Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/52740e-5cb0-4814-a21a-a0967a435a6a/1/XbeSdWWd2WHHQr8h2NyhhKRDDYU.mft
File: XbeSdWWd2WHHQr8h2NyhhKRDDYU.mft (raw, json)
Hash identifier: tPMM44B1u1Z/bZZZzVrMkd/cDjzBh2H50/XRmT1OiMY=
Subject key identifier: 01:FA:9A:82:2C:9B:88:91:3D:59:89:47:07:60:3D:98:ED:40:7C:E0
Authority key identifier: 5D:B7:92:75:65:9D:D9:61:C7:42:BF:21:D8:DC:A1:84:A4:43:0D:85
Certificate issuer: /CN=5db79275659dd961c742bf21d8dca184a4430d85
Certificate serial: 019A4EF43B8C7BD01D0720170AD97EBCD30B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XbeSdWWd2WHHQr8h2NyhhKRDDYU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/52740e-5cb0-4814-a21a-a0967a435a6a/1/XbeSdWWd2WHHQr8h2NyhhKRDDYU.mft
Manifest number: 0D89
Signing time: Tue 04 Nov 2025 13:00:20 +0000
Manifest this update: Tue 04 Nov 2025 13:00:20 +0000
Manifest next update: Wed 05 Nov 2025 13:00:20 +0000
Files and hashes: 1: XbeSdWWd2WHHQr8h2NyhhKRDDYU.crl (hash: OII9baodhhoOINIZb/Uwg8XLTlNwlu93scDThqf/knE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/52740e-5cb0-4814-a21a-a0967a435a6a/1/XbeSdWWd2WHHQr8h2NyhhKRDDYU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/52740e-5cb0-4814-a21a-a0967a435a6a/1/XbeSdWWd2WHHQr8h2NyhhKRDDYU.mft
rsync://rpki.ripe.net/repository/DEFAULT/XbeSdWWd2WHHQr8h2NyhhKRDDYU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:3b:8c:7b:d0:1d:07:20:17:0a:d9:7e:bc:d3:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5db79275659dd961c742bf21d8dca184a4430d85
Validity
Not Before: Nov 4 13:00:20 2025 GMT
Not After : Nov 5 13:00:20 2025 GMT
Subject: CN=01fa9a822c9b88913d59894707603d98ed407ce0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:be:8b:13:29:3f:fa:d8:c6:17:cd:87:f3:9d:
ec:fc:43:3e:fb:1c:5e:e5:50:80:bd:e6:9e:16:57:
fa:5a:f9:38:ab:68:09:db:c3:87:37:92:26:43:d7:
99:fb:74:59:c1:6c:51:83:a1:c9:6f:e1:f1:91:11:
07:93:16:73:06:52:d0:cc:8c:2d:e9:80:8c:39:0a:
ed:cc:a8:83:87:49:6f:ba:74:4b:a7:45:34:63:7f:
d2:17:4f:67:24:34:cd:b5:6f:cb:2d:94:eb:c1:ce:
8d:c7:a6:55:eb:5e:e0:57:27:fa:e5:46:f7:5d:53:
b9:52:e1:20:ce:77:7d:79:b9:78:0c:51:44:87:85:
56:d9:96:3a:ba:ed:67:eb:19:91:40:30:66:dc:fd:
86:4f:e5:48:50:f8:5f:86:bb:d6:16:b2:7d:29:c5:
5b:49:9b:8d:2d:29:01:fa:81:04:83:bd:57:aa:ba:
21:3f:af:1d:79:a7:f8:06:fe:1a:75:6f:47:e4:f8:
f1:a2:c0:c1:49:27:15:ea:b2:8a:be:b5:96:b4:95:
b8:4a:e0:5d:29:ac:9f:87:90:d4:fa:2c:83:85:0e:
3d:68:6f:6d:e5:a9:6d:bc:66:da:7c:0a:d0:73:1b:
2a:f7:7c:52:85:fd:ff:7c:cc:9d:36:f3:3c:7b:40:
a1:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:FA:9A:82:2C:9B:88:91:3D:59:89:47:07:60:3D:98:ED:40:7C:E0
X509v3 Authority Key Identifier:
keyid:5D:B7:92:75:65:9D:D9:61:C7:42:BF:21:D8:DC:A1:84:A4:43:0D:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XbeSdWWd2WHHQr8h2NyhhKRDDYU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/52740e-5cb0-4814-a21a-a0967a435a6a/1/XbeSdWWd2WHHQr8h2NyhhKRDDYU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/52740e-5cb0-4814-a21a-a0967a435a6a/1/XbeSdWWd2WHHQr8h2NyhhKRDDYU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:96:e3:8d:0b:d2:48:2b:34:d6:c9:57:06:e1:1e:28:9b:f9:
26:a0:93:5e:04:69:2e:0c:1a:79:3a:2d:71:cb:de:d2:47:26:
5b:ba:56:65:d7:79:d6:d8:53:29:5a:36:4f:2d:50:05:de:d9:
0a:11:ea:29:e4:86:94:76:7b:fa:a7:f1:fe:7e:81:cc:59:2f:
a3:45:23:88:fa:71:ba:02:e1:ef:9b:e7:35:f2:49:bf:26:62:
b6:a3:c2:87:24:28:2d:f5:67:16:b0:6c:f0:35:1e:bc:d3:6d:
ac:ab:5a:12:92:d4:3a:6f:8d:45:53:93:35:b8:39:85:9c:8f:
0f:e4:9d:c6:69:60:93:1d:41:ca:f2:98:db:58:c1:aa:bc:af:
04:29:95:46:1e:55:69:cc:77:4f:f2:ac:00:16:d3:58:87:e1:
da:54:10:18:fb:84:c6:26:f0:c4:a8:f9:2b:ce:22:64:ea:25:
c0:56:78:f2:5e:7d:82:9e:42:82:8c:01:f8:50:79:d3:41:eb:
55:cc:bb:46:a3:86:58:d9:61:af:35:b0:36:19:5d:d5:28:47:
d6:9c:d2:24:de:7f:02:c4:58:f9:d7:fd:d4:a8:25:d3:d7:81:
ef:a6:19:f3:d3:8a:64:e7:84:98:88:79:1e:99:50:a7:c9:14:
c8:c3:1b:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:05:27 2025 by rpki-client