Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/10fea8-4f9c-42e2-b041-bd65fed67dc6/1/XY9AsSSN49pfXWCX-BBoKTxL7vc.mft
File: XY9AsSSN49pfXWCX-BBoKTxL7vc.mft (raw, json)
Hash identifier: lNIR5eQ66w5dOrQwER99kOC3W29Qjs8XuKQTlFzA1lQ=
Subject key identifier: 72:63:C4:35:BA:F5:2B:C5:DA:68:BD:06:3A:97:CB:2E:A9:84:7C:7C
Authority key identifier: 5D:8F:40:B1:24:8D:E3:DA:5F:5D:60:97:F8:10:68:29:3C:4B:EE:F7
Certificate issuer: /CN=5d8f40b1248de3da5f5d6097f81068293c4beef7
Certificate serial: 019A2AB19FE6AEF5B929725E6E95B6E830CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XY9AsSSN49pfXWCX-BBoKTxL7vc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/10fea8-4f9c-42e2-b041-bd65fed67dc6/1/XY9AsSSN49pfXWCX-BBoKTxL7vc.mft
Manifest number: 25
Signing time: Tue 28 Oct 2025 12:01:14 +0000
Manifest this update: Tue 28 Oct 2025 12:01:14 +0000
Manifest next update: Wed 29 Oct 2025 12:01:14 +0000
Files and hashes: 1: XY9AsSSN49pfXWCX-BBoKTxL7vc.crl (hash: 9+76i6kjgmIO7JF8cMPbaQtJiMeNzhXbIWVdzRKyVFk=)
2: b771fZdz_MNhiObaQsIwRdjf7Gs.roa (hash: o+D5q+mMR9tPd7YAvMxT+oCI4+Bj3WK3M/NrPMAIyl4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/10fea8-4f9c-42e2-b041-bd65fed67dc6/1/XY9AsSSN49pfXWCX-BBoKTxL7vc.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/10fea8-4f9c-42e2-b041-bd65fed67dc6/1/XY9AsSSN49pfXWCX-BBoKTxL7vc.mft
rsync://rpki.ripe.net/repository/DEFAULT/XY9AsSSN49pfXWCX-BBoKTxL7vc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 12:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:2a:b1:9f:e6:ae:f5:b9:29:72:5e:6e:95:b6:e8:30:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d8f40b1248de3da5f5d6097f81068293c4beef7
Validity
Not Before: Oct 28 12:01:14 2025 GMT
Not After : Oct 29 12:01:14 2025 GMT
Subject: CN=7263c435baf52bc5da68bd063a97cb2ea9847c7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:e1:87:99:3e:3c:bd:a1:aa:36:da:82:33:9a:
70:76:1f:7b:14:5b:d2:06:00:f5:14:2d:16:94:35:
3b:f0:85:d0:3e:3e:5f:0f:12:c3:6b:d0:89:50:33:
04:40:78:13:a5:20:54:19:0c:a7:c7:1c:cd:10:47:
87:8b:e6:b0:a2:a0:be:2c:70:18:12:2c:7f:d2:4b:
9e:ab:13:78:2b:cf:42:d9:99:20:a5:44:fa:77:0e:
de:b1:4c:55:21:4f:d4:18:fb:03:cb:6f:47:08:a4:
64:7b:b6:c5:59:be:80:b4:72:cf:53:ad:e5:9c:96:
c0:9d:e9:ce:45:e8:91:7e:da:c8:e6:ac:a6:5c:0d:
fa:d1:90:4f:7d:15:b1:23:d9:a2:bb:72:1d:cb:b6:
c7:4a:90:1b:3e:89:1b:21:a2:73:0d:a0:a2:24:d9:
a3:42:0e:7d:64:93:48:67:e0:fd:d4:0d:4f:8e:87:
33:5c:40:f1:da:17:e5:18:09:e7:65:5b:92:8e:4c:
47:01:8b:bc:19:0f:b3:3a:14:70:35:0b:42:13:88:
07:d0:6a:8a:a3:e9:91:d1:29:d8:f6:96:d5:d5:e6:
8a:8e:5d:3e:64:67:ed:c9:67:34:e3:8d:9c:57:08:
0f:b3:e9:04:c3:9b:75:1e:9b:d7:4e:86:bb:04:53:
ed:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:63:C4:35:BA:F5:2B:C5:DA:68:BD:06:3A:97:CB:2E:A9:84:7C:7C
X509v3 Authority Key Identifier:
keyid:5D:8F:40:B1:24:8D:E3:DA:5F:5D:60:97:F8:10:68:29:3C:4B:EE:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XY9AsSSN49pfXWCX-BBoKTxL7vc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/10fea8-4f9c-42e2-b041-bd65fed67dc6/1/XY9AsSSN49pfXWCX-BBoKTxL7vc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/10fea8-4f9c-42e2-b041-bd65fed67dc6/1/XY9AsSSN49pfXWCX-BBoKTxL7vc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:ed:6b:9e:72:49:39:9c:09:5c:89:8a:6c:03:4a:ff:f3:34:
25:fa:c6:8a:45:bc:2c:56:20:b5:75:0a:55:da:a6:2b:25:c0:
1c:7c:c2:8d:85:3a:3a:99:23:54:ba:63:9c:fb:b0:24:5a:8c:
34:2f:05:85:5e:d7:45:1d:82:bb:52:50:25:9c:77:cc:6f:ff:
ad:c1:0b:e4:60:12:a8:0b:54:52:9f:20:af:a8:3d:26:57:d1:
05:d9:de:24:f5:7d:86:02:9c:fa:dc:cd:08:67:ba:47:94:05:
57:ec:25:85:d8:f9:b1:7d:a0:e1:89:8e:ff:66:68:d9:4b:57:
fa:8f:b6:64:75:c3:6a:4c:e2:56:c9:8d:9a:92:f3:08:5e:03:
cd:92:b2:fd:32:2f:0e:84:5f:8a:7e:6c:81:1f:6d:3a:78:8a:
e5:26:07:2c:e2:7f:04:59:6e:ea:4b:51:7b:c5:68:ed:d5:31:
da:49:6d:d9:fa:e8:fe:b8:fb:42:c3:7e:9d:89:47:e9:77:cf:
9c:41:2a:14:d5:61:96:47:cf:60:a8:5e:a7:a9:82:68:8d:bd:
5b:5d:47:e0:b9:7c:82:ea:5c:ee:4e:48:55:51:7f:ff:dc:15:
62:9a:ff:fb:9c:a0:65:da:40:c6:48:33:0a:44:ce:de:91:27:
e9:b2:01:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 16:15:13 2025 by rpki-client