Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/2b3387-3b34-457e-ab1c-3ab52b3bcc3b/1/XbdXv1dG8moHySCHAbDVS2m8M2Q.mft
File: XbdXv1dG8moHySCHAbDVS2m8M2Q.mft (raw, json)
Hash identifier: N4zepVLNFqkAzj7UQiZBKYymK5lbAS5DAjKY2CCtkRk=
Subject key identifier: 71:CF:E9:96:45:CA:E3:F3:CC:1E:A2:0A:44:C9:0E:5D:1A:CB:CF:99
Authority key identifier: 5D:B7:57:BF:57:46:F2:6A:07:C9:20:87:01:B0:D5:4B:69:BC:33:64
Certificate issuer: /CN=5db757bf5746f26a07c9208701b0d54b69bc3364
Certificate serial: 019A72265315FCCA8729748A154DA932904E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XbdXv1dG8moHySCHAbDVS2m8M2Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/2b3387-3b34-457e-ab1c-3ab52b3bcc3b/1/XbdXv1dG8moHySCHAbDVS2m8M2Q.mft
Manifest number: 05EB
Signing time: Tue 11 Nov 2025 09:01:45 +0000
Manifest this update: Tue 11 Nov 2025 09:01:45 +0000
Manifest next update: Wed 12 Nov 2025 09:01:45 +0000
Files and hashes: 1: XbdXv1dG8moHySCHAbDVS2m8M2Q.crl (hash: Nas3zGHH+aJ380tMwc2E9/zcLTghEhRiTIDSEn9BDFk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/2b3387-3b34-457e-ab1c-3ab52b3bcc3b/1/XbdXv1dG8moHySCHAbDVS2m8M2Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/2b3387-3b34-457e-ab1c-3ab52b3bcc3b/1/XbdXv1dG8moHySCHAbDVS2m8M2Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/XbdXv1dG8moHySCHAbDVS2m8M2Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:26:53:15:fc:ca:87:29:74:8a:15:4d:a9:32:90:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5db757bf5746f26a07c9208701b0d54b69bc3364
Validity
Not Before: Nov 11 09:01:45 2025 GMT
Not After : Nov 12 09:01:45 2025 GMT
Subject: CN=71cfe99645cae3f3cc1ea20a44c90e5d1acbcf99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:be:94:a2:9e:1c:31:88:84:56:cd:88:6c:2a:
73:b4:cf:ca:b4:f4:14:37:9b:34:4b:87:51:47:dc:
53:89:a4:10:58:ce:3d:76:1f:84:e6:01:20:59:f2:
ee:3a:26:f2:b7:0e:49:4a:49:63:5d:d4:d4:93:f1:
05:0f:a9:5d:6b:92:19:f2:a0:18:b4:c9:50:6b:fb:
c6:6d:49:61:01:3a:cb:10:61:01:24:27:0a:2f:8b:
08:f6:48:3a:48:b2:a5:8c:31:75:3a:76:51:8f:b3:
ca:c8:32:42:1c:60:92:e2:2f:df:a7:37:75:15:c8:
7d:64:94:bd:2d:d5:fa:22:47:5c:ea:8c:e3:a7:03:
4b:9d:74:1a:8d:bf:47:2a:cc:10:84:e8:4c:7f:0e:
4c:7d:e9:ff:64:93:9b:fb:0f:c6:6b:f8:b3:9e:3d:
02:a6:0f:57:ca:09:24:b5:d1:2d:e2:47:32:32:a7:
2f:8a:78:21:64:04:d3:8b:cb:e0:67:c0:6a:35:29:
6b:e6:9a:ac:53:ac:d8:ce:f2:dc:a9:eb:89:a6:e0:
12:a3:ec:f1:5c:a8:d0:6e:7f:4a:2f:94:3e:aa:61:
24:71:21:7c:de:c2:37:4d:34:bc:65:76:c2:2b:f4:
70:fa:e7:11:ee:44:b2:17:06:63:b8:40:dc:e3:92:
15:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:CF:E9:96:45:CA:E3:F3:CC:1E:A2:0A:44:C9:0E:5D:1A:CB:CF:99
X509v3 Authority Key Identifier:
