
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/fda260-9bcf-4f67-bf7b-e522cae63470/1/XyvmK-dTupkpNVtM6Yi64Sr3Jyo.mft
File: XyvmK-dTupkpNVtM6Yi64Sr3Jyo.mft (raw, json)
Hash identifier: +ta9lPPbyFwCG+yib8P+9AQncoKQGJbOulK2yFOWX8g=
Subject key identifier: CE:0F:E0:FD:A7:34:4F:CE:8F:73:B8:D9:3A:BE:79:CA:E6:2C:CD:BB
Authority key identifier: 5F:2B:E6:2B:E7:53:BA:99:29:35:5B:4C:E9:88:BA:E1:2A:F7:27:2A
Certificate issuer: /CN=5f2be62be753ba9929355b4ce988bae12af7272a
Certificate serial: 0199FBEB9624221DBD854582CA00F41F1F02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XyvmK-dTupkpNVtM6Yi64Sr3Jyo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/fda260-9bcf-4f67-bf7b-e522cae63470/1/XyvmK-dTupkpNVtM6Yi64Sr3Jyo.mft
Manifest number: 063A
Signing time: Sun 19 Oct 2025 10:02:24 +0000
Manifest this update: Sun 19 Oct 2025 10:02:24 +0000
Manifest next update: Mon 20 Oct 2025 10:02:24 +0000
Files and hashes: 1: ESLl-bZ97LqqEu-5c2cw2-HWsjE.roa (hash: Jxh/Q8xcc0uLDf1/zXrtw9NWQZKR5wMyKpRis33JWsQ=)
2: XyvmK-dTupkpNVtM6Yi64Sr3Jyo.crl (hash: o5zKuQLmlEaOSYFyNhTM3Xa1RO5HO6RfE/cMxl26gzg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/fda260-9bcf-4f67-bf7b-e522cae63470/1/XyvmK-dTupkpNVtM6Yi64Sr3Jyo.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/fda260-9bcf-4f67-bf7b-e522cae63470/1/XyvmK-dTupkpNVtM6Yi64Sr3Jyo.mft
rsync://rpki.ripe.net/repository/DEFAULT/XyvmK-dTupkpNVtM6Yi64Sr3Jyo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:96:24:22:1d:bd:85:45:82:ca:00:f4:1f:1f:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f2be62be753ba9929355b4ce988bae12af7272a
Validity
Not Before: Oct 19 10:02:24 2025 GMT
Not After : Oct 20 10:02:24 2025 GMT
Subject: CN=ce0fe0fda7344fce8f73b8d93abe79cae62ccdbb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:8d:0d:73:0a:8c:5c:98:e7:41:bb:8c:fb:dc:
b3:48:f0:4e:bb:a5:3d:ed:4c:8c:4f:92:2d:f4:ea:
67:23:64:e7:25:39:f4:83:a9:b0:48:25:26:1f:3e:
7f:58:dc:09:c7:8e:6c:63:0c:8f:ba:b9:92:7f:fc:
26:00:3e:61:3b:7f:4f:c8:56:90:82:fc:6d:48:8d:
99:0e:fa:e4:52:d6:fd:12:14:37:82:3a:6b:5f:6c:
18:98:c8:b5:e9:71:8e:29:37:0d:c8:a1:d8:53:d4:
41:c2:ef:31:a0:73:52:e2:36:6b:ce:45:f1:5e:63:
e7:e6:78:b4:35:82:dd:4d:84:bd:8b:07:5b:1d:ff:
37:39:d1:a3:74:6c:91:00:d1:c1:6f:b4:2a:bd:ea:
25:62:a4:2f:1c:53:35:c7:49:6e:41:c4:67:4a:07:
c8:f3:e9:03:39:56:28:da:f8:cc:26:0b:b0:7f:5e:
62:bb:ae:df:e1:49:cd:d2:71:0f:63:9a:2e:56:1e:
13:66:ee:a8:6e:4b:c7:72:24:b6:f4:48:fa:63:f9:
13:52:6c:3e:68:9d:e6:e4:50:3e:5f:2f:15:81:d8:
55:c3:44:b9:14:e4:ed:2d:33:da:52:45:7f:90:99:
b8:9f:03:19:d4:d1:c4:b6:56:61:5b:6f:53:4b:95:
59:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:0F:E0:FD:A7:34:4F:CE:8F:73:B8:D9:3A:BE:79:CA:E6:2C:CD:BB
X509v3 Authority Key Identifier:
keyid:5F:2B:E6:2B:E7:53:BA:99:29:35:5B:4C:E9:88:BA:E1:2A:F7:27:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XyvmK-dTupkpNVtM6Yi64Sr3Jyo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/fda260-9bcf-4f67-bf7b-e522cae63470/1/XyvmK-dTupkpNVtM6Yi64Sr3Jyo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/fda260-9bcf-4f67-bf7b-e522cae63470/1/XyvmK-dTupkpNVtM6Yi64Sr3Jyo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:14:fd:f6:0a:84:a0:11:75:84:df:50:b9:e8:98:3b:b7:a8:
a3:c0:96:ad:af:9c:32:d5:7e:d7:f1:01:46:fe:90:d9:e7:39:
cb:e8:da:99:b6:23:bb:99:46:2b:3d:a3:e9:b5:10:52:4a:23:
de:c6:1d:58:e1:a2:b5:e7:39:a9:04:d2:6e:63:02:15:be:27:
df:cb:64:5d:d8:fc:7e:50:7b:f6:b4:d5:b6:89:b3:0a:7c:20:
f1:0e:a8:bf:6e:1f:87:a7:a0:67:c0:52:87:cf:cb:a2:1c:df:
41:d9:0a:2f:82:73:7f:63:c1:e2:bb:27:aa:95:4c:b3:c9:e4:
d0:08:5f:8f:40:74:cf:9a:d9:44:82:76:66:35:18:7e:d4:e0:
ec:03:34:b6:e8:30:bd:ce:17:e6:68:c2:46:7c:d9:b1:c5:aa:
97:e8:60:b2:45:59:00:f5:98:17:e6:1d:1a:35:04:50:fb:db:
32:66:9a:2e:8e:11:d6:c1:c1:7e:d2:af:99:3a:40:81:45:de:
30:ee:98:1b:bf:54:ae:1a:c3:13:eb:c4:0b:7e:ff:30:d3:be:
9d:7e:fe:6b:a1:a0:f0:3b:cf:4a:ed:fc:fa:31:e5:5c:0d:7c:
55:61:dd:31:b5:e6:d2:28:11:c4:8b:0c:83:21:d7:f3:12:60:
11:2a:05:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:14:25 2025 by rpki-client