Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/6524f6-5320-4686-a5c3-72e1fc4a306e/1/XlTVGjJHsX9vlqDM4lMBktyfdCI.mft
File: XlTVGjJHsX9vlqDM4lMBktyfdCI.mft (raw, json)
Hash identifier: QOLi8LD//3Y0Pgfk3dujH7SROkZet9XlA+XSCLXM6JE=
Subject key identifier: F4:52:D0:53:53:A3:C3:EA:60:79:7B:6D:6D:1E:2D:1C:45:EC:41:57
Authority key identifier: 5E:54:D5:1A:32:47:B1:7F:6F:96:A0:CC:E2:53:01:92:DC:9F:74:22
Certificate issuer: /CN=5e54d51a3247b17f6f96a0cce2530192dc9f7422
Certificate serial: 019A7225BFDF00F63B72445C0ADE9F671DCC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XlTVGjJHsX9vlqDM4lMBktyfdCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/6524f6-5320-4686-a5c3-72e1fc4a306e/1/XlTVGjJHsX9vlqDM4lMBktyfdCI.mft
Manifest number: 06F0
Signing time: Tue 11 Nov 2025 09:01:07 +0000
Manifest this update: Tue 11 Nov 2025 09:01:07 +0000
Manifest next update: Wed 12 Nov 2025 09:01:07 +0000
Files and hashes: 1: XlTVGjJHsX9vlqDM4lMBktyfdCI.crl (hash: NjbocOuNxw7yn+wgpeOxzsuq0USosHWW9Q75li58zvE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/6524f6-5320-4686-a5c3-72e1fc4a306e/1/XlTVGjJHsX9vlqDM4lMBktyfdCI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/6524f6-5320-4686-a5c3-72e1fc4a306e/1/XlTVGjJHsX9vlqDM4lMBktyfdCI.mft
rsync://rpki.ripe.net/repository/DEFAULT/XlTVGjJHsX9vlqDM4lMBktyfdCI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:25:bf:df:00:f6:3b:72:44:5c:0a:de:9f:67:1d:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e54d51a3247b17f6f96a0cce2530192dc9f7422
Validity
Not Before: Nov 11 09:01:07 2025 GMT
Not After : Nov 12 09:01:07 2025 GMT
Subject: CN=f452d05353a3c3ea60797b6d6d1e2d1c45ec4157
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:8b:70:29:68:ec:9b:e4:a9:0a:4f:76:44:ad:
59:6c:9d:9f:a5:12:0d:17:65:c5:fe:c1:94:34:01:
a8:1b:28:23:40:8e:c6:fb:0a:41:d8:a7:bc:a3:44:
2d:0f:ee:52:5e:03:6c:e9:2d:42:99:ec:09:95:c1:
b4:e9:82:d1:b5:ed:27:7f:02:15:1c:ae:cd:1c:46:
b0:1b:a5:8d:d7:44:31:a8:17:3b:7e:6f:d8:3d:63:
4b:84:35:e8:63:58:4d:4b:06:87:5f:a8:f1:45:1d:
2f:82:d0:07:c0:ff:1f:c7:a6:25:cc:64:76:09:ad:
77:e6:d1:31:b8:35:00:ad:09:57:75:4c:9a:cf:08:
9d:d4:e7:71:7d:26:ac:21:16:1e:54:25:7a:87:6f:
58:fc:98:e5:42:12:a9:89:d0:74:3f:cb:e6:4a:af:
62:c3:2b:ea:42:6b:1e:1a:51:50:d4:e5:0e:f5:4c:
d5:e4:8f:fe:aa:03:87:a7:c5:ca:ab:94:2b:a3:ff:
6a:db:73:b5:1e:77:09:65:0f:df:0a:ad:96:0b:89:
32:a6:c9:c3:5f:ba:11:62:38:3f:49:58:37:8a:43:
ff:5f:f7:c7:7a:86:fe:ec:7d:c1:72:8c:e2:37:91:
e8:87:5f:d2:ed:a9:f7:2b:24:a7:72:85:ae:18:68:
3f:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:52:D0:53:53:A3:C3:EA:60:79:7B:6D:6D:1E:2D:1C:45:EC:41:57
X509v3 Authority Key Identifier:
keyid:5E:54:D5:1A:32:47:B1:7F:6F:96:A0:CC:E2:53:01:92:DC:9F:74:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XlTVGjJHsX9vlqDM4lMBktyfdCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/6524f6-5320-4686-a5c3-72e1fc4a306e/1/XlTVGjJHsX9vlqDM4lMBktyfdCI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/6524f6-5320-4686-a5c3-72e1fc4a306e/1/XlTVGjJHsX9vlqDM4lMBktyfdCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:35:a4:5c:fd:87:32:d5:f2:51:b5:42:c5:71:0d:ac:8c:2c:
60:5f:67:34:7f:bf:c6:fd:91:8f:84:86:4a:77:1d:5b:d3:3f:
7e:d9:60:28:bb:53:9d:08:55:0c:a1:e5:32:3c:24:08:39:a4:
e6:fe:0b:7d:b6:21:a8:da:48:34:c9:5d:47:92:f4:17:57:cf:
8d:14:84:71:63:6c:4e:11:fc:a3:00:53:75:57:da:e9:ed:35:
09:8e:85:82:42:86:1a:46:bd:e3:ba:0c:b6:cf:e6:20:ea:df:
ac:cb:bf:0c:d3:d9:0e:86:ae:f1:44:45:12:f9:43:ae:e3:8b:
eb:d8:1b:2b:1c:d7:63:91:89:b4:d2:94:a2:73:a3:2e:09:05:
a7:4f:6b:9e:9e:09:30:fa:11:f2:39:fb:a4:61:76:a4:7c:b5:
26:18:32:8a:8f:a8:16:93:b8:7e:84:d1:00:78:f4:26:ca:f7:
e1:88:62:3c:6c:d7:0e:a9:fe:2d:1d:04:2c:49:0c:a6:03:0e:
39:c9:28:3d:27:0c:c6:fa:8b:d6:6e:ff:c5:cc:eb:e8:8b:bf:
aa:4f:f2:b5:3d:7e:d9:02:94:82:3e:4e:db:93:28:aa:ac:11:
b1:ef:8e:a2:e1:fa:57:82:91:b2:1d:e0:18:4f:6c:a7:6f:f3:
17:3c:e5:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:20:03 2025 by rpki-client