Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/52782a-3de3-4829-8199-44fdcec5d288/1/Xvv25mASb_SQTgmcoK3t6fbOpXA.mft
File: Xvv25mASb_SQTgmcoK3t6fbOpXA.mft (raw, json)
Hash identifier: ka7mIi9rQ18w6e2ccxXC3JTZzYVhuguusbP68As+BfY=
Subject key identifier: AC:0F:3B:5D:01:51:21:67:47:CB:23:43:C4:76:02:60:EF:F7:BD:77
Authority key identifier: 5E:FB:F6:E6:60:12:6F:F4:90:4E:09:9C:A0:AD:ED:E9:F6:CE:A5:70
Certificate issuer: /CN=5efbf6e660126ff4904e099ca0adede9f6cea570
Certificate serial: 019A533EC3C7E20E0E3438A1890EE0E6C201
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xvv25mASb_SQTgmcoK3t6fbOpXA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/52782a-3de3-4829-8199-44fdcec5d288/1/Xvv25mASb_SQTgmcoK3t6fbOpXA.mft
Manifest number: 10DD
Signing time: Wed 05 Nov 2025 09:00:13 +0000
Manifest this update: Wed 05 Nov 2025 09:00:13 +0000
Manifest next update: Thu 06 Nov 2025 09:00:13 +0000
Files and hashes: 1: Xvv25mASb_SQTgmcoK3t6fbOpXA.crl (hash: CuLomFUYIRBH9AUMPiNVS7ZxM2c+jtuj2cfmmLs0490=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/52782a-3de3-4829-8199-44fdcec5d288/1/Xvv25mASb_SQTgmcoK3t6fbOpXA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/52782a-3de3-4829-8199-44fdcec5d288/1/Xvv25mASb_SQTgmcoK3t6fbOpXA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xvv25mASb_SQTgmcoK3t6fbOpXA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:3e:c3:c7:e2:0e:0e:34:38:a1:89:0e:e0:e6:c2:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5efbf6e660126ff4904e099ca0adede9f6cea570
Validity
Not Before: Nov 5 09:00:13 2025 GMT
Not After : Nov 6 09:00:13 2025 GMT
Subject: CN=ac0f3b5d0151216747cb2343c4760260eff7bd77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:0d:af:71:7b:b6:44:e3:54:be:04:6e:22:9d:
95:f6:3e:50:e3:7b:78:f8:9f:0d:5c:34:ea:20:67:
d7:e8:ce:e3:37:87:23:14:41:16:6a:82:35:bc:4c:
8a:a6:b0:ed:cc:dc:a2:26:db:a8:1c:cc:14:29:fd:
bb:8d:52:4b:4b:e9:1f:3b:c6:4e:23:ec:ce:42:af:
14:94:f2:46:eb:ff:65:f1:a4:d7:ad:93:51:d7:0c:
c5:8b:df:bc:7b:f6:42:49:5e:f1:b9:02:1c:f8:8e:
c4:19:4e:0e:04:10:24:f7:69:43:77:cc:f6:ad:6b:
f9:3a:48:60:82:25:2f:17:ae:77:23:d8:f2:7f:a7:
45:72:19:c4:73:47:62:de:d7:54:66:3e:96:fe:6f:
5c:b5:dd:a4:7b:50:45:6f:fb:df:c0:f8:e2:0d:6e:
4d:cb:f3:a8:0e:ed:e7:36:c0:ec:0e:5a:27:75:66:
93:16:40:17:5d:45:6d:76:e8:3c:e5:35:cb:7b:9b:
d7:0e:79:53:be:13:88:56:71:ae:fb:ec:e7:7c:d9:
60:80:96:b6:f9:1c:90:f0:cf:46:15:82:52:8a:2c:
20:24:16:bf:f9:1c:ab:b0:dc:ea:36:8c:ac:79:fb:
bf:ca:a8:bc:80:66:76:42:3f:d8:df:2f:7e:c7:39:
74:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:0F:3B:5D:01:51:21:67:47:CB:23:43:C4:76:02:60:EF:F7:BD:77
X509v3 Authority Key Identifier:
