Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/df2777-77a1-4b84-921f-a88270f5d1a9/1/XxaylLGmR79tZ2g7UWFEl-dR8h8.mft
File: XxaylLGmR79tZ2g7UWFEl-dR8h8.mft (raw, json)
Hash identifier: bkKy4q8i9oEotVEGrP54LIw24HSyoGPej27Us9gXbSo=
Subject key identifier: 13:3A:2B:3A:A3:6D:33:D6:04:9B:CD:08:A0:A5:31:4F:EE:D0:68:73
Authority key identifier: 5F:16:B2:94:B1:A6:47:BF:6D:67:68:3B:51:61:44:97:E7:51:F2:1F
Certificate issuer: /CN=5f16b294b1a647bf6d67683b51614497e751f21f
Certificate serial: 0198D4E00F332538FE653C0C8985DF6D5FA0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XxaylLGmR79tZ2g7UWFEl-dR8h8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/df2777-77a1-4b84-921f-a88270f5d1a9/1/XxaylLGmR79tZ2g7UWFEl-dR8h8.mft
Manifest number: 1649
Signing time: Sat 23 Aug 2025 03:01:50 +0000
Manifest this update: Sat 23 Aug 2025 03:01:50 +0000
Manifest next update: Sun 24 Aug 2025 03:01:50 +0000
Files and hashes: 1: H1wKiz5SsZHWgQJv7hF0PlabyfY.roa (hash: 6wfj+F7k71jPfzNN92P8c52KydQsMzI1OT40ddg5oJs=)
2: XxaylLGmR79tZ2g7UWFEl-dR8h8.crl (hash: OW9O9hJJxCA2jwja44SkgVojTU/dFm4O6GybRq8jijw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/df2777-77a1-4b84-921f-a88270f5d1a9/1/XxaylLGmR79tZ2g7UWFEl-dR8h8.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/df2777-77a1-4b84-921f-a88270f5d1a9/1/XxaylLGmR79tZ2g7UWFEl-dR8h8.mft
rsync://rpki.ripe.net/repository/DEFAULT/XxaylLGmR79tZ2g7UWFEl-dR8h8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:01:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:0f:33:25:38:fe:65:3c:0c:89:85:df:6d:5f:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f16b294b1a647bf6d67683b51614497e751f21f
Validity
Not Before: Aug 23 03:01:50 2025 GMT
Not After : Aug 24 03:01:50 2025 GMT
Subject: CN=133a2b3aa36d33d6049bcd08a0a5314feed06873
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:b5:67:dc:fd:52:6e:4e:bd:1b:bf:4d:b9:3c:
d9:85:c6:49:d6:8c:d0:63:68:af:01:1c:e8:51:7c:
37:13:c5:b8:d4:90:5c:d8:90:49:1a:e7:82:ba:23:
2d:6a:95:56:d3:1d:39:a6:b8:43:4b:d5:a8:18:6b:
70:fe:77:a9:7b:0c:1b:67:16:89:82:d8:08:c9:1b:
77:2d:e8:f1:72:ce:fc:8f:cc:62:38:eb:84:42:1f:
64:83:d3:a1:59:5d:b0:27:24:ef:4c:ae:d9:f5:67:
5e:23:dd:24:82:bc:12:4f:72:7f:d4:e7:1a:fd:ba:
df:49:9f:2e:13:2c:89:bc:66:91:e2:e3:b9:03:68:
aa:4d:e8:b4:ec:2e:09:48:65:90:66:24:65:b3:2c:
78:8e:0e:1c:5c:66:c5:40:53:b3:95:35:95:ec:17:
6b:a2:71:21:28:ab:1e:71:32:b5:1c:3e:7f:93:76:
45:7a:38:bc:b6:6a:b0:b9:b3:b8:ad:75:4f:3e:4b:
c8:3b:33:7e:7b:09:7d:fc:f7:b1:3d:64:48:29:ee:
e1:2f:94:35:a1:10:6c:4e:70:9a:55:06:5d:69:7b:
2d:17:b4:79:15:16:49:f5:35:5f:71:a8:c9:db:9f:
19:58:2e:b2:d7:a9:a9:3f:df:10:d3:e5:a0:e2:2a:
ef:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:3A:2B:3A:A3:6D:33:D6:04:9B:CD:08:A0:A5:31:4F:EE:D0:68:73
X509v3 Authority Key Identifier:
keyid:5F:16:B2:94:B1:A6:47:BF:6D:67:68:3B:51:61:44:97:E7:51:F2:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XxaylLGmR79tZ2g7UWFEl-dR8h8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/df2777-77a1-4b84-921f-a88270f5d1a9/1/XxaylLGmR79tZ2g7UWFEl-dR8h8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/df2777-77a1-4b84-921f-a88270f5d1a9/1/XxaylLGmR79tZ2g7UWFEl-dR8h8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:48:74:b6:83:13:c7:2e:65:be:1b:41:70:96:ce:1d:a3:0b:
3c:9a:64:b9:1c:a8:5e:a5:a7:c5:fd:4d:6c:05:2d:a7:80:05:
26:ab:c0:63:5d:bd:5d:59:9b:93:66:82:ab:d2:7e:cd:f7:c6:
bb:bd:38:73:dc:81:29:77:6b:90:4b:a0:ad:68:e0:12:f9:f1:
d1:68:5f:9d:dd:f1:93:67:bb:12:11:fd:b8:ef:bf:ed:2d:ab:
de:59:b4:c5:2a:87:6a:5b:30:22:6a:61:46:57:17:91:61:a8:
c8:f8:f9:cb:09:94:50:c2:8d:0c:c1:97:36:0d:2c:25:4e:63:
4f:08:dd:d2:4c:7e:03:2f:88:6f:9f:21:8e:2f:2d:90:47:87:
d5:c0:65:c1:62:b2:ef:b9:cb:e3:a1:1d:bc:b8:ca:51:c3:b6:
da:6b:a5:24:11:7f:47:91:22:bf:6d:bb:a2:a7:72:11:85:5c:
89:15:7b:39:62:6e:0b:42:f2:fe:a5:01:2a:02:0c:56:30:73:
13:22:17:10:5f:97:37:d5:b2:d9:35:3d:9e:ee:22:b1:01:9b:
3d:e2:62:ba:21:82:ee:79:62:9b:e9:39:78:3c:69:a7:f8:e7:
f2:07:04:df:83:c3:8a:7c:9d:9c:cb:e6:7d:fe:81:0d:c7:8e:
25:12:18:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:28:59 2025 by rpki-client