Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/fd1fbc-cb90-4827-8ed0-00c3b612e98c/1/Xm0H9Lv9HbNwmWp192soq8TWs-o.mft
File: Xm0H9Lv9HbNwmWp192soq8TWs-o.mft (raw, json)
Hash identifier: Jh+BrXlDyD33hprQ2QELzvcWEJ32Bjmb7amC5jH53TI=
Subject key identifier: 63:E4:4C:DF:48:01:C2:1F:A4:3D:DE:3C:8B:0F:63:E4:B7:CC:99:1F
Authority key identifier: 5E:6D:07:F4:BB:FD:1D:B3:70:99:6A:75:F7:6B:28:AB:C4:D6:B3:EA
Certificate issuer: /CN=5e6d07f4bbfd1db370996a75f76b28abc4d6b3ea
Certificate serial: 019A725C5BAEB0D85DD7EE3313B751A06CE4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xm0H9Lv9HbNwmWp192soq8TWs-o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/fd1fbc-cb90-4827-8ed0-00c3b612e98c/1/Xm0H9Lv9HbNwmWp192soq8TWs-o.mft
Manifest number: 0504
Signing time: Tue 11 Nov 2025 10:00:46 +0000
Manifest this update: Tue 11 Nov 2025 10:00:46 +0000
Manifest next update: Wed 12 Nov 2025 10:00:46 +0000
Files and hashes: 1: Xm0H9Lv9HbNwmWp192soq8TWs-o.crl (hash: 15wmH4MgTwxHnumeMcw1hw0Q/vSNnelcNXYAZcYc6LQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/fd1fbc-cb90-4827-8ed0-00c3b612e98c/1/Xm0H9Lv9HbNwmWp192soq8TWs-o.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/fd1fbc-cb90-4827-8ed0-00c3b612e98c/1/Xm0H9Lv9HbNwmWp192soq8TWs-o.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xm0H9Lv9HbNwmWp192soq8TWs-o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:5b:ae:b0:d8:5d:d7:ee:33:13:b7:51:a0:6c:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e6d07f4bbfd1db370996a75f76b28abc4d6b3ea
Validity
Not Before: Nov 11 10:00:46 2025 GMT
Not After : Nov 12 10:00:46 2025 GMT
Subject: CN=63e44cdf4801c21fa43dde3c8b0f63e4b7cc991f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:5c:1d:d7:82:d0:4f:bc:e8:b8:1f:b5:58:b6:
da:42:90:bc:4c:fd:aa:ee:ed:4f:dc:08:c4:03:66:
be:6f:79:aa:97:37:ff:d1:c1:f7:b5:4d:38:7a:b0:
1d:ce:4f:ff:74:e2:78:15:12:13:43:65:f0:59:9c:
f7:ea:ec:2a:4b:e7:26:0e:ef:0e:77:18:ed:46:8b:
5c:b9:08:22:a5:f6:1e:82:ad:ec:cf:87:4a:7d:f7:
cf:a1:10:68:6f:97:8e:d0:58:49:0b:64:80:77:ea:
eb:8d:ca:2b:93:b0:14:2b:d9:cb:29:a7:45:89:fe:
5f:05:af:99:2f:1f:69:0e:13:e3:7f:c9:b8:f4:77:
ee:47:99:3b:c2:82:8a:9b:91:55:1d:ae:58:1c:46:
3b:0a:ed:8c:78:d0:d7:8d:ad:49:8e:43:66:a3:2f:
03:c9:f9:41:f8:97:fb:ee:e1:cb:56:93:57:e0:2e:
1d:de:d7:36:5d:62:b1:5b:75:f6:8b:b7:15:28:3f:
77:7d:1f:5a:1d:d7:d7:99:59:28:75:a6:30:f9:8f:
28:06:ca:e4:fc:b1:f9:4b:a0:05:56:e7:93:c4:d2:
ae:92:0b:5a:5f:b0:7e:ec:b5:60:7a:d2:e3:99:88:
c5:1e:1a:59:cc:d8:ce:be:b6:ad:e5:e9:46:7d:4d:
b3:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:E4:4C:DF:48:01:C2:1F:A4:3D:DE:3C:8B:0F:63:E4:B7:CC:99:1F
X509v3 Authority Key Identifier:
keyid:5E:6D:07:F4:BB:FD:1D:B3:70:99:6A:75:F7:6B:28:AB:C4:D6:B3:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xm0H9Lv9HbNwmWp192soq8TWs-o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/fd1fbc-cb90-4827-8ed0-00c3b612e98c/1/Xm0H9Lv9HbNwmWp192soq8TWs-o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/fd1fbc-cb90-4827-8ed0-00c3b612e98c/1/Xm0H9Lv9HbNwmWp192soq8TWs-o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:e0:14:52:47:6d:2e:3d:e8:85:d3:c6:8b:68:2b:8d:1e:bd:
9f:40:d5:9d:f1:80:50:1c:47:1f:9f:cb:bf:87:d3:67:f5:a5:
f6:7b:82:67:94:50:f7:49:54:89:3d:4b:29:33:1d:ab:60:d4:
2c:06:49:10:45:16:75:85:80:28:8b:7e:33:da:c0:65:7d:49:
1f:30:3e:37:e5:f3:13:c4:d5:2f:0b:a8:4a:ee:50:2e:bc:8c:
14:5d:77:a2:e4:c5:6d:66:39:6b:2e:44:d1:dc:74:84:1e:de:
05:01:86:df:50:72:42:56:d5:fe:7c:98:37:de:0e:05:8e:db:
cb:a7:96:3c:74:aa:e8:33:f2:e7:75:19:ac:11:56:14:44:30:
39:15:d3:fd:a3:45:f8:5a:6e:f2:a0:8a:64:fc:f5:c1:1b:08:
ad:0d:a0:ce:51:f9:81:f8:fd:b6:1b:4c:62:4e:e5:45:b1:e7:
0d:c8:f4:36:43:4d:a5:6c:98:33:7b:16:c3:69:bb:99:6c:53:
91:38:75:25:02:dc:16:f7:d6:34:7e:f7:f3:4b:9c:e3:6c:f2:
35:05:e5:cb:b4:a4:5b:98:fe:98:6e:de:dd:af:4f:b0:2a:a4:
75:67:3a:ba:56:85:2f:b5:e1:b7:36:fb:55:62:a6:f1:20:20:
a9:a7:e0:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:53:28 2025 by rpki-client