Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/c81297-62b7-49fb-ba3f-2560f8690cd2/1/XM8SiZ81jRw0GiB_3iHUPHCmlF4.mft
File: XM8SiZ81jRw0GiB_3iHUPHCmlF4.mft (raw, json)
Hash identifier: 7RRXxfKLXR6nJs6WgXrBbdQZhpl6CBqwLq8MHDDjG0c=
Subject key identifier: 75:0B:B8:7D:60:53:2F:0F:07:E1:8A:83:6F:F1:9B:4D:34:99:82:A6
Authority key identifier: 5C:CF:12:89:9F:35:8D:1C:34:1A:20:7F:DE:21:D4:3C:70:A6:94:5E
Certificate issuer: /CN=5ccf12899f358d1c341a207fde21d43c70a6945e
Certificate serial: 019A4E18D5702C0028D521AC7B1209B907E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XM8SiZ81jRw0GiB_3iHUPHCmlF4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/c81297-62b7-49fb-ba3f-2560f8690cd2/1/XM8SiZ81jRw0GiB_3iHUPHCmlF4.mft
Manifest number: 0354
Signing time: Tue 04 Nov 2025 09:00:41 +0000
Manifest this update: Tue 04 Nov 2025 09:00:41 +0000
Manifest next update: Wed 05 Nov 2025 09:00:41 +0000
Files and hashes: 1: XM8SiZ81jRw0GiB_3iHUPHCmlF4.crl (hash: A9GVCE1N+3Mbz2OJq8qk8J5B1RD6gY+iPe6kz/seniI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/c81297-62b7-49fb-ba3f-2560f8690cd2/1/XM8SiZ81jRw0GiB_3iHUPHCmlF4.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/c81297-62b7-49fb-ba3f-2560f8690cd2/1/XM8SiZ81jRw0GiB_3iHUPHCmlF4.mft
rsync://rpki.ripe.net/repository/DEFAULT/XM8SiZ81jRw0GiB_3iHUPHCmlF4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:18:d5:70:2c:00:28:d5:21:ac:7b:12:09:b9:07:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ccf12899f358d1c341a207fde21d43c70a6945e
Validity
Not Before: Nov 4 09:00:41 2025 GMT
Not After : Nov 5 09:00:41 2025 GMT
Subject: CN=750bb87d60532f0f07e18a836ff19b4d349982a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:ed:23:51:ee:b0:4f:4d:db:7d:0d:dd:ee:0b:
e2:81:fe:0f:12:04:46:80:27:af:73:a0:7b:d7:19:
f1:7d:8e:65:d4:89:86:d3:62:e9:0b:4f:37:c5:e8:
51:52:9b:db:f9:3e:67:d3:ec:45:e2:d5:80:69:a4:
e7:91:6c:43:de:ed:5f:85:46:71:91:b1:26:84:d8:
b4:01:06:f4:ec:b8:d0:d2:04:5c:15:80:cf:1d:da:
5c:a7:4b:93:dd:e8:aa:8b:22:57:90:ae:ba:4a:9e:
e2:18:43:6a:cf:bc:85:8a:f5:5f:fa:ae:49:f1:08:
c8:33:16:64:16:ac:e0:04:1b:ff:9c:40:21:4f:e4:
72:ff:b8:c8:37:a4:2b:99:2e:75:41:72:eb:c9:9f:
4e:15:2d:6d:17:ea:5e:d2:47:90:ad:ee:a5:f1:fc:
3b:dd:23:96:09:4f:2b:b9:0a:56:f5:4d:65:6a:33:
8f:9d:5a:9b:8a:aa:30:e4:ab:4d:fb:ce:72:79:49:
d6:45:07:5b:29:b2:71:f0:cd:01:3a:b6:cf:0e:2e:
69:66:c9:fd:43:1b:26:a2:45:8d:28:9a:b7:f4:4d:
81:cf:0a:da:c6:23:b3:be:98:d0:7c:80:f6:d0:f8:
08:13:87:49:5b:9f:ae:a0:9d:03:1d:86:18:29:e4:
0a:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:0B:B8:7D:60:53:2F:0F:07:E1:8A:83:6F:F1:9B:4D:34:99:82:A6
X509v3 Authority Key Identifier:
