Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/f09788-9869-4f12-9f1e-ac4de169adce/1/Xmxk_CDOHZcvXjR0MZBIoqxlbfE.mft
File: Xmxk_CDOHZcvXjR0MZBIoqxlbfE.mft (raw, json)
Hash identifier: Ozrodf1YqIUhiuu+ROcYyuqu66Uu0OZXpEkU6hpPlRM=
Subject key identifier: BD:5B:28:7D:C4:E4:66:BE:A5:CD:D0:6A:C3:6C:55:09:AF:B3:01:B1
Authority key identifier: 5E:6C:64:FC:20:CE:1D:97:2F:5E:34:74:31:90:48:A2:AC:65:6D:F1
Certificate issuer: /CN=5e6c64fc20ce1d972f5e3474319048a2ac656df1
Certificate serial: 01984AAF578F2A1A69269B6E835B953D5611
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xmxk_CDOHZcvXjR0MZBIoqxlbfE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/f09788-9869-4f12-9f1e-ac4de169adce/1/Xmxk_CDOHZcvXjR0MZBIoqxlbfE.mft
Manifest number: 0EDC
Signing time: Sun 27 Jul 2025 07:01:01 +0000
Manifest this update: Sun 27 Jul 2025 07:01:01 +0000
Manifest next update: Mon 28 Jul 2025 07:01:01 +0000
Files and hashes: 1: 7H5MwTgN1OYiRCO4mG4ENm-WPD0.roa (hash: /sYr4Nv4zqcEaNJCLCU0HKPHMEqgFJB/Zeuuas/Ouic=)
2: Xmxk_CDOHZcvXjR0MZBIoqxlbfE.crl (hash: XLwzxB63P0lgpyKB/oHV1Zp77h+faWnHEJ7id+91Cgc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/f09788-9869-4f12-9f1e-ac4de169adce/1/Xmxk_CDOHZcvXjR0MZBIoqxlbfE.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/f09788-9869-4f12-9f1e-ac4de169adce/1/Xmxk_CDOHZcvXjR0MZBIoqxlbfE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xmxk_CDOHZcvXjR0MZBIoqxlbfE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:af:57:8f:2a:1a:69:26:9b:6e:83:5b:95:3d:56:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e6c64fc20ce1d972f5e3474319048a2ac656df1
Validity
Not Before: Jul 27 07:01:01 2025 GMT
Not After : Jul 28 07:01:01 2025 GMT
Subject: CN=bd5b287dc4e466bea5cdd06ac36c5509afb301b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:6c:4a:bd:4d:bc:7c:b0:2d:1d:44:a0:3a:00:
f1:a4:39:7d:70:c3:56:ed:c1:32:dc:d2:dc:8a:b4:
4f:26:eb:13:d3:25:5b:8d:41:8d:09:c2:96:7d:e3:
72:9f:47:48:2d:bf:67:44:28:3e:27:cc:61:ec:cc:
a3:90:8e:20:c8:a9:86:cb:e1:17:22:f7:69:06:ee:
2d:27:76:8a:49:bb:25:1e:b0:7b:76:b5:8d:9e:5f:
74:ac:6b:93:45:98:89:dd:3c:bd:d0:df:45:9d:7f:
7f:41:f8:5c:ef:0f:c7:5c:a7:3b:55:00:d3:e4:4b:
20:66:e7:46:ee:a9:01:79:30:0d:10:fb:15:b9:9f:
39:01:73:c2:d6:b7:3a:07:7e:05:3f:6e:de:d2:3c:
11:0a:e1:83:f9:f3:42:47:90:0f:5f:7f:45:81:33:
60:9c:24:ee:78:70:46:d5:bb:da:41:7d:47:09:06:
f1:14:06:2a:1b:13:6e:e2:5c:bd:cb:f4:07:36:64:
44:24:0c:b4:63:08:a9:0d:e9:eb:53:aa:80:ea:f3:
d6:96:9d:a0:d8:ee:c9:0b:18:42:6b:32:c9:02:24:
ea:79:b8:02:3c:0e:e7:47:b4:3c:b8:83:91:61:bf:
77:8c:08:7c:e1:66:2f:3c:b3:c4:82:90:5f:a6:f6:
69:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:5B:28:7D:C4:E4:66:BE:A5:CD:D0:6A:C3:6C:55:09:AF:B3:01:B1
X509v3 Authority Key Identifier:
keyid:5E:6C:64:FC:20:CE:1D:97:2F:5E:34:74:31:90:48:A2:AC:65:6D:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xmxk_CDOHZcvXjR0MZBIoqxlbfE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/f09788-9869-4f12-9f1e-ac4de169adce/1/Xmxk_CDOHZcvXjR0MZBIoqxlbfE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/f09788-9869-4f12-9f1e-ac4de169adce/1/Xmxk_CDOHZcvXjR0MZBIoqxlbfE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:3b:2a:9b:8f:4d:42:bb:96:14:2a:1c:81:7a:26:78:22:d8:
1f:fe:d2:51:89:5b:7a:c4:7c:58:06:48:e7:57:6a:23:2b:35:
91:a4:7c:55:d3:79:bc:57:ac:37:8f:0e:37:cb:0d:97:20:2e:
0d:ae:4f:01:05:f3:82:12:25:12:37:c7:53:58:d7:4b:d1:f2:
8d:50:ae:d1:22:a0:34:10:11:cd:6c:2f:ea:1d:e7:98:e7:e0:
52:67:03:e4:0d:41:c5:67:66:e1:54:ba:73:28:d7:11:e0:20:
01:d4:dd:d7:d2:fa:f7:b4:53:0b:2e:f9:ad:c1:e6:a5:b9:b2:
70:3d:72:79:aa:57:4b:5d:a6:a5:39:ed:f2:ae:56:6c:c8:a7:
2f:08:11:35:99:4a:c8:4b:3d:69:d9:32:97:1f:5b:4e:48:da:
b8:bf:d4:96:dd:bc:37:84:34:db:56:a5:58:23:98:3e:8c:b7:
b7:43:15:b7:a9:51:e8:54:8c:d4:f1:88:70:5b:8b:52:40:8b:
38:c8:74:bd:3d:db:b1:e3:81:90:31:78:ed:a1:6a:de:36:4c:
6f:f3:fc:b3:a2:53:f4:df:0c:90:ef:6b:ed:22:74:ec:5d:15:
2b:c6:0a:ab:a0:4c:0a:a0:47:31:72:3e:4c:82:ef:af:cf:a4:
3f:c6:0e:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 10:30:06 2025 by rpki-client