Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/b2f893-911d-40c0-8ac2-fd3ff35f34a9/1/XuTrnvjdNYniMt-P6HbyXOlwehQ.mft
File: XuTrnvjdNYniMt-P6HbyXOlwehQ.mft (raw, json)
Hash identifier: uT4QZm//SzwT9dz0wednhgjETmoc0iAx6MqJRGimNZs=
Subject key identifier: CE:BC:2A:82:45:CD:60:1D:23:02:E5:75:C9:63:0C:47:6D:B6:88:A2
Authority key identifier: 5E:E4:EB:9E:F8:DD:35:89:E2:32:DF:8F:E8:76:F2:5C:E9:70:7A:14
Certificate issuer: /CN=5ee4eb9ef8dd3589e232df8fe876f25ce9707a14
Certificate serial: 019A7301C28F07CC62EDEEF493742818B9BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XuTrnvjdNYniMt-P6HbyXOlwehQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/b2f893-911d-40c0-8ac2-fd3ff35f34a9/1/XuTrnvjdNYniMt-P6HbyXOlwehQ.mft
Manifest number: 111A
Signing time: Tue 11 Nov 2025 13:01:26 +0000
Manifest this update: Tue 11 Nov 2025 13:01:26 +0000
Manifest next update: Wed 12 Nov 2025 13:01:26 +0000
Files and hashes: 1: XuTrnvjdNYniMt-P6HbyXOlwehQ.crl (hash: sNhb9coKkOwBpvHchIsgPou3UlBwpM755SWny4DnQD0=)
2: x05WrfG2zADa49P9m0Z4GCWBqnw.roa (hash: nYf6KTW49tj0mn1iQA6LN+Q+EJ2CseYMPtRfxDW4vn8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/b2f893-911d-40c0-8ac2-fd3ff35f34a9/1/XuTrnvjdNYniMt-P6HbyXOlwehQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/b2f893-911d-40c0-8ac2-fd3ff35f34a9/1/XuTrnvjdNYniMt-P6HbyXOlwehQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/XuTrnvjdNYniMt-P6HbyXOlwehQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:73:01:c2:8f:07:cc:62:ed:ee:f4:93:74:28:18:b9:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ee4eb9ef8dd3589e232df8fe876f25ce9707a14
Validity
Not Before: Nov 11 13:01:26 2025 GMT
Not After : Nov 12 13:01:26 2025 GMT
Subject: CN=cebc2a8245cd601d2302e575c9630c476db688a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:42:4e:47:0c:c4:0f:6a:3a:61:73:f8:cb:6e:
34:8a:48:78:e2:c9:4c:f4:42:9e:7d:3d:18:55:8f:
09:e6:31:e1:ef:44:e2:86:b9:08:54:8e:9e:b0:28:
be:c7:70:5a:8a:1d:85:93:c3:ae:35:6c:8d:75:ce:
e9:fc:0b:b4:fe:6f:1e:82:bd:db:20:c7:73:6f:64:
ae:17:17:18:7f:aa:78:58:cd:49:c1:39:a6:a9:27:
5d:61:d6:86:e8:ed:d2:63:29:f3:25:c1:06:f8:43:
21:2e:09:40:40:50:4c:a6:bf:f7:d6:a0:23:8a:93:
55:ce:1f:d1:d9:aa:14:74:7a:e9:27:62:98:21:70:
e8:0f:a2:c0:58:19:1c:19:01:ed:8c:0c:0f:3e:20:
b2:5e:85:87:92:34:63:a6:80:79:6c:4c:02:87:25:
14:98:0c:b4:9c:db:39:e8:fd:e4:fb:23:a7:89:d5:
f4:b2:95:1e:2e:c5:34:8d:b9:76:2d:51:ad:00:ac:
66:7b:14:96:46:f0:83:7b:07:32:cc:6e:ee:19:96:
9a:20:3e:d5:6b:23:a2:ac:5c:c1:aa:5b:16:ce:79:
c9:60:0f:14:fb:1e:3c:e5:5b:f9:b1:96:c1:93:f3:
7d:68:f4:9d:6c:d0:3b:47:57:c5:d1:9d:2e:f5:ff:
a9:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:BC:2A:82:45:CD:60:1D:23:02:E5:75:C9:63:0C:47:6D:B6:88:A2
X509v3 Authority Key Identifier:
keyid:5E:E4:EB:9E:F8:DD:35:89:E2:32:DF:8F:E8:76:F2:5C:E9:70:7A:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XuTrnvjdNYniMt-P6HbyXOlwehQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/b2f893-911d-40c0-8ac2-fd3ff35f34a9/1/XuTrnvjdNYniMt-P6HbyXOlwehQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/b2f893-911d-40c0-8ac2-fd3ff35f34a9/1/XuTrnvjdNYniMt-P6HbyXOlwehQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:7b:fe:34:04:1a:17:57:78:3b:59:f8:ff:3d:7f:67:3e:2a:
71:30:4d:96:49:e9:d5:4e:63:d3:f6:45:ad:18:72:df:5e:f6:
cc:6e:89:af:19:0e:48:9f:d0:2e:62:b1:37:11:84:a4:61:1d:
fb:64:79:76:dd:ae:24:ab:46:eb:89:a5:82:72:99:6d:60:b8:
53:ec:82:01:41:a9:0f:4c:7d:98:d8:91:38:ee:3e:51:5d:db:
7d:02:84:13:2d:05:33:77:17:6f:ca:94:ab:0a:91:d9:b5:10:
e1:0f:dd:29:cc:2c:c2:c6:0d:f7:30:21:a3:16:62:04:40:62:
12:d9:ef:29:84:78:dd:4b:48:1f:d7:db:7e:02:2f:57:c0:ba:
b2:e6:ff:80:ed:55:8c:2b:b4:8b:52:71:3e:5b:67:90:42:43:
7d:57:1b:b0:ae:a7:83:69:62:1f:f5:22:5b:29:7b:92:1b:d9:
fc:0a:d7:24:9d:f8:4d:90:6c:ae:94:1e:51:50:61:a4:22:60:
5f:34:a3:3d:cc:77:0c:f6:31:e0:bd:bc:e2:fc:99:fc:c6:d9:
45:ea:b3:b6:72:dc:f3:1f:ee:c0:d9:23:a1:45:7d:a9:e6:74:
eb:94:d4:8a:33:3d:b6:03:6b:ab:11:b5:29:5b:e6:ca:cc:0b:
20:50:b3:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:20:32 2025 by rpki-client