Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/c79d13-9ea2-4eed-8dd2-cedab463ee5b/1/XYJmcuaPPaXbUO2ButuNM73M0ro.mft
File: XYJmcuaPPaXbUO2ButuNM73M0ro.mft (raw, json)
Hash identifier: oXScqaG9FWbNYYRDvWcn4QDigzU1M2Q8sgFqSguekIY=
Subject key identifier: C2:EF:67:7C:EB:A7:DF:B4:AA:EB:EA:6E:30:C2:B7:C9:B2:43:76:B8
Authority key identifier: 5D:82:66:72:E6:8F:3D:A5:DB:50:ED:81:BA:DB:8D:33:BD:CC:D2:BA
Certificate issuer: /CN=5d826672e68f3da5db50ed81badb8d33bdccd2ba
Certificate serial: 0198D583EF45A1F04A709F3B060C3274F1B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XYJmcuaPPaXbUO2ButuNM73M0ro.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/c79d13-9ea2-4eed-8dd2-cedab463ee5b/1/XYJmcuaPPaXbUO2ButuNM73M0ro.mft
Manifest number: 1285
Signing time: Sat 23 Aug 2025 06:00:50 +0000
Manifest this update: Sat 23 Aug 2025 06:00:50 +0000
Manifest next update: Sun 24 Aug 2025 06:00:50 +0000
Files and hashes: 1: XYJmcuaPPaXbUO2ButuNM73M0ro.crl (hash: gRZLrWKJpFwfKi/U0IwK3/6KbQZVJ66hOxLyPgrMuuc=)
2: uOaT4j9EVJiz8EIOTgjvWTshz84.roa (hash: 6VQK7lQU8B+WO6nBknTZwm7r/sjint5WViRnRUFwHxU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/c79d13-9ea2-4eed-8dd2-cedab463ee5b/1/XYJmcuaPPaXbUO2ButuNM73M0ro.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/c79d13-9ea2-4eed-8dd2-cedab463ee5b/1/XYJmcuaPPaXbUO2ButuNM73M0ro.mft
rsync://rpki.ripe.net/repository/DEFAULT/XYJmcuaPPaXbUO2ButuNM73M0ro.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:ef:45:a1:f0:4a:70:9f:3b:06:0c:32:74:f1:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d826672e68f3da5db50ed81badb8d33bdccd2ba
Validity
Not Before: Aug 23 06:00:50 2025 GMT
Not After : Aug 24 06:00:50 2025 GMT
Subject: CN=c2ef677ceba7dfb4aaebea6e30c2b7c9b24376b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:36:a5:4d:a5:a6:3c:2d:73:6c:f5:35:27:28:
a6:f9:ca:fc:4f:50:2d:45:a8:ec:3b:39:2b:d5:b0:
0a:99:d3:20:3a:ff:41:27:e2:54:25:94:49:f3:2e:
65:6e:f3:c3:60:bc:7a:75:dc:83:0b:f2:44:4a:fd:
75:8f:52:02:75:75:c7:3d:51:aa:69:f6:2e:7a:6b:
50:08:90:01:06:c6:65:09:21:c5:73:76:c5:4c:04:
9c:40:b0:84:e7:d4:07:e2:1d:fe:31:dd:1a:c6:72:
cf:58:cc:aa:93:cf:4c:33:eb:5d:52:82:eb:ba:34:
3e:0b:5d:14:ea:dc:d1:09:ca:80:28:44:3d:db:a1:
f1:f4:5d:6e:50:ab:18:e6:8a:43:38:5d:64:9c:31:
77:9d:99:fc:ee:ac:7e:20:59:41:ba:6d:1c:62:42:
12:3c:19:5c:69:86:13:97:a7:0d:b7:8d:2d:77:07:
93:bb:7e:de:89:6b:59:b0:44:31:f1:2a:c3:6a:28:
c2:35:16:86:2f:76:b4:8d:53:ae:3f:a2:03:f5:9e:
77:41:ce:78:17:6c:ef:01:97:e2:6e:4e:ca:e8:db:
3a:c1:41:c1:18:47:d3:99:0b:10:15:31:0b:d6:87:
3c:77:b5:a1:ba:b5:37:4a:c9:a3:c0:f2:ac:c2:65:
6a:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:EF:67:7C:EB:A7:DF:B4:AA:EB:EA:6E:30:C2:B7:C9:B2:43:76:B8
X509v3 Authority Key Identifier:
keyid:5D:82:66:72:E6:8F:3D:A5:DB:50:ED:81:BA:DB:8D:33:BD:CC:D2:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XYJmcuaPPaXbUO2ButuNM73M0ro.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/c79d13-9ea2-4eed-8dd2-cedab463ee5b/1/XYJmcuaPPaXbUO2ButuNM73M0ro.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/c79d13-9ea2-4eed-8dd2-cedab463ee5b/1/XYJmcuaPPaXbUO2ButuNM73M0ro.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:f6:22:d6:0a:dc:46:45:6f:8c:a4:13:a1:dc:e7:f7:5b:2c:
5b:dd:58:69:a0:4a:35:90:bb:dc:e9:b2:f5:b1:3e:5e:f9:c0:
03:63:62:19:de:e6:88:a9:94:20:b7:78:44:74:3b:67:3e:0d:
c7:08:ef:d5:a7:40:bb:6f:c8:0f:17:01:0c:19:28:19:23:38:
02:2b:d9:11:c8:4b:91:cd:ea:cb:da:6e:c4:f1:ca:57:5a:5e:
79:5b:a4:14:b2:4c:f2:15:73:3c:d6:17:c2:ce:af:df:2c:91:
66:62:ef:f5:43:d5:40:3b:c7:0f:1e:82:e4:dc:91:54:1e:0c:
54:65:6e:05:c1:e7:96:34:d9:a0:d0:8f:12:27:eb:a6:15:19:
12:3b:bb:93:3b:c3:74:7a:85:63:2b:ab:5e:86:af:77:b0:d5:
1e:d8:63:b9:a4:1d:a0:f7:9f:ab:e3:7b:75:bd:51:25:58:86:
95:0c:d9:d8:85:26:06:95:d0:a8:16:0c:94:98:0a:44:84:4b:
67:4d:38:de:8e:b4:0a:72:7b:cc:d1:79:fb:b4:c5:e7:7d:8e:
58:81:e3:88:03:19:46:ee:1c:e9:9a:9f:29:eb:92:a7:7f:ff:
b8:08:ca:23:db:5b:f8:f3:c5:95:49:92:f2:90:52:3b:33:71:
5f:ae:cb:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:31:11 2025 by rpki-client