
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/85fc11-e23a-4942-b0de-22f8d4a027ae/1/Xl5k_r-lZnT03hZCn13eSdnOk2g.mft
File: Xl5k_r-lZnT03hZCn13eSdnOk2g.mft (raw, json)
Hash identifier: bSgkFwEf3bksbEAt15B0KXR/MHy6iJurVvcOiZ85WzE=
Subject key identifier: EA:11:78:1A:1F:3F:70:70:05:19:76:83:F1:83:5F:62:21:0A:BF:9F
Authority key identifier: 5E:5E:64:FE:BF:A5:66:74:F4:DE:16:42:9F:5D:DE:49:D9:CE:93:68
Certificate issuer: /CN=5e5e64febfa56674f4de16429f5dde49d9ce9368
Certificate serial: 0198733D689D7FDC71BF6838973C7E682062
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xl5k_r-lZnT03hZCn13eSdnOk2g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/85fc11-e23a-4942-b0de-22f8d4a027ae/1/Xl5k_r-lZnT03hZCn13eSdnOk2g.mft
Manifest number: 12A8
Signing time: Mon 04 Aug 2025 04:01:00 +0000
Manifest this update: Mon 04 Aug 2025 04:01:00 +0000
Manifest next update: Tue 05 Aug 2025 04:01:00 +0000
Files and hashes: 1: Xl5k_r-lZnT03hZCn13eSdnOk2g.crl (hash: NTRAm6T0MtNutw33q5uvQ3LATVRRa+i5Zn+Ug6+6wLU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/85fc11-e23a-4942-b0de-22f8d4a027ae/1/Xl5k_r-lZnT03hZCn13eSdnOk2g.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/85fc11-e23a-4942-b0de-22f8d4a027ae/1/Xl5k_r-lZnT03hZCn13eSdnOk2g.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xl5k_r-lZnT03hZCn13eSdnOk2g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:3d:68:9d:7f:dc:71:bf:68:38:97:3c:7e:68:20:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e5e64febfa56674f4de16429f5dde49d9ce9368
Validity
Not Before: Aug 4 04:01:00 2025 GMT
Not After : Aug 5 04:01:00 2025 GMT
Subject: CN=ea11781a1f3f707005197683f1835f62210abf9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:bb:22:f9:51:ff:d9:51:8b:fe:a5:ec:bd:38:
1d:26:95:4c:73:98:10:d0:6f:08:24:b4:44:d4:6e:
6e:98:e4:2c:b6:cb:5f:75:7f:6e:21:a8:52:a5:03:
18:43:1a:04:44:24:41:21:f6:b5:8d:44:b2:ea:8c:
89:6f:a7:86:da:85:56:f7:6c:27:09:e0:23:78:9f:
72:0b:d1:8f:01:7c:75:9f:22:c7:96:18:85:de:a3:
a7:bb:d7:49:66:27:33:61:38:e4:44:15:31:2a:d2:
42:5d:15:1e:db:65:db:23:d2:80:53:fb:ce:94:af:
dd:68:90:81:45:22:35:46:54:49:77:3c:68:ea:96:
8c:15:a6:2b:70:75:2f:b4:93:af:29:d3:24:4c:54:
60:95:e8:72:dd:05:d6:bd:e4:60:16:4e:40:02:06:
bc:d9:1a:ca:fb:55:cd:75:56:16:74:df:d2:4f:99:
e5:1b:ed:d1:98:91:3f:c2:74:67:75:25:fc:21:b9:
9d:de:92:2a:b3:ff:2c:f4:87:a5:56:0c:53:55:3a:
8b:7f:47:06:08:8f:0b:00:ce:20:3c:5a:e3:86:d2:
e3:5e:42:74:78:f3:11:82:e5:44:b9:c8:48:73:c2:
ad:53:69:62:9e:d0:93:16:6e:ad:6f:80:7c:d5:c6:
c2:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:11:78:1A:1F:3F:70:70:05:19:76:83:F1:83:5F:62:21:0A:BF:9F
X509v3 Authority Key Identifier:
