Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/d54bc0-f781-48b0-9f6d-b5f0d21053f8/1/XYLKb462haVz5dHZH48GEhqwKjc.mft
File: XYLKb462haVz5dHZH48GEhqwKjc.mft (raw, json)
Hash identifier: GT0w+keX4pBPt5Qe4mkCP7thhBfY6Ds3Q4MPt1GDpDU=
Subject key identifier: 9C:3B:83:05:DA:98:21:A5:9F:3A:9A:1C:53:37:62:A0:76:B8:74:E6
Authority key identifier: 5D:82:CA:6F:8E:B6:85:A5:73:E5:D1:D9:1F:8F:06:12:1A:B0:2A:37
Certificate issuer: /CN=5d82ca6f8eb685a573e5d1d91f8f06121ab02a37
Certificate serial: 0198D404CDBDC7C114E322B250BC5D6820DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XYLKb462haVz5dHZH48GEhqwKjc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/d54bc0-f781-48b0-9f6d-b5f0d21053f8/1/XYLKb462haVz5dHZH48GEhqwKjc.mft
Manifest number: 1280
Signing time: Fri 22 Aug 2025 23:02:21 +0000
Manifest this update: Fri 22 Aug 2025 23:02:21 +0000
Manifest next update: Sat 23 Aug 2025 23:02:21 +0000
Files and hashes: 1: 5CQ4eO5LX17KXZ4KRK1zO2WmDio.roa (hash: elGO+kkXCWf6xUhLxKQr6fK8y3EJu/aqnItwgZKwIWc=)
2: B7NZ-u78J5mcpsov1XyIGK10cH0.roa (hash: U6kZ6B0tG819VSZmmXYNrc7xdPGbBot/5/JsXAv6Iss=)
3: OoBGTJUsN0YQ8-kRUhL79IvaFTU.roa (hash: KQ8kfmaZw2mJmdCZhrX6qjUaRt+eTM3yBnvc8ppjAws=)
4: XYLKb462haVz5dHZH48GEhqwKjc.crl (hash: DZDoFYfkftKHOEwXLU9X6AGJ55e+4uSQGHKvuVxaF54=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/d54bc0-f781-48b0-9f6d-b5f0d21053f8/1/XYLKb462haVz5dHZH48GEhqwKjc.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/d54bc0-f781-48b0-9f6d-b5f0d21053f8/1/XYLKb462haVz5dHZH48GEhqwKjc.mft
rsync://rpki.ripe.net/repository/DEFAULT/XYLKb462haVz5dHZH48GEhqwKjc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Aug 2025 23:02:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:04:cd:bd:c7:c1:14:e3:22:b2:50:bc:5d:68:20:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d82ca6f8eb685a573e5d1d91f8f06121ab02a37
Validity
Not Before: Aug 22 23:02:21 2025 GMT
Not After : Aug 23 23:02:21 2025 GMT
Subject: CN=9c3b8305da9821a59f3a9a1c533762a076b874e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:ce:19:0a:97:31:99:da:1e:1a:a4:24:61:35:
0b:0e:a8:0e:d4:df:11:09:c3:5e:31:a4:d0:6f:05:
2f:7b:60:f2:d2:b1:ff:89:f4:3f:15:de:44:45:84:
f8:2e:23:37:e6:fa:5b:34:75:59:64:95:32:27:e6:
0a:ee:40:8a:05:e2:52:b8:19:1d:0b:7d:5c:2d:33:
b4:94:bb:1c:b0:53:93:19:4f:9c:fd:0b:ac:5d:53:
58:bf:dd:b9:c9:35:92:6a:67:ac:45:3e:15:2b:5c:
d3:18:13:2f:43:a9:ad:52:8a:01:e1:83:32:97:fb:
b4:7b:08:be:e9:13:29:2c:eb:51:7c:aa:c6:ab:5b:
bb:de:61:cb:58:39:55:62:11:06:64:0c:3f:64:66:
32:c4:18:05:bd:d5:5b:f5:7d:33:76:98:9a:e5:ee:
6a:dd:1d:fd:e6:0a:4c:e8:4f:4f:f4:69:eb:39:a5:
1f:6c:09:2a:68:0d:0f:82:5e:0a:eb:c3:4d:f3:d0:
db:31:6f:31:d7:f0:77:db:74:5c:3a:d7:5c:a4:bf:
fc:f2:94:92:3f:b0:3d:8a:1c:dd:15:7d:95:14:e4:
50:22:1d:24:d8:e4:e2:21:d0:58:1f:c4:1b:4c:cb:
89:0b:ad:58:57:7f:05:3e:8e:8c:39:66:c2:ac:ce:
af:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:3B:83:05:DA:98:21:A5:9F:3A:9A:1C:53:37:62:A0:76:B8:74:E6
X509v3 Authority Key Identifier:
keyid:5D:82:CA:6F:8E:B6:85:A5:73:E5:D1:D9:1F:8F:06:12:1A:B0:2A:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XYLKb462haVz5dHZH48GEhqwKjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/d54bc0-f781-48b0-9f6d-b5f0d21053f8/1/XYLKb462haVz5dHZH48GEhqwKjc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/d54bc0-f781-48b0-9f6d-b5f0d21053f8/1/XYLKb462haVz5dHZH48GEhqwKjc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:bf:b3:d9:84:13:71:6d:69:4b:63:ac:38:7e:8f:cd:36:35:
9b:c0:d9:7f:f0:ba:c8:b9:be:29:55:e9:19:07:6c:aa:ed:08:
77:fd:44:70:d4:3b:8c:77:9b:79:2a:aa:01:10:e3:59:a5:4f:
82:e4:10:f2:82:17:4d:e2:ea:f8:a6:5b:b5:47:21:89:5e:b4:
12:9c:b2:c6:9b:76:da:9e:73:35:a5:3a:33:d0:98:e4:04:61:
a5:29:1a:c2:09:0e:06:07:4d:5c:0e:55:37:04:b7:7f:f4:df:
7c:14:21:83:b1:e0:7f:f7:88:14:b5:be:03:23:62:e5:02:03:
21:2c:d8:1e:3d:28:97:62:26:f5:e3:3d:f8:9d:a9:a3:11:9a:
d7:92:09:ce:b1:79:93:ed:16:b1:80:c8:b3:90:32:41:25:49:
29:3a:ae:b9:9e:5e:7d:68:68:14:b1:93:f2:d1:e1:06:63:5e:
32:ee:11:37:f8:31:03:1c:b0:9a:47:4c:63:b1:6e:e5:fe:13:
97:a7:36:11:19:cc:c9:59:d0:b7:e1:d5:46:91:63:eb:27:a8:
c8:36:16:01:d0:d3:66:24:12:dc:5b:54:14:86:dd:a7:c1:68:
63:1a:ec:35:d2:cb:27:50:4a:dc:85:73:8a:60:07:c1:64:15:
7a:cb:e5:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 09:41:50 2025 by rpki-client