Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/c79d13-9ea2-4eed-8dd2-cedab463ee5b/1/XYJmcuaPPaXbUO2ButuNM73M0ro.mft
File: XYJmcuaPPaXbUO2ButuNM73M0ro.mft (raw, json)
Hash identifier: MhBKVollWCCCL60XqH/SSj+sdVrdz4qhZeuFjpnI6CE=
Subject key identifier: B5:F1:7B:5C:3D:94:2B:8F:D9:28:FA:A3:BA:FB:43:0C:E3:4E:1B:00
Authority key identifier: 5D:82:66:72:E6:8F:3D:A5:DB:50:ED:81:BA:DB:8D:33:BD:CC:D2:BA
Certificate issuer: /CN=5d826672e68f3da5db50ed81badb8d33bdccd2ba
Certificate serial: 01988FFE42F995366E95150BD674E75EEB7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XYJmcuaPPaXbUO2ButuNM73M0ro.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/c79d13-9ea2-4eed-8dd2-cedab463ee5b/1/XYJmcuaPPaXbUO2ButuNM73M0ro.mft
Manifest number: 1261
Signing time: Sat 09 Aug 2025 18:01:01 +0000
Manifest this update: Sat 09 Aug 2025 18:01:01 +0000
Manifest next update: Sun 10 Aug 2025 18:01:01 +0000
Files and hashes: 1: XYJmcuaPPaXbUO2ButuNM73M0ro.crl (hash: vT7oUf6AFu7RSuvK6mDc5j6Q0kvMBAdMUE0rlEqsVBY=)
2: uOaT4j9EVJiz8EIOTgjvWTshz84.roa (hash: 6VQK7lQU8B+WO6nBknTZwm7r/sjint5WViRnRUFwHxU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/c79d13-9ea2-4eed-8dd2-cedab463ee5b/1/XYJmcuaPPaXbUO2ButuNM73M0ro.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/c79d13-9ea2-4eed-8dd2-cedab463ee5b/1/XYJmcuaPPaXbUO2ButuNM73M0ro.mft
rsync://rpki.ripe.net/repository/DEFAULT/XYJmcuaPPaXbUO2ButuNM73M0ro.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 14:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8f:fe:42:f9:95:36:6e:95:15:0b:d6:74:e7:5e:eb:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d826672e68f3da5db50ed81badb8d33bdccd2ba
Validity
Not Before: Aug 9 18:01:01 2025 GMT
Not After : Aug 10 18:01:01 2025 GMT
Subject: CN=b5f17b5c3d942b8fd928faa3bafb430ce34e1b00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:10:aa:fd:5b:0a:43:fb:39:03:8f:53:0b:26:
65:0e:4f:65:9b:b3:cc:3e:93:7f:7d:0f:2b:f1:a9:
4f:46:fb:a8:20:92:47:ff:7e:a1:16:0e:cb:eb:a3:
3e:ef:31:a0:8a:96:61:6b:bf:13:59:6b:04:8b:82:
72:a9:83:da:ea:63:bf:24:1d:a8:ce:8a:c6:6b:2c:
75:20:14:2f:b3:1f:0d:58:06:0b:75:a2:a6:d3:f9:
7a:f5:dd:94:c0:03:07:bb:71:c5:7e:4b:c1:0f:07:
70:a8:b7:4b:75:da:08:72:26:bd:3b:07:9c:f7:d8:
ba:9f:28:25:7f:15:77:76:5d:7c:f0:bd:f7:26:2e:
80:82:89:b8:54:8d:13:a8:4d:55:c3:6c:f8:9a:8a:
75:d3:bb:66:86:f3:36:98:c8:e0:18:f9:91:30:65:
d1:c9:4d:4c:9c:85:72:c5:ba:bf:31:2f:7a:1f:c8:
5f:10:39:13:f2:1c:27:43:1e:d2:95:10:36:24:bb:
cf:52:13:c0:b4:f1:49:c5:a2:ed:bb:86:c1:6d:57:
8b:6d:8a:cd:47:a1:33:02:dd:5e:87:34:07:d1:66:
e8:2d:aa:28:60:c6:84:ee:9a:71:5c:8d:6f:56:26:
f4:31:c2:56:d4:ed:45:a8:80:9c:92:4b:95:b9:7d:
09:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:F1:7B:5C:3D:94:2B:8F:D9:28:FA:A3:BA:FB:43:0C:E3:4E:1B:00
X509v3 Authority Key Identifier:
keyid:5D:82:66:72:E6:8F:3D:A5:DB:50:ED:81:BA:DB:8D:33:BD:CC:D2:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XYJmcuaPPaXbUO2ButuNM73M0ro.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/c79d13-9ea2-4eed-8dd2-cedab463ee5b/1/XYJmcuaPPaXbUO2ButuNM73M0ro.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/c79d13-9ea2-4eed-8dd2-cedab463ee5b/1/XYJmcuaPPaXbUO2ButuNM73M0ro.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:cf:0f:8f:17:48:59:41:13:7f:45:1a:89:d9:2d:0a:42:45:
2d:b4:9c:3d:76:be:4c:15:67:e5:ff:ca:2e:5c:2c:86:47:ee:
85:42:23:42:d8:11:e9:df:7f:bc:36:bc:00:76:1d:8f:05:a9:
48:25:50:e0:4c:49:3e:79:97:6d:09:f4:f5:0f:1b:a1:3f:cf:
51:9a:33:d5:20:85:c5:be:75:74:2b:de:ed:c2:ce:fe:c1:0c:
01:62:f5:e5:d2:83:b6:9d:d9:5e:40:fb:23:c6:6e:d0:db:89:
6d:df:1e:cd:16:c6:59:cf:0b:57:ef:03:c8:d3:06:34:bc:ed:
d5:8d:77:28:9a:68:04:10:0f:2c:c1:1b:37:b8:de:c8:72:7e:
29:06:0d:fc:fe:80:9f:35:3c:1c:95:55:21:fb:49:90:c0:f5:
2c:54:88:78:5a:fe:2b:73:90:30:c2:39:4f:d8:01:d8:6a:9e:
3b:82:f0:32:86:c0:c6:15:30:30:1c:e0:e4:f8:23:67:4d:58:
a5:0c:88:93:42:d3:56:67:50:4b:91:3f:2e:4b:98:6f:44:40:
87:6e:a5:a6:ef:c4:67:c1:f4:86:92:34:8a:2a:72:8e:37:a3:
5b:44:2f:44:bc:eb:ea:fa:a0:ef:1e:45:54:64:23:00:37:c0:
d7:31:d1:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 22:40:53 2025 by rpki-client