
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/eb5454-7293-437f-ac0b-3a3b0296bb82/1/Xj5PqMmXGu8SNF_A430Ws0WbeDs.mft
File: Xj5PqMmXGu8SNF_A430Ws0WbeDs.mft (raw, json)
Hash identifier: m30775G6ARAoKbdBqpIQq2b1aRja0pwmHQx5nleWTRg=
Subject key identifier: E9:C4:57:C9:5E:DA:03:3C:02:A8:9C:A8:24:87:93:3D:75:A6:BB:97
Authority key identifier: 5E:3E:4F:A8:C9:97:1A:EF:12:34:5F:C0:E3:7D:16:B3:45:9B:78:3B
Certificate issuer: /CN=5e3e4fa8c9971aef12345fc0e37d16b3459b783b
Certificate serial: 019A4F628D3093F06084CAC8A902BC41EF13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xj5PqMmXGu8SNF_A430Ws0WbeDs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/eb5454-7293-437f-ac0b-3a3b0296bb82/1/Xj5PqMmXGu8SNF_A430Ws0WbeDs.mft
Manifest number: 0D63
Signing time: Tue 04 Nov 2025 15:00:49 +0000
Manifest this update: Tue 04 Nov 2025 15:00:49 +0000
Manifest next update: Wed 05 Nov 2025 15:00:49 +0000
Files and hashes: 1: Xj5PqMmXGu8SNF_A430Ws0WbeDs.crl (hash: Wx/7OG4R22wiLAHt9fBhuUgY9K8STyy9TYD7UTR3ZJs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/eb5454-7293-437f-ac0b-3a3b0296bb82/1/Xj5PqMmXGu8SNF_A430Ws0WbeDs.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/eb5454-7293-437f-ac0b-3a3b0296bb82/1/Xj5PqMmXGu8SNF_A430Ws0WbeDs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xj5PqMmXGu8SNF_A430Ws0WbeDs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:62:8d:30:93:f0:60:84:ca:c8:a9:02:bc:41:ef:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e3e4fa8c9971aef12345fc0e37d16b3459b783b
Validity
Not Before: Nov 4 15:00:49 2025 GMT
Not After : Nov 5 15:00:49 2025 GMT
Subject: CN=e9c457c95eda033c02a89ca82487933d75a6bb97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:1f:7b:f2:f8:44:a3:56:7a:e1:0c:8c:38:75:
b8:a2:c5:ab:86:25:eb:d9:53:e2:a4:e3:9e:c0:56:
c0:64:c0:25:2e:d1:02:dc:04:78:c9:e5:e5:53:09:
01:54:8f:e0:6c:04:35:c0:fc:4e:7f:b5:a9:3d:63:
ab:89:57:b3:6a:e6:50:17:59:f7:b9:ab:5f:0d:fe:
3d:00:a1:e6:f4:17:0d:fb:8a:c5:c9:0d:10:fe:e1:
55:ac:6d:de:4a:b1:95:de:d9:1e:bf:1f:b1:73:8a:
d2:cc:65:c6:2c:a0:0f:28:67:bf:b8:bd:2d:32:e2:
d5:6a:32:4c:00:11:18:9b:bc:61:98:1e:c1:33:9b:
9f:cc:52:7d:04:74:9a:05:59:93:71:26:1b:a7:40:
74:a6:25:e9:8d:8f:25:fb:d7:79:8b:c9:ee:3d:37:
bf:6c:7a:78:43:6a:43:f1:78:71:b8:46:b9:5b:4a:
d0:53:49:0b:95:7a:23:fb:19:50:08:56:1f:1e:ef:
60:41:e0:5e:fd:0a:5d:77:91:a1:e4:05:f6:7d:0a:
7a:6a:18:92:74:ba:3f:4f:0f:01:a9:75:64:16:5b:
b4:e1:2e:10:90:65:2b:b5:52:97:6b:08:ce:09:58:
da:ec:aa:c9:f0:13:af:8b:42:b3:b4:1e:43:94:f1:
9d:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:C4:57:C9:5E:DA:03:3C:02:A8:9C:A8:24:87:93:3D:75:A6:BB:97
X509v3 Authority Key Identifier:
keyid:5E:3E:4F:A8:C9:97:1A:EF:12:34:5F:C0:E3:7D:16:B3:45:9B:78:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xj5PqMmXGu8SNF_A430Ws0WbeDs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/eb5454-7293-437f-ac0b-3a3b0296bb82/1/Xj5PqMmXGu8SNF_A430Ws0WbeDs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/eb5454-7293-437f-ac0b-3a3b0296bb82/1/Xj5PqMmXGu8SNF_A430Ws0WbeDs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:74:d3:5f:45:40:4c:d3:e1:66:1a:f9:8a:57:38:61:e3:93:
ca:f3:34:67:cc:a2:f9:2d:df:14:79:0b:8f:28:17:cd:c2:0f:
31:76:ed:96:8c:92:52:5e:5d:73:dc:a0:5c:e8:8f:5a:6a:cd:
55:6c:59:30:48:55:4c:61:e7:36:6d:e9:ab:fe:94:ac:af:ad:
7b:04:a9:7d:91:41:1e:ce:08:00:95:ac:5f:e3:02:29:20:53:
6a:16:a1:85:06:25:b4:ec:f5:af:b2:a1:b8:ed:0b:2d:cf:49:
1e:cc:7d:c3:56:de:8f:c3:b2:4d:4d:fe:a2:1c:e8:1d:65:d8:
db:0e:79:13:eb:47:75:b1:68:76:6d:10:de:87:52:0f:82:d0:
7c:7c:41:49:aa:28:04:d2:1e:5b:e8:f9:53:44:9a:53:e2:fc:
7d:12:0b:94:57:52:e4:dc:f0:d1:f2:ee:ce:26:3c:90:a6:53:
78:c0:05:ca:25:e1:ad:0d:24:b3:12:81:d0:5d:4d:0b:cd:3e:
91:48:03:e0:eb:88:25:b7:8e:03:68:e3:2a:67:29:5b:dc:b3:
01:d6:78:c0:87:1b:13:07:d1:98:ea:cd:f1:3f:e2:2d:9f:03:
7e:87:85:3a:ab:a7:c3:38:89:8a:b4:fd:62:e8:96:1d:56:8a:
34:8a:80:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:59:52 2025 by rpki-client