Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/06684c-9955-424b-ace8-23797aeabb0f/1/xbqElpIUKuxW19DdyN1N20HPg8E.mft
File: xbqElpIUKuxW19DdyN1N20HPg8E.mft (raw, json)
Hash identifier: PmwcTJv0ckF1MzU8YFq8Y6EifadBEu85IdCkpxAeCJQ=
Subject key identifier: E5:F8:1E:C8:ED:0E:F8:BF:06:6F:D8:13:1D:D5:24:FA:27:77:2F:AB
Authority key identifier: C5:BA:84:96:92:14:2A:EC:56:D7:D0:DD:C8:DD:4D:DB:41:CF:83:C1
Certificate issuer: /CN=c5ba849692142aec56d7d0ddc8dd4ddb41cf83c1
Certificate serial: 0199FC5870EB34E14DBD07E813BC2B29A512
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xbqElpIUKuxW19DdyN1N20HPg8E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/06684c-9955-424b-ace8-23797aeabb0f/1/xbqElpIUKuxW19DdyN1N20HPg8E.mft
Manifest number: 0FE2
Signing time: Sun 19 Oct 2025 12:01:18 +0000
Manifest this update: Sun 19 Oct 2025 12:01:18 +0000
Manifest next update: Mon 20 Oct 2025 12:01:18 +0000
Files and hashes: 1: xbqElpIUKuxW19DdyN1N20HPg8E.crl (hash: C4MwULJlEFw+UCMaGqZ2o0N1du6eD89T4SyC7PutYD8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/06684c-9955-424b-ace8-23797aeabb0f/1/xbqElpIUKuxW19DdyN1N20HPg8E.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/06684c-9955-424b-ace8-23797aeabb0f/1/xbqElpIUKuxW19DdyN1N20HPg8E.mft
rsync://rpki.ripe.net/repository/DEFAULT/xbqElpIUKuxW19DdyN1N20HPg8E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:70:eb:34:e1:4d:bd:07:e8:13:bc:2b:29:a5:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5ba849692142aec56d7d0ddc8dd4ddb41cf83c1
Validity
Not Before: Oct 19 12:01:18 2025 GMT
Not After : Oct 20 12:01:18 2025 GMT
Subject: CN=e5f81ec8ed0ef8bf066fd8131dd524fa27772fab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:f5:7b:4b:6a:5b:28:62:9c:12:46:a6:44:09:
07:82:9a:2a:5f:91:0b:e7:82:35:9e:ac:f3:93:5e:
d3:b0:87:ef:d2:3b:f7:ac:c0:ab:9a:5f:0c:65:d5:
fe:ac:11:e0:bb:a2:f3:0f:bd:70:1f:00:54:70:2b:
d2:d6:be:d1:21:af:21:34:43:85:2f:04:cc:d9:33:
24:c3:df:07:a5:4d:49:1d:96:7c:c4:79:0b:d3:f8:
61:c1:2a:f1:47:ec:57:cb:dd:ca:fd:8f:0a:98:c6:
66:8c:c7:43:81:1c:f7:41:c8:4d:2f:52:92:ee:56:
86:33:31:b7:0a:f9:1d:3b:d4:96:91:b8:18:97:87:
33:b3:cd:64:85:87:1f:18:05:60:6b:ca:ff:b8:a2:
5a:39:7e:16:26:15:b7:ea:cc:a3:9c:e3:b1:c7:23:
f4:7f:9b:5b:2a:6b:25:10:11:04:04:b2:50:25:de:
6e:e2:0c:65:bb:af:d0:7d:d7:f3:ab:a5:bb:b4:a2:
f2:82:ee:f9:ea:db:f7:75:b3:b5:af:fb:17:aa:05:
f5:2a:af:f5:b3:fe:b5:40:2a:04:93:12:64:c2:34:
9c:81:9d:b6:ad:dc:d4:46:9c:91:40:a0:c6:2e:21:
f8:a9:2b:6f:be:ae:88:c5:d9:eb:e7:67:d1:2a:82:
90:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:F8:1E:C8:ED:0E:F8:BF:06:6F:D8:13:1D:D5:24:FA:27:77:2F:AB
X509v3 Authority Key Identifier:
keyid:C5:BA:84:96:92:14:2A:EC:56:D7:D0:DD:C8:DD:4D:DB:41:CF:83:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xbqElpIUKuxW19DdyN1N20HPg8E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/06684c-9955-424b-ace8-23797aeabb0f/1/xbqElpIUKuxW19DdyN1N20HPg8E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/06684c-9955-424b-ace8-23797aeabb0f/1/xbqElpIUKuxW19DdyN1N20HPg8E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:e2:22:0c:31:d6:bc:38:96:6a:cc:bc:b2:dc:34:94:ad:d9:
93:09:fe:52:26:3b:5d:07:f7:73:3a:2a:c4:44:78:ad:06:58:
6a:de:16:3f:12:58:99:1c:f6:ad:16:44:fa:c3:5d:f3:03:e9:
7e:97:b8:13:eb:8f:0d:e7:48:0a:4a:44:22:39:1e:0a:38:65:
67:ce:bb:db:8a:b8:4f:bf:37:81:fc:b3:cb:ef:e1:90:6f:34:
84:58:09:ef:81:74:2e:ba:c8:36:05:54:0b:dd:c6:ea:2d:3d:
98:c4:9c:53:df:8f:a4:26:76:71:d2:fd:e6:51:d2:fd:a6:9c:
44:17:f4:fd:24:5a:df:a0:cd:07:ef:34:f9:f3:6d:88:fa:05:
13:51:60:d5:46:7a:ad:ae:41:28:7c:7b:99:12:9f:f5:04:62:
a2:b1:a6:2f:b8:18:de:50:bc:9e:0e:bb:d9:80:86:64:43:92:
dd:b4:84:0a:87:c7:cf:74:f7:11:ae:b8:11:3b:8c:4d:69:80:
31:de:e7:d9:f9:df:15:2c:de:0e:01:60:d4:67:11:aa:f9:b5:
48:98:fb:fe:5f:35:64:c9:6c:51:d4:06:cf:0d:e8:a7:64:bd:
d9:e9:a4:eb:9f:ce:e3:98:4b:25:c0:d2:d1:6c:89:15:f7:21:
1f:f2:b5:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:23:18 2025 by rpki-client