Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/eb5454-7293-437f-ac0b-3a3b0296bb82/1/Xj5PqMmXGu8SNF_A430Ws0WbeDs.mft
File: Xj5PqMmXGu8SNF_A430Ws0WbeDs.mft (raw, json)
Hash identifier: OK0nm+WVnkNbfil6GOYQK+KLWhfo1KJdw1x+sC4rBtU=
Subject key identifier: 6B:97:97:DA:DD:30:A6:98:F8:8A:56:9D:D5:F2:90:93:F5:60:DA:79
Authority key identifier: 5E:3E:4F:A8:C9:97:1A:EF:12:34:5F:C0:E3:7D:16:B3:45:9B:78:3B
Certificate issuer: /CN=5e3e4fa8c9971aef12345fc0e37d16b3459b783b
Certificate serial: 0199FC58FB19B423ACD7B0C41679C37C7A17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xj5PqMmXGu8SNF_A430Ws0WbeDs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/eb5454-7293-437f-ac0b-3a3b0296bb82/1/Xj5PqMmXGu8SNF_A430Ws0WbeDs.mft
Manifest number: 0D38
Signing time: Sun 19 Oct 2025 12:01:53 +0000
Manifest this update: Sun 19 Oct 2025 12:01:53 +0000
Manifest next update: Mon 20 Oct 2025 12:01:53 +0000
Files and hashes: 1: Xj5PqMmXGu8SNF_A430Ws0WbeDs.crl (hash: g+TuSrXXQKuxUJQd1ZsQ4nu5/dJdXbEwZOtSBHBE+1A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/eb5454-7293-437f-ac0b-3a3b0296bb82/1/Xj5PqMmXGu8SNF_A430Ws0WbeDs.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/eb5454-7293-437f-ac0b-3a3b0296bb82/1/Xj5PqMmXGu8SNF_A430Ws0WbeDs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xj5PqMmXGu8SNF_A430Ws0WbeDs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:fb:19:b4:23:ac:d7:b0:c4:16:79:c3:7c:7a:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e3e4fa8c9971aef12345fc0e37d16b3459b783b
Validity
Not Before: Oct 19 12:01:53 2025 GMT
Not After : Oct 20 12:01:53 2025 GMT
Subject: CN=6b9797dadd30a698f88a569dd5f29093f560da79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:1b:b2:13:fe:c3:38:1a:77:fe:c0:da:52:7d:
5f:2d:8b:8f:35:9f:71:05:ad:ab:da:65:29:5f:46:
d8:bb:79:6e:fb:88:e2:33:a8:39:cc:b3:0d:6b:dc:
a6:1e:0e:5a:cd:d4:02:41:42:3b:16:cf:ed:ff:37:
51:3f:d0:ae:42:e1:c2:f9:8b:4b:a2:c5:59:d9:8d:
5c:31:84:5f:98:15:01:3c:4f:a7:87:df:d5:79:b3:
23:65:c9:f9:14:5c:d4:e4:74:2c:38:31:a2:5b:d3:
5f:97:d2:09:25:89:dc:24:a7:47:3f:7a:65:05:82:
b8:48:32:f0:0f:a3:fd:88:e4:37:d6:00:4b:23:ad:
d5:c1:3b:22:fe:37:d9:55:23:f5:d2:e0:c0:15:22:
65:c7:d4:08:38:84:9f:4a:ac:77:8c:9c:1b:99:e9:
23:fb:d9:f8:59:3b:71:93:18:9a:2d:f7:20:41:95:
18:d0:18:e0:fc:cb:50:53:1d:b1:58:48:b6:bc:a3:
2a:91:0c:32:07:ef:0f:64:1a:ac:4f:55:63:07:ce:
cd:37:fb:bc:cd:11:69:47:cd:7e:b6:b1:66:05:01:
df:9d:fa:de:7b:0b:9e:6f:a4:09:bc:b7:52:a6:c5:
67:3a:e9:04:cc:70:12:c1:db:4b:79:15:3f:5d:d6:
f2:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:97:97:DA:DD:30:A6:98:F8:8A:56:9D:D5:F2:90:93:F5:60:DA:79
X509v3 Authority Key Identifier:
