Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/b2545a-6ae9-427f-83ae-ce3f8515a69b/1/XVTR8F5RVk-oGdtyu47dOYeza74.mft
File: XVTR8F5RVk-oGdtyu47dOYeza74.mft (raw, json)
Hash identifier: L5uV2h77AIRX/ZJFDpJO1QNGIeq9VivVJyUsoo7Q0+8=
Subject key identifier: 4F:CC:72:2F:69:33:3D:32:58:5F:F7:96:C2:AF:94:84:CB:85:65:2A
Authority key identifier: 5D:54:D1:F0:5E:51:56:4F:A8:19:DB:72:BB:8E:DD:39:87:B3:6B:BE
Certificate issuer: /CN=5d54d1f05e51564fa819db72bb8edd3987b36bbe
Certificate serial: 0199FCC6A7598543EF0B53EBC11C02625351
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XVTR8F5RVk-oGdtyu47dOYeza74.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/b2545a-6ae9-427f-83ae-ce3f8515a69b/1/XVTR8F5RVk-oGdtyu47dOYeza74.mft
Manifest number: 1662
Signing time: Sun 19 Oct 2025 14:01:41 +0000
Manifest this update: Sun 19 Oct 2025 14:01:41 +0000
Manifest next update: Mon 20 Oct 2025 14:01:41 +0000
Files and hashes: 1: XVTR8F5RVk-oGdtyu47dOYeza74.crl (hash: 3G4bDAatBoDaUms2YMrepe2Xnou0GXlJevAQxPSC40Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/b2545a-6ae9-427f-83ae-ce3f8515a69b/1/XVTR8F5RVk-oGdtyu47dOYeza74.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/b2545a-6ae9-427f-83ae-ce3f8515a69b/1/XVTR8F5RVk-oGdtyu47dOYeza74.mft
rsync://rpki.ripe.net/repository/DEFAULT/XVTR8F5RVk-oGdtyu47dOYeza74.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:a7:59:85:43:ef:0b:53:eb:c1:1c:02:62:53:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d54d1f05e51564fa819db72bb8edd3987b36bbe
Validity
Not Before: Oct 19 14:01:41 2025 GMT
Not After : Oct 20 14:01:41 2025 GMT
Subject: CN=4fcc722f69333d32585ff796c2af9484cb85652a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:4d:ee:e0:cc:23:e9:b8:04:b2:a9:be:fa:b9:
d1:a4:b1:8e:2e:3a:8d:bc:9a:f8:22:0d:a2:30:28:
a4:ee:e7:64:02:2d:db:df:71:5c:43:3a:21:23:17:
1a:44:0d:82:ed:d3:83:0b:d0:8b:46:f8:e3:34:53:
d6:f4:fb:07:31:e6:09:8d:ba:92:89:51:56:e8:fe:
b4:c9:4b:99:43:41:cc:93:36:b1:77:ae:43:e1:83:
e8:ed:d7:6d:9e:00:ee:e3:27:05:11:d6:82:f2:e7:
b7:29:63:e4:ce:7a:7d:2e:f2:48:b9:4c:c5:b0:34:
ae:b5:b9:ec:d7:a3:c7:a2:6d:7f:34:ef:51:b0:11:
0c:17:4a:ec:51:ee:14:42:67:3e:5c:44:97:27:d6:
57:17:cb:c2:9c:58:aa:8c:bb:da:d8:13:c9:b6:f8:
ca:1e:63:9f:53:63:71:74:9b:f7:09:2e:89:19:1a:
f2:b3:61:ec:69:8e:58:95:2b:f2:2a:94:41:33:24:
e0:c6:b0:f5:83:20:78:34:7e:02:7c:83:00:83:a7:
a5:9f:0f:e3:b3:65:f4:d2:dc:84:9d:8c:11:8f:b5:
33:08:c5:d8:11:e4:6b:f7:30:ed:db:e6:ec:79:0c:
68:f6:49:95:92:be:23:8a:28:4f:6b:d0:70:63:fe:
10:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:CC:72:2F:69:33:3D:32:58:5F:F7:96:C2:AF:94:84:CB:85:65:2A
X509v3 Authority Key Identifier:
keyid:5D:54:D1:F0:5E:51:56:4F:A8:19:DB:72:BB:8E:DD:39:87:B3:6B:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XVTR8F5RVk-oGdtyu47dOYeza74.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/b2545a-6ae9-427f-83ae-ce3f8515a69b/1/XVTR8F5RVk-oGdtyu47dOYeza74.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/b2545a-6ae9-427f-83ae-ce3f8515a69b/1/XVTR8F5RVk-oGdtyu47dOYeza74.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:24:c1:90:0c:d1:9e:5a:63:0b:09:16:79:95:25:d6:3a:63:
66:9c:d3:d4:73:ee:28:f8:32:ae:cc:dd:66:8f:c3:57:e5:68:
47:94:89:8f:77:24:ed:a4:e9:2d:49:10:3e:52:54:5d:20:ab:
28:0b:bf:65:8f:96:5c:77:9d:3d:92:75:ae:8d:0c:f0:16:d6:
1b:98:d1:25:91:dc:6c:c1:c2:4a:c1:24:29:a5:20:18:c8:d9:
ef:38:a5:2f:7b:39:c1:89:08:35:96:55:80:d0:ef:66:53:72:
e1:5e:0b:30:38:c7:4c:99:8f:be:2e:60:2c:4a:b5:47:61:59:
e3:b4:2b:bf:23:93:c3:92:65:c5:92:f4:c7:86:f5:b2:33:27:
19:6d:6a:49:46:44:0e:75:4e:47:a1:cd:93:8e:ef:7e:f7:ac:
03:9f:b1:ea:0d:cf:a3:47:d4:b1:69:09:0e:86:e6:1d:4d:1d:
6b:ff:92:39:dd:6f:ed:3a:10:48:05:a8:59:62:cb:e7:df:6d:
86:1c:18:73:b5:11:5a:a4:8a:23:90:27:c9:31:2f:a0:7a:b3:
38:8c:69:89:b8:5c:e7:aa:aa:69:47:94:db:5a:76:db:f7:2a:
33:bc:4e:de:43:b3:a6:6f:b1:e3:7e:ff:c3:79:36:e8:3c:2c:
01:58:36:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:51:26 2025 by rpki-client