Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/53ad5a-0a37-4f65-a6c6-737e78c87012/1/xfFStqDQBGJ9KF2Hmqg-WEYast8.mft
File: xfFStqDQBGJ9KF2Hmqg-WEYast8.mft (raw, json)
Hash identifier: ZXA37+oGDycMoJ/scrHMQd7+qk6UsP20vDZYYP72CRQ=
Subject key identifier: 1A:96:29:8E:42:9F:C6:BB:35:7D:3A:71:EB:31:25:D4:87:20:C3:F9
Authority key identifier: C5:F1:52:B6:A0:D0:04:62:7D:28:5D:87:9A:A8:3E:58:46:1A:B2:DF
Certificate issuer: /CN=c5f152b6a0d004627d285d879aa83e58461ab2df
Certificate serial: 019A4D06F231977AD48B4C243F54E605BC32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xfFStqDQBGJ9KF2Hmqg-WEYast8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/53ad5a-0a37-4f65-a6c6-737e78c87012/1/xfFStqDQBGJ9KF2Hmqg-WEYast8.mft
Manifest number: 132C
Signing time: Tue 04 Nov 2025 04:01:32 +0000
Manifest this update: Tue 04 Nov 2025 04:01:32 +0000
Manifest next update: Wed 05 Nov 2025 04:01:32 +0000
Files and hashes: 1: xfFStqDQBGJ9KF2Hmqg-WEYast8.crl (hash: ol4u05pjGjiZIehEDudjU71ENIlyPD8cbvoSXauIwfQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/53ad5a-0a37-4f65-a6c6-737e78c87012/1/xfFStqDQBGJ9KF2Hmqg-WEYast8.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/53ad5a-0a37-4f65-a6c6-737e78c87012/1/xfFStqDQBGJ9KF2Hmqg-WEYast8.mft
rsync://rpki.ripe.net/repository/DEFAULT/xfFStqDQBGJ9KF2Hmqg-WEYast8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 04:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:06:f2:31:97:7a:d4:8b:4c:24:3f:54:e6:05:bc:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5f152b6a0d004627d285d879aa83e58461ab2df
Validity
Not Before: Nov 4 04:01:32 2025 GMT
Not After : Nov 5 04:01:32 2025 GMT
Subject: CN=1a96298e429fc6bb357d3a71eb3125d48720c3f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:90:2a:47:2d:5c:e7:cc:9c:da:2b:8a:2f:45:
89:08:6f:c1:24:dd:ed:0a:fe:75:65:90:26:45:7c:
5e:c9:94:56:2f:21:8a:f2:61:a5:1b:eb:c5:8b:21:
8a:c0:43:8a:a5:39:c5:12:e5:db:1c:d7:cc:f4:29:
90:de:a9:fc:8b:cc:57:93:df:a3:70:bc:d0:32:46:
9a:5d:4a:e6:b3:c6:1f:bf:df:20:42:d8:a4:8f:ff:
85:53:dd:75:77:65:1a:e1:bc:f9:5e:dd:f6:df:00:
6d:21:a9:3e:5a:5e:c9:5f:31:ac:1d:3d:9e:c9:87:
7e:c0:4b:53:d4:6d:04:8b:4d:fa:ca:c5:0e:c6:0a:
b1:c6:a2:45:02:48:c3:f9:e1:12:3f:8e:4b:9d:db:
25:d1:52:2e:ae:b0:bd:c6:b7:23:2b:3e:c6:6e:a2:
c6:fa:95:d4:b5:4f:3b:b0:fe:bc:b1:82:90:98:e2:
23:4e:b9:50:d2:e0:63:06:52:c0:45:33:1b:77:11:
1b:03:54:b1:4e:1b:d0:cb:98:c4:cf:2b:35:7a:5a:
57:c7:a0:46:6e:15:27:54:b8:98:c3:84:be:c6:88:
ba:9e:27:96:96:15:19:4f:94:55:28:e5:70:5e:67:
01:64:96:96:f4:5a:53:57:fe:49:bb:b6:1d:16:2d:
a3:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:96:29:8E:42:9F:C6:BB:35:7D:3A:71:EB:31:25:D4:87:20:C3:F9
X509v3 Authority Key Identifier:
keyid:C5:F1:52:B6:A0:D0:04:62:7D:28:5D:87:9A:A8:3E:58:46:1A:B2:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xfFStqDQBGJ9KF2Hmqg-WEYast8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/53ad5a-0a37-4f65-a6c6-737e78c87012/1/xfFStqDQBGJ9KF2Hmqg-WEYast8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/53ad5a-0a37-4f65-a6c6-737e78c87012/1/xfFStqDQBGJ9KF2Hmqg-WEYast8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d4:99:b8:95:d1:34:b4:21:e5:e9:ac:d2:13:4c:e0:d2:ca:80:
d3:77:af:bd:94:24:29:2d:ff:4a:68:69:28:2c:98:0f:b0:e2:
42:01:9f:87:91:16:ee:a6:a8:fc:6c:1d:25:85:f6:0f:c5:9e:
2f:a7:79:bf:41:4c:5a:a0:a8:59:13:7d:92:de:08:02:4e:a2:
a9:4a:55:ea:eb:1d:e8:6d:f0:d2:af:eb:d2:b1:08:41:6f:96:
8c:bb:3e:a9:f0:d8:66:9e:80:ff:f5:8b:f9:a7:3b:12:12:d2:
45:98:92:8a:55:d7:cd:e6:f9:58:fa:75:b6:74:91:d7:2e:91:
9a:54:ec:40:72:c6:57:eb:1c:83:60:db:92:27:a7:26:2c:bf:
ea:e4:f0:75:00:24:79:7c:b5:0d:a7:d5:aa:c3:de:9e:c9:ad:
3c:39:21:e6:0e:71:72:ae:02:ea:d8:f4:3c:aa:76:10:c0:96:
25:36:66:7b:9a:10:dc:71:3d:e7:7d:95:f1:d5:0b:32:6d:38:
15:d8:14:8e:10:14:32:4a:6e:4d:c3:7f:99:00:ff:6b:9b:1b:
7b:40:18:b1:ef:c7:7c:81:75:8a:7b:e3:fe:02:f0:33:2c:fb:
78:48:ff:67:1e:56:56:bb:a2:1a:fc:47:20:1a:a2:81:ca:03:
af:b4:8f:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 11:19:53 2025 by rpki-client