Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/802e05-0d5b-4589-916b-90c17eb751f4/1/XoaLAuUZ3X5pTHrx5wi91mNpvd8.mft
File: XoaLAuUZ3X5pTHrx5wi91mNpvd8.mft (raw, json)
Hash identifier: RycF7OQh5/X4X1+Io7D9lgzkrh1Ky7n7MFVwrdF+abA=
Subject key identifier: 37:41:8D:FD:CE:C0:A4:52:C5:21:6C:6C:12:59:3A:22:C5:1F:6B:8F
Authority key identifier: 5E:86:8B:02:E5:19:DD:7E:69:4C:7A:F1:E7:08:BD:D6:63:69:BD:DF
Certificate issuer: /CN=5e868b02e519dd7e694c7af1e708bdd66369bddf
Certificate serial: 019921E7D821F238C2D9719CE2D607DE8546
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XoaLAuUZ3X5pTHrx5wi91mNpvd8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/802e05-0d5b-4589-916b-90c17eb751f4/1/XoaLAuUZ3X5pTHrx5wi91mNpvd8.mft
Manifest number: 0BE5
Signing time: Sun 07 Sep 2025 02:01:06 +0000
Manifest this update: Sun 07 Sep 2025 02:01:06 +0000
Manifest next update: Mon 08 Sep 2025 02:01:06 +0000
Files and hashes: 1: 4nKgTO7nMwv7E5XkGZGra4Dj7eU.roa (hash: /DJ3vJxgq5Ik8hchhiF1sG1wu/bXrSEOv/Tfe2hOIxg=)
2: XoaLAuUZ3X5pTHrx5wi91mNpvd8.crl (hash: Hz8HyNcR+ErtvZc79Jt6AZSTIxAgw8YZYyQR7EYGnTw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/802e05-0d5b-4589-916b-90c17eb751f4/1/XoaLAuUZ3X5pTHrx5wi91mNpvd8.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/802e05-0d5b-4589-916b-90c17eb751f4/1/XoaLAuUZ3X5pTHrx5wi91mNpvd8.mft
rsync://rpki.ripe.net/repository/DEFAULT/XoaLAuUZ3X5pTHrx5wi91mNpvd8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 02:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:e7:d8:21:f2:38:c2:d9:71:9c:e2:d6:07:de:85:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e868b02e519dd7e694c7af1e708bdd66369bddf
Validity
Not Before: Sep 7 02:01:06 2025 GMT
Not After : Sep 8 02:01:06 2025 GMT
Subject: CN=37418dfdcec0a452c5216c6c12593a22c51f6b8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:ca:29:27:a0:1f:c7:10:3e:85:8c:b7:b6:be:
a3:87:08:b9:9d:77:73:78:f8:f0:b4:59:58:08:47:
58:d2:82:ce:f4:1a:d0:99:74:69:68:f8:21:6b:d6:
fa:bf:55:ff:d9:ac:b5:46:4d:ae:b4:5d:18:31:44:
24:c5:3a:4f:86:a2:97:1b:6b:05:06:52:1d:4f:5f:
07:fb:dd:e4:4a:3f:bc:b7:1f:84:78:ce:fe:ef:ba:
4b:37:2a:2c:a4:6e:88:87:af:f0:37:7f:dc:29:af:
ce:e5:17:be:dd:d9:26:19:a1:f4:dd:79:49:fa:b5:
bb:ea:5a:79:b8:60:60:a4:4b:9e:fc:d1:1a:86:81:
c1:56:15:d9:10:b9:aa:93:70:3a:42:23:ae:a4:71:
2a:ce:a2:33:6c:a3:7b:c4:3c:36:d8:49:ec:5b:5a:
c5:5e:b7:c7:79:45:de:57:c0:3d:54:ba:8e:8d:b7:
fd:73:17:fd:db:cf:98:91:d1:da:34:35:b6:f2:2c:
f4:45:39:29:f2:a1:95:5b:a5:20:59:05:85:20:4b:
25:3a:d1:26:12:d7:d6:ce:d4:fe:56:b6:91:31:92:
2b:8c:8c:f5:6e:7b:f9:04:10:72:0b:87:d8:81:43:
ba:41:cf:5f:43:be:c2:e0:e6:f2:9d:ba:96:d3:b8:
cc:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:41:8D:FD:CE:C0:A4:52:C5:21:6C:6C:12:59:3A:22:C5:1F:6B:8F
X509v3 Authority Key Identifier:
keyid:5E:86:8B:02:E5:19:DD:7E:69:4C:7A:F1:E7:08:BD:D6:63:69:BD:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XoaLAuUZ3X5pTHrx5wi91mNpvd8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/802e05-0d5b-4589-916b-90c17eb751f4/1/XoaLAuUZ3X5pTHrx5wi91mNpvd8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/802e05-0d5b-4589-916b-90c17eb751f4/1/XoaLAuUZ3X5pTHrx5wi91mNpvd8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:bf:a3:bf:c0:fc:6a:64:ae:4b:66:40:f5:71:61:21:f6:4f:
2f:db:12:cd:c9:6b:e7:04:4e:1c:9e:87:05:fa:78:33:e9:30:
16:83:58:59:80:70:1b:4e:f8:dc:83:94:a2:fb:d4:a6:7f:9f:
df:77:a8:ff:f7:cf:c5:c9:05:b8:d4:36:21:a6:e2:85:c1:79:
c6:19:fc:8e:cb:6f:4e:7c:3a:5d:c7:e6:9f:d9:6d:35:0b:ec:
03:89:ff:7f:c0:14:c0:a5:79:e1:e4:2e:54:72:87:3d:3c:f1:
d4:28:c0:fa:b0:0d:a8:8d:4e:28:36:1a:d1:aa:16:0c:78:09:
86:46:78:9f:08:20:a8:77:ef:6e:fb:80:31:28:27:34:50:1b:
55:85:13:fe:e9:01:c1:17:30:fa:ee:ed:d0:06:97:c2:33:01:
c2:49:fd:c0:62:20:2c:2d:0a:03:9c:37:6e:9e:9f:d0:e2:e7:
bb:05:26:1e:47:3c:4f:33:f9:2c:b7:50:e0:17:0f:2b:d0:2b:
33:b2:f1:54:4c:a4:dc:51:12:47:ba:ea:be:6a:23:72:0e:0b:
2a:b7:2e:49:a3:6f:fd:da:e4:28:c2:03:56:d9:07:c9:3c:98:
6c:aa:6c:33:c4:a7:41:9e:a6:34:8c:b1:28:af:8e:5e:83:3a:
30:87:ee:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:47:31 2025 by rpki-client