Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/d54bc0-f781-48b0-9f6d-b5f0d21053f8/1/XYLKb462haVz5dHZH48GEhqwKjc.mft
File: XYLKb462haVz5dHZH48GEhqwKjc.mft (raw, json)
Hash identifier: xOvyILBZy7YEALBeGy7/uO4tuZ/Kg05xoa4FUdIM/+8=
Subject key identifier: FD:82:10:98:A1:A0:00:AA:68:8E:6C:C0:F3:7D:B0:83:69:83:6A:EF
Authority key identifier: 5D:82:CA:6F:8E:B6:85:A5:73:E5:D1:D9:1F:8F:06:12:1A:B0:2A:37
Certificate issuer: /CN=5d82ca6f8eb685a573e5d1d91f8f06121ab02a37
Certificate serial: 01995F0F1A0D2519663F5E5069E31707809F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XYLKb462haVz5dHZH48GEhqwKjc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/d54bc0-f781-48b0-9f6d-b5f0d21053f8/1/XYLKb462haVz5dHZH48GEhqwKjc.mft
Manifest number: 12C8
Signing time: Thu 18 Sep 2025 23:00:48 +0000
Manifest this update: Thu 18 Sep 2025 23:00:48 +0000
Manifest next update: Fri 19 Sep 2025 23:00:48 +0000
Files and hashes: 1: 5CQ4eO5LX17KXZ4KRK1zO2WmDio.roa (hash: elGO+kkXCWf6xUhLxKQr6fK8y3EJu/aqnItwgZKwIWc=)
2: B7NZ-u78J5mcpsov1XyIGK10cH0.roa (hash: U6kZ6B0tG819VSZmmXYNrc7xdPGbBot/5/JsXAv6Iss=)
3: OoBGTJUsN0YQ8-kRUhL79IvaFTU.roa (hash: KQ8kfmaZw2mJmdCZhrX6qjUaRt+eTM3yBnvc8ppjAws=)
4: XYLKb462haVz5dHZH48GEhqwKjc.crl (hash: yGWhuz9rD5WVjRg+tM49kRffxYXgC0DNSu6ACmy2bzY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/d54bc0-f781-48b0-9f6d-b5f0d21053f8/1/XYLKb462haVz5dHZH48GEhqwKjc.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/d54bc0-f781-48b0-9f6d-b5f0d21053f8/1/XYLKb462haVz5dHZH48GEhqwKjc.mft
rsync://rpki.ripe.net/repository/DEFAULT/XYLKb462haVz5dHZH48GEhqwKjc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 19 Sep 2025 22:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:5f:0f:1a:0d:25:19:66:3f:5e:50:69:e3:17:07:80:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d82ca6f8eb685a573e5d1d91f8f06121ab02a37
Validity
Not Before: Sep 18 23:00:48 2025 GMT
Not After : Sep 19 23:00:48 2025 GMT
Subject: CN=fd821098a1a000aa688e6cc0f37db08369836aef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:ed:b6:3f:c0:72:16:54:94:c0:67:a7:2c:62:
ba:80:f9:69:1f:f8:f3:54:d9:4b:a4:42:3d:ec:3b:
4f:c1:92:0d:8f:29:e6:3d:5d:d1:a5:92:31:b7:58:
e8:1a:ff:f2:77:2b:9f:f5:74:3a:f7:47:5d:ba:71:
f8:e6:74:7a:06:45:9a:1f:98:30:6d:1f:38:51:5f:
5d:e4:dc:45:26:2e:53:c9:64:2d:98:e5:b6:53:05:
91:86:ee:3d:ee:e5:ed:02:74:e6:a3:5b:5a:f7:a0:
20:f1:d1:6b:09:6b:c4:4a:47:3d:87:12:97:87:7f:
e8:75:53:e7:74:cb:db:db:58:a0:37:a0:24:2c:0e:
4e:31:91:36:6f:ee:4d:9e:61:be:cf:a6:91:27:76:
d5:f2:f2:13:74:dd:6c:e8:b6:c6:ca:6f:a9:72:ff:
0a:3b:62:c0:8e:3c:61:06:e7:c7:76:9f:7e:c1:5b:
99:66:a6:06:0b:4c:8d:c5:58:f4:89:3a:9f:c8:a0:
57:48:a3:a2:53:8f:77:df:05:06:cd:49:8d:c9:e8:
23:c2:b9:e5:b8:50:db:3b:48:9e:3f:9f:8e:4b:1e:
9d:eb:7a:60:ab:69:e2:6d:a1:ed:33:7c:53:2a:8a:
a3:44:cd:84:b4:a5:21:ab:24:f5:0b:98:88:07:58:
57:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:82:10:98:A1:A0:00:AA:68:8E:6C:C0:F3:7D:B0:83:69:83:6A:EF
X509v3 Authority Key Identifier:
keyid:5D:82:CA:6F:8E:B6:85:A5:73:E5:D1:D9:1F:8F:06:12:1A:B0:2A:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XYLKb462haVz5dHZH48GEhqwKjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/d54bc0-f781-48b0-9f6d-b5f0d21053f8/1/XYLKb462haVz5dHZH48GEhqwKjc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/d54bc0-f781-48b0-9f6d-b5f0d21053f8/1/XYLKb462haVz5dHZH48GEhqwKjc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:2e:91:71:07:42:03:ca:a7:0c:d8:7a:18:2f:cc:58:af:9b:
01:1e:1c:31:85:17:67:53:15:a6:33:4b:b9:6e:4c:60:f2:1e:
ed:af:72:bc:c9:69:09:a1:e3:73:84:5d:4a:d2:f1:20:d0:ec:
5a:f0:14:fc:80:18:2a:20:84:66:23:56:24:fa:dd:03:4d:51:
f4:31:39:ae:3f:0f:83:c6:69:78:03:c2:15:22:05:bb:fa:cf:
9c:81:e8:a3:9d:03:d0:83:8b:b7:20:bc:fd:4f:17:30:47:44:
17:a7:1c:0f:89:e6:d4:d5:86:af:ff:4b:59:7c:8a:5d:ba:3c:
c3:f0:74:55:6e:64:40:64:4e:ce:b7:50:e4:c4:94:e0:87:e3:
af:b5:41:97:70:c2:8e:65:a7:fc:aa:58:49:20:3b:d6:88:ae:
7a:cf:3e:90:9a:1c:3f:09:97:63:11:0f:3e:48:db:a5:57:16:
71:3f:52:34:c4:98:99:db:29:28:d0:98:a0:89:e9:2e:46:d8:
f3:da:2a:df:66:21:f4:1a:31:b1:0d:20:11:4f:8c:ec:32:e2:
87:5d:fd:f8:42:7c:e6:00:73:de:87:fb:87:9e:d4:62:15:24:
a5:e6:23:19:1a:d0:60:06:69:ed:46:c8:fd:8e:73:6c:18:16:
f4:9e:50:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 03:05:12 2025 by rpki-client