keyid:5E:FB:F6:E6:60:12:6F:F4:90:4E:09:9C:A0:AD:ED:E9:F6:CE:A5:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xvv25mASb_SQTgmcoK3t6fbOpXA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/52782a-3de3-4829-8199-44fdcec5d288/1/Xvv25mASb_SQTgmcoK3t6fbOpXA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/52782a-3de3-4829-8199-44fdcec5d288/1/Xvv25mASb_SQTgmcoK3t6fbOpXA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:47:9e:8a:6a:26:ef:f5:f3:2c:d4:5a:5e:6c:ad:1d:b7:1d:
cb:06:78:37:1a:c7:e5:fe:33:66:86:b8:4a:79:fe:40:b6:63:
d6:0c:20:b1:5d:53:fb:10:ee:2b:19:2e:3c:11:63:70:1c:93:
19:3a:8d:7a:a7:b4:66:02:77:25:70:96:bd:27:6e:ad:0f:70:
78:6b:21:d5:cf:b7:4f:7f:e8:11:4e:a3:2a:22:b8:69:3f:39:
76:f8:e9:16:5a:49:db:15:95:13:78:57:e1:f9:7f:14:a0:77:
de:4c:04:63:6b:2d:dd:1d:15:52:1c:8e:2c:bb:08:3d:53:7b:
f7:3e:61:23:c5:f0:ca:25:d3:c9:a5:cd:b7:90:6e:5e:4a:50:
15:4f:69:16:51:cc:43:0f:77:a8:54:d5:20:90:b5:17:3a:c5:
26:37:8e:2b:42:6d:58:35:49:be:eb:c6:1a:5b:be:0b:bd:1b:
35:d1:1c:1a:98:cd:6f:3f:cd:a8:9e:8a:f2:15:01:f5:61:2b:
fe:63:ce:a2:74:c9:11:27:79:98:1a:87:0c:65:5e:29:d8:82:
37:c3:3f:6f:a4:f3:5d:98:d3:a4:52:5b:09:ea:20:8c:30:44:
e3:f3:cc:8f:95:94:36:12:2c:4d:fe:26:9d:13:34:ea:46:45:
8b:2a:e1:b2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpTPsPH4g4ONDihiQ7g5sIBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVlZmJmNmU2NjAxMjZmZjQ5MDRlMDk5Y2EwYWRlZGU5ZjZj
ZWE1NzAwHhcNMjUxMTA1MDkwMDEzWhcNMjUxMTA2MDkwMDEzWjAzMTEwLwYDVQQD
EyhhYzBmM2I1ZDAxNTEyMTY3NDdjYjIzNDNjNDc2MDI2MGVmZjdiZDc3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2A2vcXu2RONUvgRuIp2V9j5Q43t4
+J8NXDTqIGfX6M7jN4cjFEEWaoI1vEyKprDtzNyiJtuoHMwUKf27jVJLS+kfO8ZO
I+zOQq8UlPJG6/9l8aTXrZNR1wzFi9+8e/ZCSV7xuQIc+I7EGU4OBBAk92lDd8z2
rWv5OkhggiUvF653I9jyf6dFchnEc0di3tdUZj6W/m9ctd2ke1BFb/vfwPjiDW5N
y/OoDu3nNsDsDlondWaTFkAXXUVtdug85TXLe5vXDnlTvhOIVnGu++znfNlggJa2
+RyQ8M9GFYJSiiwgJBa/+RyrsNzqNoysefu/yqi8gGZ2Qj/Y3y9+xzl0FQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKwPO10BUSFnR8sjQ8R2AmDv9713MB8GA1UdIwQY
MBaAFF779uZgEm/0kE4JnKCt7en2zqVwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWHZ2MjVtQVNiX1NRVGdtY29LM3Q2ZmJPcFhBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC81Mjc4MmEtM2RlMy00ODI5LTgxOTkt
NDRmZGNlYzVkMjg4LzEvWHZ2MjVtQVNiX1NRVGdtY29LM3Q2ZmJPcFhBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC81Mjc4MmEtM2RlMy00ODI5LTgxOTktNDRmZGNlYzVkMjg4
LzEvWHZ2MjVtQVNiX1NRVGdtY29LM3Q2ZmJPcFhBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmUeeimom
7/XzLNRaXmytHbcdywZ4NxrH5f4zZoa4Snn+QLZj1gwgsV1T+xDuKxkuPBFjcByT
GTqNeqe0ZgJ3JXCWvSdurQ9weGsh1c+3T3/oEU6jKiK4aT85dvjpFlpJ2xWVE3hX
4fl/FKB33kwEY2st3R0VUhyOLLsIPVN79z5hI8XwyiXTyaXNt5BuXkpQFU9pFlHM
Qw93qFTVIJC1FzrFJjeOK0JtWDVJvuvGGlu+C70bNdEcGpjNbz/NqJ6K8hUB9WEr
/mPOonTJESd5mBqHDGVeKdiCN8M/b6TzXZjTpFJbCeogjDBE4/PMj5WUNhIsTf4m
nRM06kZFiyrhsg==
-----END CERTIFICATE-----
Generated at Wed Nov 5 10:52:37 2025 by rpki-client