Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/c79d13-9ea2-4eed-8dd2-cedab463ee5b/1/XYJmcuaPPaXbUO2ButuNM73M0ro.mft
File: XYJmcuaPPaXbUO2ButuNM73M0ro.mft (raw, json)
Hash identifier: 69y+PUFCjrTUks/UA+1XMRswqBEtrWPe3N17lZC/dmM=
Subject key identifier: EC:98:6D:79:BF:C7:60:2F:1C:8B:60:02:51:7F:FF:57:2F:4A:FC:1D
Authority key identifier: 5D:82:66:72:E6:8F:3D:A5:DB:50:ED:81:BA:DB:8D:33:BD:CC:D2:BA
Certificate issuer: /CN=5d826672e68f3da5db50ed81badb8d33bdccd2ba
Certificate serial: 019A4E18C839EE7AB6962F6B307ACE3A52CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XYJmcuaPPaXbUO2ButuNM73M0ro.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/c79d13-9ea2-4eed-8dd2-cedab463ee5b/1/XYJmcuaPPaXbUO2ButuNM73M0ro.mft
Manifest number: 1348
Signing time: Tue 04 Nov 2025 09:00:38 +0000
Manifest this update: Tue 04 Nov 2025 09:00:38 +0000
Manifest next update: Wed 05 Nov 2025 09:00:38 +0000
Files and hashes: 1: XYJmcuaPPaXbUO2ButuNM73M0ro.crl (hash: kvMdiHtnzeGqqougVt3axHZO+SxmDDsDSMLFteUOFgA=)
2: uOaT4j9EVJiz8EIOTgjvWTshz84.roa (hash: 6VQK7lQU8B+WO6nBknTZwm7r/sjint5WViRnRUFwHxU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/c79d13-9ea2-4eed-8dd2-cedab463ee5b/1/XYJmcuaPPaXbUO2ButuNM73M0ro.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/c79d13-9ea2-4eed-8dd2-cedab463ee5b/1/XYJmcuaPPaXbUO2ButuNM73M0ro.mft
rsync://rpki.ripe.net/repository/DEFAULT/XYJmcuaPPaXbUO2ButuNM73M0ro.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:18:c8:39:ee:7a:b6:96:2f:6b:30:7a:ce:3a:52:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d826672e68f3da5db50ed81badb8d33bdccd2ba
Validity
Not Before: Nov 4 09:00:38 2025 GMT
Not After : Nov 5 09:00:38 2025 GMT
Subject: CN=ec986d79bfc7602f1c8b6002517fff572f4afc1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:3e:a9:c9:e8:c8:b8:07:7e:21:4c:82:9a:5d:
be:08:26:3c:42:90:1a:23:6b:18:ee:18:8e:51:75:
d6:c5:9d:b2:76:07:ad:3a:5b:34:b4:c6:46:9c:be:
db:85:c9:ab:42:fd:63:1c:59:71:44:bf:2f:da:a4:
6e:c8:9c:a3:15:21:76:4c:2d:93:02:8f:40:8d:9d:
76:77:29:27:45:3b:74:10:20:9c:3a:3a:f7:90:97:
bf:24:b6:cb:1c:4a:3b:4b:a9:e7:ee:2b:0f:92:8a:
a8:91:9d:32:ce:61:33:84:c1:00:51:94:6a:43:4d:
3c:72:f1:67:45:40:7a:88:df:b8:d0:a9:80:cd:b1:
ab:60:5b:42:2c:8f:31:c7:3e:22:31:df:2c:0c:d7:
d9:59:bc:b4:76:02:00:20:76:f8:f5:d2:c2:34:13:
36:87:2a:37:45:f8:3b:d5:f3:c2:6c:79:a4:07:5c:
dd:42:82:72:60:60:ca:33:d9:6d:62:93:3f:e2:33:
bf:df:5a:9f:cd:a9:df:bb:14:77:da:f3:64:e0:dd:
d3:8a:74:fb:92:f5:2c:fc:3f:72:e0:29:f9:bd:ff:
74:7c:29:5b:74:ba:ed:0b:b1:3b:97:cd:a3:2d:98:
fb:cf:7c:ec:2b:0f:75:79:42:79:72:c9:a2:93:c4:
64:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:98:6D:79:BF:C7:60:2F:1C:8B:60:02:51:7F:FF:57:2F:4A:FC:1D
X509v3 Authority Key Identifier:
keyid:5D:82:66:72:E6:8F:3D:A5:DB:50:ED:81:BA:DB:8D:33:BD:CC:D2:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XYJmcuaPPaXbUO2ButuNM73M0ro.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/c79d13-9ea2-4eed-8dd2-cedab463ee5b/1/XYJmcuaPPaXbUO2ButuNM73M0ro.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/c79d13-9ea2-4eed-8dd2-cedab463ee5b/1/XYJmcuaPPaXbUO2ButuNM73M0ro.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:a4:70:31:d8:56:2c:e2:c1:e2:ae:04:ed:8d:01:f3:51:87:
ad:98:98:a5:e2:22:8c:3f:7f:ab:61:32:fe:e3:d2:b1:48:53:
5a:74:12:82:ba:cb:aa:89:eb:ff:0d:ef:47:6c:64:92:d2:8d:
75:15:b1:70:1e:f2:df:bc:95:f7:9b:54:3b:0e:e5:92:fd:26:
a4:f0:0a:7b:55:5f:23:27:ad:9d:76:c1:40:40:3b:98:d2:5b:
24:5b:d7:86:d8:33:04:99:0b:76:61:48:72:81:fc:22:58:14:
b4:d7:5e:91:4f:25:bb:39:84:3e:61:e3:83:8e:e6:a6:fb:e8:
0c:67:46:ed:3f:34:3f:5b:e1:fc:f4:5c:3a:06:86:8b:66:3c:
a7:c4:7f:a8:82:10:22:cc:e9:08:fa:07:96:fe:a7:cc:52:54:
33:b1:8d:98:d1:13:19:9c:c8:4f:54:c6:3e:95:37:c4:de:ee:
08:2e:49:ac:49:56:73:6a:39:da:cf:a3:a9:c7:8e:21:70:d0:
19:0b:83:0d:75:9e:2c:54:0f:a0:12:d8:ba:86:df:6b:9f:d7:
f9:86:fd:5b:86:ce:fe:6d:67:0a:0e:16:5b:07:b1:47:34:b4:
d2:2e:07:0e:b6:5c:2a:76:8e:25:a1:42:33:4b:45:2f:3d:b3:
f4:40:a4:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:18:52 2025 by rpki-client