Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/186bf2-fb88-4728-bf67-5a1e5fa73e4d/1/xsz5zpfRIy4BYvzNQ_YMTnmDHho.mft
File: xsz5zpfRIy4BYvzNQ_YMTnmDHho.mft (raw, json)
Hash identifier: Dzr2LLSzVGJCTpY3X4siWKwsEVho10CEJtvR3ZTWKa4=
Subject key identifier: 51:E0:0B:01:63:A0:3C:DC:92:08:ED:34:77:ED:08:E0:62:AE:A5:39
Authority key identifier: C6:CC:F9:CE:97:D1:23:2E:01:62:FC:CD:43:F6:0C:4E:79:83:1E:1A
Certificate issuer: /CN=c6ccf9ce97d1232e0162fccd43f60c4e79831e1a
Certificate serial: 019A4D06BFF7DC8DA050FC149FA561E9EB70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xsz5zpfRIy4BYvzNQ_YMTnmDHho.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/186bf2-fb88-4728-bf67-5a1e5fa73e4d/1/xsz5zpfRIy4BYvzNQ_YMTnmDHho.mft
Manifest number: 0E6A
Signing time: Tue 04 Nov 2025 04:01:19 +0000
Manifest this update: Tue 04 Nov 2025 04:01:19 +0000
Manifest next update: Wed 05 Nov 2025 04:01:19 +0000
Files and hashes: 1: xsz5zpfRIy4BYvzNQ_YMTnmDHho.crl (hash: 58SmFrUW20jPUYRHSIYjS06yt5HYjLRf6+OvTXHeBoA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/186bf2-fb88-4728-bf67-5a1e5fa73e4d/1/xsz5zpfRIy4BYvzNQ_YMTnmDHho.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/186bf2-fb88-4728-bf67-5a1e5fa73e4d/1/xsz5zpfRIy4BYvzNQ_YMTnmDHho.mft
rsync://rpki.ripe.net/repository/DEFAULT/xsz5zpfRIy4BYvzNQ_YMTnmDHho.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 04:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:06:bf:f7:dc:8d:a0:50:fc:14:9f:a5:61:e9:eb:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6ccf9ce97d1232e0162fccd43f60c4e79831e1a
Validity
Not Before: Nov 4 04:01:19 2025 GMT
Not After : Nov 5 04:01:19 2025 GMT
Subject: CN=51e00b0163a03cdc9208ed3477ed08e062aea539
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:c2:49:13:71:86:63:52:54:1c:5c:13:cf:a5:
6e:72:60:3a:4a:ff:33:5c:93:ca:5a:6d:e0:b3:e6:
de:c2:30:a5:71:ae:c5:53:df:2d:2b:ce:da:d6:7c:
58:64:97:ab:55:c1:e2:62:60:f4:76:ba:a2:93:b4:
c2:91:b3:94:8d:74:02:be:ab:8e:69:a6:44:62:d2:
95:36:7c:18:ef:83:68:2f:f1:f5:2c:cb:87:73:99:
f9:a4:3c:85:5e:e6:c8:73:ba:e1:2b:9b:25:f4:39:
25:9b:b6:a9:70:a8:e5:74:77:dc:2a:9f:e4:07:19:
0d:e5:81:97:3f:7b:5c:74:9f:29:3d:93:d2:73:be:
21:53:69:9b:38:5a:31:ae:ce:50:8c:8b:b8:65:4f:
43:bf:bc:1b:f6:a6:20:3b:07:bf:50:ba:bb:cb:3c:
69:e8:2a:5e:bb:61:1c:d6:e4:4e:27:59:7d:4a:10:
78:f5:e7:db:b9:99:24:5f:c1:84:82:89:08:84:b3:
9b:1b:35:45:44:1d:52:ec:1d:72:1a:01:42:b7:8a:
b7:c4:ae:c4:7c:b4:a6:9c:d2:20:f0:a0:2f:8a:2f:
09:91:8f:e9:6d:1f:1c:f2:42:0f:87:51:4d:21:41:
39:3b:d7:b8:c8:99:be:16:81:cf:22:66:53:b8:2c:
8e:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:E0:0B:01:63:A0:3C:DC:92:08:ED:34:77:ED:08:E0:62:AE:A5:39
X509v3 Authority Key Identifier:
