Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/06684c-9955-424b-ace8-23797aeabb0f/1/xbqElpIUKuxW19DdyN1N20HPg8E.mft
File: xbqElpIUKuxW19DdyN1N20HPg8E.mft (raw, json)
Hash identifier: BUL5mJzRilKJaZOaBOb2dEwm/bw2JyrOCcqOSbWl4zM=
Subject key identifier: 29:16:01:F7:E2:4E:9A:B2:0E:AE:3D:29:50:90:8B:82:AD:07:77:67
Authority key identifier: C5:BA:84:96:92:14:2A:EC:56:D7:D0:DD:C8:DD:4D:DB:41:CF:83:C1
Certificate issuer: /CN=c5ba849692142aec56d7d0ddc8dd4ddb41cf83c1
Certificate serial: 019A4D7422053D4E441E94609D0843A4CA64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xbqElpIUKuxW19DdyN1N20HPg8E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/06684c-9955-424b-ace8-23797aeabb0f/1/xbqElpIUKuxW19DdyN1N20HPg8E.mft
Manifest number: 100C
Signing time: Tue 04 Nov 2025 06:00:47 +0000
Manifest this update: Tue 04 Nov 2025 06:00:47 +0000
Manifest next update: Wed 05 Nov 2025 06:00:47 +0000
Files and hashes: 1: xbqElpIUKuxW19DdyN1N20HPg8E.crl (hash: ND0Au6OHdSXqESZxRrSZpgrKoPnvwULcRYs2cAGzEa8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/06684c-9955-424b-ace8-23797aeabb0f/1/xbqElpIUKuxW19DdyN1N20HPg8E.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/06684c-9955-424b-ace8-23797aeabb0f/1/xbqElpIUKuxW19DdyN1N20HPg8E.mft
rsync://rpki.ripe.net/repository/DEFAULT/xbqElpIUKuxW19DdyN1N20HPg8E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 06:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:74:22:05:3d:4e:44:1e:94:60:9d:08:43:a4:ca:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5ba849692142aec56d7d0ddc8dd4ddb41cf83c1
Validity
Not Before: Nov 4 06:00:47 2025 GMT
Not After : Nov 5 06:00:47 2025 GMT
Subject: CN=291601f7e24e9ab20eae3d2950908b82ad077767
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:8d:e0:72:94:b6:ec:3a:c0:63:31:1c:b4:28:
38:60:c6:39:07:5f:03:10:cc:85:24:14:20:ba:15:
5b:26:58:c5:13:91:e8:b2:be:0f:f8:2e:44:7c:8b:
9a:c0:a8:b7:0c:6e:da:48:72:1f:98:3a:af:41:6b:
25:c8:8c:27:9e:79:82:8a:cd:81:75:82:6d:bf:ce:
98:94:68:11:9c:06:a8:72:18:b7:e6:af:5e:a9:2b:
c9:38:3c:e9:cd:c2:6a:8b:b2:9a:a3:07:94:27:0e:
7c:a0:51:36:c6:e1:0b:ce:7d:be:0d:05:44:34:6e:
4b:46:b6:de:ac:6a:7b:19:12:a5:ac:ba:9b:03:89:
9f:3d:a3:09:57:92:ae:37:46:20:f1:5f:19:18:7e:
a2:3b:cc:18:82:aa:12:30:44:90:03:a3:bb:e9:b9:
3e:29:af:86:cb:00:52:58:a6:3e:73:e2:4e:9e:6e:
66:52:ac:43:42:59:4c:b7:ef:2a:68:2d:c7:4d:f3:
5d:f0:57:ed:80:6f:37:5c:d2:cc:ed:72:b3:f5:d0:
b4:ae:a1:02:80:b5:dc:77:bd:b3:02:59:3a:eb:d6:
8a:25:8b:19:d7:9d:94:20:d7:81:79:58:68:5d:91:
a9:7f:a3:00:3c:6a:58:6a:8a:fe:77:d3:1e:49:a4:
aa:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:16:01:F7:E2:4E:9A:B2:0E:AE:3D:29:50:90:8B:82:AD:07:77:67
X509v3 Authority Key Identifier:
keyid:C5:BA:84:96:92:14:2A:EC:56:D7:D0:DD:C8:DD:4D:DB:41:CF:83:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xbqElpIUKuxW19DdyN1N20HPg8E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/06684c-9955-424b-ace8-23797aeabb0f/1/xbqElpIUKuxW19DdyN1N20HPg8E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/06684c-9955-424b-ace8-23797aeabb0f/1/xbqElpIUKuxW19DdyN1N20HPg8E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:03:dd:52:f7:67:91:f7:b1:46:1c:41:56:8e:c3:b9:20:52:
ea:77:98:a4:e6:35:b0:40:5f:70:d3:7b:03:5d:c9:0c:fe:a1:
7a:d8:2e:64:27:e7:23:0d:e2:cd:b5:8b:c0:ff:f8:58:be:b3:
23:ba:71:b5:fe:dc:96:34:27:6c:ba:66:3b:23:e7:8d:19:df:
b0:e1:f9:66:89:0b:bb:d1:33:30:3e:9b:ee:66:99:3e:bf:84:
c1:cb:ef:a5:d0:aa:51:d6:b9:b7:d6:9f:f5:98:dd:d2:45:2b:
cc:21:42:6a:b3:42:61:70:0f:d0:9d:dc:12:a3:43:4f:27:e0:
15:42:ac:17:0a:81:ba:40:40:78:5b:05:66:d1:30:00:3a:fc:
5b:ea:90:17:0b:76:34:13:4d:32:75:ac:82:28:ed:cd:52:e0:
74:c5:c8:fd:b3:f8:68:df:ce:26:64:f5:cc:58:bb:a0:83:69:
1e:d7:e3:0b:0f:7a:ba:a9:72:b5:80:00:0e:93:25:61:c8:53:
98:19:e1:e2:a8:4f:83:69:51:18:14:c0:6e:a0:3d:ad:13:84:
ac:23:b6:c7:90:2d:05:1d:bd:d8:87:bd:93:be:6b:63:87:7a:
49:e2:b7:36:ad:54:a7:58:3f:ce:13:5a:ab:b8:12:5d:34:cf:
f5:59:88:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 11:20:43 2025 by rpki-client