Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/8154e3-286b-46a3-b8a5-52356cd5da90/1/xSJOpF0IHUAv_Wv03ZXj_28txIE.mft
File: xSJOpF0IHUAv_Wv03ZXj_28txIE.mft (raw, json)
Hash identifier: BJ9LmS2nh8ssw+Lnbr6qLrbSqkH6pXzdS1NJoRqJgPs=
Subject key identifier: 2A:F3:5C:79:BC:89:E8:43:A1:D4:B4:B8:04:3E:A9:8D:62:CA:01:EC
Authority key identifier: C5:22:4E:A4:5D:08:1D:40:2F:FD:6B:F4:DD:95:E3:FF:6F:2D:C4:81
Certificate issuer: /CN=c5224ea45d081d402ffd6bf4dd95e3ff6f2dc481
Certificate serial: 01977E9EF99F7E3FF4DE30084D37237101D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xSJOpF0IHUAv_Wv03ZXj_28txIE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/8154e3-286b-46a3-b8a5-52356cd5da90/1/xSJOpF0IHUAv_Wv03ZXj_28txIE.mft
Manifest number: 0A51
Signing time: Tue 17 Jun 2025 16:00:37 +0000
Manifest this update: Tue 17 Jun 2025 16:00:37 +0000
Manifest next update: Wed 18 Jun 2025 16:00:37 +0000
Files and hashes: 1: O93k6bKhYCgLqm1pwPcFwndFJfc.roa (hash: mGQ92ARMuHfH2tnd6YZOf6zGRFHFURqcW968Yoazf28=)
2: xSJOpF0IHUAv_Wv03ZXj_28txIE.crl (hash: p3UxQmMjUsvLEryzj08MV6ONjB3IqGHrRM0NMGQ3dzM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/8154e3-286b-46a3-b8a5-52356cd5da90/1/xSJOpF0IHUAv_Wv03ZXj_28txIE.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/8154e3-286b-46a3-b8a5-52356cd5da90/1/xSJOpF0IHUAv_Wv03ZXj_28txIE.mft
rsync://rpki.ripe.net/repository/DEFAULT/xSJOpF0IHUAv_Wv03ZXj_28txIE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 18 Jun 2025 13:26:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:7e:9e:f9:9f:7e:3f:f4:de:30:08:4d:37:23:71:01:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5224ea45d081d402ffd6bf4dd95e3ff6f2dc481
Validity
Not Before: Jun 17 16:00:37 2025 GMT
Not After : Jun 18 16:00:37 2025 GMT
Subject: CN=2af35c79bc89e843a1d4b4b8043ea98d62ca01ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:96:93:1f:9f:67:ef:40:25:2b:48:f8:fa:18:
bb:a1:88:f2:e0:d8:93:0a:a1:2f:df:63:41:25:b2:
4d:40:bb:9b:3b:a0:44:00:0a:a3:ee:2f:84:47:df:
06:55:a3:15:40:ee:58:24:8c:34:bd:5e:f3:1a:b7:
28:f5:be:c2:ac:66:0d:a2:01:59:96:ea:6e:bd:23:
a6:44:66:aa:d7:a1:f5:46:ec:13:eb:dd:5f:32:4f:
ee:88:89:c0:95:ca:6e:ad:41:46:ff:46:77:1d:8c:
35:d7:6f:2c:47:45:e6:8a:fd:6a:44:d8:cb:9e:fe:
ba:9e:74:cc:5f:6e:c1:d8:c9:f9:2f:0c:c2:15:70:
ec:f8:7e:32:97:4c:56:15:4a:5a:00:b9:81:a8:32:
fd:c3:a3:b3:28:9a:d9:32:4b:33:d8:93:f0:8a:b2:
66:1e:57:48:d3:44:1c:fb:b3:8d:77:69:a1:44:c1:
7c:8e:79:27:94:e0:88:1b:4d:e9:0b:e4:9d:5e:36:
a3:e2:cc:8e:da:e4:44:c9:15:22:f5:86:95:29:c7:
be:3d:60:0f:38:2b:b1:ec:ce:d9:e7:6e:1c:1c:82:
2d:91:b1:9e:36:37:8f:40:5b:b7:44:ad:fc:9a:ff:
52:c7:69:04:6c:68:1a:a1:d8:65:83:c8:bc:fa:16:
80:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:F3:5C:79:BC:89:E8:43:A1:D4:B4:B8:04:3E:A9:8D:62:CA:01:EC
X509v3 Authority Key Identifier:
keyid:C5:22:4E:A4:5D:08:1D:40:2F:FD:6B:F4:DD:95:E3:FF:6F:2D:C4:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xSJOpF0IHUAv_Wv03ZXj_28txIE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/8154e3-286b-46a3-b8a5-52356cd5da90/1/xSJOpF0IHUAv_Wv03ZXj_28txIE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/8154e3-286b-46a3-b8a5-52356cd5da90/1/xSJOpF0IHUAv_Wv03ZXj_28txIE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:a6:c8:b2:35:c4:7b:79:cc:49:b0:fe:9c:f2:56:47:2d:5b:
0e:3d:37:7b:4f:6f:ee:8b:f6:87:ee:39:3e:6d:fd:e2:1e:44:
6c:32:17:0c:86:b6:55:ff:62:69:26:1e:d6:49:0d:e8:4f:08:
11:49:fa:9c:8e:8b:1d:23:b2:b1:5a:b1:96:8c:cb:ee:ff:b1:
8f:47:7d:17:61:dc:5c:90:87:ac:2f:0b:ad:d8:c9:48:4c:39:
58:e2:ce:af:56:4d:bf:e3:3e:c0:e5:ce:3d:1c:4c:59:9f:fc:
d5:74:34:98:17:f7:95:75:fd:f4:8d:73:10:78:de:84:cd:6d:
58:fc:18:8b:14:7f:40:43:8e:d6:2d:55:4b:70:bc:3b:ac:ee:
a8:3b:79:a0:8d:00:b2:55:f0:1b:0a:e1:91:7b:90:f7:c8:30:
22:61:92:67:fa:be:fe:be:98:b5:78:7a:d7:07:d9:23:c7:15:
7b:8f:92:71:6a:a5:9c:20:c1:75:bd:2f:f6:03:35:44:69:c0:
a0:b8:3a:6b:f0:5b:2d:03:fb:40:e0:11:fa:ed:72:59:9d:cd:
7c:5e:53:04:00:6c:64:c6:e8:8b:2d:e0:9d:08:5b:c4:6e:17:
e2:8b:f3:97:fc:92:4d:ce:13:d5:e3:cb:e8:f2:5e:ed:af:82:
f4:e1:16:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 19:55:27 2025 by rpki-client