keyid:5D:B7:57:BF:57:46:F2:6A:07:C9:20:87:01:B0:D5:4B:69:BC:33:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XbdXv1dG8moHySCHAbDVS2m8M2Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/2b3387-3b34-457e-ab1c-3ab52b3bcc3b/1/XbdXv1dG8moHySCHAbDVS2m8M2Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/2b3387-3b34-457e-ab1c-3ab52b3bcc3b/1/XbdXv1dG8moHySCHAbDVS2m8M2Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:a0:f6:7d:29:e8:8c:ea:84:0b:50:1f:ca:3e:09:bf:20:f8:
49:83:63:d8:5e:53:f3:7c:3a:c4:92:91:08:24:10:0d:14:5e:
63:fd:2c:12:e0:c0:a3:04:c2:2c:b8:2a:89:7f:c0:c4:98:4a:
29:8d:8b:26:f4:a9:52:9d:b2:67:a7:50:84:68:e3:a9:0e:89:
23:58:73:18:28:9a:94:2f:7e:a8:17:d3:c4:84:fe:af:91:64:
c9:84:52:8f:dd:26:2b:d4:48:ed:47:75:16:10:1b:f9:14:9f:
a2:8f:25:f5:75:94:37:5e:64:f0:74:6c:4f:b6:5f:c0:99:04:
a3:bf:1e:5d:66:ef:0b:06:e4:9a:bf:5e:d3:17:08:58:0a:1a:
1d:3e:40:c7:ed:21:1c:f8:8a:ec:8c:46:1d:83:c3:86:aa:a7:
ac:c2:d1:a7:d7:6d:16:57:eb:e3:0f:bf:f9:e9:c0:d4:1e:09:
f7:8b:93:fd:4f:7e:dc:09:b0:af:ea:ab:25:0d:b2:63:99:6c:
f7:68:bf:31:b5:2e:02:86:d1:91:50:00:fc:15:7c:de:fc:c6:
f9:7e:c7:6b:92:f3:b6:3d:e7:72:c3:cd:60:8d:f1:e9:33:e5:
6f:4a:40:fa:8f:f8:06:1d:e5:10:78:48:4a:a5:7e:81:82:a1:
35:62:a7:e3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpyJlMV/MqHKXSKFU2pMpBOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVkYjc1N2JmNTc0NmYyNmEwN2M5MjA4NzAxYjBkNTRiNjli
YzMzNjQwHhcNMjUxMTExMDkwMTQ1WhcNMjUxMTEyMDkwMTQ1WjAzMTEwLwYDVQQD
Eyg3MWNmZTk5NjQ1Y2FlM2YzY2MxZWEyMGE0NGM5MGU1ZDFhY2JjZjk5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4b6Uop4cMYiEVs2IbCpztM/KtPQU
N5s0S4dRR9xTiaQQWM49dh+E5gEgWfLuOibytw5JSkljXdTUk/EFD6lda5IZ8qAY
tMlQa/vGbUlhATrLEGEBJCcKL4sI9kg6SLKljDF1OnZRj7PKyDJCHGCS4i/fpzd1
Fch9ZJS9LdX6Ikdc6ozjpwNLnXQajb9HKswQhOhMfw5Mfen/ZJOb+w/Ga/iznj0C
pg9XygkktdEt4kcyMqcvinghZATTi8vgZ8BqNSlr5pqsU6zYzvLcqeuJpuASo+zx
XKjQbn9KL5Q+qmEkcSF83sI3TTS8ZXbCK/Rw+ucR7kSyFwZjuEDc45IVkwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHHP6ZZFyuPzzB6iCkTJDl0ay8+ZMB8GA1UdIwQY
MBaAFF23V79XRvJqB8kghwGw1UtpvDNkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWGJkWHYxZEc4bW9IeVNDSEFiRFZTMm04TTJRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS8yYjMzODctM2IzNC00NTdlLWFiMWMt
M2FiNTJiM2JjYzNiLzEvWGJkWHYxZEc4bW9IeVNDSEFiRFZTMm04TTJRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMS8yYjMzODctM2IzNC00NTdlLWFiMWMtM2FiNTJiM2JjYzNi
LzEvWGJkWHYxZEc4bW9IeVNDSEFiRFZTMm04TTJRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiaD2fSno
jOqEC1Afyj4JvyD4SYNj2F5T83w6xJKRCCQQDRReY/0sEuDAowTCLLgqiX/AxJhK
KY2LJvSpUp2yZ6dQhGjjqQ6JI1hzGCialC9+qBfTxIT+r5FkyYRSj90mK9RI7Ud1
FhAb+RSfoo8l9XWUN15k8HRsT7ZfwJkEo78eXWbvCwbkmr9e0xcIWAoaHT5Ax+0h
HPiK7IxGHYPDhqqnrMLRp9dtFlfr4w+/+enA1B4J94uT/U9+3Amwr+qrJQ2yY5ls
92i/MbUuAobRkVAA/BV83vzG+X7Ha5Lztj3ncsPNYI3x6TPlb0pA+o/4Bh3lEHhI
SqV+gYKhNWKn4w==
-----END CERTIFICATE-----
Generated at Tue Nov 11 12:39:12 2025 by rpki-client