Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/8d3895-65c2-4b8e-a547-8ad74cc6a6b9/1/XatFagUdSpN4i-9PrA0HvcDJ8M8.mft
File: XatFagUdSpN4i-9PrA0HvcDJ8M8.mft (raw, json)
Hash identifier: 8EFygI6NQTAdmu7ukqrIcKxgXQpzmnbcRDgQghquewo=
Subject key identifier: E5:84:C1:D2:FB:F4:A7:13:68:89:BB:03:CB:0E:27:72:F6:4E:D7:1D
Authority key identifier: 5D:AB:45:6A:05:1D:4A:93:78:8B:EF:4F:AC:0D:07:BD:C0:C9:F0:CF
Certificate issuer: /CN=5dab456a051d4a93788bef4fac0d07bdc0c9f0cf
Certificate serial: 019A4F629FFA3B2418F1B3A923F244491D06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XatFagUdSpN4i-9PrA0HvcDJ8M8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/8d3895-65c2-4b8e-a547-8ad74cc6a6b9/1/XatFagUdSpN4i-9PrA0HvcDJ8M8.mft
Manifest number: 1716
Signing time: Tue 04 Nov 2025 15:00:54 +0000
Manifest this update: Tue 04 Nov 2025 15:00:54 +0000
Manifest next update: Wed 05 Nov 2025 15:00:54 +0000
Files and hashes: 1: XatFagUdSpN4i-9PrA0HvcDJ8M8.crl (hash: Lx7sPc3i316vLqKYBwjm8642UCUDQW5LqdNCD8hGDCA=)
2: YkgHQRkVRrWyQ2p2wgLse2qkaoY.roa (hash: p9EN6Inc80zOT2cHk5ltmrKNAtRT7MPUi50PrYUILc0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/8d3895-65c2-4b8e-a547-8ad74cc6a6b9/1/XatFagUdSpN4i-9PrA0HvcDJ8M8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/8d3895-65c2-4b8e-a547-8ad74cc6a6b9/1/XatFagUdSpN4i-9PrA0HvcDJ8M8.mft
rsync://rpki.ripe.net/repository/DEFAULT/XatFagUdSpN4i-9PrA0HvcDJ8M8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 15:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:62:9f:fa:3b:24:18:f1:b3:a9:23:f2:44:49:1d:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5dab456a051d4a93788bef4fac0d07bdc0c9f0cf
Validity
Not Before: Nov 4 15:00:54 2025 GMT
Not After : Nov 5 15:00:54 2025 GMT
Subject: CN=e584c1d2fbf4a7136889bb03cb0e2772f64ed71d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:67:02:7b:4c:25:8a:4b:99:34:af:2e:0c:1c:
14:45:45:d3:22:00:55:93:fd:73:e9:22:49:55:c7:
e8:6f:50:d8:63:12:8a:d8:9a:8b:46:a0:56:4d:97:
ba:8c:19:36:bd:36:1c:b0:06:0b:07:40:95:0f:60:
e2:40:da:47:cc:e8:f4:19:87:0d:09:cf:a7:cf:5f:
72:57:3d:91:ea:b9:06:8d:e0:13:3e:0a:33:32:eb:
da:fb:61:e4:31:26:9c:c9:f7:5e:fa:73:75:7c:5d:
4d:5b:9c:d6:9b:f8:ef:78:d3:93:f9:0f:e1:4c:9a:
21:a7:eb:d3:ca:fd:75:1b:a4:71:e1:e8:88:95:d5:
8d:f4:4e:bb:c7:84:54:f6:a4:0a:44:1c:57:3f:d5:
7e:f8:2a:c3:26:09:d7:0d:ea:c2:1b:d8:d9:04:29:
86:13:61:d1:21:b3:77:3d:02:72:ab:76:58:13:ec:
96:f0:fc:83:c1:dc:3e:80:bd:29:34:14:80:3e:4c:
a0:28:3e:4a:a8:e2:36:89:65:59:4b:8e:60:40:db:
5e:08:5a:14:03:83:17:28:cc:13:a6:ca:d4:fe:e2:
83:e7:8e:02:52:9f:1c:c1:4a:bb:09:2c:1d:75:9d:
c1:fd:eb:ab:40:3d:96:fa:bd:88:50:ae:c6:cf:dd:
9b:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:84:C1:D2:FB:F4:A7:13:68:89:BB:03:CB:0E:27:72:F6:4E:D7:1D
X509v3 Authority Key Identifier:
keyid:5D:AB:45:6A:05:1D:4A:93:78:8B:EF:4F:AC:0D:07:BD:C0:C9:F0:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XatFagUdSpN4i-9PrA0HvcDJ8M8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/8d3895-65c2-4b8e-a547-8ad74cc6a6b9/1/XatFagUdSpN4i-9PrA0HvcDJ8M8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/8d3895-65c2-4b8e-a547-8ad74cc6a6b9/1/XatFagUdSpN4i-9PrA0HvcDJ8M8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:75:6e:04:45:2b:2c:7c:ec:95:e6:c8:e9:51:64:5e:2a:87:
47:7a:20:c7:f9:3b:68:bb:15:a2:73:ec:fa:81:01:db:e5:31:
4f:10:bd:05:06:38:1a:49:88:d1:58:7f:c2:ec:0e:ba:81:d5:
4e:dd:0a:d3:40:25:d9:3f:10:62:3d:9c:32:e2:40:e1:c7:62:
c7:26:b6:e0:20:5f:e9:ba:b2:4c:88:49:b2:25:d0:e6:6a:dc:
0b:da:5c:8f:ef:1d:1a:ba:be:e6:e4:02:b0:c0:0f:59:21:cd:
3f:e6:82:0a:1f:0a:d9:b5:85:ea:b2:bd:dc:36:d8:d4:8f:30:
da:c9:18:46:66:16:d3:60:28:b1:fc:6c:dd:da:1c:cd:99:e7:
e9:aa:a7:9a:a8:c1:f0:1e:a0:f6:94:61:cf:e8:b7:1c:36:b5:
45:90:d8:f8:a1:6a:b2:03:69:ba:a7:5a:d6:bb:a0:4a:19:ce:
5b:ae:f5:11:0c:bf:fb:00:29:e9:0b:2c:db:2f:b3:9a:d3:b2:
08:b2:8a:7c:2e:19:c9:ae:ae:f5:9c:d8:56:3a:61:7e:43:f8:
2f:9b:9c:93:10:26:b5:a3:dc:a0:ec:04:9c:46:4d:d3:e8:12:
17:68:54:80:43:93:49:03:c6:d6:62:a0:79:7a:4b:47:dd:a9:
e1:74:46:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:48:31 2025 by rpki-client