Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/c06a23-0163-47a5-8608-30c0a111cd55/1/Xqh5CgjI4NhFiNlNGlG8qavnWB0.mft
File: Xqh5CgjI4NhFiNlNGlG8qavnWB0.mft (raw, json)
Hash identifier: QlwffN7tPiMVq0Rh06Kz/rjElbUnF2Bk1Pp1sxogIJo=
Subject key identifier: 0B:30:B2:1C:0F:BA:57:3F:69:44:2F:6E:3E:10:1F:34:01:1E:81:DD
Authority key identifier: 5E:A8:79:0A:08:C8:E0:D8:45:88:D9:4D:1A:51:BC:A9:AB:E7:58:1D
Certificate issuer: /CN=5ea8790a08c8e0d84588d94d1a51bca9abe7581d
Certificate serial: 0199FC8F92A3DF06DA67C58D506C10721C6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xqh5CgjI4NhFiNlNGlG8qavnWB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/c06a23-0163-47a5-8608-30c0a111cd55/1/Xqh5CgjI4NhFiNlNGlG8qavnWB0.mft
Manifest number: 14F1
Signing time: Sun 19 Oct 2025 13:01:31 +0000
Manifest this update: Sun 19 Oct 2025 13:01:31 +0000
Manifest next update: Mon 20 Oct 2025 13:01:31 +0000
Files and hashes: 1: Xqh5CgjI4NhFiNlNGlG8qavnWB0.crl (hash: DhE21tpznVM/KBpvJmPt5NpDeenBMBsqsRiPUuz3KvQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/c06a23-0163-47a5-8608-30c0a111cd55/1/Xqh5CgjI4NhFiNlNGlG8qavnWB0.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/c06a23-0163-47a5-8608-30c0a111cd55/1/Xqh5CgjI4NhFiNlNGlG8qavnWB0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xqh5CgjI4NhFiNlNGlG8qavnWB0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:92:a3:df:06:da:67:c5:8d:50:6c:10:72:1c:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ea8790a08c8e0d84588d94d1a51bca9abe7581d
Validity
Not Before: Oct 19 13:01:31 2025 GMT
Not After : Oct 20 13:01:31 2025 GMT
Subject: CN=0b30b21c0fba573f69442f6e3e101f34011e81dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:2e:4f:11:e7:87:c0:16:d9:71:5f:a6:84:a4:
4d:59:4c:99:d2:b4:ce:12:ee:7a:c4:25:c5:d6:36:
4c:8b:78:48:63:07:65:4f:b0:ea:16:0a:c2:93:26:
5a:21:8a:a0:33:7f:30:18:97:13:ee:e0:43:b9:72:
a6:fd:40:1a:f5:d0:77:1b:ad:04:06:0f:f8:f7:19:
a7:b7:71:76:bc:b7:b2:9b:99:53:04:bc:c6:10:82:
9d:c0:bf:9b:2e:a9:13:8d:a0:46:85:cc:7a:c2:1b:
d8:b9:43:33:60:a8:34:c1:f9:e2:4b:91:08:f9:70:
3a:d5:cf:08:15:45:d6:4e:14:a4:98:9f:db:30:2c:
73:4f:ad:ad:4b:99:8b:61:0a:55:d8:dd:7b:9a:a2:
4c:1f:72:b0:1b:b4:d0:4b:b6:36:17:60:d9:8b:05:
2d:20:ac:11:d2:19:4b:1c:b3:51:67:4f:40:bb:d7:
16:7f:c4:79:18:dc:20:74:f3:2a:cb:23:f4:78:23:
95:ee:e1:fc:e3:56:8c:90:80:64:3c:67:d4:da:fe:
5a:13:fa:cc:7e:73:1b:ed:9d:f8:2b:e1:b4:f1:54:
e9:cb:71:ff:43:87:70:ac:cf:1e:94:da:4f:1c:2b:
e9:a1:8c:d4:11:91:54:ac:c3:13:86:24:71:de:da:
34:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:30:B2:1C:0F:BA:57:3F:69:44:2F:6E:3E:10:1F:34:01:1E:81:DD
X509v3 Authority Key Identifier:
