Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/02b115-fc5e-4bac-b0ad-1366d4ef7f3b/1/xSe66XlBtg89zTqgfixf2d0DpsE.mft
File: xSe66XlBtg89zTqgfixf2d0DpsE.mft (raw, json)
Hash identifier: O88PCbUzQvNzq3OgbtvyhYaIWMRyE4GYvP8sU7k4Ak4=
Subject key identifier: C5:F4:9C:16:86:4B:BF:7D:96:4A:07:21:D7:82:6B:CB:65:5A:78:E0
Authority key identifier: C5:27:BA:E9:79:41:B6:0F:3D:CD:3A:A0:7E:2C:5F:D9:DD:03:A6:C1
Certificate issuer: /CN=c527bae97941b60f3dcd3aa07e2c5fd9dd03a6c1
Certificate serial: 019A4DAB0D69BE2D901D8BE0F12EBDE1D57D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xSe66XlBtg89zTqgfixf2d0DpsE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/02b115-fc5e-4bac-b0ad-1366d4ef7f3b/1/xSe66XlBtg89zTqgfixf2d0DpsE.mft
Manifest number: 0D4D
Signing time: Tue 04 Nov 2025 07:00:46 +0000
Manifest this update: Tue 04 Nov 2025 07:00:46 +0000
Manifest next update: Wed 05 Nov 2025 07:00:46 +0000
Files and hashes: 1: xSe66XlBtg89zTqgfixf2d0DpsE.crl (hash: JVgPaH8IhruMiyN3C3hQmMCCQnM3Suq5GWuViqL+r4E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/02b115-fc5e-4bac-b0ad-1366d4ef7f3b/1/xSe66XlBtg89zTqgfixf2d0DpsE.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/02b115-fc5e-4bac-b0ad-1366d4ef7f3b/1/xSe66XlBtg89zTqgfixf2d0DpsE.mft
rsync://rpki.ripe.net/repository/DEFAULT/xSe66XlBtg89zTqgfixf2d0DpsE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 07:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:ab:0d:69:be:2d:90:1d:8b:e0:f1:2e:bd:e1:d5:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c527bae97941b60f3dcd3aa07e2c5fd9dd03a6c1
Validity
Not Before: Nov 4 07:00:46 2025 GMT
Not After : Nov 5 07:00:46 2025 GMT
Subject: CN=c5f49c16864bbf7d964a0721d7826bcb655a78e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:a2:bc:4c:e3:75:3e:d6:04:8e:1f:5e:08:e7:
16:c9:e6:80:e1:6d:da:a1:78:51:06:8c:11:98:5b:
3c:5b:4a:fd:08:96:79:70:b9:58:0a:c5:c3:c2:e1:
3e:84:ed:38:74:a2:97:a1:e4:17:87:28:8e:09:22:
6c:f7:5d:32:e1:9e:52:68:1a:25:f6:92:c8:d3:6e:
81:8c:4b:8b:49:cd:c4:a8:7a:ec:37:9d:eb:1d:fb:
c3:28:88:9a:5a:a9:bd:10:8a:6d:55:39:21:36:a1:
02:2f:6a:13:dd:cf:1e:f4:1d:44:65:fa:32:24:26:
53:fc:6a:19:47:6f:cf:bc:8d:62:e9:fd:40:16:af:
4c:5d:14:64:1f:af:67:31:95:0c:6d:cd:54:1a:ce:
f1:76:00:39:ff:f9:79:69:b1:79:ea:0c:b6:6f:8f:
12:19:f2:c4:bf:01:bb:e7:2b:1d:dd:47:56:97:58:
29:3b:75:b3:44:15:a4:50:33:07:00:e8:d2:27:ca:
d1:24:c1:75:2f:c1:cf:df:37:cd:3b:13:31:a4:0a:
0f:89:32:c9:58:50:31:de:44:a0:53:43:84:9c:fa:
68:74:a5:a0:61:8f:7f:24:da:66:9d:14:e8:ec:58:
79:97:00:ef:c7:5e:da:a2:7f:3f:ef:2d:e1:a2:ee:
cc:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:F4:9C:16:86:4B:BF:7D:96:4A:07:21:D7:82:6B:CB:65:5A:78:E0
X509v3 Authority Key Identifier:
keyid:C5:27:BA:E9:79:41:B6:0F:3D:CD:3A:A0:7E:2C:5F:D9:DD:03:A6:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xSe66XlBtg89zTqgfixf2d0DpsE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/02b115-fc5e-4bac-b0ad-1366d4ef7f3b/1/xSe66XlBtg89zTqgfixf2d0DpsE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/02b115-fc5e-4bac-b0ad-1366d4ef7f3b/1/xSe66XlBtg89zTqgfixf2d0DpsE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:74:7f:f9:54:84:0a:b5:7c:a2:d9:ab:bf:4a:83:60:67:c1:
5b:98:68:4a:68:34:26:56:42:d0:85:bc:e6:c0:ac:ab:6e:fa:
98:48:29:7a:96:01:60:a9:21:68:1c:b6:41:1f:8c:ce:c6:51:
c2:0d:14:74:ba:5a:02:48:cf:67:47:78:05:b7:4d:a4:4f:d2:
9a:76:11:ce:98:b5:4c:c2:d6:c2:36:87:71:05:5d:47:f1:f6:
72:92:31:a0:a8:9b:ce:6c:2b:03:4d:5c:81:4d:ce:ae:4c:eb:
ad:9b:c7:89:28:4c:8c:b3:06:e8:02:33:86:df:f0:b8:54:cf:
8c:6e:43:ba:48:d1:a9:7e:15:73:9f:bb:d9:12:c8:e3:ec:d7:
03:8c:50:16:3f:62:46:49:d9:d8:f4:86:7f:4e:4f:86:05:28:
15:ec:28:fb:fe:73:e6:f5:8a:4a:8c:89:a5:01:4e:b9:7b:33:
fe:84:81:62:14:92:fd:34:ea:01:02:1d:5a:ca:a5:2b:e4:5b:
51:c1:3a:7c:9b:5f:23:ef:33:bf:de:03:1b:ad:db:22:8c:c9:
a1:4f:61:98:13:f6:c1:ec:7d:b6:bf:6b:a5:69:c1:2a:0e:bc:
f9:59:f5:f1:2d:1a:5d:29:69:58:50:df:db:44:6d:09:06:76:
b6:51:09:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 11:19:49 2025 by rpki-client