Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/52782a-3de3-4829-8199-44fdcec5d288/1/Xvv25mASb_SQTgmcoK3t6fbOpXA.mft
File: Xvv25mASb_SQTgmcoK3t6fbOpXA.mft (raw, json)
Hash identifier: +r02SE+Mwqi/JEOKK+79CRYKFxbyfrlt0ndwxl+9j8w=
Subject key identifier: 3C:F0:26:A8:38:50:D0:17:80:06:EC:E1:4B:E3:D6:EF:90:9B:57:7E
Authority key identifier: 5E:FB:F6:E6:60:12:6F:F4:90:4E:09:9C:A0:AD:ED:E9:F6:CE:A5:70
Certificate issuer: /CN=5efbf6e660126ff4904e099ca0adede9f6cea570
Certificate serial: 019A7225AE3A9C4E246127591317F1394F64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xvv25mASb_SQTgmcoK3t6fbOpXA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/52782a-3de3-4829-8199-44fdcec5d288/1/Xvv25mASb_SQTgmcoK3t6fbOpXA.mft
Manifest number: 10ED
Signing time: Tue 11 Nov 2025 09:01:03 +0000
Manifest this update: Tue 11 Nov 2025 09:01:03 +0000
Manifest next update: Wed 12 Nov 2025 09:01:03 +0000
Files and hashes: 1: Xvv25mASb_SQTgmcoK3t6fbOpXA.crl (hash: oBWkQbimvs3aY2pc9aHWwMgFmoN9Iz5Xj/hKgiD6bMI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/52782a-3de3-4829-8199-44fdcec5d288/1/Xvv25mASb_SQTgmcoK3t6fbOpXA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/52782a-3de3-4829-8199-44fdcec5d288/1/Xvv25mASb_SQTgmcoK3t6fbOpXA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xvv25mASb_SQTgmcoK3t6fbOpXA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:25:ae:3a:9c:4e:24:61:27:59:13:17:f1:39:4f:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5efbf6e660126ff4904e099ca0adede9f6cea570
Validity
Not Before: Nov 11 09:01:03 2025 GMT
Not After : Nov 12 09:01:03 2025 GMT
Subject: CN=3cf026a83850d0178006ece14be3d6ef909b577e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:b4:4e:0a:af:8f:b9:a0:5d:58:32:e4:aa:ac:
b0:ad:0a:5c:ae:26:fa:03:1e:4b:ae:3e:ee:40:5b:
88:97:ed:db:f6:d7:5e:9d:98:62:9b:61:1f:c6:08:
ae:34:b6:fe:43:c6:cf:e8:3b:bd:90:18:c2:b9:7b:
2d:44:7f:7d:bb:50:70:61:38:06:42:e0:ed:3b:89:
a1:94:5d:9e:9c:fd:a9:7e:6c:e1:aa:8e:4b:ae:30:
08:c6:44:c1:c5:51:52:82:ef:74:d6:9d:f0:39:69:
4b:ac:cd:6a:04:ae:c7:ed:5c:8e:27:2d:2e:fc:dc:
da:9c:aa:da:29:a9:f7:b0:c8:27:4b:10:a4:a8:37:
b5:2d:e2:ce:b6:a0:80:48:4d:21:c7:93:0c:6e:c8:
ad:9f:6d:c0:33:fc:76:8d:53:0a:10:38:65:d0:eb:
d5:04:28:a8:6e:22:81:99:3a:af:ba:2d:50:2b:1e:
a3:46:35:78:92:ee:ed:b6:b6:f4:b8:b0:39:77:0b:
07:3a:14:72:05:31:ce:ac:ef:33:b7:be:ef:c7:fe:
13:11:bd:78:64:32:4e:84:bd:c8:63:3f:08:df:56:
ff:3a:0f:e9:64:0f:88:e0:a7:67:df:3b:ae:13:65:
26:5a:86:be:79:d1:14:45:b7:28:0b:46:58:3d:7f:
c6:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:F0:26:A8:38:50:D0:17:80:06:EC:E1:4B:E3:D6:EF:90:9B:57:7E
X509v3 Authority Key Identifier:
keyid:5E:FB:F6:E6:60:12:6F:F4:90:4E:09:9C:A0:AD:ED:E9:F6:CE:A5:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xvv25mASb_SQTgmcoK3t6fbOpXA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/52782a-3de3-4829-8199-44fdcec5d288/1/Xvv25mASb_SQTgmcoK3t6fbOpXA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/52782a-3de3-4829-8199-44fdcec5d288/1/Xvv25mASb_SQTgmcoK3t6fbOpXA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:40:fa:5a:0a:fd:39:be:ca:cb:a2:94:58:2c:5a:b1:cd:4f:
a0:0b:1b:d3:21:66:92:be:fb:92:68:00:8f:dd:5b:86:ed:b9:
b6:66:af:90:5d:b7:03:6e:d1:19:ed:87:00:88:ce:3e:fc:ef:
07:c6:96:cc:83:06:75:6f:e0:59:0a:1b:61:05:8c:46:1f:d5:
82:f2:f1:db:62:1f:67:b9:09:04:b6:57:e7:a4:e0:4b:63:0d:
f7:d8:6e:33:6f:48:04:ef:4c:2f:1a:db:33:1b:5c:60:71:33:
da:bd:c7:45:55:fb:35:01:a4:2d:87:e4:90:34:df:42:65:4c:
8b:1c:3d:28:6e:fc:01:df:e4:b1:8a:98:3f:d4:af:ca:f3:40:
9f:ba:bb:d0:21:95:16:f2:08:15:ce:5b:8b:fc:5f:7b:9d:35:
55:94:a6:2f:80:59:e9:ac:9d:40:2b:de:ab:fe:16:f1:c0:5e:
b5:99:c7:01:d2:eb:a0:f8:9a:63:69:81:20:c3:76:24:5a:c3:
fa:fe:37:b9:f2:bc:26:b3:7a:83:23:92:8a:11:3c:a4:28:00:
7a:eb:37:e5:1f:79:4d:7f:f2:48:a8:cc:f4:ae:17:3c:70:3c:
f3:b2:3f:d3:db:94:fc:5d:c0:aa:e9:e7:3e:e9:d7:11:83:d1:
8f:84:00:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:31:29 2025 by rpki-client