keyid:5E:A8:79:0A:08:C8:E0:D8:45:88:D9:4D:1A:51:BC:A9:AB:E7:58:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xqh5CgjI4NhFiNlNGlG8qavnWB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/c06a23-0163-47a5-8608-30c0a111cd55/1/Xqh5CgjI4NhFiNlNGlG8qavnWB0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/c06a23-0163-47a5-8608-30c0a111cd55/1/Xqh5CgjI4NhFiNlNGlG8qavnWB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:f2:ff:40:85:c6:5b:b2:da:b0:e7:83:98:9d:51:ec:04:d2:
97:02:8f:21:3d:8b:8f:63:07:17:32:ff:8c:ba:1a:e3:6a:a0:
b9:ca:a4:e1:15:25:f6:0e:51:72:58:fa:f9:ac:89:60:f4:15:
15:44:2e:2f:50:b4:7f:d2:83:f9:bc:99:f4:4f:1e:37:74:c7:
f1:e2:58:dc:6d:2c:2f:74:8c:e4:a7:f0:a5:50:cc:29:7f:f8:
00:36:cc:76:2e:79:21:22:a0:f5:1a:0a:a4:ec:6a:46:59:bb:
f7:65:6b:1f:5b:a5:c9:1d:ea:b6:61:f9:41:fb:d8:b8:fe:f5:
43:33:c3:e4:93:2a:ed:6a:59:96:70:86:e9:84:a3:03:a1:ef:
38:da:2e:41:37:b9:17:9e:ec:b8:2e:23:da:f7:67:03:06:33:
02:b3:41:85:7f:54:79:e2:4f:23:29:b3:5e:df:66:16:9d:17:
7c:ba:32:7a:47:8b:98:e3:9d:bf:2e:85:02:b7:9c:cd:25:b2:
2f:98:d5:56:41:0a:2c:ca:f8:20:71:b2:a8:e5:40:70:ae:da:
dc:d3:98:91:24:23:7f:02:26:6b:ee:3b:a4:12:f1:de:ab:56:
c9:8b:d7:e2:9f:5f:e7:79:35:52:81:dc:17:06:90:ba:7e:b2:
e8:4f:f0:4f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8j5Kj3wbaZ8WNUGwQchxqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVlYTg3OTBhMDhjOGUwZDg0NTg4ZDk0ZDFhNTFiY2E5YWJl
NzU4MWQwHhcNMjUxMDE5MTMwMTMxWhcNMjUxMDIwMTMwMTMxWjAzMTEwLwYDVQQD
EygwYjMwYjIxYzBmYmE1NzNmNjk0NDJmNmUzZTEwMWYzNDAxMWU4MWRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAki5PEeeHwBbZcV+mhKRNWUyZ0rTO
Eu56xCXF1jZMi3hIYwdlT7DqFgrCkyZaIYqgM38wGJcT7uBDuXKm/UAa9dB3G60E
Bg/49xmnt3F2vLeym5lTBLzGEIKdwL+bLqkTjaBGhcx6whvYuUMzYKg0wfniS5EI
+XA61c8IFUXWThSkmJ/bMCxzT62tS5mLYQpV2N17mqJMH3KwG7TQS7Y2F2DZiwUt
IKwR0hlLHLNRZ09Au9cWf8R5GNwgdPMqyyP0eCOV7uH841aMkIBkPGfU2v5aE/rM
fnMb7Z34K+G08VTpy3H/Q4dwrM8elNpPHCvpoYzUEZFUrMMThiRx3to0GQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAswshwPulc/aUQvbj4QHzQBHoHdMB8GA1UdIwQY
MBaAFF6oeQoIyODYRYjZTRpRvKmr51gdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWHFoNUNnakk0TmhGaU5sTkdsRzhxYXZuV0IwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ny9jMDZhMjMtMDE2My00N2E1LTg2MDgt
MzBjMGExMTFjZDU1LzEvWHFoNUNnakk0TmhGaU5sTkdsRzhxYXZuV0IwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ny9jMDZhMjMtMDE2My00N2E1LTg2MDgtMzBjMGExMTFjZDU1
LzEvWHFoNUNnakk0TmhGaU5sTkdsRzhxYXZuV0IwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGPL/QIXG
W7LasOeDmJ1R7ATSlwKPIT2Lj2MHFzL/jLoa42qgucqk4RUl9g5Rclj6+ayJYPQV
FUQuL1C0f9KD+byZ9E8eN3TH8eJY3G0sL3SM5KfwpVDMKX/4ADbMdi55ISKg9RoK
pOxqRlm792VrH1ulyR3qtmH5QfvYuP71QzPD5JMq7WpZlnCG6YSjA6HvONouQTe5
F57suC4j2vdnAwYzArNBhX9UeeJPIymzXt9mFp0XfLoyekeLmOOdvy6FAreczSWy
L5jVVkEKLMr4IHGyqOVAcK7a3NOYkSQjfwIma+47pBLx3qtWyYvX4p9f53k1UoHc
FwaQun6y6E/wTw==
-----END CERTIFICATE-----
Generated at Sun Oct 19 18:19:11 2025 by rpki-client