keyid:5E:5E:64:FE:BF:A5:66:74:F4:DE:16:42:9F:5D:DE:49:D9:CE:93:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xl5k_r-lZnT03hZCn13eSdnOk2g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/85fc11-e23a-4942-b0de-22f8d4a027ae/1/Xl5k_r-lZnT03hZCn13eSdnOk2g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/85fc11-e23a-4942-b0de-22f8d4a027ae/1/Xl5k_r-lZnT03hZCn13eSdnOk2g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:47:ca:08:c8:88:b9:10:f7:ff:b0:6a:70:16:6e:01:d4:d9:
ea:c4:76:91:b9:5c:a8:2a:be:d5:16:f0:0c:e4:22:af:6e:a8:
64:c6:44:f7:2f:1b:02:0c:f1:7e:1d:29:6a:ae:e5:4b:b1:d6:
a1:db:16:82:bd:82:e1:bb:fb:59:d4:d5:ee:cf:ca:e4:57:85:
0d:11:e2:17:e6:a4:31:9a:b0:21:ec:32:23:e9:61:5e:6e:86:
b1:fe:1b:05:2b:2d:1a:22:70:b5:0f:c3:34:7c:12:58:32:ff:
37:ae:fc:ff:1a:37:e5:22:05:e8:5a:47:71:58:25:17:94:1a:
50:82:34:a8:5a:ef:f8:39:cd:97:c6:a8:65:24:33:59:06:d4:
79:a0:ab:fe:b7:a3:7f:17:40:ed:ef:0f:e2:1d:59:b6:30:ea:
30:c6:dc:95:8c:26:b5:6e:57:2d:f2:0e:51:2a:cc:dc:95:83:
58:b9:09:46:aa:5e:66:a7:13:53:a0:87:28:e8:30:e4:a1:ad:
d5:7f:cb:fb:e6:1c:c3:b0:17:fe:39:bf:ae:aa:b8:99:51:34:
a6:f6:cc:fc:27:0d:8a:96:c7:0a:c3:48:e3:56:11:24:d2:d2:
30:f7:41:b2:17:2b:2e:76:f1:02:da:cb:c1:b8:30:7d:1a:cd:
a3:50:51:d1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhzPWidf9xxv2g4lzx+aCBiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVlNWU2NGZlYmZhNTY2NzRmNGRlMTY0MjlmNWRkZTQ5ZDlj
ZTkzNjgwHhcNMjUwODA0MDQwMTAwWhcNMjUwODA1MDQwMTAwWjAzMTEwLwYDVQQD
EyhlYTExNzgxYTFmM2Y3MDcwMDUxOTc2ODNmMTgzNWY2MjIxMGFiZjlmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtrsi+VH/2VGL/qXsvTgdJpVMc5gQ
0G8IJLRE1G5umOQststfdX9uIahSpQMYQxoERCRBIfa1jUSy6oyJb6eG2oVW92wn
CeAjeJ9yC9GPAXx1nyLHlhiF3qOnu9dJZiczYTjkRBUxKtJCXRUe22XbI9KAU/vO
lK/daJCBRSI1RlRJdzxo6paMFaYrcHUvtJOvKdMkTFRglehy3QXWveRgFk5AAga8
2RrK+1XNdVYWdN/ST5nlG+3RmJE/wnRndSX8Ibmd3pIqs/8s9IelVgxTVTqLf0cG
CI8LAM4gPFrjhtLjXkJ0ePMRguVEuchIc8KtU2lintCTFm6tb4B81cbCYQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOoReBofP3BwBRl2g/GDX2IhCr+fMB8GA1UdIwQY
MBaAFF5eZP6/pWZ09N4WQp9d3knZzpNoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWGw1a19yLWxablQwM2haQ24xM2VTZG5PazJnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC84NWZjMTEtZTIzYS00OTQyLWIwZGUt
MjJmOGQ0YTAyN2FlLzEvWGw1a19yLWxablQwM2haQ24xM2VTZG5PazJnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC84NWZjMTEtZTIzYS00OTQyLWIwZGUtMjJmOGQ0YTAyN2Fl
LzEvWGw1a19yLWxablQwM2haQ24xM2VTZG5PazJnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUUfKCMiI
uRD3/7BqcBZuAdTZ6sR2kblcqCq+1RbwDOQir26oZMZE9y8bAgzxfh0paq7lS7HW
odsWgr2C4bv7WdTV7s/K5FeFDRHiF+akMZqwIewyI+lhXm6Gsf4bBSstGiJwtQ/D
NHwSWDL/N678/xo35SIF6FpHcVglF5QaUII0qFrv+DnNl8aoZSQzWQbUeaCr/rej
fxdA7e8P4h1ZtjDqMMbclYwmtW5XLfIOUSrM3JWDWLkJRqpeZqcTU6CHKOgw5KGt
1X/L++Ycw7AX/jm/rqq4mVE0pvbM/CcNipbHCsNI41YRJNLSMPdBshcrLnbxAtrL
wbgwfRrNo1BR0Q==
-----END CERTIFICATE-----
Generated at Mon Aug 4 11:05:48 2025 by rpki-client