Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/f76b1d-48cb-4ab1-90ec-e615f56f78b1/1/XyxxJryPOQVnRN4hOyzia3a8mSM.mft
File: XyxxJryPOQVnRN4hOyzia3a8mSM.mft (raw, json)
Hash identifier: LW2WgQIG8/xzc8ZWOVeMYHb7ZZg5Lbj5S9uPl5K3Hgw=
Subject key identifier: 8A:20:EC:BB:55:19:DB:47:44:E0:C0:D7:1C:C9:7D:B7:EC:26:BA:0F
Authority key identifier: 5F:2C:71:26:BC:8F:39:05:67:44:DE:21:3B:2C:E2:6B:76:BC:99:23
Certificate issuer: /CN=5f2c7126bc8f39056744de213b2ce26b76bc9923
Certificate serial: 0199FDD9021EEE227BAE8BE8AEA4420501DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XyxxJryPOQVnRN4hOyzia3a8mSM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/f76b1d-48cb-4ab1-90ec-e615f56f78b1/1/XyxxJryPOQVnRN4hOyzia3a8mSM.mft
Manifest number: 16E3
Signing time: Sun 19 Oct 2025 19:01:21 +0000
Manifest this update: Sun 19 Oct 2025 19:01:21 +0000
Manifest next update: Mon 20 Oct 2025 19:01:21 +0000
Files and hashes: 1: XyxxJryPOQVnRN4hOyzia3a8mSM.crl (hash: IQ20nFdNFQI2lWhdpavrY6jZxYNF+BecyhGxeSax4E0=)
2: YpoQb4d2ZirnrI3hA0gBb3h8Ui4.roa (hash: xAwvy1eVXmw515xL9f1ayxKoN3gZJ8WiMBC17Avnw5o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/f76b1d-48cb-4ab1-90ec-e615f56f78b1/1/XyxxJryPOQVnRN4hOyzia3a8mSM.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/f76b1d-48cb-4ab1-90ec-e615f56f78b1/1/XyxxJryPOQVnRN4hOyzia3a8mSM.mft
rsync://rpki.ripe.net/repository/DEFAULT/XyxxJryPOQVnRN4hOyzia3a8mSM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d9:02:1e:ee:22:7b:ae:8b:e8:ae:a4:42:05:01:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f2c7126bc8f39056744de213b2ce26b76bc9923
Validity
Not Before: Oct 19 19:01:21 2025 GMT
Not After : Oct 20 19:01:21 2025 GMT
Subject: CN=8a20ecbb5519db4744e0c0d71cc97db7ec26ba0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:49:20:6a:91:e0:e6:44:f3:78:1d:6d:c0:db:
53:95:72:75:06:16:00:ea:66:d7:98:03:a4:82:e5:
a8:57:9c:37:4b:8c:9c:9a:3e:d8:53:f2:99:2f:4b:
d8:4d:fe:23:50:e0:92:87:6d:21:99:a1:3b:c9:94:
7c:12:16:a9:ca:1d:8e:f4:ac:79:a6:f4:50:54:6c:
4f:cd:16:41:70:f0:1a:88:e2:e4:e4:62:37:d7:a9:
0c:6e:7f:d2:16:87:5d:5d:b4:ef:0d:44:9f:c9:1e:
89:41:f6:a7:d1:6f:c1:1d:03:ff:35:2b:d8:6d:e9:
bb:48:72:44:90:79:22:63:52:b0:6a:26:e1:6d:a7:
8d:ef:38:59:5b:bc:ce:d7:8e:d2:43:4a:65:aa:1e:
d5:3a:45:f1:23:e2:6f:7a:e8:6c:a3:f2:02:d8:fe:
de:6f:04:55:81:70:c6:b5:67:49:9d:37:de:e4:b5:
70:9c:8d:19:57:7b:9a:d4:1d:70:d4:6f:c3:8f:4f:
97:fd:07:bd:f3:ed:ff:62:e0:aa:72:c4:85:93:71:
bc:42:30:69:c4:46:38:a0:d9:2e:86:6a:74:05:d7:
39:3f:2b:9e:8d:43:52:86:b3:04:cb:d0:fc:19:f9:
8f:69:91:2a:90:6d:7a:0e:39:90:df:14:09:96:e6:
15:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:20:EC:BB:55:19:DB:47:44:E0:C0:D7:1C:C9:7D:B7:EC:26:BA:0F
X509v3 Authority Key Identifier:
keyid:5F:2C:71:26:BC:8F:39:05:67:44:DE:21:3B:2C:E2:6B:76:BC:99:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XyxxJryPOQVnRN4hOyzia3a8mSM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/f76b1d-48cb-4ab1-90ec-e615f56f78b1/1/XyxxJryPOQVnRN4hOyzia3a8mSM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/f76b1d-48cb-4ab1-90ec-e615f56f78b1/1/XyxxJryPOQVnRN4hOyzia3a8mSM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:35:d9:15:c6:2d:88:94:73:40:f7:38:7f:e6:32:73:f5:6f:
6f:ed:af:02:36:85:cf:19:8e:c7:39:cb:75:de:4a:bb:f2:29:
85:10:5a:32:57:23:01:1c:2b:cd:a4:03:f5:e9:67:bc:7a:c5:
0b:35:86:17:f4:fe:b0:78:a5:1d:58:c7:cf:c2:d8:17:6d:b9:
c0:8d:6e:ee:a3:d4:30:a7:48:98:a9:df:e3:3a:9b:b1:d6:c0:
c2:a8:ae:a5:cd:59:da:a6:c0:2e:40:e7:d5:8e:1c:91:2b:f8:
d4:04:7a:5b:e5:02:a4:cd:6d:1a:73:4f:57:74:8a:b7:d5:58:
fa:2b:e8:49:70:05:ac:0b:f4:43:02:34:a9:25:46:42:bf:06:
64:59:29:84:29:9c:0f:df:b5:61:4b:eb:5c:5c:b2:5f:aa:69:
a8:3c:8c:ff:90:cb:17:b0:b4:be:56:6d:1d:9b:67:b9:df:f2:
8d:28:06:72:7a:47:0e:03:09:de:eb:a4:f4:e0:7d:39:be:c9:
a2:f5:17:fe:c3:9f:98:59:a1:c6:72:47:35:6a:7c:3b:56:7d:
5f:38:2f:2c:6c:94:4c:37:36:0c:fd:b9:40:c5:fe:02:27:6c:
b8:1c:3a:91:da:a1:7f:ce:97:0e:ba:c3:20:1b:22:f1:42:36:
c5:80:7e:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:37:07 2025 by rpki-client