Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/303a43-1003-42d6-96b0-66b86fc781a2/1/XjPdpt78k8-CUWSU2fNIjWxK2dw.mft
File: XjPdpt78k8-CUWSU2fNIjWxK2dw.mft (raw, json)
Hash identifier: gtpMejPQL7bayvQx+x/GNANbJHqNEOIHN+RTL6vnGaM=
Subject key identifier: 16:BC:79:9A:B5:7E:66:B1:8E:D3:63:8D:21:FB:47:C3:14:EE:AC:A4
Authority key identifier: 5E:33:DD:A6:DE:FC:93:CF:82:51:64:94:D9:F3:48:8D:6C:4A:D9:DC
Certificate issuer: /CN=5e33dda6defc93cf82516494d9f3488d6c4ad9dc
Certificate serial: 019A4FD00327C5A2E064DC31FC1D327A7C32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XjPdpt78k8-CUWSU2fNIjWxK2dw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/303a43-1003-42d6-96b0-66b86fc781a2/1/XjPdpt78k8-CUWSU2fNIjWxK2dw.mft
Manifest number: 0974
Signing time: Tue 04 Nov 2025 17:00:23 +0000
Manifest this update: Tue 04 Nov 2025 17:00:23 +0000
Manifest next update: Wed 05 Nov 2025 17:00:23 +0000
Files and hashes: 1: XjPdpt78k8-CUWSU2fNIjWxK2dw.crl (hash: 9UeV7xP+vxYuTIZtE04cFC7r9rbljyNk/2KBib0IXk0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/303a43-1003-42d6-96b0-66b86fc781a2/1/XjPdpt78k8-CUWSU2fNIjWxK2dw.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/303a43-1003-42d6-96b0-66b86fc781a2/1/XjPdpt78k8-CUWSU2fNIjWxK2dw.mft
rsync://rpki.ripe.net/repository/DEFAULT/XjPdpt78k8-CUWSU2fNIjWxK2dw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 17:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:d0:03:27:c5:a2:e0:64:dc:31:fc:1d:32:7a:7c:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e33dda6defc93cf82516494d9f3488d6c4ad9dc
Validity
Not Before: Nov 4 17:00:23 2025 GMT
Not After : Nov 5 17:00:23 2025 GMT
Subject: CN=16bc799ab57e66b18ed3638d21fb47c314eeaca4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:b3:9c:ff:85:ea:ff:ba:5f:d3:f5:e6:bc:9c:
69:4b:0b:fe:6a:c3:c2:22:04:cc:36:19:5d:c9:ed:
b7:5b:6b:6b:29:ea:8b:e6:cf:56:a8:97:e1:27:fc:
d2:d5:5d:b5:45:1d:d5:d4:59:cd:a2:57:a5:36:6b:
1f:11:a9:23:57:43:89:8b:4f:c2:56:45:bc:e2:35:
4f:0a:30:a6:cd:68:e4:ed:3c:ba:06:de:32:34:51:
49:25:b0:09:67:08:28:5f:21:e4:2e:66:83:9b:84:
e6:5e:70:de:c6:71:15:82:3b:64:d3:e1:32:d6:15:
bc:8e:fe:72:8a:be:05:d3:21:69:ed:b6:c1:b4:ef:
e6:04:53:5d:45:a4:14:f0:6d:59:0e:4a:22:a6:cb:
f3:a8:08:25:81:2b:41:d7:af:b4:34:fd:83:73:ab:
ec:e4:7f:f3:1e:b1:ad:9a:1e:6c:35:8a:42:27:ec:
4b:ea:09:12:01:d8:05:75:0d:cd:05:8d:e9:d8:e7:
84:d4:5f:41:f4:07:f8:86:47:64:82:9a:53:3c:36:
89:08:83:b9:e0:80:92:e1:75:01:97:fd:43:38:ef:
0c:88:01:e5:5d:1a:6e:92:d2:12:29:5a:3c:83:aa:
17:e5:ae:a6:54:d0:5d:26:7c:ab:11:9d:96:05:0e:
6b:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:BC:79:9A:B5:7E:66:B1:8E:D3:63:8D:21:FB:47:C3:14:EE:AC:A4
X509v3 Authority Key Identifier:
