Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/42fc92-1663-4688-a31d-cf6a63e4efb6/1/XfsHTUe34LyJHtBuqPxn447PUKE.mft
File: XfsHTUe34LyJHtBuqPxn447PUKE.mft (raw, json)
Hash identifier: nZbe2z6GQ3R0MEurKMwmYD+h0lNgAt1Xp0Scq4xNQjE=
Subject key identifier: D7:30:FC:7A:EB:70:CB:F6:52:EE:98:E7:40:31:93:1F:07:9A:A3:D3
Authority key identifier: 5D:FB:07:4D:47:B7:E0:BC:89:1E:D0:6E:A8:FC:67:E3:8E:CF:50:A1
Certificate issuer: /CN=5dfb074d47b7e0bc891ed06ea8fc67e38ecf50a1
Certificate serial: 0199FC21AB1B7AEDF24300ECBAA0C5599847
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XfsHTUe34LyJHtBuqPxn447PUKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/42fc92-1663-4688-a31d-cf6a63e4efb6/1/XfsHTUe34LyJHtBuqPxn447PUKE.mft
Manifest number: 1556
Signing time: Sun 19 Oct 2025 11:01:28 +0000
Manifest this update: Sun 19 Oct 2025 11:01:28 +0000
Manifest next update: Mon 20 Oct 2025 11:01:28 +0000
Files and hashes: 1: 6LvfCWQhJwJjQ7yfxm8_2iB8ajA.roa (hash: VVZpFqNQIGYIg2vRxvGNX/HI0x30XQ+fKGPR57+uciQ=)
2: XfsHTUe34LyJHtBuqPxn447PUKE.crl (hash: feKfvMZw82F5P+n21i8jByafWlyeRO/ZyWKLT9abfEU=)
3: av04jWa8rKYQ3nk3tcQ4QNzDf24.roa (hash: sB985eweguyIFZeDXj+lMH1jkA5cLTMNgeC7bZvuV5I=)
4: leWCgVUyxa4fF2Lv7Kr-Z7NPEos.roa (hash: qNmjf5Agy5lGUPR54BZFqLIkeuS1MkmGjj8lmstmC6w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/42fc92-1663-4688-a31d-cf6a63e4efb6/1/XfsHTUe34LyJHtBuqPxn447PUKE.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/42fc92-1663-4688-a31d-cf6a63e4efb6/1/XfsHTUe34LyJHtBuqPxn447PUKE.mft
rsync://rpki.ripe.net/repository/DEFAULT/XfsHTUe34LyJHtBuqPxn447PUKE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:ab:1b:7a:ed:f2:43:00:ec:ba:a0:c5:59:98:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5dfb074d47b7e0bc891ed06ea8fc67e38ecf50a1
Validity
Not Before: Oct 19 11:01:28 2025 GMT
Not After : Oct 20 11:01:28 2025 GMT
Subject: CN=d730fc7aeb70cbf652ee98e74031931f079aa3d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:05:62:67:c3:8f:4b:98:28:26:12:f5:dd:d6:
ee:5d:2e:21:17:7e:45:f1:36:af:00:6b:fa:4a:51:
f4:08:2a:a6:56:18:c2:03:1d:f5:f7:1b:34:0d:bd:
83:1d:f0:b5:a3:44:0f:64:45:8d:04:50:ac:70:c5:
d8:13:56:ce:96:0e:4f:94:de:21:12:37:30:39:1f:
17:f0:92:bc:af:8d:36:a0:df:41:16:7e:3b:d8:34:
58:88:a6:d6:02:60:31:a6:4f:26:d8:ca:aa:63:f8:
6e:43:58:02:61:1d:b9:74:6a:a8:29:b0:e0:38:e3:
72:5c:b2:2e:83:ba:8f:99:dc:9e:1d:7f:5c:a5:e4:
63:4d:09:f4:29:9e:b2:5a:71:e8:a3:b3:d1:ce:1a:
3a:cf:5a:d1:d8:60:1d:a4:4d:ef:41:9a:b6:d9:44:
7e:00:a3:3c:ea:3c:81:53:5a:4f:dd:06:58:6e:87:
5f:c5:03:65:fd:3b:5a:b3:a0:96:9f:6a:57:99:27:
46:d5:61:38:3f:3a:f6:3c:8b:bc:8b:44:82:43:73:
bf:da:a6:1a:12:f9:01:7b:86:44:ed:4d:1d:f7:11:
4c:f4:e6:6c:b4:99:0a:f1:8d:65:96:05:91:8d:e6:
ba:6f:32:f5:ad:7a:84:45:fc:92:d8:42:ce:66:a0:
44:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:30:FC:7A:EB:70:CB:F6:52:EE:98:E7:40:31:93:1F:07:9A:A3:D3
X509v3 Authority Key Identifier:
keyid:5D:FB:07:4D:47:B7:E0:BC:89:1E:D0:6E:A8:FC:67:E3:8E:CF:50:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XfsHTUe34LyJHtBuqPxn447PUKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/42fc92-1663-4688-a31d-cf6a63e4efb6/1/XfsHTUe34LyJHtBuqPxn447PUKE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/42fc92-1663-4688-a31d-cf6a63e4efb6/1/XfsHTUe34LyJHtBuqPxn447PUKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:e9:f0:ac:93:f4:11:ea:07:5b:02:04:fd:7f:8f:c6:d2:a7:
f7:0b:90:fe:b8:63:c8:b8:e5:71:7c:d8:9b:e0:db:4c:25:7d:
0f:74:4c:65:30:59:ff:33:91:6f:e7:b4:ad:17:a0:09:2e:e2:
fd:f8:94:48:2a:d5:37:ff:cf:33:d2:1a:29:d5:82:55:11:2c:
dc:29:ab:4c:b3:cf:9e:b7:76:7c:de:d5:c9:51:12:af:67:fd:
4f:3b:a7:6c:bb:c0:a1:d7:27:ad:cd:a9:4d:f6:2f:5d:3b:9e:
de:3b:d1:50:2d:8a:62:9a:2f:11:ad:3b:a2:75:c4:09:a1:d0:
d3:a5:ee:72:1e:62:f1:aa:7d:93:80:da:ff:44:97:eb:90:a4:
49:84:e1:3d:17:2f:50:dd:94:63:1f:fb:e3:d2:67:5c:00:b4:
13:23:8f:03:ba:10:8b:1d:0f:ef:1b:52:29:92:03:25:59:54:
7c:46:51:6f:27:04:3e:e8:f4:79:c2:75:cc:18:b0:46:42:89:
8b:48:79:1c:71:f5:36:a0:3f:a1:37:b2:f9:09:bf:d0:c4:1f:
80:5a:cb:1d:1f:33:1e:26:29:b1:42:d6:89:eb:0b:b4:3b:89:
f9:74:8f:36:7e:67:b7:53:0c:b7:d1:92:3f:4b:ac:5d:c8:ce:
b0:88:d8:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:07:02 2025 by rpki-client