
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/303a43-1003-42d6-96b0-66b86fc781a2/1/XjPdpt78k8-CUWSU2fNIjWxK2dw.mft
File: XjPdpt78k8-CUWSU2fNIjWxK2dw.mft (raw, json)
Hash identifier: nkxokIVl0JaIQJnKtuPXZUBD6Kj/wrRQbnhgJb4q0g0=
Subject key identifier: 6F:31:FE:20:48:43:0A:64:DD:EE:03:70:6F:42:E1:52:AF:69:B2:C5
Authority key identifier: 5E:33:DD:A6:DE:FC:93:CF:82:51:64:94:D9:F3:48:8D:6C:4A:D9:DC
Certificate issuer: /CN=5e33dda6defc93cf82516494d9f3488d6c4ad9dc
Certificate serial: 0199FEB508B5D944D449B872978BF3D6EB4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XjPdpt78k8-CUWSU2fNIjWxK2dw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/303a43-1003-42d6-96b0-66b86fc781a2/1/XjPdpt78k8-CUWSU2fNIjWxK2dw.mft
Manifest number: 094A
Signing time: Sun 19 Oct 2025 23:01:41 +0000
Manifest this update: Sun 19 Oct 2025 23:01:41 +0000
Manifest next update: Mon 20 Oct 2025 23:01:41 +0000
Files and hashes: 1: XjPdpt78k8-CUWSU2fNIjWxK2dw.crl (hash: kMI58BDeRcp97x8vBrDGx4LX9wGoB6m1VGu88O7ToTM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/303a43-1003-42d6-96b0-66b86fc781a2/1/XjPdpt78k8-CUWSU2fNIjWxK2dw.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/303a43-1003-42d6-96b0-66b86fc781a2/1/XjPdpt78k8-CUWSU2fNIjWxK2dw.mft
rsync://rpki.ripe.net/repository/DEFAULT/XjPdpt78k8-CUWSU2fNIjWxK2dw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:b5:08:b5:d9:44:d4:49:b8:72:97:8b:f3:d6:eb:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e33dda6defc93cf82516494d9f3488d6c4ad9dc
Validity
Not Before: Oct 19 23:01:41 2025 GMT
Not After : Oct 20 23:01:41 2025 GMT
Subject: CN=6f31fe2048430a64ddee03706f42e152af69b2c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:15:12:fb:58:e1:e9:96:0e:9d:23:67:0f:ac:
44:84:b6:70:8f:24:cd:b9:d2:6a:2b:02:c6:67:ed:
c1:b6:49:ce:09:8e:74:10:1c:52:ff:d5:d0:6e:7b:
65:6c:43:77:1d:1d:d9:f9:d4:aa:ce:0f:66:39:8c:
db:8b:be:bf:be:55:cb:c9:8f:e3:d5:63:03:8f:34:
56:d0:e3:55:4b:2c:83:c7:ea:29:24:93:64:37:3e:
26:52:7e:9a:1e:e9:43:04:45:16:fe:b0:07:ed:b2:
3d:25:62:2e:66:03:22:34:eb:3b:02:75:4d:79:10:
fc:d8:ad:8d:0b:6f:d5:3d:89:d5:ac:05:ea:64:4c:
d5:b3:db:d4:2d:dc:e9:56:52:57:32:a9:30:6d:23:
ac:3c:26:ff:37:10:36:d3:0f:e6:26:1b:c3:c2:67:
97:dd:f6:0e:4d:81:ec:42:5f:8b:7d:a5:ca:56:21:
2b:a0:62:2d:b9:0e:8a:dd:1d:c3:b8:78:b5:0d:ed:
97:7d:e7:1b:22:34:19:0b:d1:a9:9c:92:74:06:14:
40:16:fc:9f:1d:63:e7:6a:60:a9:e8:11:dd:3e:4f:
4d:f5:4e:74:95:e0:a9:dc:f1:5a:53:f0:e2:7c:df:
64:1d:e6:da:15:b2:20:cf:e8:1c:f5:99:50:a8:cb:
ee:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:31:FE:20:48:43:0A:64:DD:EE:03:70:6F:42:E1:52:AF:69:B2:C5
X509v3 Authority Key Identifier:
