Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/b71966-307d-440b-b136-648dcccee015/1/XebyWkVRz4ssLvOVlGiNrwqbJWs.mft
File: XebyWkVRz4ssLvOVlGiNrwqbJWs.mft (raw, json)
Hash identifier: q3EotpYJRQiqo+Vw9xrajLtcHxxCdGgRinOT6UraEho=
Subject key identifier: 47:75:5E:5B:CF:63:9D:D3:B6:FA:B9:8A:EA:34:21:7E:70:4F:7C:79
Authority key identifier: 5D:E6:F2:5A:45:51:CF:8B:2C:2E:F3:95:94:68:8D:AF:0A:9B:25:6B
Certificate issuer: /CN=5de6f25a4551cf8b2c2ef39594688daf0a9b256b
Certificate serial: 019A7112BB94CEB680B7B6AED2A21364518C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XebyWkVRz4ssLvOVlGiNrwqbJWs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/b71966-307d-440b-b136-648dcccee015/1/XebyWkVRz4ssLvOVlGiNrwqbJWs.mft
Manifest number: 160E
Signing time: Tue 11 Nov 2025 04:00:44 +0000
Manifest this update: Tue 11 Nov 2025 04:00:44 +0000
Manifest next update: Wed 12 Nov 2025 04:00:44 +0000
Files and hashes: 1: XebyWkVRz4ssLvOVlGiNrwqbJWs.crl (hash: U4pIaS47DIh82Kt3AKpQjZEq/6ryRZouSf+oN+1LwZw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/b71966-307d-440b-b136-648dcccee015/1/XebyWkVRz4ssLvOVlGiNrwqbJWs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/b71966-307d-440b-b136-648dcccee015/1/XebyWkVRz4ssLvOVlGiNrwqbJWs.mft
rsync://rpki.ripe.net/repository/DEFAULT/XebyWkVRz4ssLvOVlGiNrwqbJWs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:12:bb:94:ce:b6:80:b7:b6:ae:d2:a2:13:64:51:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5de6f25a4551cf8b2c2ef39594688daf0a9b256b
Validity
Not Before: Nov 11 04:00:44 2025 GMT
Not After : Nov 12 04:00:44 2025 GMT
Subject: CN=47755e5bcf639dd3b6fab98aea34217e704f7c79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:d1:c2:ed:d4:31:56:26:1e:73:e8:f5:16:7d:
6b:b4:91:da:57:fd:3a:aa:d1:4b:37:21:ae:7d:3a:
f2:42:1a:f5:b6:b9:95:95:78:bb:4a:6b:ee:e1:c8:
5f:73:b7:53:9e:04:65:b2:93:bd:68:54:2a:1f:b4:
df:70:3d:9e:a5:28:1e:1a:86:dc:fa:46:93:b8:ad:
24:e9:38:90:7e:b8:86:b0:89:2f:1a:68:cf:4c:53:
5e:a7:9f:eb:b0:3e:f0:eb:de:6a:85:7c:66:a7:6f:
a5:4e:69:10:ea:da:71:c2:97:d1:3c:57:3b:d7:97:
92:64:da:aa:d1:41:0c:21:6c:ce:74:e7:30:88:7a:
5e:93:17:9d:2c:b9:ab:3e:29:28:06:9c:cf:eb:ef:
f3:99:ae:aa:03:00:54:5f:ee:f7:2b:80:c1:43:6b:
36:58:d2:e1:03:46:fe:10:2d:de:c9:97:26:17:68:
e2:b6:c0:11:1a:8f:8d:f3:56:70:3d:78:51:02:44:
a4:1a:d5:fc:ec:be:4c:2e:63:75:13:cf:f3:55:f6:
fa:b3:ff:a8:33:21:b9:51:7a:45:35:dc:37:91:59:
72:2f:a6:67:24:f3:80:4e:47:3c:ea:0d:e8:fd:ff:
9b:04:09:17:18:43:30:eb:c7:24:dc:de:56:9a:77:
d1:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:75:5E:5B:CF:63:9D:D3:B6:FA:B9:8A:EA:34:21:7E:70:4F:7C:79
X509v3 Authority Key Identifier:
keyid:5D:E6:F2:5A:45:51:CF:8B:2C:2E:F3:95:94:68:8D:AF:0A:9B:25:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XebyWkVRz4ssLvOVlGiNrwqbJWs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/b71966-307d-440b-b136-648dcccee015/1/XebyWkVRz4ssLvOVlGiNrwqbJWs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/b71966-307d-440b-b136-648dcccee015/1/XebyWkVRz4ssLvOVlGiNrwqbJWs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:f4:67:d6:2f:6d:be:c5:f7:c0:9b:6b:42:04:01:97:f7:dc:
40:b4:cb:be:94:9b:90:56:bf:0e:cc:e3:f3:7a:a5:3c:a8:08:
90:bb:b8:be:a0:19:03:c2:d8:43:43:26:21:39:63:e3:1d:a2:
1a:96:bf:78:a6:6d:30:49:ad:71:3c:12:21:53:ab:d1:1d:23:
a8:6c:08:f8:27:cd:a4:15:a7:65:2e:77:06:48:e3:37:52:29:
c7:7f:4e:13:ce:0d:f6:66:3d:2c:03:8a:c8:55:2e:df:26:8b:
48:53:1f:00:af:fa:f5:3f:73:9f:ee:ac:7e:84:16:8e:61:b4:
ae:bd:ed:93:34:5c:38:55:ca:66:13:24:1d:f7:a1:e7:98:75:
bb:25:78:5e:0b:c1:a2:6e:5f:d1:25:02:9a:d3:00:98:6e:2e:
f9:cc:32:6d:eb:97:fd:a6:33:d0:cf:45:8b:f3:68:48:fc:46:
82:ad:4c:85:1c:1c:2c:66:b8:79:6a:11:0e:f0:8f:b6:19:08:
52:ed:99:ca:c1:47:2e:31:cb:eb:3c:a9:a5:b5:6e:af:8f:f0:
e8:65:f4:ca:9c:ac:a9:37:cf:c1:f6:68:71:3d:42:c5:f4:9d:
9e:05:aa:47:8b:0f:4a:e1:87:39:32:b6:da:67:09:82:0c:e8:
12:b7:59:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:33:12 2025 by rpki-client