Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/f7189f-9d3b-4fa9-b2c1-5217df3691ab/1/x2oNsIMDONLSlh5Mj_sKtaA__l8.mft
File: x2oNsIMDONLSlh5Mj_sKtaA__l8.mft (raw, json)
Hash identifier: FJiHjt0TkMaMUbqeBjmds0P6vMJXy0kb9FAOssVIFQU=
Subject key identifier: 24:1D:BA:EF:A1:B9:7B:33:1F:53:77:48:81:8F:C2:E6:8D:40:E0:26
Authority key identifier: C7:6A:0D:B0:83:03:38:D2:D2:96:1E:4C:8F:FB:0A:B5:A0:3F:FE:5F
Certificate issuer: /CN=c76a0db0830338d2d2961e4c8ffb0ab5a03ffe5f
Certificate serial: 01984AAE96543724B53B23B6392A94C4B677
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x2oNsIMDONLSlh5Mj_sKtaA__l8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/f7189f-9d3b-4fa9-b2c1-5217df3691ab/1/x2oNsIMDONLSlh5Mj_sKtaA__l8.mft
Manifest number: 108D
Signing time: Sun 27 Jul 2025 07:00:12 +0000
Manifest this update: Sun 27 Jul 2025 07:00:12 +0000
Manifest next update: Mon 28 Jul 2025 07:00:12 +0000
Files and hashes: 1: Ff3N8PO1mcQncsXGHiQUjQO2nRw.roa (hash: iiJaJiMdSghzZUoCo21ZColIpsI+U3kb/p0Er1rgouw=)
2: x2oNsIMDONLSlh5Mj_sKtaA__l8.crl (hash: VOmSt7eeoFVaVofK292taM4+9rJ6Yb2e5ocZB4DPZno=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/f7189f-9d3b-4fa9-b2c1-5217df3691ab/1/x2oNsIMDONLSlh5Mj_sKtaA__l8.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/f7189f-9d3b-4fa9-b2c1-5217df3691ab/1/x2oNsIMDONLSlh5Mj_sKtaA__l8.mft
rsync://rpki.ripe.net/repository/DEFAULT/x2oNsIMDONLSlh5Mj_sKtaA__l8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:ae:96:54:37:24:b5:3b:23:b6:39:2a:94:c4:b6:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c76a0db0830338d2d2961e4c8ffb0ab5a03ffe5f
Validity
Not Before: Jul 27 07:00:12 2025 GMT
Not After : Jul 28 07:00:12 2025 GMT
Subject: CN=241dbaefa1b97b331f537748818fc2e68d40e026
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:08:36:a5:9c:08:9e:e5:1e:e8:dd:1f:c3:c1:
ea:07:1c:65:34:ff:77:34:84:e5:25:70:06:77:2b:
33:8f:2c:51:f9:dd:cc:ec:43:a9:35:04:41:2e:b8:
ba:09:72:00:b2:f2:85:07:dc:c3:c1:6b:81:d9:72:
62:74:a6:f7:b5:3a:60:4b:d3:05:c6:48:12:63:4d:
0c:0d:14:d0:9a:c9:44:d9:15:1a:99:64:76:1c:b0:
54:7d:6d:bb:cb:ae:a8:4a:0b:b8:b8:6f:a3:15:24:
d9:69:a9:67:10:9d:82:73:15:40:82:56:0b:18:2c:
97:1f:5c:c8:00:b3:99:84:30:9f:11:a2:8b:ca:bb:
fe:c5:37:c2:15:0e:1e:a5:f8:77:3d:8e:f2:4c:02:
5f:b1:98:ea:86:d6:70:76:fe:7b:c7:83:6f:3b:72:
4e:ed:39:65:37:24:73:fa:34:dd:79:42:2d:a9:dd:
43:12:76:78:c6:64:34:d8:6b:40:ef:8b:c6:52:c0:
56:76:65:c1:a3:72:56:c5:a1:1b:be:b9:0d:8d:be:
bf:1b:93:0b:01:45:ef:58:9a:b5:d1:be:e3:eb:59:
a3:ee:17:7b:eb:d5:d3:82:71:71:91:e8:51:9f:d5:
02:dd:36:03:fc:67:48:61:e1:26:03:7c:07:32:2e:
12:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:1D:BA:EF:A1:B9:7B:33:1F:53:77:48:81:8F:C2:E6:8D:40:E0:26
X509v3 Authority Key Identifier:
keyid:C7:6A:0D:B0:83:03:38:D2:D2:96:1E:4C:8F:FB:0A:B5:A0:3F:FE:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x2oNsIMDONLSlh5Mj_sKtaA__l8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/f7189f-9d3b-4fa9-b2c1-5217df3691ab/1/x2oNsIMDONLSlh5Mj_sKtaA__l8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/f7189f-9d3b-4fa9-b2c1-5217df3691ab/1/x2oNsIMDONLSlh5Mj_sKtaA__l8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:d2:f5:20:c5:02:82:e8:ab:94:a2:2b:55:d0:bb:dc:82:6b:
2d:e3:63:ab:52:88:48:f0:22:03:8d:8b:bd:ba:a8:3c:55:96:
bf:5f:ff:f4:cd:a6:72:eb:6a:7f:67:3c:f1:5c:8e:27:89:c9:
1f:0c:1f:5e:de:97:1a:d5:80:6e:0e:48:bf:47:bf:ac:1f:e1:
83:23:9b:b2:6b:77:3e:ae:8f:a6:9b:52:f7:6d:56:47:59:b8:
3e:96:79:60:ab:00:38:c0:e1:5b:69:45:ed:9c:2c:ca:7a:97:
ca:31:5e:fa:8f:b6:69:66:14:66:24:23:66:5d:0a:78:06:33:
be:a7:01:b8:10:b6:9f:3f:d1:ec:d7:3c:6a:fb:a5:e8:dc:54:
28:1b:0c:f3:ed:5f:c3:14:fb:08:12:67:d8:22:2f:2f:77:07:
99:bf:90:ae:17:45:11:52:60:ae:ef:22:60:53:26:c1:f6:b4:
66:f1:6c:eb:1a:20:41:bf:52:3a:6b:e0:a3:79:18:97:ec:4a:
e5:ec:97:95:71:56:bd:b6:92:18:6a:cb:09:eb:f8:3e:72:59:
6a:e6:2d:62:e2:ff:d2:df:c3:dc:d3:73:dc:e5:21:29:b6:9d:
40:b5:7e:63:ea:9e:a5:46:bf:5c:79:b0:65:0a:fa:d1:cf:14:
8f:76:5a:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 09:35:42 2025 by rpki-client