Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/42fc92-1663-4688-a31d-cf6a63e4efb6/1/XfsHTUe34LyJHtBuqPxn447PUKE.mft
File: XfsHTUe34LyJHtBuqPxn447PUKE.mft (raw, json)
Hash identifier: pEPy5ZRg/elx2PnaAWQtolFjSWWRBYIcowQmj4l6tuQ=
Subject key identifier: 1C:40:19:67:F9:85:2E:F9:3F:25:6B:DA:F6:50:19:71:0F:94:CF:9F
Authority key identifier: 5D:FB:07:4D:47:B7:E0:BC:89:1E:D0:6E:A8:FC:67:E3:8E:CF:50:A1
Certificate issuer: /CN=5dfb074d47b7e0bc891ed06ea8fc67e38ecf50a1
Certificate serial: 019A134DACDF10F4902C3F7A16019F6422B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XfsHTUe34LyJHtBuqPxn447PUKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/42fc92-1663-4688-a31d-cf6a63e4efb6/1/XfsHTUe34LyJHtBuqPxn447PUKE.mft
Manifest number: 1562
Signing time: Thu 23 Oct 2025 23:00:48 +0000
Manifest this update: Thu 23 Oct 2025 23:00:48 +0000
Manifest next update: Fri 24 Oct 2025 23:00:48 +0000
Files and hashes: 1: 6LvfCWQhJwJjQ7yfxm8_2iB8ajA.roa (hash: VVZpFqNQIGYIg2vRxvGNX/HI0x30XQ+fKGPR57+uciQ=)
2: XfsHTUe34LyJHtBuqPxn447PUKE.crl (hash: DaUKpAz5X8gMGi/KCDJkXJ4hA/QihaG9MUuNS/u0Kvk=)
3: av04jWa8rKYQ3nk3tcQ4QNzDf24.roa (hash: sB985eweguyIFZeDXj+lMH1jkA5cLTMNgeC7bZvuV5I=)
4: leWCgVUyxa4fF2Lv7Kr-Z7NPEos.roa (hash: qNmjf5Agy5lGUPR54BZFqLIkeuS1MkmGjj8lmstmC6w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/42fc92-1663-4688-a31d-cf6a63e4efb6/1/XfsHTUe34LyJHtBuqPxn447PUKE.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/42fc92-1663-4688-a31d-cf6a63e4efb6/1/XfsHTUe34LyJHtBuqPxn447PUKE.mft
rsync://rpki.ripe.net/repository/DEFAULT/XfsHTUe34LyJHtBuqPxn447PUKE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Oct 2025 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:13:4d:ac:df:10:f4:90:2c:3f:7a:16:01:9f:64:22:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5dfb074d47b7e0bc891ed06ea8fc67e38ecf50a1
Validity
Not Before: Oct 23 23:00:48 2025 GMT
Not After : Oct 24 23:00:48 2025 GMT
Subject: CN=1c401967f9852ef93f256bdaf65019710f94cf9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:28:f6:a9:c5:22:10:12:ac:4d:ee:40:07:17:
04:ac:48:a0:8b:97:71:ad:ba:82:3f:90:05:6b:1c:
41:cc:b6:19:f7:b0:fe:91:a5:fd:96:98:f6:13:3e:
c4:06:e1:b1:e1:b3:17:a9:a0:5b:ec:5a:2b:07:1d:
fa:b0:d7:ea:77:27:a8:6a:e9:f0:b5:c2:25:43:db:
03:f5:7a:b1:52:34:7f:8f:2f:59:5c:25:af:55:9b:
5a:1e:58:c9:7e:18:7d:12:3e:d9:58:23:b5:22:1e:
53:09:48:f7:45:21:95:60:04:9e:33:9a:31:96:b5:
b6:6b:d5:0a:1c:b1:d0:81:91:18:ee:90:63:df:fd:
95:94:6d:59:87:5c:6a:ab:3f:dd:f7:3f:5d:af:82:
cb:3b:3a:5b:15:0f:77:95:66:66:49:79:13:9a:d6:
c8:ac:04:0d:d7:b6:74:cc:50:b2:61:da:ea:f7:ee:
39:65:a5:69:1d:16:d6:f6:13:66:da:7e:39:2e:df:
84:ef:4f:65:e2:42:06:93:35:22:23:c5:19:ef:15:
c3:de:4f:e4:ce:00:82:46:1d:d1:cf:28:77:5e:56:
82:39:72:cf:61:d7:ab:f5:05:0c:71:48:3c:ba:4b:
ba:8f:40:8d:c9:64:c8:74:f7:e1:66:04:10:e1:88:
78:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:40:19:67:F9:85:2E:F9:3F:25:6B:DA:F6:50:19:71:0F:94:CF:9F
X509v3 Authority Key Identifier:
keyid:5D:FB:07:4D:47:B7:E0:BC:89:1E:D0:6E:A8:FC:67:E3:8E:CF:50:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XfsHTUe34LyJHtBuqPxn447PUKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/42fc92-1663-4688-a31d-cf6a63e4efb6/1/XfsHTUe34LyJHtBuqPxn447PUKE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/42fc92-1663-4688-a31d-cf6a63e4efb6/1/XfsHTUe34LyJHtBuqPxn447PUKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:90:e7:4c:86:2e:d1:09:53:f3:09:57:19:44:c4:dd:67:d4:
55:e2:09:50:7e:34:28:65:d4:10:bd:f2:c4:15:25:73:4f:ab:
c8:5a:02:52:73:dc:f3:a2:ef:66:cc:e9:c4:b0:54:f7:ad:30:
ea:ca:94:48:31:1c:98:cf:61:26:7f:f9:a6:3e:5f:16:5b:c9:
f4:81:18:2d:1a:a9:db:d2:f6:22:ef:83:d7:c3:38:52:e6:ac:
ba:2d:72:c1:91:23:83:1f:d1:c4:c4:11:c2:d3:1f:0d:64:f7:
36:51:c4:18:5c:e0:5b:8e:16:ab:ae:63:3d:69:b0:0f:71:bc:
96:e8:bc:93:c2:f5:39:59:74:9d:9d:25:96:53:bb:52:f1:23:
a4:77:95:8a:a7:9a:f9:05:a3:9b:f6:ef:58:62:fb:b8:48:be:
aa:68:fb:69:b9:d0:8c:42:40:5c:18:ca:79:86:70:45:64:e0:
1b:b2:3b:02:38:9b:7d:79:22:35:c0:c7:0b:12:c5:26:b5:d1:
63:cb:fc:5c:d4:09:c6:98:f1:a1:20:40:54:e6:fb:47:5d:3b:
0c:a9:86:72:1c:b3:94:c3:9c:dc:45:57:eb:98:4e:55:3a:d0:
26:f6:49:5c:41:81:2b:e8:8c:72:29:46:1d:59:39:38:ef:ab:
3e:33:d9:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 24 09:17:45 2025 by rpki-client