keyid:5C:CF:12:89:9F:35:8D:1C:34:1A:20:7F:DE:21:D4:3C:70:A6:94:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XM8SiZ81jRw0GiB_3iHUPHCmlF4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/c81297-62b7-49fb-ba3f-2560f8690cd2/1/XM8SiZ81jRw0GiB_3iHUPHCmlF4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/c81297-62b7-49fb-ba3f-2560f8690cd2/1/XM8SiZ81jRw0GiB_3iHUPHCmlF4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:6c:a5:b4:1b:9b:b7:1b:76:80:7f:2c:26:96:aa:5c:d0:1d:
75:64:6a:b3:56:17:6e:e3:a1:0e:56:4b:00:cd:07:cf:67:31:
0b:92:36:31:7e:42:32:5b:33:a0:10:36:51:d6:38:df:12:ae:
07:46:e6:8e:4e:c0:a4:5a:09:14:94:e7:ca:05:06:04:ee:3d:
1e:01:a5:f3:59:ca:85:71:ec:6d:d2:c4:b0:21:24:bb:7a:6a:
41:4d:e6:f8:dc:9f:ba:be:a1:28:45:41:51:6a:eb:0e:fa:3f:
82:43:59:75:ac:0d:c9:97:61:9e:b9:ac:7e:2b:59:4a:a3:54:
e7:ea:08:d0:ff:59:b2:6c:96:c2:07:0b:ff:e7:3b:d7:78:fe:
69:2c:30:26:59:e4:1a:14:61:4b:8a:33:85:05:55:36:b1:f7:
ec:db:bf:2e:b4:78:69:b7:44:28:5c:7b:a2:c2:bf:10:bd:02:
0d:19:c5:7b:9c:6b:fa:64:c9:9f:8c:6b:ad:ac:22:8f:0f:1c:
7f:77:72:6c:18:ad:b2:a8:af:1e:fc:6b:58:f6:c9:7b:0f:30:
a8:05:fc:a1:8a:c9:bd:6e:f3:19:2d:a3:5a:98:a1:eb:e9:60:
7e:bb:12:17:7c:9d:67:70:40:e0:81:17:ca:29:70:aa:79:ce:
8f:aa:9b:7e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpOGNVwLAAo1SGsexIJuQfnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVjY2YxMjg5OWYzNThkMWMzNDFhMjA3ZmRlMjFkNDNjNzBh
Njk0NWUwHhcNMjUxMTA0MDkwMDQxWhcNMjUxMTA1MDkwMDQxWjAzMTEwLwYDVQQD
Eyg3NTBiYjg3ZDYwNTMyZjBmMDdlMThhODM2ZmYxOWI0ZDM0OTk4MmE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2u0jUe6wT03bfQ3d7gvigf4PEgRG
gCevc6B71xnxfY5l1ImG02LpC083xehRUpvb+T5n0+xF4tWAaaTnkWxD3u1fhUZx
kbEmhNi0AQb07LjQ0gRcFYDPHdpcp0uT3eiqiyJXkK66Sp7iGENqz7yFivVf+q5J
8QjIMxZkFqzgBBv/nEAhT+Ry/7jIN6QrmS51QXLryZ9OFS1tF+pe0keQre6l8fw7
3SOWCU8ruQpW9U1lajOPnVqbiqow5KtN+85yeUnWRQdbKbJx8M0BOrbPDi5pZsn9
QxsmokWNKJq39E2BzwraxiOzvpjQfID20PgIE4dJW5+uoJ0DHYYYKeQKGwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHULuH1gUy8PB+GKg2/xm000mYKmMB8GA1UdIwQY
MBaAFFzPEomfNY0cNBogf94h1DxwppReMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWE04U2laODFqUncwR2lCXzNpSFVQSENtbEY0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS9jODEyOTctNjJiNy00OWZiLWJhM2Yt
MjU2MGY4NjkwY2QyLzEvWE04U2laODFqUncwR2lCXzNpSFVQSENtbEY0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZS9jODEyOTctNjJiNy00OWZiLWJhM2YtMjU2MGY4NjkwY2Qy
LzEvWE04U2laODFqUncwR2lCXzNpSFVQSENtbEY0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANWyltBub
txt2gH8sJpaqXNAddWRqs1YXbuOhDlZLAM0Hz2cxC5I2MX5CMlszoBA2UdY43xKu
B0bmjk7ApFoJFJTnygUGBO49HgGl81nKhXHsbdLEsCEku3pqQU3m+Nyfur6hKEVB
UWrrDvo/gkNZdawNyZdhnrmsfitZSqNU5+oI0P9ZsmyWwgcL/+c713j+aSwwJlnk
GhRhS4ozhQVVNrH37Nu/LrR4abdEKFx7osK/EL0CDRnFe5xr+mTJn4xrrawijw8c
f3dybBitsqivHvxrWPbJew8wqAX8oYrJvW7zGS2jWpih6+lgfrsSF3ydZ3BA4IEX
yilwqnnOj6qbfg==
-----END CERTIFICATE-----
Generated at Tue Nov 4 18:15:32 2025 by rpki-client