Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/211b2e-4e3c-4482-a279-9f0f33532ea3/1/Xojs8KFK0YVzWdLOW9BCuflsfN0.mft
File: Xojs8KFK0YVzWdLOW9BCuflsfN0.mft (raw, json)
Hash identifier: 5GodVXO4DDQHKYoHmfZoIz6JcQVCQw0YLqiCdOc2yts=
Subject key identifier: E7:94:15:39:1B:C9:07:91:10:70:CB:6B:16:59:71:6D:D4:96:61:33
Authority key identifier: 5E:88:EC:F0:A1:4A:D1:85:73:59:D2:CE:5B:D0:42:B9:F9:6C:7C:DD
Certificate issuer: /CN=5e88ecf0a14ad1857359d2ce5bd042b9f96c7cdd
Certificate serial: 0198469B5C64A21D0E838E54C6F71A3AC165
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xojs8KFK0YVzWdLOW9BCuflsfN0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/211b2e-4e3c-4482-a279-9f0f33532ea3/1/Xojs8KFK0YVzWdLOW9BCuflsfN0.mft
Manifest number: 077E
Signing time: Sat 26 Jul 2025 12:00:43 +0000
Manifest this update: Sat 26 Jul 2025 12:00:43 +0000
Manifest next update: Sun 27 Jul 2025 12:00:43 +0000
Files and hashes: 1: Xojs8KFK0YVzWdLOW9BCuflsfN0.crl (hash: fUyROqNTydFj/JcPaRvcTWPlJ+4uveQ3imRy53eSBWo=)
2: oNaxj3U73YsxY2SMYd62wSvMB4E.roa (hash: +NOpZAlgmwl+h9fy4R1kVxAQ1d7pxMvgMiKewHh1e4g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/211b2e-4e3c-4482-a279-9f0f33532ea3/1/Xojs8KFK0YVzWdLOW9BCuflsfN0.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/211b2e-4e3c-4482-a279-9f0f33532ea3/1/Xojs8KFK0YVzWdLOW9BCuflsfN0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xojs8KFK0YVzWdLOW9BCuflsfN0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:46:9b:5c:64:a2:1d:0e:83:8e:54:c6:f7:1a:3a:c1:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e88ecf0a14ad1857359d2ce5bd042b9f96c7cdd
Validity
Not Before: Jul 26 12:00:43 2025 GMT
Not After : Jul 27 12:00:43 2025 GMT
Subject: CN=e79415391bc907911070cb6b1659716dd4966133
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:24:03:5a:cd:8a:a2:c2:14:9d:60:08:7d:50:
2d:bf:a3:f5:5b:7d:5b:24:dc:4f:e4:61:d6:5d:a3:
55:9d:2f:8d:20:e6:e7:85:03:15:9b:02:f5:9f:d7:
cf:c4:03:39:dd:98:5b:b9:4c:a6:b6:d4:d3:c1:07:
c7:18:6e:90:04:63:2a:a8:79:74:44:7b:fa:c1:63:
e5:ff:e9:3c:93:38:b6:39:d1:fb:3c:90:6c:6b:ab:
87:9a:99:07:cb:56:d0:7f:f9:9d:5f:ca:6c:20:de:
88:4b:cd:44:80:13:38:ef:90:bc:f2:8b:9d:58:2b:
6a:b4:11:81:d5:61:a0:cd:2e:49:df:26:bf:1b:0d:
42:18:0a:22:eb:1d:0c:1b:09:e0:0c:35:5b:3a:8b:
85:85:ef:b5:bd:87:d9:08:5e:f2:0d:60:85:c8:4a:
81:fd:56:bd:5e:bd:9c:cb:59:5d:3b:8a:75:90:e6:
ff:cb:5d:12:ce:c6:d8:9f:43:95:d9:5f:34:eb:39:
01:2c:0c:07:0f:89:3e:05:1d:f4:cd:7c:1d:4f:07:
8b:34:d7:84:09:10:f8:3f:ce:0a:3b:bc:08:3f:3b:
98:28:40:fe:e9:b5:28:0a:99:43:3c:de:f4:fc:76:
fa:d6:4d:aa:23:47:a1:92:86:f4:9d:74:9a:da:36:
26:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:94:15:39:1B:C9:07:91:10:70:CB:6B:16:59:71:6D:D4:96:61:33
X509v3 Authority Key Identifier:
keyid:5E:88:EC:F0:A1:4A:D1:85:73:59:D2:CE:5B:D0:42:B9:F9:6C:7C:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xojs8KFK0YVzWdLOW9BCuflsfN0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/211b2e-4e3c-4482-a279-9f0f33532ea3/1/Xojs8KFK0YVzWdLOW9BCuflsfN0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/211b2e-4e3c-4482-a279-9f0f33532ea3/1/Xojs8KFK0YVzWdLOW9BCuflsfN0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:c3:c1:21:10:af:25:71:3f:6e:93:67:3c:02:46:3a:26:f9:
2e:ca:84:95:cc:bc:ed:55:ae:b7:54:6c:a9:58:dd:5b:b6:18:
d6:44:62:3d:47:50:cf:91:6b:5e:86:d7:6d:28:37:64:1f:ad:
23:dd:06:7e:76:12:34:01:e2:b8:0e:4b:31:ba:ca:45:c1:97:
23:17:24:a0:7b:c2:8d:60:2e:3a:88:1c:2b:57:8d:45:8d:6b:
8f:05:7e:e9:44:73:d5:41:6a:46:60:05:4d:5b:d1:23:bc:e5:
33:d9:d7:87:ee:17:45:29:e7:35:10:0e:0f:eb:83:cd:d8:0f:
ba:4b:ea:78:77:11:20:21:ac:93:d3:3a:87:30:6a:3c:83:85:
21:62:26:40:d2:e1:b0:8c:d9:46:59:3d:a5:05:c8:78:1e:0c:
d5:2b:f7:4e:9c:52:62:56:a6:26:0e:e5:2e:f2:7e:92:ad:2e:
2d:0e:88:53:21:56:60:b0:88:36:35:75:9c:f4:10:3a:f7:98:
02:11:31:1d:85:21:e5:74:f1:4a:91:60:52:a3:b8:88:0f:7e:
ab:4a:87:36:cb:cc:4b:ba:7f:05:70:43:51:ac:16:b8:89:bd:
92:27:77:57:ec:2f:76:d4:61:e1:cd:c9:bb:ef:7c:f5:54:84:
be:c4:a0:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 20:13:07 2025 by rpki-client