Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/f76b1d-48cb-4ab1-90ec-e615f56f78b1/1/XyxxJryPOQVnRN4hOyzia3a8mSM.mft
File: XyxxJryPOQVnRN4hOyzia3a8mSM.mft (raw, json)
Hash identifier: UGwD41A5oFdAQ/OOhxhSTjYhNzZt6wiRN0FIxF2d8YU=
Subject key identifier: AE:4F:FE:46:B5:DA:C2:9B:4B:A5:D9:7A:0C:EF:9D:29:25:55:72:8A
Authority key identifier: 5F:2C:71:26:BC:8F:39:05:67:44:DE:21:3B:2C:E2:6B:76:BC:99:23
Certificate issuer: /CN=5f2c7126bc8f39056744de213b2ce26b76bc9923
Certificate serial: 019A228985CB2612748943752F6FD1FCD56D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XyxxJryPOQVnRN4hOyzia3a8mSM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/f76b1d-48cb-4ab1-90ec-e615f56f78b1/1/XyxxJryPOQVnRN4hOyzia3a8mSM.mft
Manifest number: 16F6
Signing time: Sun 26 Oct 2025 22:00:29 +0000
Manifest this update: Sun 26 Oct 2025 22:00:29 +0000
Manifest next update: Mon 27 Oct 2025 22:00:29 +0000
Files and hashes: 1: XyxxJryPOQVnRN4hOyzia3a8mSM.crl (hash: 6e5DA0ASZ4wzHUWgNkV4ZmzzTKb+bBjcJ4XOVADON98=)
2: YpoQb4d2ZirnrI3hA0gBb3h8Ui4.roa (hash: xAwvy1eVXmw515xL9f1ayxKoN3gZJ8WiMBC17Avnw5o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/f76b1d-48cb-4ab1-90ec-e615f56f78b1/1/XyxxJryPOQVnRN4hOyzia3a8mSM.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/f76b1d-48cb-4ab1-90ec-e615f56f78b1/1/XyxxJryPOQVnRN4hOyzia3a8mSM.mft
rsync://rpki.ripe.net/repository/DEFAULT/XyxxJryPOQVnRN4hOyzia3a8mSM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 19:48:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:22:89:85:cb:26:12:74:89:43:75:2f:6f:d1:fc:d5:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f2c7126bc8f39056744de213b2ce26b76bc9923
Validity
Not Before: Oct 26 22:00:29 2025 GMT
Not After : Oct 27 22:00:29 2025 GMT
Subject: CN=ae4ffe46b5dac29b4ba5d97a0cef9d292555728a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:06:1c:94:b0:e4:d4:b1:0d:ec:04:7b:20:79:
5a:a4:2a:7a:e6:33:fc:b9:a1:49:51:cf:15:54:08:
18:77:46:f2:d5:15:ab:06:4f:52:08:4c:dc:82:a5:
24:b3:71:bf:f7:1d:e8:f0:f9:48:18:b3:25:a5:ec:
1a:d2:af:8a:d6:69:82:55:13:03:c5:91:b2:f3:33:
6b:13:5b:0c:17:17:f8:1d:e2:13:ea:4a:ba:43:6a:
42:a8:61:86:8b:8c:6e:7e:97:4a:88:72:18:fe:35:
fd:e2:ae:82:70:d7:98:3d:f5:7f:50:cc:d5:0b:03:
6d:7a:13:00:8a:d0:a2:98:1f:d7:0c:a1:62:25:c7:
63:b7:d5:83:85:f5:3d:53:1f:5f:a5:b5:17:c8:be:
50:d3:ff:e9:18:e2:c2:0f:1e:c3:32:6a:6f:ae:00:
b4:30:ba:2f:77:8c:5c:88:be:40:68:b1:89:dd:d9:
21:59:26:23:ea:95:7e:6b:89:68:23:29:c8:61:d9:
dc:4b:12:0d:d7:6a:81:3c:2e:55:c4:b7:6a:15:2a:
bb:72:85:9b:4d:a4:12:13:6e:35:08:db:4f:cc:53:
71:76:e0:e6:84:c4:cd:1d:44:a2:3f:72:c5:17:2c:
27:9f:35:8b:52:d9:f3:73:29:7e:3e:7b:bc:d6:21:
b9:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:4F:FE:46:B5:DA:C2:9B:4B:A5:D9:7A:0C:EF:9D:29:25:55:72:8A
X509v3 Authority Key Identifier:
keyid:5F:2C:71:26:BC:8F:39:05:67:44:DE:21:3B:2C:E2:6B:76:BC:99:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XyxxJryPOQVnRN4hOyzia3a8mSM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/f76b1d-48cb-4ab1-90ec-e615f56f78b1/1/XyxxJryPOQVnRN4hOyzia3a8mSM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/f76b1d-48cb-4ab1-90ec-e615f56f78b1/1/XyxxJryPOQVnRN4hOyzia3a8mSM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:8d:e4:55:cf:ec:57:43:34:92:d4:28:81:27:fb:ba:76:d3:
f5:06:03:fb:e7:50:88:e2:37:b8:8b:4b:7e:ac:c6:10:89:96:
10:ba:88:eb:39:2a:85:d0:42:4a:6c:1a:68:91:cf:4d:8e:80:
f5:ac:23:e8:ae:20:ac:14:2c:57:0d:da:c7:e9:2a:23:f4:d3:
65:88:1a:7d:dc:4a:72:03:5d:93:b2:47:ca:cc:ff:ad:bf:d2:
f1:e1:c9:4b:32:83:9b:46:52:19:34:a3:eb:6d:b8:8b:81:f9:
4c:a1:d8:2d:96:2b:a3:41:49:fc:1d:59:22:c2:f0:92:72:79:
f3:61:65:b6:d2:18:4f:a3:b3:80:17:be:63:0a:8b:31:90:5d:
3f:56:99:31:ea:21:72:de:3b:60:31:43:fd:4a:8c:f6:2a:a5:
57:c1:75:da:11:b8:ab:08:f7:02:a1:62:35:60:c0:7e:4e:24:
4d:8c:8c:9f:3d:52:88:6f:ff:ad:9e:65:96:a8:bf:7d:87:ab:
8e:47:c1:a0:08:30:ee:4c:d9:3c:86:fc:f0:af:27:fd:55:7f:
2d:e8:15:8c:33:d8:87:51:42:e9:e9:48:64:4c:c5:0a:20:fe:
20:98:d6:3f:38:a9:a8:4b:2f:44:dd:d6:ad:b9:9b:4d:33:73:
d6:66:8f:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 04:19:05 2025 by rpki-client