Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/802e05-0d5b-4589-916b-90c17eb751f4/1/XoaLAuUZ3X5pTHrx5wi91mNpvd8.mft
File: XoaLAuUZ3X5pTHrx5wi91mNpvd8.mft (raw, json)
Hash identifier: ekn9O8LKooDb6qPVPzdHK/sc/9IvOv8Lc8UHeCrZe5s=
Subject key identifier: 16:12:2C:66:96:FF:94:B1:B6:77:93:90:59:1E:85:09:A9:0F:4F:C0
Authority key identifier: 5E:86:8B:02:E5:19:DD:7E:69:4C:7A:F1:E7:08:BD:D6:63:69:BD:DF
Certificate issuer: /CN=5e868b02e519dd7e694c7af1e708bdd66369bddf
Certificate serial: 0197507CC8804EB4CDA934FC0BD89A132B2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XoaLAuUZ3X5pTHrx5wi91mNpvd8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/802e05-0d5b-4589-916b-90c17eb751f4/1/XoaLAuUZ3X5pTHrx5wi91mNpvd8.mft
Manifest number: 0AF4
Signing time: Sun 08 Jun 2025 17:00:44 +0000
Manifest this update: Sun 08 Jun 2025 17:00:44 +0000
Manifest next update: Mon 09 Jun 2025 17:00:44 +0000
Files and hashes: 1: 4nKgTO7nMwv7E5XkGZGra4Dj7eU.roa (hash: /DJ3vJxgq5Ik8hchhiF1sG1wu/bXrSEOv/Tfe2hOIxg=)
2: XoaLAuUZ3X5pTHrx5wi91mNpvd8.crl (hash: 6vwlCnUKlGBsylKtolUimucaXPYVRANhAbQgcC7z6mw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/802e05-0d5b-4589-916b-90c17eb751f4/1/XoaLAuUZ3X5pTHrx5wi91mNpvd8.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/802e05-0d5b-4589-916b-90c17eb751f4/1/XoaLAuUZ3X5pTHrx5wi91mNpvd8.mft
rsync://rpki.ripe.net/repository/DEFAULT/XoaLAuUZ3X5pTHrx5wi91mNpvd8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 17:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:50:7c:c8:80:4e:b4:cd:a9:34:fc:0b:d8:9a:13:2b:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e868b02e519dd7e694c7af1e708bdd66369bddf
Validity
Not Before: Jun 8 17:00:44 2025 GMT
Not After : Jun 9 17:00:44 2025 GMT
Subject: CN=16122c6696ff94b1b6779390591e8509a90f4fc0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:e0:cf:0f:27:6c:2d:0c:34:16:74:63:9a:ed:
b9:96:98:0b:9e:45:d9:b1:5f:f2:6b:ab:a2:77:06:
ab:b1:4e:7d:31:ca:c7:b0:a0:59:4a:8d:11:a8:f3:
be:00:0a:1d:4f:97:a9:f9:ef:79:0c:23:a6:8f:57:
b2:0f:1e:af:01:ae:db:d5:71:bc:f7:fe:73:04:ea:
1d:8a:ad:b0:8d:88:9d:92:fa:85:e2:3d:dd:d6:47:
03:f5:53:cf:ec:cf:34:33:6a:f2:83:0d:b1:8c:f1:
18:85:d3:2a:f9:92:64:82:52:df:58:38:bd:2e:fb:
44:d3:fa:34:26:d7:3f:fe:93:15:be:95:a1:4f:cd:
c0:af:80:b2:6b:3f:54:51:98:5a:6a:9e:07:7d:40:
79:c6:cd:29:14:93:bf:20:c2:85:2c:64:7c:ad:3c:
b7:ab:98:bc:73:1e:a8:9e:ae:ba:26:08:98:46:c0:
95:67:9a:87:55:92:94:8f:e5:3f:50:2e:8d:6a:b2:
d5:cc:c3:54:93:df:2a:2d:6a:d3:c3:2e:1e:ef:0e:
57:35:e0:d9:e5:7f:0d:e3:8e:d4:fd:09:40:5a:f4:
6e:bc:ec:3f:4f:98:e8:45:f3:6e:df:af:24:48:2e:
6d:3e:be:84:46:a7:9b:92:b5:e0:9f:50:c3:cf:f5:
f9:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:12:2C:66:96:FF:94:B1:B6:77:93:90:59:1E:85:09:A9:0F:4F:C0
X509v3 Authority Key Identifier:
keyid:5E:86:8B:02:E5:19:DD:7E:69:4C:7A:F1:E7:08:BD:D6:63:69:BD:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XoaLAuUZ3X5pTHrx5wi91mNpvd8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/802e05-0d5b-4589-916b-90c17eb751f4/1/XoaLAuUZ3X5pTHrx5wi91mNpvd8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/802e05-0d5b-4589-916b-90c17eb751f4/1/XoaLAuUZ3X5pTHrx5wi91mNpvd8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:74:56:10:44:80:43:3c:c2:f8:c7:8c:46:bd:56:af:be:6e:
92:19:25:10:bf:f3:29:e1:bf:f5:76:c7:22:48:30:10:dc:ac:
23:27:46:06:96:bc:3e:50:64:96:56:58:05:8b:d0:0a:2b:55:
5e:b9:12:09:5f:2e:d1:10:f0:c0:a7:b7:b0:35:2c:b0:8d:65:
8b:87:16:5d:4b:b4:99:50:ed:67:4e:fb:ee:37:de:3f:47:d6:
dc:bf:e4:fa:79:7b:53:ba:6f:bd:18:bb:21:c6:dc:de:ab:17:
20:fb:7e:bd:f5:85:4c:12:dd:2c:33:86:01:0c:a2:c5:f4:b7:
cf:f5:12:8a:51:b0:96:9b:e9:df:1c:f2:e1:a4:7e:cb:9b:8e:
1c:77:8d:53:d1:a1:5c:d0:a8:72:7c:a2:db:be:66:92:86:b4:
0d:fc:28:72:79:c0:77:75:10:a2:57:fb:bd:d6:e7:24:e3:67:
92:7c:0e:f2:85:a9:5b:4a:7c:c1:32:96:15:7c:32:fe:17:98:
36:0d:87:f4:c0:05:9c:25:bc:10:a6:6a:d7:e5:59:2e:22:33:
16:00:08:28:77:33:2c:19:cf:07:3b:69:28:f2:c7:48:ce:b8:
6f:df:66:d6:a6:8e:6e:54:20:17:af:d9:4d:6a:2e:dd:18:ce:
db:91:b4:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 23:31:21 2025 by rpki-client