keyid:5E:33:DD:A6:DE:FC:93:CF:82:51:64:94:D9:F3:48:8D:6C:4A:D9:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XjPdpt78k8-CUWSU2fNIjWxK2dw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/303a43-1003-42d6-96b0-66b86fc781a2/1/XjPdpt78k8-CUWSU2fNIjWxK2dw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/303a43-1003-42d6-96b0-66b86fc781a2/1/XjPdpt78k8-CUWSU2fNIjWxK2dw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:56:8a:98:d4:a8:3a:a9:6e:74:bc:7e:bb:01:83:84:5c:99:
66:3b:9b:a8:98:60:70:71:a4:32:0d:8f:54:94:99:e3:1c:c0:
e5:80:e1:94:74:68:86:a3:5a:7a:25:ac:18:15:88:5b:08:ac:
45:04:70:31:44:da:3e:8c:1b:aa:2b:e8:fe:68:60:d5:e3:5a:
d8:0d:2d:3b:b4:4d:39:c9:a9:d1:54:01:49:f0:8c:ad:fd:ef:
c0:06:58:51:8c:d5:f8:e2:de:ac:2f:9e:f7:f9:13:8c:04:a9:
25:5d:66:02:16:eb:5f:d2:75:48:cf:1d:cf:ad:26:92:8b:cd:
34:15:dc:d9:1f:a4:3d:d7:cf:91:f2:6f:d7:88:4a:85:0f:be:
5f:17:93:53:08:b4:11:9d:bd:d2:43:30:d4:d7:29:7e:df:38:
1c:b7:5f:82:b6:80:19:66:e5:33:10:4f:1d:3a:1d:be:f1:e7:
d5:e8:7c:9c:c6:fe:ad:0d:44:ef:5e:e5:1a:53:eb:3e:f8:39:
ff:d7:ae:bb:bb:82:c7:35:52:2d:16:6a:69:7f:f8:ae:6c:d1:
30:27:97:03:58:65:ba:2c:c5:3c:b0:38:b9:57:81:00:8a:4b:
d6:5b:0f:f8:53:32:6e:72:b2:d3:c3:c4:aa:dc:4a:d2:76:39:
3b:bf:f0:1c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpP0AMnxaLgZNwx/B0yenwyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVlMzNkZGE2ZGVmYzkzY2Y4MjUxNjQ5NGQ5ZjM0ODhkNmM0
YWQ5ZGMwHhcNMjUxMTA0MTcwMDIzWhcNMjUxMTA1MTcwMDIzWjAzMTEwLwYDVQQD
EygxNmJjNzk5YWI1N2U2NmIxOGVkMzYzOGQyMWZiNDdjMzE0ZWVhY2E0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAubOc/4Xq/7pf0/XmvJxpSwv+asPC
IgTMNhldye23W2trKeqL5s9WqJfhJ/zS1V21RR3V1FnNolelNmsfEakjV0OJi0/C
VkW84jVPCjCmzWjk7Ty6Bt4yNFFJJbAJZwgoXyHkLmaDm4TmXnDexnEVgjtk0+Ey
1hW8jv5yir4F0yFp7bbBtO/mBFNdRaQU8G1ZDkoipsvzqAglgStB16+0NP2Dc6vs
5H/zHrGtmh5sNYpCJ+xL6gkSAdgFdQ3NBY3p2OeE1F9B9Af4hkdkgppTPDaJCIO5
4ICS4XUBl/1DOO8MiAHlXRpuktISKVo8g6oX5a6mVNBdJnyrEZ2WBQ5rIwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBa8eZq1fmaxjtNjjSH7R8MU7qykMB8GA1UdIwQY
MBaAFF4z3abe/JPPglFklNnzSI1sStncMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWGpQZHB0NzhrOC1DVVdTVTJmTklqV3hLMmR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS8zMDNhNDMtMTAwMy00MmQ2LTk2YjAt
NjZiODZmYzc4MWEyLzEvWGpQZHB0NzhrOC1DVVdTVTJmTklqV3hLMmR3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZS8zMDNhNDMtMTAwMy00MmQ2LTk2YjAtNjZiODZmYzc4MWEy
LzEvWGpQZHB0NzhrOC1DVVdTVTJmTklqV3hLMmR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfVaKmNSo
OqludLx+uwGDhFyZZjubqJhgcHGkMg2PVJSZ4xzA5YDhlHRohqNaeiWsGBWIWwis
RQRwMUTaPowbqivo/mhg1eNa2A0tO7RNOcmp0VQBSfCMrf3vwAZYUYzV+OLerC+e
9/kTjASpJV1mAhbrX9J1SM8dz60mkovNNBXc2R+kPdfPkfJv14hKhQ++XxeTUwi0
EZ290kMw1Ncpft84HLdfgraAGWblMxBPHTodvvHn1eh8nMb+rQ1E717lGlPrPvg5
/9euu7uCxzVSLRZqaX/4rmzRMCeXA1hluizFPLA4uVeBAIpL1lsP+FMybnKy08PE
qtxK0nY5O7/wHA==
-----END CERTIFICATE-----
Generated at Tue Nov 4 22:45:45 2025 by rpki-client