Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/c49d34-1b14-4026-b77f-e4def9c697a7/1/xy5xY1Psczq0tQhTCLOG2Jp08Uc.mft
File: xy5xY1Psczq0tQhTCLOG2Jp08Uc.mft (raw, json)
Hash identifier: TZuoN5r5bHC5jgGXWwKLPSM/iCjyMAsWHQcD4IyMfOM=
Subject key identifier: 31:32:1E:BE:0C:81:F3:CE:64:48:11:65:07:4F:5D:71:75:55:12:0C
Authority key identifier: C7:2E:71:63:53:EC:73:3A:B4:B5:08:53:08:B3:86:D8:9A:74:F1:47
Certificate issuer: /CN=c72e716353ec733ab4b5085308b386d89a74f147
Certificate serial: 019A4D07A5CEBC82FBC626DAF4EAC4E4C1DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xy5xY1Psczq0tQhTCLOG2Jp08Uc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/c49d34-1b14-4026-b77f-e4def9c697a7/1/xy5xY1Psczq0tQhTCLOG2Jp08Uc.mft
Manifest number: 0F58
Signing time: Tue 04 Nov 2025 04:02:17 +0000
Manifest this update: Tue 04 Nov 2025 04:02:17 +0000
Manifest next update: Wed 05 Nov 2025 04:02:17 +0000
Files and hashes: 1: i4OTVeCSPxgmFusN2MGQeEwphSs.roa (hash: swOQwwO4f3RtKfp1taiB7zCxN/mO3jgsarXonpS2zBQ=)
2: xy5xY1Psczq0tQhTCLOG2Jp08Uc.crl (hash: 4aotdaewp8BCi8TSmi5KuaETZ8nqnvfXAxOnrLCsriY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/c49d34-1b14-4026-b77f-e4def9c697a7/1/xy5xY1Psczq0tQhTCLOG2Jp08Uc.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/c49d34-1b14-4026-b77f-e4def9c697a7/1/xy5xY1Psczq0tQhTCLOG2Jp08Uc.mft
rsync://rpki.ripe.net/repository/DEFAULT/xy5xY1Psczq0tQhTCLOG2Jp08Uc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 04:02:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:07:a5:ce:bc:82:fb:c6:26:da:f4:ea:c4:e4:c1:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c72e716353ec733ab4b5085308b386d89a74f147
Validity
Not Before: Nov 4 04:02:17 2025 GMT
Not After : Nov 5 04:02:17 2025 GMT
Subject: CN=31321ebe0c81f3ce64481165074f5d717555120c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:38:df:9f:bf:b9:2d:61:72:9e:36:b5:88:b4:
24:89:ad:30:ea:32:3f:80:12:e3:86:42:46:7f:8b:
de:80:f5:1f:f3:f0:4f:66:b7:9f:93:3b:b9:a4:4b:
2f:66:6b:fc:d0:4f:c7:62:d2:63:89:92:90:a4:96:
0f:9d:74:18:8a:01:7d:c9:d9:62:b7:df:38:b6:c4:
9b:31:0a:64:85:c6:31:81:a0:a8:74:be:fd:ab:96:
22:43:51:70:a5:43:6c:fe:f6:1a:7b:20:79:d6:2d:
cb:6d:70:b7:ed:77:be:a9:20:6a:06:b7:48:d3:c6:
50:6d:cb:8c:71:9a:94:83:96:6b:ce:b5:f9:fc:1b:
36:e7:55:da:64:b0:39:51:bf:c1:78:5e:86:f4:c6:
69:d9:5a:e0:ec:d2:33:ad:2e:2d:3b:d4:17:80:8e:
d6:27:f5:29:2a:b3:35:de:81:63:fd:ea:4d:28:c8:
a2:b2:59:93:ce:59:d0:ad:4c:ef:7d:a1:5d:f3:1d:
0d:e9:2f:6d:e5:62:13:d6:db:13:96:d6:bf:84:f6:
70:6c:52:c7:7d:67:b3:b7:8c:4d:e7:4a:3a:a6:92:
64:78:05:ed:71:78:31:82:5e:fd:f4:8c:40:1b:dd:
6f:df:ef:6f:8a:59:17:6f:30:8e:ca:af:9d:85:3c:
73:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:32:1E:BE:0C:81:F3:CE:64:48:11:65:07:4F:5D:71:75:55:12:0C
X509v3 Authority Key Identifier:
keyid:C7:2E:71:63:53:EC:73:3A:B4:B5:08:53:08:B3:86:D8:9A:74:F1:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xy5xY1Psczq0tQhTCLOG2Jp08Uc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/c49d34-1b14-4026-b77f-e4def9c697a7/1/xy5xY1Psczq0tQhTCLOG2Jp08Uc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/c49d34-1b14-4026-b77f-e4def9c697a7/1/xy5xY1Psczq0tQhTCLOG2Jp08Uc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:32:01:2a:7d:68:eb:d9:d3:92:92:d0:06:93:25:df:88:9d:
5f:05:09:ee:3b:19:5d:4d:36:84:f6:af:6f:cf:c3:e5:b9:11:
c0:01:b3:a6:fb:b6:41:be:34:73:ae:6e:e7:a5:58:dc:2d:cd:
c5:21:11:5f:fd:7e:f8:9f:e1:1c:5c:10:05:94:6b:f2:b5:68:
4c:23:29:99:d8:0e:ca:4a:59:69:21:ce:48:7a:a9:50:91:1c:
17:67:8b:1f:54:8f:49:0d:ff:4d:d7:67:f0:d8:1c:e3:99:06:
88:49:7f:b1:d0:68:8c:7a:1c:d3:23:aa:d1:69:32:09:13:39:
b7:2e:9d:02:95:a0:42:57:71:5f:85:e1:b9:10:e1:2c:02:00:
53:ca:47:fd:86:55:95:21:9c:18:13:dd:c0:17:e8:ee:28:46:
20:ae:25:79:27:48:70:e1:5d:09:95:3a:e0:ed:94:89:90:2a:
d7:aa:a7:54:18:f6:6e:b0:34:28:f8:90:6b:07:59:f7:df:5f:
7b:ba:f0:84:0f:7d:ed:0e:7a:de:0a:4d:64:ad:dc:14:55:ab:
f5:4d:9d:73:6e:de:e7:68:8d:5c:ba:38:73:dd:ac:84:ce:78:
85:f6:ee:09:f6:d1:e1:f4:4a:c2:a4:88:ff:5f:e7:e6:31:3b:
2f:77:1d:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 11:19:52 2025 by rpki-client