Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/a282cd-ee30-49c3-9c9e-471db7eb719e/1/xdXOafzPDGu44rJmfh44-5QPPSY.mft
File: xdXOafzPDGu44rJmfh44-5QPPSY.mft (raw, json)
Hash identifier: KEDkecbTAYKAJXXZ3Pv3pPPbUyNdsVwfrNaAjBOaJ8Y=
Subject key identifier: 37:9F:D4:38:90:9E:65:B2:06:6E:1C:F0:31:C3:38:B4:FA:32:E3:73
Authority key identifier: C5:D5:CE:69:FC:CF:0C:6B:B8:E2:B2:66:7E:1E:38:FB:94:0F:3D:26
Certificate issuer: /CN=c5d5ce69fccf0c6bb8e2b2667e1e38fb940f3d26
Certificate serial: 01989DF0EC8127A9A6EB432C1CCAD6F2FF3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xdXOafzPDGu44rJmfh44-5QPPSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/a282cd-ee30-49c3-9c9e-471db7eb719e/1/xdXOafzPDGu44rJmfh44-5QPPSY.mft
Manifest number: 0A98
Signing time: Tue 12 Aug 2025 11:01:08 +0000
Manifest this update: Tue 12 Aug 2025 11:01:08 +0000
Manifest next update: Wed 13 Aug 2025 11:01:08 +0000
Files and hashes: 1: 6dkBUwL-mhaODMyRqo4g1V5Aqm0.roa (hash: Qmi5vwRBC8G/em6HsgOnkDIH/4egeMg5iAbwYtXG1+s=)
2: xdXOafzPDGu44rJmfh44-5QPPSY.crl (hash: ZYclUPXz3X2GCFJ6xz39AG7QYq5Urc5WpKFArvV1/yE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/a282cd-ee30-49c3-9c9e-471db7eb719e/1/xdXOafzPDGu44rJmfh44-5QPPSY.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/a282cd-ee30-49c3-9c9e-471db7eb719e/1/xdXOafzPDGu44rJmfh44-5QPPSY.mft
rsync://rpki.ripe.net/repository/DEFAULT/xdXOafzPDGu44rJmfh44-5QPPSY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 08:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:9d:f0:ec:81:27:a9:a6:eb:43:2c:1c:ca:d6:f2:ff:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5d5ce69fccf0c6bb8e2b2667e1e38fb940f3d26
Validity
Not Before: Aug 12 11:01:08 2025 GMT
Not After : Aug 13 11:01:08 2025 GMT
Subject: CN=379fd438909e65b2066e1cf031c338b4fa32e373
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:28:c7:2d:cc:4c:7e:cc:c9:70:52:2a:f0:b3:
29:1e:88:1b:b2:88:15:1e:1a:2e:28:40:f4:02:ef:
66:2b:c8:d5:6b:eb:a6:50:08:7f:81:85:5e:51:75:
f5:11:a8:d3:ca:99:c2:1b:cb:e7:a6:9f:ba:35:39:
ea:c8:d6:77:81:bc:f1:66:97:fa:64:34:49:c2:7a:
fe:27:e6:d1:c8:f7:a3:bf:8e:98:d3:49:d6:2d:0f:
c2:6e:b6:89:0a:c9:c2:45:30:a9:92:76:c4:7a:3c:
bb:31:df:49:e9:a1:fe:32:0a:dd:d5:0a:3f:c9:5b:
3f:7c:ac:6a:60:aa:b7:e0:d6:9d:d2:30:e3:90:75:
ff:3c:d0:3b:d4:43:83:0e:1f:51:a2:41:02:de:9a:
86:97:23:68:a9:bd:e9:31:fe:89:6c:7f:ee:fb:01:
cf:83:a8:65:c7:72:f9:59:b8:a2:a8:76:07:b0:7a:
df:e2:e4:c7:86:18:e0:18:61:1b:7b:4d:fb:e5:5e:
e3:43:03:8d:aa:b2:a1:61:e6:a9:84:df:71:e6:14:
f5:d2:3c:65:fd:07:bb:c2:73:b4:f6:7c:75:1d:b4:
67:00:c7:eb:ea:9e:0a:95:50:47:de:db:18:60:4e:
9d:7e:c8:ea:fc:c1:f2:04:e6:55:69:7a:4c:04:16:
63:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:9F:D4:38:90:9E:65:B2:06:6E:1C:F0:31:C3:38:B4:FA:32:E3:73
X509v3 Authority Key Identifier:
keyid:C5:D5:CE:69:FC:CF:0C:6B:B8:E2:B2:66:7E:1E:38:FB:94:0F:3D:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xdXOafzPDGu44rJmfh44-5QPPSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/a282cd-ee30-49c3-9c9e-471db7eb719e/1/xdXOafzPDGu44rJmfh44-5QPPSY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/a282cd-ee30-49c3-9c9e-471db7eb719e/1/xdXOafzPDGu44rJmfh44-5QPPSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:4a:67:b2:3e:ed:4c:3e:a8:99:ac:a2:cd:ac:40:ac:cf:0b:
94:e2:2c:1b:87:dd:75:ee:87:72:62:d2:05:31:b8:16:af:64:
4b:d5:97:d4:c3:7b:1b:5a:a1:34:d6:38:cf:67:fa:ef:f7:e3:
3d:da:e4:43:a3:27:54:e1:4e:57:c4:ca:b8:76:d5:ff:0b:7a:
ac:37:7c:c9:5c:f8:68:1a:c1:2f:ef:3e:f3:b8:d9:ef:00:0e:
fb:99:db:04:e2:74:d7:30:c4:08:90:e3:57:d0:c4:4c:06:09:
7a:c8:2e:85:6d:06:c5:58:9e:ca:4b:b2:8c:c0:0c:e2:9b:10:
c0:f2:26:32:78:78:7b:af:93:83:43:bf:e0:19:9d:c4:3c:57:
f3:70:98:e1:79:87:48:a7:8a:b8:58:a7:e5:96:95:10:9f:14:
a9:5d:62:09:85:0a:1e:f0:a8:c4:83:7c:88:9b:59:c6:a3:77:
78:42:99:7c:26:e9:86:4b:a2:b9:0b:9d:4c:1c:47:f0:16:17:
6b:60:31:e9:1f:1e:07:4c:b0:20:94:2d:e6:9a:59:82:f0:ac:
10:47:26:25:70:f9:d5:42:3c:00:95:7e:43:d5:5f:aa:d8:09:
56:08:86:8b:a8:b1:be:a5:48:be:4e:99:39:f1:da:f3:c3:6b:
7f:49:5f:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 12 13:44:23 2025 by rpki-client