Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/f76b1d-48cb-4ab1-90ec-e615f56f78b1/1/XyxxJryPOQVnRN4hOyzia3a8mSM.mft
File: XyxxJryPOQVnRN4hOyzia3a8mSM.mft (raw, json)
Hash identifier: rLwKZ9egOhQ6JX4+rbqVFeRKqOh+IK2PYr2pm9cDXDw=
Subject key identifier: 14:F7:B7:75:57:5E:FE:73:52:F0:AD:85:58:66:21:6E:F2:9A:2A:C5
Authority key identifier: 5F:2C:71:26:BC:8F:39:05:67:44:DE:21:3B:2C:E2:6B:76:BC:99:23
Certificate issuer: /CN=5f2c7126bc8f39056744de213b2ce26b76bc9923
Certificate serial: 0198D6602D6D07715BAEE87C1DD2B67504D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XyxxJryPOQVnRN4hOyzia3a8mSM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/f76b1d-48cb-4ab1-90ec-e615f56f78b1/1/XyxxJryPOQVnRN4hOyzia3a8mSM.mft
Manifest number: 164A
Signing time: Sat 23 Aug 2025 10:01:23 +0000
Manifest this update: Sat 23 Aug 2025 10:01:23 +0000
Manifest next update: Sun 24 Aug 2025 10:01:23 +0000
Files and hashes: 1: XyxxJryPOQVnRN4hOyzia3a8mSM.crl (hash: NMD7M9nVx88XEikClmEIwaXoAb8vY1JDvUAMBuHrP3I=)
2: YpoQb4d2ZirnrI3hA0gBb3h8Ui4.roa (hash: xAwvy1eVXmw515xL9f1ayxKoN3gZJ8WiMBC17Avnw5o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/f76b1d-48cb-4ab1-90ec-e615f56f78b1/1/XyxxJryPOQVnRN4hOyzia3a8mSM.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/f76b1d-48cb-4ab1-90ec-e615f56f78b1/1/XyxxJryPOQVnRN4hOyzia3a8mSM.mft
rsync://rpki.ripe.net/repository/DEFAULT/XyxxJryPOQVnRN4hOyzia3a8mSM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:2d:6d:07:71:5b:ae:e8:7c:1d:d2:b6:75:04:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f2c7126bc8f39056744de213b2ce26b76bc9923
Validity
Not Before: Aug 23 10:01:23 2025 GMT
Not After : Aug 24 10:01:23 2025 GMT
Subject: CN=14f7b775575efe7352f0ad855866216ef29a2ac5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:5d:ff:10:3a:be:71:9c:43:55:1a:92:67:c7:
6d:78:5c:65:4b:24:f4:ed:92:af:3d:26:d2:ad:f7:
a7:28:29:f0:16:1b:0e:1b:3f:57:1f:37:56:ee:7e:
58:c1:5f:27:a0:60:d9:80:84:19:30:dc:b2:b1:31:
d4:c4:36:af:6c:b0:55:75:76:fb:78:98:a1:fd:06:
29:a4:df:ee:30:47:ca:fd:7c:e8:1f:7b:9a:03:98:
60:65:f8:e2:86:21:9f:35:c3:26:71:f3:3a:52:a9:
2f:cd:61:ed:30:7f:c3:80:86:8d:83:16:1e:e5:6a:
20:77:11:c4:d2:3a:a5:b1:14:8b:7d:06:6e:19:e5:
22:c6:08:58:3c:bf:4c:7e:1e:79:84:ce:cb:30:35:
30:67:15:19:0a:1b:fc:6f:03:06:6e:6e:cd:93:d5:
e0:50:5f:60:fa:3e:b8:81:33:5f:2a:b9:28:b3:1e:
4c:be:dc:46:8d:d4:19:e1:3c:86:91:17:11:a0:b0:
6a:63:98:68:df:e7:e4:05:2d:53:db:8b:ca:c1:49:
76:24:d7:b4:41:28:0d:c0:76:35:cb:4e:fc:86:f7:
bc:8a:3e:e5:3b:d1:28:4f:11:56:75:e9:9d:ac:28:
ae:41:e1:4c:68:ea:88:d5:8c:20:72:5a:18:26:c6:
e0:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:F7:B7:75:57:5E:FE:73:52:F0:AD:85:58:66:21:6E:F2:9A:2A:C5
X509v3 Authority Key Identifier:
keyid:5F:2C:71:26:BC:8F:39:05:67:44:DE:21:3B:2C:E2:6B:76:BC:99:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XyxxJryPOQVnRN4hOyzia3a8mSM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/f76b1d-48cb-4ab1-90ec-e615f56f78b1/1/XyxxJryPOQVnRN4hOyzia3a8mSM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/f76b1d-48cb-4ab1-90ec-e615f56f78b1/1/XyxxJryPOQVnRN4hOyzia3a8mSM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:c2:62:1e:36:45:30:41:68:4e:5f:73:51:d3:e2:93:44:b1:
b7:4d:e0:27:3d:4b:f7:46:1a:68:33:18:25:2c:d9:2e:68:ab:
45:37:02:85:c6:84:47:ed:86:45:17:44:8b:ac:56:62:be:70:
e5:69:38:b0:3d:b6:de:ea:7a:f1:b5:16:c4:8d:7f:57:f8:95:
e8:a6:8c:4a:cd:fd:4e:5c:15:b1:7f:06:35:9b:dc:99:f3:ec:
2e:2d:4f:7d:0f:1d:67:1d:39:3e:94:50:ed:d8:a5:b1:29:35:
03:a4:ab:af:f9:0b:bc:59:e8:f2:d2:d8:b5:e1:13:33:ef:48:
b8:73:cf:17:9e:0d:47:cd:d6:a6:65:a0:ae:a9:6b:8b:57:e2:
57:4e:fd:61:f0:aa:5a:f9:a8:db:26:f6:a3:68:d4:87:90:f6:
73:cf:62:35:8c:ce:05:84:57:9f:b9:eb:5e:52:f8:7e:a8:8e:
f8:b4:d8:16:12:f9:81:f6:15:d6:a6:44:85:80:19:22:ce:63:
a1:1c:8d:2b:34:97:73:b3:31:e7:5c:01:d1:63:f0:01:8c:c9:
b3:c4:45:85:27:81:4d:e6:b9:b6:ff:19:3b:fe:a5:f8:09:dc:
45:1c:d4:88:c4:89:12:80:5b:ce:1c:48:ad:8a:8d:fa:c1:32:
7e:83:67:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:15:44 2025 by rpki-client