keyid:C6:CC:F9:CE:97:D1:23:2E:01:62:FC:CD:43:F6:0C:4E:79:83:1E:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xsz5zpfRIy4BYvzNQ_YMTnmDHho.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/186bf2-fb88-4728-bf67-5a1e5fa73e4d/1/xsz5zpfRIy4BYvzNQ_YMTnmDHho.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/186bf2-fb88-4728-bf67-5a1e5fa73e4d/1/xsz5zpfRIy4BYvzNQ_YMTnmDHho.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:e9:71:26:6a:8f:3e:bf:b4:ac:f1:d6:2e:9a:7c:19:dd:cc:
b8:81:04:e5:41:b1:db:c5:5f:dc:9e:37:6d:86:3d:d6:b2:10:
17:17:d5:37:70:3d:31:85:2d:c4:4e:38:3c:da:b6:6f:91:24:
ed:af:f2:65:30:fd:0e:67:71:64:39:86:27:39:72:6d:95:bc:
3b:7b:27:83:d3:fa:87:08:55:b4:83:d3:e9:1c:2b:31:d1:07:
65:2b:b0:d7:c8:30:b2:04:eb:33:04:01:a2:90:9b:db:49:e2:
56:bb:32:d2:24:17:bb:51:a0:9a:f7:d1:5f:c1:a6:cf:c9:d3:
8a:82:f3:7f:2b:b5:2f:8e:b9:96:f9:ae:e8:ed:40:c4:04:51:
cb:6e:7a:45:46:60:67:ea:90:af:ff:30:79:c9:d1:20:c3:3c:
b6:1e:8f:c4:61:48:da:23:ea:fd:94:d0:29:3e:3b:c9:5a:b6:
6f:8d:1a:9b:41:51:b4:1b:31:76:7b:b4:4f:70:e9:11:82:48:
9c:35:ff:55:99:85:89:bd:4b:bc:7f:02:b9:a0:18:88:1c:3e:
0f:9c:ff:57:2d:36:ba:28:d3:53:c9:a7:ca:96:84:35:32:92:
6c:5a:33:7a:f2:20:16:48:c8:29:45:e8:3b:fc:5d:5c:95:d4:
de:0e:65:30
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpNBr/33I2gUPwUn6Vh6etwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2Y2NmOWNlOTdkMTIzMmUwMTYyZmNjZDQzZjYwYzRlNzk4
MzFlMWEwHhcNMjUxMTA0MDQwMTE5WhcNMjUxMTA1MDQwMTE5WjAzMTEwLwYDVQQD
Eyg1MWUwMGIwMTYzYTAzY2RjOTIwOGVkMzQ3N2VkMDhlMDYyYWVhNTM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtcJJE3GGY1JUHFwTz6VucmA6Sv8z
XJPKWm3gs+bewjClca7FU98tK87a1nxYZJerVcHiYmD0drqik7TCkbOUjXQCvquO
aaZEYtKVNnwY74NoL/H1LMuHc5n5pDyFXubIc7rhK5sl9Dklm7apcKjldHfcKp/k
BxkN5YGXP3tcdJ8pPZPSc74hU2mbOFoxrs5QjIu4ZU9Dv7wb9qYgOwe/ULq7yzxp
6Cpeu2Ec1uROJ1l9ShB49efbuZkkX8GEgokIhLObGzVFRB1S7B1yGgFCt4q3xK7E
fLSmnNIg8KAvii8JkY/pbR8c8kIPh1FNIUE5O9e4yJm+FoHPImZTuCyO0wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFHgCwFjoDzckgjtNHftCOBirqU5MB8GA1UdIwQY
MBaAFMbM+c6X0SMuAWL8zUP2DE55gx4aMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveHN6NXpwZlJJeTRCWXZ6TlFfWU1Ubm1ESGhvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi8xODZiZjItZmI4OC00NzI4LWJmNjct
NWExZTVmYTczZTRkLzEveHN6NXpwZlJJeTRCWXZ6TlFfWU1Ubm1ESGhvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Zi8xODZiZjItZmI4OC00NzI4LWJmNjctNWExZTVmYTczZTRk
LzEveHN6NXpwZlJJeTRCWXZ6TlFfWU1Ubm1ESGhvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbelxJmqP
Pr+0rPHWLpp8Gd3MuIEE5UGx28Vf3J43bYY91rIQFxfVN3A9MYUtxE44PNq2b5Ek
7a/yZTD9DmdxZDmGJzlybZW8O3sng9P6hwhVtIPT6RwrMdEHZSuw18gwsgTrMwQB
opCb20niVrsy0iQXu1GgmvfRX8Gmz8nTioLzfyu1L465lvmu6O1AxARRy256RUZg
Z+qQr/8wecnRIMM8th6PxGFI2iPq/ZTQKT47yVq2b40am0FRtBsxdnu0T3DpEYJI
nDX/VZmFib1LvH8CuaAYiBw+D5z/Vy02uijTU8mnypaENTKSbFozevIgFkjIKUXo
O/xdXJXU3g5lMA==
-----END CERTIFICATE-----
Generated at Tue Nov 4 11:20:45 2025 by rpki-client