Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/f76b1d-48cb-4ab1-90ec-e615f56f78b1/1/XyxxJryPOQVnRN4hOyzia3a8mSM.mft
File: XyxxJryPOQVnRN4hOyzia3a8mSM.mft (raw, json)
Hash identifier: +yFBgJpf6OGjMbqeTJfEkIMT821DLIqDYAFGpKHVZHs=
Subject key identifier: 65:E4:5D:9D:4E:4F:C8:62:BF:91:A7:8C:B2:A8:A9:FD:F3:42:C5:2D
Authority key identifier: 5F:2C:71:26:BC:8F:39:05:67:44:DE:21:3B:2C:E2:6B:76:BC:99:23
Certificate issuer: /CN=5f2c7126bc8f39056744de213b2ce26b76bc9923
Certificate serial: 019A50E2D47EE6A9489F1C0EF505F818F871
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XyxxJryPOQVnRN4hOyzia3a8mSM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/f76b1d-48cb-4ab1-90ec-e615f56f78b1/1/XyxxJryPOQVnRN4hOyzia3a8mSM.mft
Manifest number: 170E
Signing time: Tue 04 Nov 2025 22:00:33 +0000
Manifest this update: Tue 04 Nov 2025 22:00:33 +0000
Manifest next update: Wed 05 Nov 2025 22:00:33 +0000
Files and hashes: 1: XyxxJryPOQVnRN4hOyzia3a8mSM.crl (hash: QK6jsXcARqCqXsVb+3dw01SxRlzOzGqymQnbFToZzpg=)
2: YpoQb4d2ZirnrI3hA0gBb3h8Ui4.roa (hash: xAwvy1eVXmw515xL9f1ayxKoN3gZJ8WiMBC17Avnw5o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/f76b1d-48cb-4ab1-90ec-e615f56f78b1/1/XyxxJryPOQVnRN4hOyzia3a8mSM.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/f76b1d-48cb-4ab1-90ec-e615f56f78b1/1/XyxxJryPOQVnRN4hOyzia3a8mSM.mft
rsync://rpki.ripe.net/repository/DEFAULT/XyxxJryPOQVnRN4hOyzia3a8mSM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:e2:d4:7e:e6:a9:48:9f:1c:0e:f5:05:f8:18:f8:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f2c7126bc8f39056744de213b2ce26b76bc9923
Validity
Not Before: Nov 4 22:00:33 2025 GMT
Not After : Nov 5 22:00:33 2025 GMT
Subject: CN=65e45d9d4e4fc862bf91a78cb2a8a9fdf342c52d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:05:fb:55:69:ab:4f:2c:b9:97:6b:5c:a0:86:
f4:02:57:e4:b9:72:e5:3a:09:40:e9:03:9b:cc:e5:
0c:d5:e8:9c:48:65:72:e2:87:ed:65:ca:28:55:a3:
11:ff:53:1f:8d:d6:85:0d:ad:3f:44:ac:dd:57:5b:
a2:11:35:21:d0:a1:b1:bb:09:df:db:c9:27:df:f6:
db:3d:94:59:b9:15:f3:80:36:09:28:9f:6e:e5:fa:
f9:c3:a0:b1:3a:38:b7:c2:7f:27:ad:d2:55:c6:ab:
77:5d:b5:69:a4:d2:7c:c2:f4:fa:7d:2f:1f:86:0c:
50:c5:88:c2:f4:e1:d9:ab:6c:1b:25:73:95:d6:4b:
fc:63:d1:44:bf:b8:03:86:2e:53:a6:d5:06:57:47:
60:d4:3c:6f:4d:68:73:1c:cd:03:61:71:dc:7d:94:
23:f4:c1:c9:59:79:14:7c:7c:d4:65:d9:31:9b:63:
96:70:1d:4d:98:14:fd:37:9a:a2:71:6a:21:0c:c4:
d9:7d:1d:02:2d:50:50:c1:9c:dc:91:94:87:1c:4a:
dd:67:da:5e:a3:b1:b8:00:7a:8c:f2:53:ba:15:82:
bf:2c:bd:ef:e8:c9:20:f6:89:ac:55:f0:00:da:6c:
97:1b:33:c6:fb:8d:7a:26:16:49:dd:86:b8:96:3d:
cf:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:E4:5D:9D:4E:4F:C8:62:BF:91:A7:8C:B2:A8:A9:FD:F3:42:C5:2D
X509v3 Authority Key Identifier:
keyid:5F:2C:71:26:BC:8F:39:05:67:44:DE:21:3B:2C:E2:6B:76:BC:99:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XyxxJryPOQVnRN4hOyzia3a8mSM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/f76b1d-48cb-4ab1-90ec-e615f56f78b1/1/XyxxJryPOQVnRN4hOyzia3a8mSM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/f76b1d-48cb-4ab1-90ec-e615f56f78b1/1/XyxxJryPOQVnRN4hOyzia3a8mSM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:df:68:1f:43:00:e5:d8:85:6e:62:81:78:6b:f8:01:07:41:
78:cf:d5:f2:d6:fe:5a:7b:c0:90:86:9d:b7:69:d1:ec:35:c3:
ec:96:d2:16:a9:a4:f5:aa:a1:86:86:03:35:3a:1c:87:08:6b:
bf:80:5d:32:37:e5:a0:cd:99:e2:a4:00:7c:18:10:13:4b:b2:
70:eb:f3:af:95:c5:2c:a0:c1:2a:ba:5f:43:35:a4:e8:8b:55:
3f:91:7c:57:36:0b:3e:5c:dc:c4:5b:f9:97:75:ae:4b:9b:15:
5c:31:f4:2c:f9:a4:8d:7b:b5:84:24:90:e0:43:19:1a:a0:0f:
98:79:ad:e0:92:97:18:28:f1:cf:9a:2d:43:b8:94:1e:d2:28:
a3:bc:c7:80:a5:5d:08:1d:ab:65:2d:46:1c:13:ec:88:f6:bd:
ce:34:56:36:1e:80:dd:f3:f7:c5:d8:97:5c:e8:11:4e:05:80:
8b:9e:2c:5d:3a:c8:51:3b:92:51:e3:56:42:6c:c4:ae:64:26:
12:76:b4:60:ec:af:12:4b:26:96:f4:8d:1d:c9:1e:14:31:c7:
d1:b6:f0:72:1a:ec:48:40:39:19:e4:1f:39:65:24:76:da:f6:
3b:c4:c8:18:6d:a0:84:9f:ca:52:07:aa:d7:fe:4d:0b:e7:99:
70:d9:a0:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 05:28:23 2025 by rpki-client