Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/f76b1d-48cb-4ab1-90ec-e615f56f78b1/1/XyxxJryPOQVnRN4hOyzia3a8mSM.mft
File: XyxxJryPOQVnRN4hOyzia3a8mSM.mft (raw, json)
Hash identifier: nP9GJJKvNtldGaHh+5t1Nv0xPveY0saEy8AbZC6f9qw=
Subject key identifier: 41:25:5E:D5:14:8C:89:79:0F:68:11:01:B5:36:D2:42:A7:85:44:FE
Authority key identifier: 5F:2C:71:26:BC:8F:39:05:67:44:DE:21:3B:2C:E2:6B:76:BC:99:23
Certificate issuer: /CN=5f2c7126bc8f39056744de213b2ce26b76bc9923
Certificate serial: 019894B75DF5EA01C55B16E608A6D17B3E3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XyxxJryPOQVnRN4hOyzia3a8mSM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/f76b1d-48cb-4ab1-90ec-e615f56f78b1/1/XyxxJryPOQVnRN4hOyzia3a8mSM.mft
Manifest number: 1628
Signing time: Sun 10 Aug 2025 16:01:41 +0000
Manifest this update: Sun 10 Aug 2025 16:01:41 +0000
Manifest next update: Mon 11 Aug 2025 16:01:41 +0000
Files and hashes: 1: XyxxJryPOQVnRN4hOyzia3a8mSM.crl (hash: kOs+WSaWNG9PLiuR6I1chpza32MwPeyJehqjRnHq7U8=)
2: YpoQb4d2ZirnrI3hA0gBb3h8Ui4.roa (hash: xAwvy1eVXmw515xL9f1ayxKoN3gZJ8WiMBC17Avnw5o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/f76b1d-48cb-4ab1-90ec-e615f56f78b1/1/XyxxJryPOQVnRN4hOyzia3a8mSM.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/f76b1d-48cb-4ab1-90ec-e615f56f78b1/1/XyxxJryPOQVnRN4hOyzia3a8mSM.mft
rsync://rpki.ripe.net/repository/DEFAULT/XyxxJryPOQVnRN4hOyzia3a8mSM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 16:01:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:94:b7:5d:f5:ea:01:c5:5b:16:e6:08:a6:d1:7b:3e:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f2c7126bc8f39056744de213b2ce26b76bc9923
Validity
Not Before: Aug 10 16:01:41 2025 GMT
Not After : Aug 11 16:01:41 2025 GMT
Subject: CN=41255ed5148c89790f681101b536d242a78544fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:a9:8d:30:d3:97:77:44:f3:02:7a:3e:c6:0c:
5d:f7:86:51:94:16:cf:ea:f9:8a:11:19:9a:8d:17:
64:0b:ae:db:13:0d:07:73:61:40:43:37:3e:24:0b:
da:5e:a1:2c:42:80:c2:f2:04:b3:0f:b1:5f:66:c4:
94:e7:79:7a:ae:8c:35:78:4f:7f:8b:60:72:bb:94:
c7:aa:6d:b7:06:ee:f8:63:d9:5f:78:54:dc:39:73:
05:ec:0a:48:ea:fa:59:85:48:94:bd:ce:39:0f:d7:
93:3a:5c:50:60:b7:27:0f:31:cc:d4:f0:9d:ad:a1:
e9:02:04:f9:36:b2:df:a3:a1:a9:f2:1e:4f:28:e5:
eb:01:0d:53:fc:5c:e6:d9:63:92:1f:5f:dc:7a:9e:
60:e0:db:19:6c:58:d0:8c:b9:0c:56:7c:2a:36:77:
34:21:0d:cf:59:97:9d:35:16:5f:f0:04:b4:d6:6f:
92:d3:27:7b:6d:7b:90:b9:50:2e:c5:7b:ee:1d:03:
da:e9:88:0c:85:e2:37:84:da:4b:37:11:25:d7:c0:
4e:c8:b5:c5:c5:c1:52:99:a5:44:4c:f8:d2:fc:91:
ea:af:b9:f7:cc:34:9c:3c:b4:81:8f:c8:f4:b5:d4:
da:c2:90:5c:90:cc:ca:07:e0:b0:a5:68:41:7c:62:
da:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:25:5E:D5:14:8C:89:79:0F:68:11:01:B5:36:D2:42:A7:85:44:FE
X509v3 Authority Key Identifier:
keyid:5F:2C:71:26:BC:8F:39:05:67:44:DE:21:3B:2C:E2:6B:76:BC:99:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XyxxJryPOQVnRN4hOyzia3a8mSM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/f76b1d-48cb-4ab1-90ec-e615f56f78b1/1/XyxxJryPOQVnRN4hOyzia3a8mSM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/f76b1d-48cb-4ab1-90ec-e615f56f78b1/1/XyxxJryPOQVnRN4hOyzia3a8mSM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:04:87:55:82:7a:a8:14:df:02:e8:3f:c1:c9:88:e8:a4:8c:
9a:8c:53:0c:f4:f5:35:06:0b:6a:c5:37:f9:ea:55:5d:b4:a2:
d5:7d:79:a3:b6:ee:e1:2c:04:8a:d6:95:b4:ea:83:a0:d6:8d:
27:70:c7:02:44:7c:97:60:ee:8b:c1:d8:ad:88:25:27:06:fc:
93:4d:1a:69:f9:c0:c3:af:26:fa:a8:ad:da:56:07:5c:0e:57:
6c:a7:86:6a:2a:c3:b7:38:6b:9f:f3:3c:3b:89:ee:d3:96:35:
a2:c3:60:29:4b:b0:6d:56:b9:0a:75:62:99:05:bc:13:2f:46:
04:68:11:06:d5:bd:2b:e4:30:cb:e5:97:2f:4f:a4:70:d0:e4:
a0:ea:ba:d8:8f:bd:dd:1b:9e:11:18:9b:41:89:34:24:20:38:
ba:fe:07:61:2b:c9:77:d9:24:e3:27:34:7a:f4:8a:08:db:a6:
0c:84:30:58:09:03:71:3a:a3:f9:18:5f:0f:2c:de:0c:22:d0:
0f:53:c3:88:78:e7:f1:28:86:98:64:79:41:35:6c:3f:48:e7:
35:ca:1a:23:b2:6c:82:13:4f:82:bf:86:ee:86:d5:50:9f:10:
44:30:20:6a:1a:6a:63:a1:e7:17:98:04:22:8e:7e:31:53:da:
a7:cd:8e:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 18:11:15 2025 by rpki-client