Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/52740e-5cb0-4814-a21a-a0967a435a6a/1/XbeSdWWd2WHHQr8h2NyhhKRDDYU.mft
File: XbeSdWWd2WHHQr8h2NyhhKRDDYU.mft (raw, json)
Hash identifier: tLMmIWezSBEKyc87jB1pdCAWKIQ0BnyYPWOSGsDSSlM=
Subject key identifier: 2A:24:C1:3F:99:CF:5A:AB:21:BF:DF:66:C9:76:CC:36:E6:FB:B5:24
Authority key identifier: 5D:B7:92:75:65:9D:D9:61:C7:42:BF:21:D8:DC:A1:84:A4:43:0D:85
Certificate issuer: /CN=5db79275659dd961c742bf21d8dca184a4430d85
Certificate serial: 019A71B838CFB5910E403BDAE191C8A3C233
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XbeSdWWd2WHHQr8h2NyhhKRDDYU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/52740e-5cb0-4814-a21a-a0967a435a6a/1/XbeSdWWd2WHHQr8h2NyhhKRDDYU.mft
Manifest number: 0D9B
Signing time: Tue 11 Nov 2025 07:01:29 +0000
Manifest this update: Tue 11 Nov 2025 07:01:29 +0000
Manifest next update: Wed 12 Nov 2025 07:01:29 +0000
Files and hashes: 1: XbeSdWWd2WHHQr8h2NyhhKRDDYU.crl (hash: +MDSjWa4X8cChv8aFjm9mgRIgTq7bcyqOhLP7fFnJHc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/52740e-5cb0-4814-a21a-a0967a435a6a/1/XbeSdWWd2WHHQr8h2NyhhKRDDYU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/52740e-5cb0-4814-a21a-a0967a435a6a/1/XbeSdWWd2WHHQr8h2NyhhKRDDYU.mft
rsync://rpki.ripe.net/repository/DEFAULT/XbeSdWWd2WHHQr8h2NyhhKRDDYU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:38:cf:b5:91:0e:40:3b:da:e1:91:c8:a3:c2:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5db79275659dd961c742bf21d8dca184a4430d85
Validity
Not Before: Nov 11 07:01:29 2025 GMT
Not After : Nov 12 07:01:29 2025 GMT
Subject: CN=2a24c13f99cf5aab21bfdf66c976cc36e6fbb524
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:38:27:8c:ea:75:e6:24:b9:05:2b:6c:79:64:
dd:34:0b:d0:e7:ce:ab:2c:f6:98:c5:ae:60:94:04:
5c:25:9a:0a:20:6f:79:95:5d:ad:be:8d:b5:58:de:
0a:d6:3f:1a:e9:8f:62:46:70:3b:b5:7d:5e:1d:e5:
34:38:09:25:40:eb:28:c8:1c:99:86:1d:74:25:a8:
6c:9b:40:36:e2:3b:16:12:c3:ac:5c:76:e8:18:1a:
a0:97:64:ca:0c:5a:1b:cb:67:e6:d4:e0:4a:ec:8e:
51:55:97:ba:2b:f6:45:74:96:9a:61:e0:a6:f2:20:
bc:da:cf:ed:35:a8:f6:b5:7d:fe:47:9d:80:d7:0b:
c5:51:63:fe:b9:c3:ca:78:5c:76:cf:e4:50:5e:93:
19:a9:db:8b:0a:78:31:23:52:a5:b2:e6:ad:de:ff:
0c:a4:9a:c5:d7:81:48:cc:47:46:17:38:80:7b:8f:
ef:c9:a6:e2:49:23:d0:a6:a2:3a:f7:02:25:2f:b5:
28:14:d5:fb:43:83:dc:d2:c8:f2:f2:f9:7f:cf:f9:
c4:cf:17:63:1e:9b:45:2c:8d:a9:4a:7a:ad:22:13:
19:49:4b:4c:30:d8:44:22:df:2d:09:1e:02:ef:72:
82:16:dc:ea:eb:f3:c2:59:f2:72:0b:92:af:cf:e2:
4c:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:24:C1:3F:99:CF:5A:AB:21:BF:DF:66:C9:76:CC:36:E6:FB:B5:24
X509v3 Authority Key Identifier:
keyid:5D:B7:92:75:65:9D:D9:61:C7:42:BF:21:D8:DC:A1:84:A4:43:0D:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XbeSdWWd2WHHQr8h2NyhhKRDDYU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/52740e-5cb0-4814-a21a-a0967a435a6a/1/XbeSdWWd2WHHQr8h2NyhhKRDDYU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/52740e-5cb0-4814-a21a-a0967a435a6a/1/XbeSdWWd2WHHQr8h2NyhhKRDDYU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:67:4c:18:66:50:4d:de:ae:6f:27:5a:91:c0:d3:a7:50:a9:
47:a3:09:21:aa:de:a9:57:44:8f:b4:1a:46:49:bb:bb:0f:50:
19:2f:3f:bd:d5:7b:ca:a7:45:17:5d:bb:8f:fc:63:63:38:31:
10:8a:82:dd:00:b9:b0:a3:ae:df:27:7b:76:07:b3:33:40:05:
92:be:52:56:65:6d:a2:8e:bc:0d:e7:16:7d:1e:39:6e:45:b9:
61:e9:9f:95:84:da:71:ce:44:92:c8:25:81:0c:51:c2:91:fc:
99:69:10:bb:a4:8c:fd:f5:d0:42:2d:e4:45:f8:41:4a:8e:ee:
5a:9c:6c:d0:51:64:a1:9f:1c:38:a5:28:48:d2:1a:58:ac:f8:
07:29:5e:28:07:e0:6b:fa:b6:9b:32:b4:0d:e3:77:1c:d4:b0:
10:b2:62:a2:ac:79:44:55:4f:9b:d1:cb:8c:3a:50:01:e9:4f:
6b:aa:2b:a5:6c:69:95:4e:ce:f3:a2:c0:a1:ba:45:b7:a1:db:
03:2e:85:a6:ad:7d:15:01:18:86:df:a7:76:57:d3:4f:25:70:
38:4c:4a:33:fc:eb:d8:e3:10:71:3f:51:43:af:11:2f:ed:a1:
99:b9:fd:21:6a:a5:c8:37:e9:5b:66:80:1f:e1:52:5f:56:c2:
96:2f:9b:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:38:46 2025 by rpki-client