Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/e2fa5c-8847-44e4-a95d-61e8dc1f1459/1/XPwPm_ekSrNWe6z5Ke5MnAV1MDM.mft
File: XPwPm_ekSrNWe6z5Ke5MnAV1MDM.mft (raw, json)
Hash identifier: wUmSNxfVZogfayPeKKpcxHhXCRDiwg3UkynXl4F7Hs0=
Subject key identifier: CB:11:4A:55:05:85:8D:A1:AA:D4:FD:69:4B:8D:E8:ED:2C:C8:15:CF
Authority key identifier: 5C:FC:0F:9B:F7:A4:4A:B3:56:7B:AC:F9:29:EE:4C:9C:05:75:30:33
Certificate issuer: /CN=5cfc0f9bf7a44ab3567bacf929ee4c9c05753033
Certificate serial: 019A4D746990BA07D84180354C3F0248A253
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XPwPm_ekSrNWe6z5Ke5MnAV1MDM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/e2fa5c-8847-44e4-a95d-61e8dc1f1459/1/XPwPm_ekSrNWe6z5Ke5MnAV1MDM.mft
Manifest number: 11D1
Signing time: Tue 04 Nov 2025 06:01:05 +0000
Manifest this update: Tue 04 Nov 2025 06:01:05 +0000
Manifest next update: Wed 05 Nov 2025 06:01:05 +0000
Files and hashes: 1: XPwPm_ekSrNWe6z5Ke5MnAV1MDM.crl (hash: CfHfDMS51McVYUqb0o6PPJjA0pHyXQhaN2xAr3kUQX4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/e2fa5c-8847-44e4-a95d-61e8dc1f1459/1/XPwPm_ekSrNWe6z5Ke5MnAV1MDM.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/e2fa5c-8847-44e4-a95d-61e8dc1f1459/1/XPwPm_ekSrNWe6z5Ke5MnAV1MDM.mft
rsync://rpki.ripe.net/repository/DEFAULT/XPwPm_ekSrNWe6z5Ke5MnAV1MDM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 06:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:74:69:90:ba:07:d8:41:80:35:4c:3f:02:48:a2:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5cfc0f9bf7a44ab3567bacf929ee4c9c05753033
Validity
Not Before: Nov 4 06:01:05 2025 GMT
Not After : Nov 5 06:01:05 2025 GMT
Subject: CN=cb114a5505858da1aad4fd694b8de8ed2cc815cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:96:71:0e:4e:86:fa:86:87:0b:8d:37:10:af:
e2:6b:91:ac:cb:40:03:b2:6c:6a:bc:96:c2:7d:a8:
d3:f3:25:a9:d8:8b:01:f1:8f:4b:ae:7b:79:fa:cb:
7f:85:a3:6a:61:73:c7:51:7c:02:5a:6e:0e:a3:d6:
c0:a7:cc:35:28:d9:66:b7:f2:bc:b4:32:8c:a3:0b:
f1:ba:68:c0:d8:a1:56:90:34:68:79:c1:d1:52:eb:
14:36:c3:1a:84:1e:d8:ea:34:17:48:30:e1:14:42:
08:56:59:f7:2a:67:77:6f:90:1e:0e:d2:15:9c:83:
85:08:5b:b1:11:46:70:ae:d9:1c:4f:a5:85:82:e0:
30:76:98:37:e8:cd:6b:0e:2c:fe:7f:94:3e:3e:95:
19:10:36:c2:f8:dc:a3:ac:16:98:43:60:d1:bd:eb:
f9:43:7f:cb:8b:b1:af:ab:05:8c:c7:95:e9:81:a2:
b9:d4:c0:46:99:b3:9d:54:89:4a:7a:21:f5:09:cf:
fe:08:65:78:5a:c9:42:e1:2a:d2:3a:76:27:2c:4d:
95:3a:08:1e:aa:7f:6a:04:b2:11:ea:52:e1:03:4c:
79:10:d5:d2:a6:1c:15:14:c8:0d:71:96:98:bb:4b:
23:4d:f7:08:87:f7:b0:da:90:74:67:fd:5e:d7:9e:
df:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:11:4A:55:05:85:8D:A1:AA:D4:FD:69:4B:8D:E8:ED:2C:C8:15:CF
X509v3 Authority Key Identifier:
keyid:5C:FC:0F:9B:F7:A4:4A:B3:56:7B:AC:F9:29:EE:4C:9C:05:75:30:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XPwPm_ekSrNWe6z5Ke5MnAV1MDM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/e2fa5c-8847-44e4-a95d-61e8dc1f1459/1/XPwPm_ekSrNWe6z5Ke5MnAV1MDM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/e2fa5c-8847-44e4-a95d-61e8dc1f1459/1/XPwPm_ekSrNWe6z5Ke5MnAV1MDM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:9e:67:8c:cb:98:ae:8b:97:18:79:1b:35:70:b6:03:71:97:
72:0b:37:c0:d4:1b:bd:83:60:f8:c6:93:31:eb:fd:47:32:3d:
b1:7e:4c:a1:64:d4:21:29:55:e0:47:02:35:46:66:2b:3c:42:
e6:f4:20:b0:4c:17:d4:5f:c6:e0:b2:ef:07:9d:1a:70:53:c3:
06:98:3d:17:d5:db:5d:73:bb:f5:31:cb:9b:14:35:75:fe:4c:
30:73:ef:b7:1b:5f:13:bb:4d:ae:84:33:b2:ee:70:8f:eb:cd:
dd:60:7d:4d:de:3a:f9:ea:70:64:4d:53:49:ef:22:68:6e:9d:
22:89:b2:7c:19:d6:8a:a0:9d:df:8b:3a:86:0d:b6:85:6d:63:
79:34:e9:a0:e3:48:4e:c0:fe:43:45:d1:ae:4b:a5:ab:0d:30:
51:1b:0d:5d:da:8d:0d:9d:9f:79:67:cd:f9:ee:3e:e9:43:17:
03:ab:92:89:b9:ca:a8:75:0f:bf:21:92:ad:cf:16:ad:5d:38:
15:94:96:9f:53:58:f8:64:2f:36:f1:f7:e0:7e:67:28:01:aa:
52:11:c9:f4:d6:cf:8b:ea:50:5b:8d:3c:21:30:96:0a:70:00:
20:2d:73:e6:32:0e:45:00:84:93:58:08:5b:c7:c6:9c:e9:8d:
5b:1f:c7:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:52:53 2025 by rpki-client