Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/8154e3-286b-46a3-b8a5-52356cd5da90/1/xSJOpF0IHUAv_Wv03ZXj_28txIE.mft
File: xSJOpF0IHUAv_Wv03ZXj_28txIE.mft (raw, json)
Hash identifier: M+LsH1nEHy+XdtxhoutOTIQz0QgAbyz8/3Oy7//x59I=
Subject key identifier: E4:69:F7:47:E1:69:D9:BF:5E:E7:C3:C6:C3:43:61:38:5E:FC:06:BE
Authority key identifier: C5:22:4E:A4:5D:08:1D:40:2F:FD:6B:F4:DD:95:E3:FF:6F:2D:C4:81
Certificate issuer: /CN=c5224ea45d081d402ffd6bf4dd95e3ff6f2dc481
Certificate serial: 019890DB99E4C03F9DCA609F744D44F6907A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xSJOpF0IHUAv_Wv03ZXj_28txIE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/8154e3-286b-46a3-b8a5-52356cd5da90/1/xSJOpF0IHUAv_Wv03ZXj_28txIE.mft
Manifest number: 0ADF
Signing time: Sat 09 Aug 2025 22:02:47 +0000
Manifest this update: Sat 09 Aug 2025 22:02:47 +0000
Manifest next update: Sun 10 Aug 2025 22:02:47 +0000
Files and hashes: 1: O93k6bKhYCgLqm1pwPcFwndFJfc.roa (hash: mGQ92ARMuHfH2tnd6YZOf6zGRFHFURqcW968Yoazf28=)
2: xSJOpF0IHUAv_Wv03ZXj_28txIE.crl (hash: geMLxadUY2VXuR40U05NqnLAQE+cljZlb4jboGxlHQk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/8154e3-286b-46a3-b8a5-52356cd5da90/1/xSJOpF0IHUAv_Wv03ZXj_28txIE.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/8154e3-286b-46a3-b8a5-52356cd5da90/1/xSJOpF0IHUAv_Wv03ZXj_28txIE.mft
rsync://rpki.ripe.net/repository/DEFAULT/xSJOpF0IHUAv_Wv03ZXj_28txIE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 18:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:90:db:99:e4:c0:3f:9d:ca:60:9f:74:4d:44:f6:90:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5224ea45d081d402ffd6bf4dd95e3ff6f2dc481
Validity
Not Before: Aug 9 22:02:47 2025 GMT
Not After : Aug 10 22:02:47 2025 GMT
Subject: CN=e469f747e169d9bf5ee7c3c6c34361385efc06be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:3a:42:d9:69:63:26:9e:57:a7:ae:63:42:4f:
6e:01:e7:27:55:b2:8a:e2:b5:ec:13:b6:6a:a3:b0:
69:87:da:d5:89:f0:68:7e:13:e8:a1:33:59:b9:b6:
7b:bd:d1:a7:dd:d7:80:4b:c4:b1:58:f6:4b:a1:73:
96:dc:a5:0e:77:07:96:de:e6:75:7e:0d:99:4f:d6:
25:03:28:0c:c2:cd:60:1e:61:59:ee:fd:c0:00:61:
35:f2:91:46:da:17:73:58:b4:ee:52:32:02:c3:f5:
bb:85:09:45:df:ee:5b:5c:c8:a9:69:9f:96:db:16:
57:e1:bb:50:ab:24:5b:6f:22:7a:61:98:83:23:42:
f2:c0:49:e8:ee:ef:36:e4:f5:ad:d6:a8:f5:c4:45:
26:11:24:63:c4:49:bf:36:1f:b8:fe:d2:c0:ef:b4:
c2:6e:f3:34:99:95:8f:fd:f8:87:34:ce:d0:5b:bc:
dc:18:ea:51:6e:bb:a0:de:2b:ec:78:da:78:7d:63:
a7:23:06:5b:37:f6:44:c1:94:af:66:fc:6d:8f:e3:
45:0b:4e:47:a4:a3:68:6c:1c:f5:7c:87:ec:64:12:
ae:aa:cb:31:eb:51:7d:6e:4c:5b:c9:01:ad:bc:d2:
3e:50:96:fc:6e:56:37:55:ff:60:3d:fc:35:0d:65:
8e:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:69:F7:47:E1:69:D9:BF:5E:E7:C3:C6:C3:43:61:38:5E:FC:06:BE
X509v3 Authority Key Identifier:
keyid:C5:22:4E:A4:5D:08:1D:40:2F:FD:6B:F4:DD:95:E3:FF:6F:2D:C4:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xSJOpF0IHUAv_Wv03ZXj_28txIE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/8154e3-286b-46a3-b8a5-52356cd5da90/1/xSJOpF0IHUAv_Wv03ZXj_28txIE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/8154e3-286b-46a3-b8a5-52356cd5da90/1/xSJOpF0IHUAv_Wv03ZXj_28txIE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c2:0c:15:14:ee:f6:65:85:b6:8b:7b:cc:3a:7d:82:99:2e:d1:
96:57:05:08:0c:d3:df:8e:70:2c:c2:10:2e:c7:99:c1:f9:f5:
45:c8:30:8b:75:c4:10:d9:cb:6f:da:f6:8d:ba:af:d5:f7:e7:
9a:9f:39:d3:6f:34:ac:7e:2a:9f:19:d1:c1:a8:35:fd:a8:56:
28:54:ed:49:fa:0f:b8:db:bd:00:60:3d:e0:41:fb:cc:1a:26:
91:84:9f:ea:c8:a6:cf:4d:dd:e9:45:4a:8e:b9:ec:c5:b0:cd:
92:73:d1:a1:83:2f:f8:24:12:e1:dd:37:18:cc:16:f8:53:8a:
e3:55:c3:e7:c0:c3:4b:54:01:59:68:0c:ca:c0:c6:61:13:ec:
f3:81:3e:c5:46:18:09:fa:e4:8b:24:ea:17:69:01:04:53:9f:
c5:7c:f0:2f:d8:1a:5d:bc:77:d1:04:7e:b8:8b:50:8c:23:f3:
d6:7d:73:37:37:bc:7c:a8:92:57:86:54:29:7e:b7:1e:52:2a:
1c:24:28:da:fa:4f:bb:93:68:6b:7f:d4:92:fd:34:19:b1:eb:
78:ee:15:f5:35:46:fb:43:df:3d:cd:d0:ae:4a:52:f6:62:82:
d2:24:1b:2e:eb:d8:0a:b3:6b:ee:82:c0:54:38:cd:9c:17:30:
14:60:85:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 03:45:34 2025 by rpki-client