Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/df2777-77a1-4b84-921f-a88270f5d1a9/1/XxaylLGmR79tZ2g7UWFEl-dR8h8.mft
File: XxaylLGmR79tZ2g7UWFEl-dR8h8.mft (raw, json)
Hash identifier: svYiZ1BD3EtdY6qKWbWkr/o7kkYpqX0U5+taIxaOVlg=
Subject key identifier: CD:F0:D7:C3:11:E0:70:E5:56:21:E9:7E:EA:BF:73:CE:DC:51:3C:FF
Authority key identifier: 5F:16:B2:94:B1:A6:47:BF:6D:67:68:3B:51:61:44:97:E7:51:F2:1F
Certificate issuer: /CN=5f16b294b1a647bf6d67683b51614497e751f21f
Certificate serial: 019845F6379F1F528E99A8DD1DFB9AA4F494
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XxaylLGmR79tZ2g7UWFEl-dR8h8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/df2777-77a1-4b84-921f-a88270f5d1a9/1/XxaylLGmR79tZ2g7UWFEl-dR8h8.mft
Manifest number: 15FF
Signing time: Sat 26 Jul 2025 09:00:20 +0000
Manifest this update: Sat 26 Jul 2025 09:00:20 +0000
Manifest next update: Sun 27 Jul 2025 09:00:20 +0000
Files and hashes: 1: H1wKiz5SsZHWgQJv7hF0PlabyfY.roa (hash: 6wfj+F7k71jPfzNN92P8c52KydQsMzI1OT40ddg5oJs=)
2: XxaylLGmR79tZ2g7UWFEl-dR8h8.crl (hash: eapN7aB1LdS8mUGrJVAbwi6Spq4QeoZandfEriMe+Jc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/df2777-77a1-4b84-921f-a88270f5d1a9/1/XxaylLGmR79tZ2g7UWFEl-dR8h8.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/df2777-77a1-4b84-921f-a88270f5d1a9/1/XxaylLGmR79tZ2g7UWFEl-dR8h8.mft
rsync://rpki.ripe.net/repository/DEFAULT/XxaylLGmR79tZ2g7UWFEl-dR8h8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 09:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:45:f6:37:9f:1f:52:8e:99:a8:dd:1d:fb:9a:a4:f4:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f16b294b1a647bf6d67683b51614497e751f21f
Validity
Not Before: Jul 26 09:00:20 2025 GMT
Not After : Jul 27 09:00:20 2025 GMT
Subject: CN=cdf0d7c311e070e55621e97eeabf73cedc513cff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:b3:1e:35:80:65:de:ae:5f:8a:c0:c1:6a:2b:
40:f6:0a:cc:7c:48:8e:f7:67:f4:67:f9:cb:4c:95:
fe:fd:18:6c:e9:0c:f3:93:d8:52:45:5e:68:17:3c:
a5:64:23:63:70:fa:2a:2a:69:81:8e:05:6b:ac:4f:
72:cd:38:cf:f5:57:12:83:6c:d9:e7:8a:80:dc:91:
68:93:25:1a:54:be:14:d0:a1:40:97:99:0d:08:a0:
c4:c8:c2:41:a2:76:b9:a8:3d:dd:86:1f:fc:65:eb:
87:0e:ee:c0:2d:f8:76:4e:38:df:3c:b5:1b:a4:ce:
c7:5d:59:51:94:8d:68:30:78:0d:1d:91:eb:ea:93:
8b:11:48:20:96:4d:d9:c4:26:82:8c:85:dc:1d:89:
f6:4e:10:b8:a3:64:0d:89:ae:7c:06:36:ec:45:ee:
b3:ae:dd:81:46:51:0e:25:ff:0f:72:34:39:12:fa:
0a:80:de:cb:b7:20:65:4d:46:dd:5a:20:fc:0e:53:
05:0b:e5:d5:8b:2c:2d:83:ac:0b:36:9c:de:75:10:
a9:f7:2f:96:68:fc:4a:e8:7b:41:7e:e0:88:70:90:
7c:ad:13:f1:ab:58:d8:2e:28:48:9c:ec:fa:5c:af:
9e:27:5f:44:09:1d:38:db:7b:1c:c2:14:a5:42:49:
04:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:F0:D7:C3:11:E0:70:E5:56:21:E9:7E:EA:BF:73:CE:DC:51:3C:FF
X509v3 Authority Key Identifier:
keyid:5F:16:B2:94:B1:A6:47:BF:6D:67:68:3B:51:61:44:97:E7:51:F2:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XxaylLGmR79tZ2g7UWFEl-dR8h8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/df2777-77a1-4b84-921f-a88270f5d1a9/1/XxaylLGmR79tZ2g7UWFEl-dR8h8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/df2777-77a1-4b84-921f-a88270f5d1a9/1/XxaylLGmR79tZ2g7UWFEl-dR8h8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:2e:89:b9:8f:91:09:58:9f:9b:6f:52:16:54:98:1f:30:f3:
ec:c2:88:7f:7d:78:e9:81:c0:3f:78:c0:55:4e:c9:ad:b4:e2:
e0:34:87:fa:03:b3:39:f6:06:6d:b4:dd:bd:c5:fc:4f:df:e7:
c4:47:b2:36:ef:bf:de:6b:2c:85:db:55:ff:4c:5f:1e:64:07:
35:eb:46:46:6a:d0:b3:68:f0:6f:a7:7e:a4:7e:c4:39:bd:8e:
a8:58:a5:5e:8d:1f:49:d8:f9:2f:6c:f2:e8:e5:c7:e4:73:9e:
9f:d7:9b:03:4d:35:43:a9:0c:e6:25:b7:a5:74:2d:60:c6:9b:
24:d1:42:64:11:6e:39:c3:fb:3b:0b:35:52:93:fa:15:d8:f3:
fe:a4:09:4e:fa:19:0b:33:d5:e4:e1:63:1c:aa:09:1a:df:5c:
7e:b9:42:1e:a9:c9:fd:dd:db:8c:84:56:a5:8d:b3:0a:19:71:
43:d1:f9:c5:be:39:c5:b7:1a:60:da:2a:be:11:85:62:b8:be:
01:df:f2:c7:f5:4d:69:ef:ca:0b:38:0a:19:e9:54:4c:45:c8:
83:a4:93:4f:a4:23:51:af:12:11:e4:cb:09:ab:60:29:ea:b7:
c0:2b:c4:f2:4b:b0:11:2c:41:eb:d2:8d:44:8d:d9:c6:16:76:
e2:f8:cb:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 18:31:58 2025 by rpki-client