keyid:5E:33:DD:A6:DE:FC:93:CF:82:51:64:94:D9:F3:48:8D:6C:4A:D9:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XjPdpt78k8-CUWSU2fNIjWxK2dw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/303a43-1003-42d6-96b0-66b86fc781a2/1/XjPdpt78k8-CUWSU2fNIjWxK2dw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/303a43-1003-42d6-96b0-66b86fc781a2/1/XjPdpt78k8-CUWSU2fNIjWxK2dw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:fb:2d:c0:35:7e:04:2e:c2:32:53:15:90:cb:ce:08:f9:dd:
fe:4f:84:41:2d:1c:bf:a7:4c:91:e1:00:76:56:68:28:56:68:
f8:a2:95:d9:65:dd:b6:ef:95:03:5c:a3:8c:15:9f:19:20:69:
30:92:47:a2:37:3c:2f:03:6e:de:43:3b:5e:bc:95:c2:ee:ea:
e9:1a:4a:8b:10:78:37:5a:78:10:c3:35:32:5a:db:ca:60:f4:
d3:0d:6d:91:57:5d:8e:b6:ee:5a:b7:36:55:47:12:52:5d:1f:
9c:4b:24:a8:38:7e:07:04:4d:b7:3f:5f:8d:b1:83:8c:0a:9f:
be:40:f9:d9:28:bf:d3:8c:09:14:2d:c5:4a:f6:09:de:b5:aa:
fd:8b:c2:1d:2b:38:7f:17:ab:61:7c:fa:eb:9c:47:d0:db:a6:
68:4b:01:57:61:54:07:35:65:49:18:cc:f0:c5:3e:0f:ff:c3:
ad:fe:e8:f1:91:94:18:ac:c3:01:b5:0a:c4:26:87:96:10:7d:
89:8b:8d:9d:c8:8f:7e:90:e8:92:f0:8e:1b:ce:7d:71:06:68:
1d:6f:1d:b2:0e:8c:be:45:8c:b7:b8:95:ec:9c:20:cf:56:6f:
2d:77:89:3d:2c:2a:51:58:b9:3d:52:29:30:30:c0:41:3d:2d:
a7:1a:aa:60
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn+tQi12UTUSbhyl4vz1utLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVlMzNkZGE2ZGVmYzkzY2Y4MjUxNjQ5NGQ5ZjM0ODhkNmM0
YWQ5ZGMwHhcNMjUxMDE5MjMwMTQxWhcNMjUxMDIwMjMwMTQxWjAzMTEwLwYDVQQD
Eyg2ZjMxZmUyMDQ4NDMwYTY0ZGRlZTAzNzA2ZjQyZTE1MmFmNjliMmM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7RUS+1jh6ZYOnSNnD6xEhLZwjyTN
udJqKwLGZ+3BtknOCY50EBxS/9XQbntlbEN3HR3Z+dSqzg9mOYzbi76/vlXLyY/j
1WMDjzRW0ONVSyyDx+opJJNkNz4mUn6aHulDBEUW/rAH7bI9JWIuZgMiNOs7AnVN
eRD82K2NC2/VPYnVrAXqZEzVs9vULdzpVlJXMqkwbSOsPCb/NxA20w/mJhvDwmeX
3fYOTYHsQl+LfaXKViEroGItuQ6K3R3DuHi1De2XfecbIjQZC9GpnJJ0BhRAFvyf
HWPnamCp6BHdPk9N9U50leCp3PFaU/DifN9kHebaFbIgz+gc9ZlQqMvuawIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG8x/iBIQwpk3e4DcG9C4VKvabLFMB8GA1UdIwQY
MBaAFF4z3abe/JPPglFklNnzSI1sStncMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWGpQZHB0NzhrOC1DVVdTVTJmTklqV3hLMmR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS8zMDNhNDMtMTAwMy00MmQ2LTk2YjAt
NjZiODZmYzc4MWEyLzEvWGpQZHB0NzhrOC1DVVdTVTJmTklqV3hLMmR3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZS8zMDNhNDMtMTAwMy00MmQ2LTk2YjAtNjZiODZmYzc4MWEy
LzEvWGpQZHB0NzhrOC1DVVdTVTJmTklqV3hLMmR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcfstwDV+
BC7CMlMVkMvOCPnd/k+EQS0cv6dMkeEAdlZoKFZo+KKV2WXdtu+VA1yjjBWfGSBp
MJJHojc8LwNu3kM7XryVwu7q6RpKixB4N1p4EMM1MlrbymD00w1tkVddjrbuWrc2
VUcSUl0fnEskqDh+BwRNtz9fjbGDjAqfvkD52Si/04wJFC3FSvYJ3rWq/YvCHSs4
fxerYXz665xH0NumaEsBV2FUBzVlSRjM8MU+D//Drf7o8ZGUGKzDAbUKxCaHlhB9
iYuNnciPfpDokvCOG859cQZoHW8dsg6MvkWMt7iV7Jwgz1ZvLXeJPSwqUVi5PVIp
MDDAQT0tpxqqYA==
-----END CERTIFICATE-----
Generated at Mon Oct 20 04:43:38 2025 by rpki-client