Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/b71966-307d-440b-b136-648dcccee015/1/XebyWkVRz4ssLvOVlGiNrwqbJWs.mft
File: XebyWkVRz4ssLvOVlGiNrwqbJWs.mft (raw, json)
Hash identifier: dbcElO9yzngTbHqGG4+IKr67MHfkdYRI6vvF2s0LLUc=
Subject key identifier: 4B:27:6A:F9:9A:36:73:09:54:57:D0:5F:94:0E:B2:E8:6A:16:5F:26
Authority key identifier: 5D:E6:F2:5A:45:51:CF:8B:2C:2E:F3:95:94:68:8D:AF:0A:9B:25:6B
Certificate issuer: /CN=5de6f25a4551cf8b2c2ef39594688daf0a9b256b
Certificate serial: 019A4E4FB7169AB1DBF2B1E7CC6302839E46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XebyWkVRz4ssLvOVlGiNrwqbJWs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/b71966-307d-440b-b136-648dcccee015/1/XebyWkVRz4ssLvOVlGiNrwqbJWs.mft
Manifest number: 15FC
Signing time: Tue 04 Nov 2025 10:00:38 +0000
Manifest this update: Tue 04 Nov 2025 10:00:38 +0000
Manifest next update: Wed 05 Nov 2025 10:00:38 +0000
Files and hashes: 1: XebyWkVRz4ssLvOVlGiNrwqbJWs.crl (hash: WP2UyBBLsPf/Wq2B6kuJ37DxnKlse7kTkKWhPNAe4iU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/b71966-307d-440b-b136-648dcccee015/1/XebyWkVRz4ssLvOVlGiNrwqbJWs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/b71966-307d-440b-b136-648dcccee015/1/XebyWkVRz4ssLvOVlGiNrwqbJWs.mft
rsync://rpki.ripe.net/repository/DEFAULT/XebyWkVRz4ssLvOVlGiNrwqbJWs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:4f:b7:16:9a:b1:db:f2:b1:e7:cc:63:02:83:9e:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5de6f25a4551cf8b2c2ef39594688daf0a9b256b
Validity
Not Before: Nov 4 10:00:38 2025 GMT
Not After : Nov 5 10:00:38 2025 GMT
Subject: CN=4b276af99a3673095457d05f940eb2e86a165f26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:92:38:52:de:14:78:db:89:c8:14:39:e7:19:
79:54:d1:f7:92:dc:2f:ea:c0:8e:29:f8:8e:0c:58:
26:ec:0b:d0:ee:44:fd:df:1a:32:b9:a2:6a:7f:e6:
9b:dc:9b:6a:7b:b8:ea:d5:81:eb:de:d7:5d:85:4c:
01:80:24:3f:7f:12:e0:85:0e:21:6b:8a:ed:ca:eb:
90:ae:c1:29:ef:f4:fd:9c:26:73:96:fc:bd:6d:f4:
40:a4:b1:ef:26:3e:47:7e:89:0d:3f:16:87:d5:d5:
9d:16:6c:ad:cc:8b:9a:3d:4b:b7:7c:0c:ad:5a:24:
a2:67:81:4c:df:88:d3:42:8c:88:1e:e5:2f:c1:63:
aa:f8:0d:8a:37:95:61:2e:67:e9:af:89:fb:c4:4c:
e7:ce:28:12:81:7e:26:c1:7e:24:19:23:55:45:b9:
32:63:b0:7d:28:f5:3a:a7:89:33:84:57:91:19:af:
6f:16:22:56:3f:e7:20:94:55:f8:d0:0b:ac:5a:62:
ba:50:1c:b3:2f:dd:ea:e0:6f:99:e7:d2:b3:d0:69:
6a:9f:cb:9c:69:8e:b2:21:62:e1:9b:55:b5:5a:75:
84:90:5d:d5:55:54:69:d2:7f:9b:c0:3c:27:11:9c:
1f:23:b4:aa:bb:7c:c6:d4:2e:14:ae:2f:fe:aa:28:
e8:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:27:6A:F9:9A:36:73:09:54:57:D0:5F:94:0E:B2:E8:6A:16:5F:26
X509v3 Authority Key Identifier:
keyid:5D:E6:F2:5A:45:51:CF:8B:2C:2E:F3:95:94:68:8D:AF:0A:9B:25:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XebyWkVRz4ssLvOVlGiNrwqbJWs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/b71966-307d-440b-b136-648dcccee015/1/XebyWkVRz4ssLvOVlGiNrwqbJWs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/b71966-307d-440b-b136-648dcccee015/1/XebyWkVRz4ssLvOVlGiNrwqbJWs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:58:50:6b:eb:97:90:ea:e2:85:d6:73:0e:1f:e6:77:b1:c4:
56:43:75:d7:b5:6f:9a:63:46:60:89:92:c5:68:b2:45:8f:9d:
95:73:b3:f0:07:b2:4f:18:f5:91:9e:b5:20:5f:7e:05:1d:f3:
49:c2:8b:09:33:0b:d7:84:45:dd:5b:02:b4:fd:08:00:21:81:
58:c1:fa:bd:35:6c:ff:c1:4d:53:57:23:b0:b8:80:ed:82:b7:
d3:82:55:f7:e3:9b:79:8e:65:b8:03:d2:10:d3:43:66:02:0a:
68:83:99:d2:93:7e:23:44:99:d6:ea:30:e1:6b:3c:24:c8:1a:
fe:32:5a:5b:15:2b:4e:c7:ad:10:95:f8:5a:21:70:0e:64:a6:
c8:4e:57:75:2d:6f:0f:4a:e4:0e:4e:06:11:14:9d:f4:d3:16:
2c:2a:85:cb:80:24:c1:1a:86:a2:1a:a2:be:07:e6:29:a1:e7:
80:3b:f9:fe:28:cd:08:58:14:bf:2e:ed:9c:36:90:25:fd:4e:
78:0d:d3:22:f0:f3:cf:26:78:68:60:12:55:ec:22:73:50:11:
05:95:6a:45:14:24:7e:49:ee:48:c4:0f:1e:c5:0f:b4:e5:62:
6a:88:56:b3:db:23:f6:dd:b0:75:1e:cd:ae:10:df:e3:95:19:
a4:06:19:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:16:43 2025 by rpki-client