Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/b3d76f-6ef9-4c4a-812c-befe4b34c6f0/1/XfXtBA7-LlgXVN61w82C2Z3-6Nk.mft
File: XfXtBA7-LlgXVN61w82C2Z3-6Nk.mft (raw, json)
Hash identifier: yQCJox8BPqOwNzFT9Xps0B2rLNRJpOKoSHx/KIn651k=
Subject key identifier: 74:E0:25:CC:49:D7:E6:BA:FE:C0:C0:EB:03:4C:EE:C6:73:B2:14:F0
Authority key identifier: 5D:F5:ED:04:0E:FE:2E:58:17:54:DE:B5:C3:CD:82:D9:9D:FE:E8:D9
Certificate issuer: /CN=5df5ed040efe2e581754deb5c3cd82d99dfee8d9
Certificate serial: 0199326D17B8C82D8F8E5B6508E46743274B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XfXtBA7-LlgXVN61w82C2Z3-6Nk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/b3d76f-6ef9-4c4a-812c-befe4b34c6f0/1/XfXtBA7-LlgXVN61w82C2Z3-6Nk.mft
Manifest number: 167C
Signing time: Wed 10 Sep 2025 07:00:34 +0000
Manifest this update: Wed 10 Sep 2025 07:00:34 +0000
Manifest next update: Thu 11 Sep 2025 07:00:34 +0000
Files and hashes: 1: R0Y_8680398wT7CzR2ae2QTPR2w.roa (hash: T+VBi4m8dsst25C1j7+k5KuFCU7EfyAt7PpnICFW3s0=)
2: XfXtBA7-LlgXVN61w82C2Z3-6Nk.crl (hash: 4KpW9KYVVilv5/UKGFxKAm6Y3VBK6i6wblkVXF/PcAE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/b3d76f-6ef9-4c4a-812c-befe4b34c6f0/1/XfXtBA7-LlgXVN61w82C2Z3-6Nk.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/b3d76f-6ef9-4c4a-812c-befe4b34c6f0/1/XfXtBA7-LlgXVN61w82C2Z3-6Nk.mft
rsync://rpki.ripe.net/repository/DEFAULT/XfXtBA7-LlgXVN61w82C2Z3-6Nk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 07:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:32:6d:17:b8:c8:2d:8f:8e:5b:65:08:e4:67:43:27:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5df5ed040efe2e581754deb5c3cd82d99dfee8d9
Validity
Not Before: Sep 10 07:00:34 2025 GMT
Not After : Sep 11 07:00:34 2025 GMT
Subject: CN=74e025cc49d7e6bafec0c0eb034ceec673b214f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:81:b5:a2:74:46:91:74:eb:25:df:ea:a7:98:
6f:bf:ed:f3:7d:1a:4d:24:58:28:54:ad:37:ae:5e:
0b:0b:c7:6d:59:04:a9:8a:dd:d0:dd:16:08:e2:24:
11:d1:d2:25:e2:d5:35:71:2b:92:e9:39:0c:77:f0:
f4:c5:1c:e3:ef:1c:ff:bf:dc:fd:36:51:4c:4d:28:
7a:26:a4:79:73:a8:54:c3:d1:a8:ad:1a:90:74:b3:
d7:bb:ca:64:25:22:5d:03:9e:67:c6:3e:7c:aa:3b:
63:ac:58:05:3e:be:ab:39:65:05:85:c1:43:94:a0:
0b:dc:b2:35:95:81:46:e4:a2:2c:ce:ed:f5:35:a5:
79:36:80:48:b1:a3:73:16:89:24:d1:54:b9:75:a3:
c9:27:f8:01:1b:6b:f7:2e:cf:95:31:02:be:3b:8c:
9b:29:ee:51:fe:fe:eb:e4:f0:d5:19:89:d3:f4:24:
20:85:bc:3a:f4:58:5d:76:0d:91:8b:64:d3:e8:b8:
1c:ab:ce:f3:00:ac:32:a9:ed:4b:c7:f6:36:c9:80:
a5:5a:ec:9e:61:82:4a:f1:65:12:b0:8c:eb:a6:03:
bb:fd:7b:83:51:9b:82:5a:6f:0e:d6:b5:05:17:67:
40:f9:c3:63:c5:1d:1a:67:89:74:aa:27:b0:5d:11:
32:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:E0:25:CC:49:D7:E6:BA:FE:C0:C0:EB:03:4C:EE:C6:73:B2:14:F0
X509v3 Authority Key Identifier:
keyid:5D:F5:ED:04:0E:FE:2E:58:17:54:DE:B5:C3:CD:82:D9:9D:FE:E8:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XfXtBA7-LlgXVN61w82C2Z3-6Nk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/b3d76f-6ef9-4c4a-812c-befe4b34c6f0/1/XfXtBA7-LlgXVN61w82C2Z3-6Nk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/b3d76f-6ef9-4c4a-812c-befe4b34c6f0/1/XfXtBA7-LlgXVN61w82C2Z3-6Nk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:0e:40:18:6d:f9:d9:8f:e5:b4:8d:a5:d0:79:c5:34:f4:01:
4f:93:48:77:65:ab:75:7e:bf:03:b1:ce:a2:3f:26:4b:4d:46:
f5:b0:db:64:1c:06:ef:d3:9e:9c:6e:2f:c2:8b:55:62:a8:60:
76:ab:30:74:65:d2:34:ee:f5:99:e0:bc:60:e7:45:af:71:22:
95:cb:5a:f2:4d:fa:41:a8:0b:5f:1b:12:86:6f:5b:70:f0:b8:
43:18:43:7b:b2:b0:51:88:e1:00:89:b7:49:5c:b7:69:8d:74:
99:f3:6a:af:12:e2:ac:ab:b5:d6:b2:24:6d:00:0b:94:ae:62:
96:e8:50:3b:71:82:68:cf:0b:64:40:97:8e:db:a6:49:26:6a:
ad:a2:8d:cf:f5:6f:07:fb:0c:4a:7e:1c:c9:b3:d5:b6:7e:85:
c4:c9:20:a8:84:8a:4b:b1:98:f3:d3:09:30:8e:12:63:ef:58:
d1:aa:50:34:b0:33:7c:cf:ed:8e:21:be:ba:45:2e:d6:f1:01:
f4:39:6c:fb:e6:82:43:6b:b8:d0:a7:16:9a:39:eb:27:8b:1b:
86:0a:db:32:80:68:4a:cf:34:f0:34:d4:cd:bb:9f:f4:46:de:
a0:28:c2:95:60:93:1f:a7:53:68:7f:73:8c:54:98:6c:e0:0f:
c7:77:f0:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 13:46:41 2025 by rpki-client