keyid:5E:3E:4F:A8:C9:97:1A:EF:12:34:5F:C0:E3:7D:16:B3:45:9B:78:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xj5PqMmXGu8SNF_A430Ws0WbeDs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/eb5454-7293-437f-ac0b-3a3b0296bb82/1/Xj5PqMmXGu8SNF_A430Ws0WbeDs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/eb5454-7293-437f-ac0b-3a3b0296bb82/1/Xj5PqMmXGu8SNF_A430Ws0WbeDs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:23:d4:bf:0f:e6:c1:bb:40:d5:17:8d:50:8b:34:c7:28:8c:
66:74:57:d4:49:41:df:8c:ca:2a:8c:4e:f0:5f:8e:f4:a0:69:
41:63:a1:9f:c6:b0:05:c1:ee:00:2c:53:41:e0:48:57:23:0c:
66:8c:ee:ae:14:f9:ef:3b:01:ad:1b:06:ed:4b:bb:68:0f:31:
f5:87:87:77:58:4f:f1:d6:10:21:22:e1:7a:f1:01:1f:2e:da:
2c:bf:57:24:88:3a:09:e8:5b:44:0d:d5:59:22:23:82:b2:bf:
69:63:76:f5:51:ed:43:00:ac:f9:32:03:72:f7:57:e1:84:5e:
f0:0a:0b:05:0f:17:35:84:14:60:46:c0:a2:c3:aa:f3:7b:06:
72:4a:36:3a:fa:7a:08:48:5a:55:76:5f:ce:59:63:b6:b5:5f:
ba:12:b1:0b:31:6c:28:de:9e:dc:ff:10:02:2e:05:36:92:d2:
c1:89:b6:16:39:d0:f9:d8:d1:13:0f:10:c3:05:e9:7e:f7:ea:
73:ea:6a:3e:2a:63:3d:f7:e0:02:d3:c7:8f:c0:44:4c:d0:2e:
7b:14:64:62:d2:2e:23:10:ed:1f:78:f2:b0:d6:96:ad:4a:c4:
ca:66:b5:84:a9:c0:16:a7:d4:69:04:58:99:97:49:27:eb:22:
3b:37:cb:fd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8WPsZtCOs17DEFnnDfHoXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVlM2U0ZmE4Yzk5NzFhZWYxMjM0NWZjMGUzN2QxNmIzNDU5
Yjc4M2IwHhcNMjUxMDE5MTIwMTUzWhcNMjUxMDIwMTIwMTUzWjAzMTEwLwYDVQQD
Eyg2Yjk3OTdkYWRkMzBhNjk4Zjg4YTU2OWRkNWYyOTA5M2Y1NjBkYTc5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnhuyE/7DOBp3/sDaUn1fLYuPNZ9x
Ba2r2mUpX0bYu3lu+4jiM6g5zLMNa9ymHg5azdQCQUI7Fs/t/zdRP9CuQuHC+YtL
osVZ2Y1cMYRfmBUBPE+nh9/VebMjZcn5FFzU5HQsODGiW9Nfl9IJJYncJKdHP3pl
BYK4SDLwD6P9iOQ31gBLI63VwTsi/jfZVSP10uDAFSJlx9QIOISfSqx3jJwbmekj
+9n4WTtxkxiaLfcgQZUY0Bjg/MtQUx2xWEi2vKMqkQwyB+8PZBqsT1VjB87NN/u8
zRFpR81+trFmBQHfnfreewueb6QJvLdSpsVnOukEzHASwdtLeRU/XdbyuQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGuXl9rdMKaY+IpWndXykJP1YNp5MB8GA1UdIwQY
MBaAFF4+T6jJlxrvEjRfwON9FrNFm3g7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWGo1UHFNbVhHdThTTkZfQTQzMFdzMFdiZURzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi9lYjU0NTQtNzI5My00MzdmLWFjMGIt
M2EzYjAyOTZiYjgyLzEvWGo1UHFNbVhHdThTTkZfQTQzMFdzMFdiZURzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMi9lYjU0NTQtNzI5My00MzdmLWFjMGItM2EzYjAyOTZiYjgy
LzEvWGo1UHFNbVhHdThTTkZfQTQzMFdzMFdiZURzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVyPUvw/m
wbtA1ReNUIs0xyiMZnRX1ElB34zKKoxO8F+O9KBpQWOhn8awBcHuACxTQeBIVyMM
ZozurhT57zsBrRsG7Uu7aA8x9YeHd1hP8dYQISLhevEBHy7aLL9XJIg6CehbRA3V
WSIjgrK/aWN29VHtQwCs+TIDcvdX4YRe8AoLBQ8XNYQUYEbAosOq83sGcko2Ovp6
CEhaVXZfzlljtrVfuhKxCzFsKN6e3P8QAi4FNpLSwYm2FjnQ+djREw8QwwXpfvfq
c+pqPipjPffgAtPHj8BETNAuexRkYtIuIxDtH3jysNaWrUrEyma1hKnAFqfUaQRY
mZdJJ+siOzfL/Q==
-----END CERTIFICATE-----
Generated at Sun Oct 19 17:49:03 2025 by rpki-client