Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/8154e3-286b-46a3-b8a5-52356cd5da90/1/xSJOpF0IHUAv_Wv03ZXj_28txIE.mft
File: xSJOpF0IHUAv_Wv03ZXj_28txIE.mft (raw, json)
Hash identifier: 1ZDI8PACSmE0U8o2H4oNoWXvi4yVMcji3XITvlmWJgc=
Subject key identifier: 6B:76:78:3B:25:8D:61:C5:64:63:42:25:47:27:32:F2:4F:D6:EE:A0
Authority key identifier: C5:22:4E:A4:5D:08:1D:40:2F:FD:6B:F4:DD:95:E3:FF:6F:2D:C4:81
Certificate issuer: /CN=c5224ea45d081d402ffd6bf4dd95e3ff6f2dc481
Certificate serial: 0199239F1CD15EAE44CBF6385CE310017F76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xSJOpF0IHUAv_Wv03ZXj_28txIE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/8154e3-286b-46a3-b8a5-52356cd5da90/1/xSJOpF0IHUAv_Wv03ZXj_28txIE.mft
Manifest number: 0B2B
Signing time: Sun 07 Sep 2025 10:00:53 +0000
Manifest this update: Sun 07 Sep 2025 10:00:53 +0000
Manifest next update: Mon 08 Sep 2025 10:00:53 +0000
Files and hashes: 1: O93k6bKhYCgLqm1pwPcFwndFJfc.roa (hash: mGQ92ARMuHfH2tnd6YZOf6zGRFHFURqcW968Yoazf28=)
2: xSJOpF0IHUAv_Wv03ZXj_28txIE.crl (hash: CxqkfDQE1E5eo9VTqccJwV0sVQOW3A6GPTZE91gHSQo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/8154e3-286b-46a3-b8a5-52356cd5da90/1/xSJOpF0IHUAv_Wv03ZXj_28txIE.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/8154e3-286b-46a3-b8a5-52356cd5da90/1/xSJOpF0IHUAv_Wv03ZXj_28txIE.mft
rsync://rpki.ripe.net/repository/DEFAULT/xSJOpF0IHUAv_Wv03ZXj_28txIE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:9f:1c:d1:5e:ae:44:cb:f6:38:5c:e3:10:01:7f:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5224ea45d081d402ffd6bf4dd95e3ff6f2dc481
Validity
Not Before: Sep 7 10:00:53 2025 GMT
Not After : Sep 8 10:00:53 2025 GMT
Subject: CN=6b76783b258d61c564634225472732f24fd6eea0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:e1:7a:11:0e:bc:d4:a4:a5:d8:c9:fd:d2:c4:
bb:86:d3:9c:58:65:6c:4a:46:6e:0c:e5:08:e9:55:
6b:a6:35:f0:44:75:6e:77:59:19:8e:06:90:5e:0a:
a4:94:d3:12:4a:51:b6:c5:19:33:c5:eb:95:38:ae:
bb:08:a1:14:1a:ad:e6:1c:19:e0:7c:c3:96:f9:22:
4a:cb:98:9a:13:c4:1f:f7:29:aa:42:16:0b:6d:55:
6f:8e:d3:7c:70:a6:d6:e7:dd:30:d4:08:d1:c7:92:
f1:3a:01:de:d2:bc:52:51:b1:4b:7d:24:dc:c5:60:
0c:89:c7:7f:37:cd:6d:94:41:19:4e:db:a2:c6:9d:
70:76:5f:5c:9b:eb:5a:c6:19:b5:3c:e3:8e:51:26:
e6:a4:92:1a:7c:e8:f4:6c:a4:fa:be:84:83:a3:71:
96:b8:33:21:76:97:77:11:4a:da:ec:c7:02:86:31:
15:98:88:0e:7f:3f:63:61:1d:ab:80:09:c9:f7:48:
90:73:de:92:1b:ea:58:7c:8f:56:59:8f:e5:eb:0d:
c9:98:83:61:27:49:d3:5d:f5:a8:a5:c5:59:43:01:
3b:12:c7:86:83:d0:37:cc:1d:f7:db:ea:ea:f8:89:
de:e9:d1:3e:80:b8:a0:0c:0c:8a:81:3b:a7:40:bb:
48:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:76:78:3B:25:8D:61:C5:64:63:42:25:47:27:32:F2:4F:D6:EE:A0
X509v3 Authority Key Identifier:
keyid:C5:22:4E:A4:5D:08:1D:40:2F:FD:6B:F4:DD:95:E3:FF:6F:2D:C4:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xSJOpF0IHUAv_Wv03ZXj_28txIE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/8154e3-286b-46a3-b8a5-52356cd5da90/1/xSJOpF0IHUAv_Wv03ZXj_28txIE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/8154e3-286b-46a3-b8a5-52356cd5da90/1/xSJOpF0IHUAv_Wv03ZXj_28txIE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
dd:e1:e1:79:0c:a4:fa:64:aa:e9:a3:87:c4:6c:d6:40:24:65:
25:e0:17:ad:cc:8d:11:59:31:db:ae:b8:ad:a8:f2:eb:bb:a2:
aa:f2:58:bb:1b:ed:e3:4c:18:92:cf:e4:5d:6b:5c:3a:bd:59:
a5:5c:6e:44:62:70:74:7e:3c:79:b8:fe:a9:93:54:07:f4:08:
42:db:21:dc:3f:39:ee:73:87:6a:a5:bf:da:b5:54:1a:b8:5f:
75:73:77:73:98:66:0d:3a:b9:c2:dc:36:8e:0c:48:81:12:d4:
1e:45:a9:e6:94:a7:74:42:9c:97:73:52:21:22:5a:d8:b8:9b:
b5:a3:c6:90:c3:d0:59:f0:5d:21:8e:98:7e:61:d1:52:5f:f3:
e8:8a:f1:36:22:18:1d:74:1f:27:10:8f:1b:6a:45:44:2b:f8:
02:56:91:eb:9e:2a:64:62:71:37:7f:c4:79:dc:72:95:f0:c0:
71:fd:09:ab:e4:0e:bf:4c:d3:da:a4:d0:c2:01:58:ea:60:a5:
7d:7c:68:3e:da:a3:19:55:27:ed:b7:08:78:52:cb:a4:c9:ff:
59:c9:fc:24:1d:61:6d:45:60:16:7c:03:8e:49:99:dc:21:a5:
c8:80:5a:78:2a:48:96:f1:03:37:ea:57:3a:d3:19:41:01:14:
35:b8:d8:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 14:51:46 2025 by rpki-client