Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/e2fa5c-8847-44e4-a95d-61e8dc1f1459/1/XPwPm_ekSrNWe6z5Ke5MnAV1MDM.mft
File: XPwPm_ekSrNWe6z5Ke5MnAV1MDM.mft (raw, json)
Hash identifier: gRhNdYtCpHqPb1JT+7YHeS+YAMk8Sti6ABBMed8yUuE=
Subject key identifier: E0:A2:B6:50:F4:6F:C8:C0:0F:20:C7:84:AA:7F:10:A2:86:E5:98:C2
Authority key identifier: 5C:FC:0F:9B:F7:A4:4A:B3:56:7B:AC:F9:29:EE:4C:9C:05:75:30:33
Certificate issuer: /CN=5cfc0f9bf7a44ab3567bacf929ee4c9c05753033
Certificate serial: 0199FE471EEB68DC0E1C8A038242187D9266
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XPwPm_ekSrNWe6z5Ke5MnAV1MDM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/e2fa5c-8847-44e4-a95d-61e8dc1f1459/1/XPwPm_ekSrNWe6z5Ke5MnAV1MDM.mft
Manifest number: 11A8
Signing time: Sun 19 Oct 2025 21:01:37 +0000
Manifest this update: Sun 19 Oct 2025 21:01:37 +0000
Manifest next update: Mon 20 Oct 2025 21:01:37 +0000
Files and hashes: 1: XPwPm_ekSrNWe6z5Ke5MnAV1MDM.crl (hash: MoQbXx8wVt1KzaALQq3LFWiYFLfIHn8l+CPKdumPJ8Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/e2fa5c-8847-44e4-a95d-61e8dc1f1459/1/XPwPm_ekSrNWe6z5Ke5MnAV1MDM.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/e2fa5c-8847-44e4-a95d-61e8dc1f1459/1/XPwPm_ekSrNWe6z5Ke5MnAV1MDM.mft
rsync://rpki.ripe.net/repository/DEFAULT/XPwPm_ekSrNWe6z5Ke5MnAV1MDM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:47:1e:eb:68:dc:0e:1c:8a:03:82:42:18:7d:92:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5cfc0f9bf7a44ab3567bacf929ee4c9c05753033
Validity
Not Before: Oct 19 21:01:37 2025 GMT
Not After : Oct 20 21:01:37 2025 GMT
Subject: CN=e0a2b650f46fc8c00f20c784aa7f10a286e598c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:b5:a6:c9:87:14:da:bb:0c:61:a8:4a:97:b1:
80:61:b3:fe:69:0e:07:61:20:d5:86:52:ee:1f:0d:
ea:2d:a0:d6:7c:95:7b:dd:79:4d:74:f1:88:17:08:
9e:a7:19:40:7e:6c:a6:ec:d1:a1:5e:47:1e:55:f4:
44:c7:b2:0c:49:8b:11:89:89:3a:bc:d0:4e:70:8b:
72:fb:94:62:17:ed:6a:20:a3:17:fb:50:ac:e6:c4:
ed:3c:86:14:4c:84:40:2a:db:1c:db:09:1d:52:3f:
c9:7e:6b:16:11:f8:f1:b5:5d:32:50:31:3a:b8:35:
ed:ba:3e:33:14:8d:74:58:8c:a0:c7:f2:c1:d8:1c:
2b:05:f4:36:0d:e5:ba:8d:e5:ce:49:00:2e:d4:b4:
6f:d5:4b:a6:a7:b3:7c:e3:f4:50:7b:64:4d:91:d1:
b9:5d:67:b8:90:b5:a7:79:66:1f:4c:ad:9f:b7:f7:
13:bd:bd:6c:fc:7c:8b:06:d9:c1:d0:2d:1c:70:0f:
77:25:9b:3a:5e:39:68:4f:75:b0:c1:24:4d:7e:ee:
99:16:c2:ad:3b:59:48:8f:d8:2a:16:ff:90:b0:65:
12:53:b4:f4:25:9a:ef:73:6d:25:7d:29:be:94:f8:
c6:c3:2f:70:2c:35:e6:0a:86:ea:09:74:c2:73:ef:
66:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:A2:B6:50:F4:6F:C8:C0:0F:20:C7:84:AA:7F:10:A2:86:E5:98:C2
X509v3 Authority Key Identifier:
keyid:5C:FC:0F:9B:F7:A4:4A:B3:56:7B:AC:F9:29:EE:4C:9C:05:75:30:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XPwPm_ekSrNWe6z5Ke5MnAV1MDM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/e2fa5c-8847-44e4-a95d-61e8dc1f1459/1/XPwPm_ekSrNWe6z5Ke5MnAV1MDM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/e2fa5c-8847-44e4-a95d-61e8dc1f1459/1/XPwPm_ekSrNWe6z5Ke5MnAV1MDM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:10:a8:60:ee:24:6f:a6:61:f1:60:ce:de:40:e8:cf:07:bd:
2e:a5:76:33:bd:e5:c4:7d:2c:f7:f4:e0:63:71:e0:24:80:4d:
94:73:98:37:0d:4e:80:e3:b4:d8:52:9c:c7:19:ff:c2:fc:57:
cd:bf:5b:25:53:e7:a6:e8:25:94:4c:c8:cc:f0:fe:8e:97:31:
88:73:6a:f9:72:8e:e1:fc:7b:0b:e3:6e:1c:58:19:fe:df:f0:
83:ea:0e:c7:73:83:d3:29:3a:ea:4a:b2:15:60:f6:89:0e:b6:
ac:d8:fd:7b:6e:33:73:b3:df:e4:82:58:b0:0f:20:8a:b2:55:
b3:3d:33:ef:2a:c2:1c:44:6a:a1:bf:d3:4e:dd:f5:a3:82:1e:
ab:e2:99:17:e3:61:bb:96:17:36:11:0c:01:85:dd:39:56:a9:
51:77:ba:9e:ca:06:52:4b:46:60:9e:d0:9f:40:ee:1b:69:eb:
32:14:97:ed:ab:03:c3:ff:31:72:50:ed:90:7c:16:12:12:a2:
5f:b9:4d:52:93:97:e9:75:ae:0a:75:28:7b:1b:3c:ed:8b:9a:
28:18:4a:2f:00:1c:aa:ea:99:a9:b1:43:d6:28:d1:cf:70:04:
4a:f0:97:3c:9b:49:13:60:ec:7c:d8:fb:45:01:30:2c:57:f5:
32:33:ae:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 05:13:56 2025 by rpki-client