Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/d54bc0-f781-48b0-9f6d-b5f0d21053f8/1/XYLKb462haVz5dHZH48GEhqwKjc.mft
File: XYLKb462haVz5dHZH48GEhqwKjc.mft (raw, json)
Hash identifier: 0d5gl2OZ9MXY4RE40KTSnwicTpbB9suX3ZA2L7it05Q=
Subject key identifier: 32:2D:04:62:B5:4D:B3:3E:58:E2:08:03:0C:E9:DE:AA:CE:C4:9B:EC
Authority key identifier: 5D:82:CA:6F:8E:B6:85:A5:73:E5:D1:D9:1F:8F:06:12:1A:B0:2A:37
Certificate issuer: /CN=5d82ca6f8eb685a573e5d1d91f8f06121ab02a37
Certificate serial: 019A4C9874C1485952075A913157ED36CF6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XYLKb462haVz5dHZH48GEhqwKjc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/d54bc0-f781-48b0-9f6d-b5f0d21053f8/1/XYLKb462haVz5dHZH48GEhqwKjc.mft
Manifest number: 1343
Signing time: Tue 04 Nov 2025 02:00:51 +0000
Manifest this update: Tue 04 Nov 2025 02:00:51 +0000
Manifest next update: Wed 05 Nov 2025 02:00:51 +0000
Files and hashes: 1: 5CQ4eO5LX17KXZ4KRK1zO2WmDio.roa (hash: elGO+kkXCWf6xUhLxKQr6fK8y3EJu/aqnItwgZKwIWc=)
2: B7NZ-u78J5mcpsov1XyIGK10cH0.roa (hash: U6kZ6B0tG819VSZmmXYNrc7xdPGbBot/5/JsXAv6Iss=)
3: OoBGTJUsN0YQ8-kRUhL79IvaFTU.roa (hash: KQ8kfmaZw2mJmdCZhrX6qjUaRt+eTM3yBnvc8ppjAws=)
4: XYLKb462haVz5dHZH48GEhqwKjc.crl (hash: jfM+1JWos5iyoWk1yWSQVilyf5bp+KXchVkk/3Lei20=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/d54bc0-f781-48b0-9f6d-b5f0d21053f8/1/XYLKb462haVz5dHZH48GEhqwKjc.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/d54bc0-f781-48b0-9f6d-b5f0d21053f8/1/XYLKb462haVz5dHZH48GEhqwKjc.mft
rsync://rpki.ripe.net/repository/DEFAULT/XYLKb462haVz5dHZH48GEhqwKjc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 04 Nov 2025 20:30:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4c:98:74:c1:48:59:52:07:5a:91:31:57:ed:36:cf:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d82ca6f8eb685a573e5d1d91f8f06121ab02a37
Validity
Not Before: Nov 4 02:00:51 2025 GMT
Not After : Nov 5 02:00:51 2025 GMT
Subject: CN=322d0462b54db33e58e208030ce9deaacec49bec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:e7:ac:b3:e2:7d:31:8c:54:95:e3:46:7d:ee:
7c:38:6d:db:79:11:92:3e:53:53:b2:83:4b:ee:dc:
9e:a1:20:d7:2c:92:20:9d:df:11:25:6a:53:3e:a9:
64:4b:fe:49:a8:e2:17:23:72:84:6a:ad:41:92:e1:
a9:3d:87:53:25:79:99:00:ad:35:6e:d5:e0:5e:ed:
df:30:30:a0:90:93:4e:98:ba:3c:8b:75:62:77:35:
b5:46:13:57:fb:3f:b1:d6:41:94:99:84:7a:03:6b:
8b:cf:02:3a:c7:5f:66:ee:a6:b6:e4:20:11:73:ef:
42:7b:77:67:44:69:8d:59:51:d1:48:b5:2a:49:30:
1d:e2:ab:38:9d:b1:ff:92:98:d1:19:35:2b:e5:e3:
6c:84:d6:09:9f:19:25:c2:90:4d:a9:4a:b1:0f:27:
f7:be:27:2c:c6:d7:2f:02:e4:d9:bb:c5:83:62:53:
1a:3b:ad:a9:93:c1:cd:90:6c:9c:14:c0:d4:17:da:
92:e1:6d:25:76:8d:1f:e8:01:c2:9b:76:7e:ed:94:
04:55:73:f2:47:04:ab:af:59:89:42:35:f6:6b:e9:
03:ae:f9:07:f6:72:15:4f:40:70:24:0a:9a:ad:4d:
6c:bc:8a:83:8c:a3:91:19:13:9c:48:ee:b6:55:3c:
0f:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:2D:04:62:B5:4D:B3:3E:58:E2:08:03:0C:E9:DE:AA:CE:C4:9B:EC
X509v3 Authority Key Identifier:
keyid:5D:82:CA:6F:8E:B6:85:A5:73:E5:D1:D9:1F:8F:06:12:1A:B0:2A:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XYLKb462haVz5dHZH48GEhqwKjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/d54bc0-f781-48b0-9f6d-b5f0d21053f8/1/XYLKb462haVz5dHZH48GEhqwKjc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/d54bc0-f781-48b0-9f6d-b5f0d21053f8/1/XYLKb462haVz5dHZH48GEhqwKjc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:be:b3:c3:38:69:09:0f:5d:64:2a:26:f5:95:1e:01:28:b0:
79:3b:4c:34:32:78:09:47:e6:20:90:33:4f:cb:77:10:d3:9e:
37:99:f4:58:5a:95:dd:25:e4:68:31:57:5d:cc:1e:f0:12:f8:
57:5c:3c:3a:53:d0:41:d6:ad:dd:2f:1a:6c:b7:d8:eb:8a:33:
c6:7c:09:59:1f:3f:e5:9b:a6:c0:89:51:09:be:28:07:2b:8c:
37:52:b9:7e:db:4f:15:0a:de:9f:cf:e0:e4:56:6e:e9:0e:06:
b9:24:11:ee:66:a5:1b:35:9f:71:80:f6:13:68:8b:ef:94:0e:
1c:e0:95:d1:b9:1c:3e:9b:3e:ea:7a:b4:fc:ce:02:be:39:18:
e1:58:d5:a8:97:1f:14:dc:76:c0:e4:32:dc:c8:ab:05:06:17:
fb:1b:87:88:a9:5f:66:21:7f:b9:3a:95:70:29:7d:ff:85:d7:
0e:24:4a:f8:1e:7e:36:bd:9f:cd:cb:90:01:9f:74:15:af:93:
a7:a8:53:a6:63:62:d2:8e:91:a1:79:70:13:85:c6:43:03:aa:
64:68:81:da:f7:67:90:34:8d:db:83:20:ab:7c:a6:a5:36:d2:
7e:84:88:88:10:94:c1:25:3d:13:f4:5f:da:14:34:0c:d2:29:
b5:c5:ef:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 04:17:46 2025 by rpki-client