Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/f7189f-9d3b-4fa9-b2c1-5217df3691ab/1/x2oNsIMDONLSlh5Mj_sKtaA__l8.mft
File: x2oNsIMDONLSlh5Mj_sKtaA__l8.mft (raw, json)
Hash identifier: fhZkPstpfgLVvmxQLdoBSxaBVc8s4RfhkYr+4psGJSk=
Subject key identifier: 8E:BA:BB:EE:68:97:18:DB:D4:25:BA:94:09:B0:A0:2D:DE:D2:3E:1F
Authority key identifier: C7:6A:0D:B0:83:03:38:D2:D2:96:1E:4C:8F:FB:0A:B5:A0:3F:FE:5F
Certificate issuer: /CN=c76a0db0830338d2d2961e4c8ffb0ab5a03ffe5f
Certificate serial: 01987CE57A9B1EFA43213BA5F3C496FA605E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x2oNsIMDONLSlh5Mj_sKtaA__l8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/f7189f-9d3b-4fa9-b2c1-5217df3691ab/1/x2oNsIMDONLSlh5Mj_sKtaA__l8.mft
Manifest number: 10A7
Signing time: Wed 06 Aug 2025 01:01:10 +0000
Manifest this update: Wed 06 Aug 2025 01:01:10 +0000
Manifest next update: Thu 07 Aug 2025 01:01:10 +0000
Files and hashes: 1: Ff3N8PO1mcQncsXGHiQUjQO2nRw.roa (hash: iiJaJiMdSghzZUoCo21ZColIpsI+U3kb/p0Er1rgouw=)
2: x2oNsIMDONLSlh5Mj_sKtaA__l8.crl (hash: cucRvE2A3rAT+eg4Ce8zEO1W/w65DBZ89ck+JBf40p8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/f7189f-9d3b-4fa9-b2c1-5217df3691ab/1/x2oNsIMDONLSlh5Mj_sKtaA__l8.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/f7189f-9d3b-4fa9-b2c1-5217df3691ab/1/x2oNsIMDONLSlh5Mj_sKtaA__l8.mft
rsync://rpki.ripe.net/repository/DEFAULT/x2oNsIMDONLSlh5Mj_sKtaA__l8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 23:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7c:e5:7a:9b:1e:fa:43:21:3b:a5:f3:c4:96:fa:60:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c76a0db0830338d2d2961e4c8ffb0ab5a03ffe5f
Validity
Not Before: Aug 6 01:01:10 2025 GMT
Not After : Aug 7 01:01:10 2025 GMT
Subject: CN=8ebabbee689718dbd425ba9409b0a02dded23e1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:61:ae:76:a4:84:2f:f4:23:45:d2:08:3a:a9:
d8:ef:80:86:ea:81:33:d8:14:18:2e:d9:d6:21:a0:
b0:56:58:fa:0f:c0:aa:2a:d8:f1:6c:ca:ab:5f:e1:
5e:6e:56:d8:1d:f8:36:91:e2:43:52:5b:8b:d0:70:
82:17:8f:b9:20:5a:55:7b:6d:0a:8d:7e:d3:e7:ad:
c9:14:53:fa:e2:11:70:c0:7d:0b:91:d5:84:4f:b2:
b2:4a:6a:59:80:94:3c:6e:f4:dc:14:55:f0:97:08:
10:5f:60:63:9f:57:c8:54:0d:07:6e:43:25:24:5b:
41:44:6d:b9:7a:81:5e:be:92:39:9a:0e:ce:ea:ca:
68:7b:05:03:e2:9a:85:ca:4d:50:95:85:68:2b:b8:
4e:4d:40:c3:32:1f:75:f1:63:b1:09:20:cd:6d:b9:
35:7e:cc:ad:cf:9c:23:c9:a5:e1:b7:c9:e8:51:d1:
f1:14:d5:12:7d:76:d1:56:2f:01:bb:60:52:32:4f:
1d:e4:8b:b8:9d:b9:35:16:8c:e4:54:38:f1:b8:86:
52:d4:af:15:25:46:8b:b2:fe:2e:c9:4c:77:a3:b0:
31:ae:b0:f0:59:ce:5f:8d:d0:36:ff:d7:ec:d0:c7:
e4:d1:01:1a:af:9f:06:46:57:7c:4c:bb:11:a7:38:
9f:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:BA:BB:EE:68:97:18:DB:D4:25:BA:94:09:B0:A0:2D:DE:D2:3E:1F
X509v3 Authority Key Identifier:
keyid:C7:6A:0D:B0:83:03:38:D2:D2:96:1E:4C:8F:FB:0A:B5:A0:3F:FE:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x2oNsIMDONLSlh5Mj_sKtaA__l8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/f7189f-9d3b-4fa9-b2c1-5217df3691ab/1/x2oNsIMDONLSlh5Mj_sKtaA__l8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/f7189f-9d3b-4fa9-b2c1-5217df3691ab/1/x2oNsIMDONLSlh5Mj_sKtaA__l8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:ad:be:ff:5d:54:11:5f:dd:e6:d0:16:02:ee:86:d0:83:51:
77:c2:0b:de:b5:b6:97:c0:00:8d:ca:ad:20:f9:21:c0:b3:31:
68:fb:b5:ff:f2:75:32:b1:9a:5b:9b:db:eb:58:98:0f:b7:a3:
81:a5:ac:ed:e9:84:dc:ee:6b:f9:00:8e:4e:00:a8:42:38:25:
30:60:15:bf:61:b3:40:80:a3:b6:09:fc:7f:70:ee:55:e9:93:
74:57:51:5b:e2:91:9e:a8:25:92:f4:48:e5:8b:0e:0f:6b:8a:
1a:d1:fb:64:31:bb:87:33:72:b4:4e:cf:f6:3e:07:c3:3c:65:
04:cd:b5:02:44:08:c0:eb:db:d3:6e:7e:5d:e4:d6:2f:65:a8:
a3:76:aa:36:b8:48:1d:5a:59:93:2b:a3:b6:df:06:01:f3:e1:
88:83:f4:99:e5:40:cd:6a:59:24:a4:72:71:09:8e:3d:6d:f1:
4f:bc:4a:45:46:d9:11:b0:ac:ff:ab:11:dd:91:c5:22:35:fa:
c4:91:a5:e1:cf:bb:74:9f:89:61:3b:5a:ac:1c:1c:5e:aa:50:
59:6e:32:c7:31:d8:af:73:fe:5e:fe:a4:3b:3e:6f:62:79:f7:
57:c7:ab:6f:80:3f:53:c3:e0:98:70:e5:f9:96:fe:9b:f6:a8:
3b:b7:da:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 04:14:10 2025 by rpki-client