Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/acd7e3-9c76-4ff6-b5ae-ee80a2d2952d/1/XYHR_0WxVHwAqEtG75nsot-9Rbw.mft
File: XYHR_0WxVHwAqEtG75nsot-9Rbw.mft (raw, json)
Hash identifier: gA93yrQcBWRR88OPirx45AkjL/UAB5CtD9WK1YYeC8Q=
Subject key identifier: 5C:4A:E0:F4:8B:0B:73:C3:BF:A7:92:75:6D:56:AE:B5:D8:EB:B0:19
Authority key identifier: 5D:81:D1:FF:45:B1:54:7C:00:A8:4B:46:EF:99:EC:A2:DF:BD:45:BC
Certificate issuer: /CN=5d81d1ff45b1547c00a84b46ef99eca2dfbd45bc
Certificate serial: 0198880DBD97527122FAD4EF6B062235973A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XYHR_0WxVHwAqEtG75nsot-9Rbw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/acd7e3-9c76-4ff6-b5ae-ee80a2d2952d/1/XYHR_0WxVHwAqEtG75nsot-9Rbw.mft
Manifest number: 1624
Signing time: Fri 08 Aug 2025 05:00:58 +0000
Manifest this update: Fri 08 Aug 2025 05:00:58 +0000
Manifest next update: Sat 09 Aug 2025 05:00:58 +0000
Files and hashes: 1: C-JYvDSVCc5Zd_4Sd7FiFR4ridU.roa (hash: Fud1edK7T1C6PqdOPqDnlVWq4JxXY+eiVXIDYHC1t50=)
2: XYHR_0WxVHwAqEtG75nsot-9Rbw.crl (hash: EldbIShGQZG1BCF0uaL+mWFZpFyu9c8edVGxdkXzvV4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/acd7e3-9c76-4ff6-b5ae-ee80a2d2952d/1/XYHR_0WxVHwAqEtG75nsot-9Rbw.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/acd7e3-9c76-4ff6-b5ae-ee80a2d2952d/1/XYHR_0WxVHwAqEtG75nsot-9Rbw.mft
rsync://rpki.ripe.net/repository/DEFAULT/XYHR_0WxVHwAqEtG75nsot-9Rbw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 05:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:88:0d:bd:97:52:71:22:fa:d4:ef:6b:06:22:35:97:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d81d1ff45b1547c00a84b46ef99eca2dfbd45bc
Validity
Not Before: Aug 8 05:00:58 2025 GMT
Not After : Aug 9 05:00:58 2025 GMT
Subject: CN=5c4ae0f48b0b73c3bfa792756d56aeb5d8ebb019
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:55:57:da:a1:e6:64:7d:cc:68:22:1c:ed:1b:
a4:96:5c:0f:c6:dd:eb:26:23:34:b3:5b:db:de:28:
be:67:70:6c:a5:be:2f:99:e4:69:a7:f8:43:49:0b:
6c:06:34:d6:17:84:93:31:84:40:07:dd:01:51:60:
05:af:39:51:39:a3:e3:8a:0b:d8:ff:93:d0:98:d9:
86:00:5f:47:82:de:d4:ae:58:f3:04:87:09:9f:cd:
f7:b9:9b:2c:17:4d:d6:59:6e:26:6b:8c:f2:96:83:
49:93:3b:89:4a:57:ba:0f:ab:7a:28:10:b7:02:d6:
1d:51:41:9e:84:2c:ca:ae:bf:09:f4:da:2b:63:47:
80:82:2d:71:ba:bf:32:41:ea:c2:e2:6f:26:6c:59:
d8:e7:62:38:41:8c:e7:52:da:44:8d:e1:02:76:b6:
76:8b:b3:92:0d:b3:0a:e7:95:f2:d1:8b:80:92:af:
fa:9b:7b:e2:03:a9:ec:45:bf:67:9e:25:aa:2a:36:
2a:29:eb:c6:1c:17:ee:32:dd:1b:0a:7c:4b:7d:88:
b7:5c:1a:59:04:10:3a:1f:dc:14:0b:27:63:f3:70:
7a:33:a1:c3:b9:09:de:f8:25:95:c0:1c:a9:6a:b7:
cf:0b:f6:42:09:dc:d4:de:8a:f5:eb:20:74:2b:f9:
ad:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:4A:E0:F4:8B:0B:73:C3:BF:A7:92:75:6D:56:AE:B5:D8:EB:B0:19
X509v3 Authority Key Identifier:
keyid:5D:81:D1:FF:45:B1:54:7C:00:A8:4B:46:EF:99:EC:A2:DF:BD:45:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XYHR_0WxVHwAqEtG75nsot-9Rbw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/acd7e3-9c76-4ff6-b5ae-ee80a2d2952d/1/XYHR_0WxVHwAqEtG75nsot-9Rbw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/acd7e3-9c76-4ff6-b5ae-ee80a2d2952d/1/XYHR_0WxVHwAqEtG75nsot-9Rbw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:0b:8c:67:e9:5c:17:2d:6c:75:e0:f3:27:c7:cb:e3:8b:59:
97:0a:fe:67:f9:20:da:78:fb:b3:c9:e0:f5:ee:65:36:b7:28:
c8:bc:94:56:80:27:c5:78:be:13:23:ae:ed:82:ad:77:86:31:
e1:bc:65:8a:60:30:1e:61:71:4a:62:ee:40:27:f7:72:73:8c:
4f:96:39:09:be:72:3e:ad:e2:06:ac:66:9b:50:25:0f:73:fe:
6d:04:87:42:c0:30:a8:02:6f:bc:94:59:4f:76:8a:86:0f:28:
d4:c4:8a:59:40:b1:10:1f:c0:e8:4d:51:25:28:87:0d:77:bf:
62:01:b8:4a:f6:d0:d1:62:14:98:d3:ff:32:9a:72:27:3e:6c:
01:f1:ff:ef:55:72:98:7f:ee:b7:33:86:0d:af:5b:bf:65:a1:
4b:4f:bc:c2:8c:f7:d4:25:9a:65:66:15:8d:2f:cf:78:eb:4a:
92:8c:15:17:6f:8a:a1:f4:e8:9f:7d:83:7c:40:23:40:db:e7:
94:54:ab:6a:21:c6:57:18:bb:c1:0f:69:cd:fd:59:6c:ae:29:
aa:ca:39:da:0e:8f:68:6d:09:38:8c:42:b5:c7:ab:e1:2d:d0:
14:11:72:4a:73:ef:71:3e:28:87:8c:83:3a:fb:bb:a3:09:17:
8d:7c:6c:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 12:55:48 2025 by rpki-client