Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/52782a-3de3-4829-8199-44fdcec5d288/1/Xvv25mASb_SQTgmcoK3t6fbOpXA.mft
File: Xvv25mASb_SQTgmcoK3t6fbOpXA.mft (raw, json)
Hash identifier: LTTydX3DwS5+ALiq48vVpyn0G5KpxxPT704M6MOl08g=
Subject key identifier: D4:88:79:70:02:5A:28:EB:D4:21:7C:5D:FF:08:B7:3B:3E:DE:1E:79
Authority key identifier: 5E:FB:F6:E6:60:12:6F:F4:90:4E:09:9C:A0:AD:ED:E9:F6:CE:A5:70
Certificate issuer: /CN=5efbf6e660126ff4904e099ca0adede9f6cea570
Certificate serial: 0199FC58E31E921E8D9BDAFC91F7B6C74B73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xvv25mASb_SQTgmcoK3t6fbOpXA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/52782a-3de3-4829-8199-44fdcec5d288/1/Xvv25mASb_SQTgmcoK3t6fbOpXA.mft
Manifest number: 10B0
Signing time: Sun 19 Oct 2025 12:01:47 +0000
Manifest this update: Sun 19 Oct 2025 12:01:47 +0000
Manifest next update: Mon 20 Oct 2025 12:01:47 +0000
Files and hashes: 1: Xvv25mASb_SQTgmcoK3t6fbOpXA.crl (hash: xwzFbGTMInpfthdiocUJpsrZD4yY/DfHwQRVT0dRk4w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/52782a-3de3-4829-8199-44fdcec5d288/1/Xvv25mASb_SQTgmcoK3t6fbOpXA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/52782a-3de3-4829-8199-44fdcec5d288/1/Xvv25mASb_SQTgmcoK3t6fbOpXA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xvv25mASb_SQTgmcoK3t6fbOpXA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:e3:1e:92:1e:8d:9b:da:fc:91:f7:b6:c7:4b:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5efbf6e660126ff4904e099ca0adede9f6cea570
Validity
Not Before: Oct 19 12:01:47 2025 GMT
Not After : Oct 20 12:01:47 2025 GMT
Subject: CN=d4887970025a28ebd4217c5dff08b73b3ede1e79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:ac:cd:7b:fa:eb:08:8e:61:cc:c6:ed:8e:aa:
b6:ef:90:a7:53:5a:83:bf:71:e4:5c:f7:dd:23:9e:
06:bb:1b:13:5d:40:de:8f:04:1c:32:b2:1b:e8:2d:
ca:90:fb:18:cc:c7:19:af:49:c9:b9:34:d2:6f:80:
20:a2:58:2e:65:47:dd:d1:09:78:d7:dd:79:59:9a:
8b:22:b5:08:76:fb:2f:75:9f:5b:a3:44:1c:1a:07:
6d:c0:f9:04:23:8f:63:8b:6e:de:c0:a4:ed:f8:35:
42:6f:e6:9c:6a:78:96:3a:e9:a0:4c:f8:44:f9:61:
f5:63:2d:b2:98:48:49:0f:91:e4:10:5d:7b:18:3b:
89:b0:4b:7b:74:02:82:bb:0f:21:bc:b8:10:82:6a:
22:b2:43:62:5b:23:da:f6:b7:45:a2:29:cc:45:35:
d1:65:18:56:8d:19:93:6c:3b:05:83:ee:6f:6f:5b:
f6:eb:b6:dd:bc:8f:59:ab:7c:1b:e1:c9:93:07:a4:
2d:8a:aa:36:25:17:24:f5:0b:36:d5:b3:10:91:55:
fb:10:aa:eb:c4:7d:03:92:95:7e:89:e8:a5:c2:dd:
b4:ad:91:32:15:bf:ea:86:0f:f3:c9:3a:29:1f:eb:
e1:fc:ff:99:56:1b:ac:28:8d:53:75:76:fd:ba:95:
58:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:88:79:70:02:5A:28:EB:D4:21:7C:5D:FF:08:B7:3B:3E:DE:1E:79
X509v3 Authority Key Identifier:
keyid:5E:FB:F6:E6:60:12:6F:F4:90:4E:09:9C:A0:AD:ED:E9:F6:CE:A5:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xvv25mASb_SQTgmcoK3t6fbOpXA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/52782a-3de3-4829-8199-44fdcec5d288/1/Xvv25mASb_SQTgmcoK3t6fbOpXA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/52782a-3de3-4829-8199-44fdcec5d288/1/Xvv25mASb_SQTgmcoK3t6fbOpXA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:72:ab:46:d7:06:84:f2:32:2b:0e:85:21:ed:6e:b0:76:ce:
78:3e:64:0c:24:e2:4c:a1:e6:c3:bd:44:ca:15:95:27:ea:c1:
e8:de:b0:7b:de:3a:a6:39:b8:9c:f2:4d:60:dc:cc:fe:cb:99:
83:80:54:3c:f7:61:b4:58:2f:85:a5:c4:20:34:a7:4d:83:51:
08:51:d2:5c:96:b4:36:56:29:44:f5:e8:f9:d0:89:60:00:65:
0b:77:fe:16:65:2e:63:9a:9b:52:06:2b:91:95:d0:0a:5e:f5:
0e:3d:e2:da:b9:b7:bb:c3:53:3e:87:43:52:0a:89:43:f8:06:
2c:bd:8d:6f:bc:0f:27:4f:3a:f2:e0:ad:5d:fa:88:75:75:70:
29:35:22:ba:ef:e0:e6:de:80:9c:68:fd:ae:8d:ac:19:e1:42:
91:11:7d:cd:1b:bd:14:90:85:dd:c0:70:2b:3f:6c:ec:ba:75:
f2:50:21:13:4b:8d:99:cd:ec:78:bf:a5:88:16:62:16:fb:80:
d8:12:16:18:14:d7:3f:f2:30:9c:68:b3:a4:75:d8:67:08:ad:
f2:3a:95:8a:0e:42:e0:47:f3:35:26:34:22:ab:54:cc:ae:4c:
a9:f3:4f:7b:ad:f8:cd:c2:2b:50:40:28:0a:b3:27:8a:1d:16:
40:c6:f9:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:29:44 2025 by rpki-client