Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/4e3cc2-1a33-495a-999f-d7a684a57b19/1/xypST5sbOAHb18iaFgrsB2tX5yk.mft
File: xypST5sbOAHb18iaFgrsB2tX5yk.mft (raw, json)
Hash identifier: TcNfGXDRK7Ck41hteOyRsg4g7iFWs+x5hCP3mQD/AXM=
Subject key identifier: 80:31:4C:6D:79:45:96:77:F6:A6:2B:7B:24:67:3E:CA:9C:8C:31:F5
Authority key identifier: C7:2A:52:4F:9B:1B:38:01:DB:D7:C8:9A:16:0A:EC:07:6B:57:E7:29
Certificate issuer: /CN=c72a524f9b1b3801dbd7c89a160aec076b57e729
Certificate serial: 0199FB7CC4A85F107FFCF4A4B2A49F56454B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xypST5sbOAHb18iaFgrsB2tX5yk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/4e3cc2-1a33-495a-999f-d7a684a57b19/1/xypST5sbOAHb18iaFgrsB2tX5yk.mft
Manifest number: 0F48
Signing time: Sun 19 Oct 2025 08:01:21 +0000
Manifest this update: Sun 19 Oct 2025 08:01:21 +0000
Manifest next update: Mon 20 Oct 2025 08:01:21 +0000
Files and hashes: 1: B5IPw2to02EUzOiZAkDMZAMJU40.roa (hash: SqPGfdHaKQmJHjb0Md5WPKQZqfqDkbS8MZiJDiQQgE0=)
2: QhPm8U1brOIqGs2lZ2LGdcxBiLA.roa (hash: b6IzZ0v53J6OJOZBPLixdFrIPoMrdc5UH4inFHWFRvM=)
3: kYBNVlP4IkeOs0bTiFV8wc5LMQs.roa (hash: g3QlMNFCFIgPt5yC/cat7+5gVwDPl1ap/dvIpROnsyw=)
4: xypST5sbOAHb18iaFgrsB2tX5yk.crl (hash: 3lxZgJerd6PhlHyTjAOVLSsJ5DtE8rEVcpowX9a7KGM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/4e3cc2-1a33-495a-999f-d7a684a57b19/1/xypST5sbOAHb18iaFgrsB2tX5yk.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/4e3cc2-1a33-495a-999f-d7a684a57b19/1/xypST5sbOAHb18iaFgrsB2tX5yk.mft
rsync://rpki.ripe.net/repository/DEFAULT/xypST5sbOAHb18iaFgrsB2tX5yk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:7c:c4:a8:5f:10:7f:fc:f4:a4:b2:a4:9f:56:45:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c72a524f9b1b3801dbd7c89a160aec076b57e729
Validity
Not Before: Oct 19 08:01:21 2025 GMT
Not After : Oct 20 08:01:21 2025 GMT
Subject: CN=80314c6d79459677f6a62b7b24673eca9c8c31f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:2d:62:0e:72:25:91:8d:e8:1d:6e:ea:44:84:
70:30:e9:c2:b6:6b:ff:10:cf:6b:89:ce:af:e6:e0:
03:b8:a1:59:73:29:1d:a4:76:52:33:8f:67:6c:6d:
02:92:72:a6:d5:d6:75:a3:95:cf:14:99:5d:2e:6d:
d1:07:f6:ad:79:ab:d8:df:c9:9f:7a:5b:48:8e:ba:
83:cf:20:38:16:61:8e:89:0e:36:d5:e8:40:70:c3:
9d:de:39:68:c5:82:32:2e:72:fa:bc:ef:61:06:df:
d9:f1:b0:d5:d2:d8:1b:fd:5e:cb:6e:7c:08:6f:18:
e6:fd:96:e2:41:e5:3a:a3:1d:fa:75:30:6b:d7:30:
22:d8:80:e5:01:2e:c0:08:e6:48:9a:4a:f8:c0:2f:
13:db:76:9b:53:99:fa:08:2a:8c:18:20:c5:8b:52:
ee:23:b1:6a:6f:0e:17:57:7d:9e:35:3c:f0:bf:84:
d2:28:4e:82:93:ac:f7:8c:a6:13:09:c9:db:e1:9b:
57:13:c3:44:2c:37:79:c8:5f:06:4d:f6:f3:cb:a3:
cd:3e:63:73:3e:99:14:fc:f6:c2:30:f3:3f:c1:83:
ec:2d:86:88:c1:39:3c:09:0d:53:18:dc:50:a5:db:
6f:bb:95:2c:ed:cb:71:a0:87:a1:69:90:40:50:af:
13:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:31:4C:6D:79:45:96:77:F6:A6:2B:7B:24:67:3E:CA:9C:8C:31:F5
X509v3 Authority Key Identifier:
keyid:C7:2A:52:4F:9B:1B:38:01:DB:D7:C8:9A:16:0A:EC:07:6B:57:E7:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xypST5sbOAHb18iaFgrsB2tX5yk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/4e3cc2-1a33-495a-999f-d7a684a57b19/1/xypST5sbOAHb18iaFgrsB2tX5yk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/4e3cc2-1a33-495a-999f-d7a684a57b19/1/xypST5sbOAHb18iaFgrsB2tX5yk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:24:2c:f4:28:c2:54:2c:94:5d:ac:4e:58:b3:b7:77:b3:e2:
ac:61:84:34:25:c5:a0:66:94:35:19:3f:77:fe:e1:fa:46:29:
8c:f7:31:ab:d0:a4:d4:2c:53:82:92:7d:43:83:c2:48:c3:db:
62:95:86:b4:45:15:8e:a9:53:92:e8:4c:0e:fc:0c:07:77:39:
14:30:44:7d:e5:d6:44:64:b2:37:7c:3d:35:57:bd:10:c6:e0:
ab:92:44:78:ba:07:bd:ba:63:87:be:1a:7b:bf:bb:08:9b:bc:
d8:87:83:88:d9:4d:af:8e:ac:87:89:5c:fe:23:b4:27:47:fd:
ec:fe:99:a4:e7:2b:bf:c3:b9:92:e0:a9:54:ab:d9:86:a3:a8:
b1:c8:10:b3:73:ab:9e:9d:b4:b8:8b:75:c9:e2:fd:d6:1e:20:
6e:25:ae:15:af:69:1a:c7:d5:8b:97:99:3c:c3:8b:45:67:cd:
83:51:9c:1e:bd:85:7b:6f:29:4c:e0:a3:e3:66:02:14:4c:ca:
b8:1b:92:fd:14:05:e8:81:7f:01:8f:44:c4:50:75:f5:4f:60:
b2:3c:a1:3d:4b:82:45:08:58:3e:24:75:0c:d7:8f:c5:e9:d2:
c6:ed:0d:4b:a2:be:5b:9e:37:86:e3:69:5b:7c:d4:ef:95:25:
ce:7f:26:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:11:13 2025 by rpki-client