b2:
46:e8:74:2f:5c:b5:d9:85:50:ee:c1:bb:42:f6:7f:
e4:f0:26:ae:a3:13:f3:54:35:ab:83:a7:ca:43:30:
bf:9e:b5:ad:44:59:96:b1:7a:af:6c:db:a2:d4:b9:
02:ed:29:ec:7d:7e:e9:cc:ff:6a:db:f4:47:b0:54:
76:51:a2:3c:5f:ad:58:3a:c0:fd:7e:ed:33:99:af:
f8:2d:1a:37:21:fa:19:26:a2:21:10:ae:4b:44:ea:
85:2f:c1:f1:5f:88:12:c0:b2:51:38:46:1a:62:4a:
4e:00:27:ca:35:1c:ef:4b:8b:2b:47:86:45:6c:be:
11:e0:e3:32:aa:46:b3:fe:3e:3c:fc:e6:88:a9:5f:
c9:d6:d6:d3:7b:e1:f3:db:8f:a6:03:d1:fd:6c:f9:
a4:2d:6e:ac:b9:93:48:91:47:5e:ce:49:6c:e8:fd:
96:20:6e:e2:33:d7:b8:ae:ac:82:47:4a:a7:08:32:
55:f6:98:e4:0e:6e:8f:df:99:f8:ee:77:c4:00:d0:
93:21:25:74:2a:f6:d6:18:22:27:13:d2:5a:41:a4:
db:99:62:9e:7b:05:14:54:3d:9e:22:35:c8:cb:ee:
50:fe:9f:21:90:bf:e9:f2:17:b6:06:70:50:db:61:
0d:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:24:3A:55:AC:1B:CF:40:C6:59:CD:C7:D8:4B:01:0D:17:90:AB:80
X509v3 Authority Key Identifier:
keyid:C6:48:CB:FD:E7:1A:53:05:CA:BF:D4:E7:9C:E6:DE:E7:14:82:81:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xkjL_ecaUwXKv9TnnObe5xSCgVE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/216f0d-347b-4cd9-a09f-a9d2e6a3d0f1/1/xkjL_ecaUwXKv9TnnObe5xSCgVE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/216f0d-347b-4cd9-a09f-a9d2e6a3d0f1/1/xkjL_ecaUwXKv9TnnObe5xSCgVE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:b4:cf:c4:e4:14:10:a7:87:7d:9a:d6:4e:2a:b6:7c:e0:6f:
fa:ef:ef:8c:31:3f:ff:05:fb:6a:b0:e6:f8:22:26:13:02:ec:
01:90:87:c4:71:80:b1:70:15:34:76:1e:84:c0:8d:c3:b1:01:
40:a3:04:23:35:19:35:8f:40:e8:6a:da:03:20:27:b4:f5:aa:
34:95:12:bd:f5:0a:e8:64:67:d0:0b:24:c3:6b:59:d4:6c:24:
d7:a8:b3:be:10:17:8b:62:5a:bb:61:da:e8:04:9c:54:55:60:
71:a6:6b:9a:26:23:2b:84:57:ba:80:b5:21:d8:5e:5c:e1:e5:
07:ec:a1:5f:c2:5e:6d:3f:42:74:80:a6:78:32:41:1c:ac:91:
0c:2d:88:a0:ac:b0:d5:b0:c4:c0:11:8e:a9:c8:61:11:40:13:
d4:d3:52:31:f6:f3:56:f9:2e:2e:d3:51:46:62:f8:45:fa:af:
a4:50:a5:da:0a:59:99:d7:e2:5b:41:80:ba:e8:09:00:fd:34:
95:ec:55:04:b7:91:29:f1:3b:64:6d:a7:6d:a7:8f:68:43:4e:
47:01:2a:f6:4a:ad:62:56:df:6d:f1:83:b0:b7:5c:24:25:f2:
92:84:dc:12:62:dd:2c:49:1c:0e:b2:9c:57:40:22:8a:69:08:
b9:c4:7d:1c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxuAT6ARXl88kx1Sw1oQtPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2NDhjYmZkZTcxYTUzMDVjYWJmZDRlNzljZTZkZWU3MTQ4
MjgxNTEwHhcNMjUxMTExMDcwMTE2WhcNMjUxMTEyMDcwMTE2WjAzMTEwLwYDVQQD
EyhiNTI0M2E1NWFjMWJjZjQwYzY1OWNkYzdkODRiMDEwZDE3OTBhYjgwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA/soPgmGsRsbHYj4NAbJG6HQvXLXZ
hVDuwbtC9n/k8CauoxPzVDWrg6fKQzC/nrWtRFmWsXqvbNui1LkC7SnsfX7pzP9q
2/RHsFR2UaI8X61YOsD9fu0zma/4LRo3IfoZJqIhEK5LROqFL8HxX4gSwLJROEYa
YkpOACfKNRzvS4srR4ZFbL4R4OMyqkaz/j48/OaIqV/J1tbTe+Hz24+mA9H9bPmk
LW6suZNIkUdezkls6P2WIG7iM9e4rqyCR0qnCDJV9pjkDm6P35n47nfEANCTISV0
KvbWGCInE9JaQaTbmWKeewUUVD2eIjXIy+5Q/p8hkL/p8he2BnBQ22ENyQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLUkOlWsG89AxlnNx9hLAQ0XkKuAMB8GA1UdIwQY
MBaAFMZIy/3nGlMFyr/U55zm3ucUgoFRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveGtqTF9lY2FVd1hLdjlUbm5PYmU1eFNDZ1ZFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC8yMTZmMGQtMzQ3Yi00Y2Q5LWEwOWYt
YTlkMmU2YTNkMGYxLzEveGtqTF9lY2FVd1hLdjlUbm5PYmU1eFNDZ1ZFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZC8yMTZmMGQtMzQ3Yi00Y2Q5LWEwOWYtYTlkMmU2YTNkMGYx
LzEveGtqTF9lY2FVd1hLdjlUbm5PYmU1eFNDZ1ZFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALbTPxOQU
EKeHfZrWTiq2fOBv+u/vjDE//wX7arDm+CImEwLsAZCHxHGAsXAVNHYehMCNw7EB
QKMEIzUZNY9A6GraAyAntPWqNJUSvfUK6GRn0Askw2tZ1Gwk16izvhAXi2Jau2Ha
6AScVFVgcaZrmiYjK4RXuoC1IdheXOHlB+yhX8JebT9CdICmeDJBHKyRDC2IoKyw
1bDEwBGOqchhEUAT1NNSMfbzVvkuLtNRRmL4RfqvpFCl2gpZmdfiW0GAuugJAP00
lexVBLeRKfE7ZG2nbaePaENORwEq9kqtYlbfbfGDsLdcJCXykoTcEmLdLEkcDrKc
V0AiimkIucR9HA==
-----END CERTIFICATE-----
Generated at Tue Nov 11 14:22:10 2025 by rpki-client