Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/c79d13-9ea2-4eed-8dd2-cedab463ee5b/1/XYJmcuaPPaXbUO2ButuNM73M0ro.mft
File: XYJmcuaPPaXbUO2ButuNM73M0ro.mft (raw, json)
Hash identifier: AAbBXE7Ny04hxUA3KUk0LjppypIHghX+qHtXoeDs+kw=
Subject key identifier: D7:11:93:D6:2E:63:84:07:DE:CC:02:63:33:EF:23:9F:05:CF:38:04
Authority key identifier: 5D:82:66:72:E6:8F:3D:A5:DB:50:ED:81:BA:DB:8D:33:BD:CC:D2:BA
Certificate issuer: /CN=5d826672e68f3da5db50ed81badb8d33bdccd2ba
Certificate serial: 0199FEEBC1EAEAC7F7628FC5E2C19AB1CDDD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XYJmcuaPPaXbUO2ButuNM73M0ro.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/c79d13-9ea2-4eed-8dd2-cedab463ee5b/1/XYJmcuaPPaXbUO2ButuNM73M0ro.mft
Manifest number: 131F
Signing time: Mon 20 Oct 2025 00:01:27 +0000
Manifest this update: Mon 20 Oct 2025 00:01:27 +0000
Manifest next update: Tue 21 Oct 2025 00:01:27 +0000
Files and hashes: 1: XYJmcuaPPaXbUO2ButuNM73M0ro.crl (hash: scDnWLBilVFbW4dMB7mesuKfV8IB/3bK3zGB2PY+Fx0=)
2: uOaT4j9EVJiz8EIOTgjvWTshz84.roa (hash: 6VQK7lQU8B+WO6nBknTZwm7r/sjint5WViRnRUFwHxU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/c79d13-9ea2-4eed-8dd2-cedab463ee5b/1/XYJmcuaPPaXbUO2ButuNM73M0ro.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/c79d13-9ea2-4eed-8dd2-cedab463ee5b/1/XYJmcuaPPaXbUO2ButuNM73M0ro.mft
rsync://rpki.ripe.net/repository/DEFAULT/XYJmcuaPPaXbUO2ButuNM73M0ro.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:eb:c1:ea:ea:c7:f7:62:8f:c5:e2:c1:9a:b1:cd:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d826672e68f3da5db50ed81badb8d33bdccd2ba
Validity
Not Before: Oct 20 00:01:27 2025 GMT
Not After : Oct 21 00:01:27 2025 GMT
Subject: CN=d71193d62e638407decc026333ef239f05cf3804
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:cb:b7:b5:18:dc:a1:b4:43:09:72:fb:e8:ea:
83:68:a0:d9:59:6c:de:b4:90:e9:af:f8:bd:4d:33:
ba:4d:3a:12:b7:cd:4a:67:36:a1:c3:79:72:7e:f8:
a0:1b:66:f1:f7:26:a1:ca:a4:b2:d9:86:20:5a:13:
e5:90:19:2a:34:25:4b:06:7e:96:34:68:d0:c5:d1:
66:b7:b2:d4:62:04:e3:0c:e5:7b:29:3c:88:a9:ed:
6f:fc:04:24:93:09:7f:75:00:98:80:62:bb:d2:bd:
d1:10:d2:a8:30:50:c1:d2:01:54:e7:0f:21:50:c1:
9a:07:9a:d7:86:09:2b:fd:60:9a:fb:11:78:dc:30:
ad:40:35:25:54:68:0e:e8:ce:7a:1d:51:31:2f:a5:
a4:3d:7b:b3:90:24:e5:d4:63:de:a2:d7:32:14:53:
e9:45:b5:1d:f0:47:20:6b:c4:a4:49:d6:32:14:ba:
69:4d:2e:b2:0f:68:40:aa:01:78:67:45:6e:d7:5a:
0f:d8:19:eb:f7:cd:5a:67:89:ef:7d:48:f0:46:fd:
a8:a7:38:15:f8:2f:98:cb:ac:db:6e:b7:8d:52:f0:
34:40:ba:67:dd:56:17:05:6c:0f:42:84:6d:c9:43:
8f:ad:76:50:dc:87:73:98:77:20:04:6a:2c:cb:fd:
5b:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:11:93:D6:2E:63:84:07:DE:CC:02:63:33:EF:23:9F:05:CF:38:04
X509v3 Authority Key Identifier:
keyid:5D:82:66:72:E6:8F:3D:A5:DB:50:ED:81:BA:DB:8D:33:BD:CC:D2:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XYJmcuaPPaXbUO2ButuNM73M0ro.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/c79d13-9ea2-4eed-8dd2-cedab463ee5b/1/XYJmcuaPPaXbUO2ButuNM73M0ro.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/c79d13-9ea2-4eed-8dd2-cedab463ee5b/1/XYJmcuaPPaXbUO2ButuNM73M0ro.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:59:f4:4d:a8:3e:e8:59:e2:42:1d:b5:66:e6:14:6d:d2:cc:
a9:29:50:39:ee:37:4d:23:1d:13:f5:a3:77:91:53:4c:cd:80:
cb:eb:a2:a6:81:24:7a:d1:7c:8a:63:d6:2c:25:8e:89:14:90:
5c:e9:2c:a4:0d:5e:ca:1f:1f:c1:c3:53:2f:c6:f4:42:00:2f:
25:a1:60:49:bf:04:36:c2:20:83:01:f6:2b:9e:24:55:94:0a:
c3:3f:c1:b0:0e:53:bb:27:e4:5b:f5:cb:c6:fc:2a:18:93:08:
11:95:a7:61:d3:f1:e7:a5:b7:53:7f:71:11:74:7f:5a:9c:d1:
74:9e:fb:81:97:8e:ee:9f:f4:34:15:88:e8:5f:41:5f:2b:de:
9c:b2:33:ff:c2:21:76:30:dd:57:0d:0d:4f:d9:25:0e:41:5e:
52:23:8c:f2:c0:c2:2b:85:8c:9c:e4:ab:97:03:bc:70:a4:a6:
88:9c:b3:87:16:cd:00:34:a0:d1:ec:46:b1:de:f7:66:cc:d1:
9b:23:bb:be:98:f3:fe:32:0b:e4:52:b1:9a:16:ae:f6:ca:5e:
8a:d6:fa:c7:3a:8f:ed:d5:04:c8:d5:05:c6:21:3d:d5:a9:63:
55:30:9b:d1:01:c5:aa:f1:f6:d1:92:fd:25:73:25:b4:19:3b:
66:86:cd:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 07:16:20 2025 by rpki-client