Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/269290-59ff-4233-8fa0-27550b219507/1/_xoKdVQ4VwOXSuFe-Ue8VMC4nJU.mft
File: _xoKdVQ4VwOXSuFe-Ue8VMC4nJU.mft (raw, json)
Hash identifier: xAY+lwMVOdhVainPSok0wnCuHJEmenvcu8iyVY/4AI4=
Subject key identifier: 0E:E9:02:C0:92:88:E8:8A:22:2E:6A:01:72:00:6A:C7:CC:55:FE:4E
Authority key identifier: FF:1A:0A:75:54:38:57:03:97:4A:E1:5E:F9:47:BC:54:C0:B8:9C:95
Certificate issuer: /CN=ff1a0a7554385703974ae15ef947bc54c0b89c95
Certificate serial: 019922C32F85737812E19B9996A13D077DF5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_xoKdVQ4VwOXSuFe-Ue8VMC4nJU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/269290-59ff-4233-8fa0-27550b219507/1/_xoKdVQ4VwOXSuFe-Ue8VMC4nJU.mft
Manifest number: 0487
Signing time: Sun 07 Sep 2025 06:00:40 +0000
Manifest this update: Sun 07 Sep 2025 06:00:40 +0000
Manifest next update: Mon 08 Sep 2025 06:00:40 +0000
Files and hashes: 1: 4YFKATy6NlpuD5RARFf6ucU0LYc.roa (hash: RSRzqoF+x6rPSJR8eSY+ztT3IgSla9/aJupP6hQ26Bc=)
2: _xoKdVQ4VwOXSuFe-Ue8VMC4nJU.crl (hash: 7q78JNJJDrpbgvADb+fFOeU/YuFFRVcwyxCOdho/Y1Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/269290-59ff-4233-8fa0-27550b219507/1/_xoKdVQ4VwOXSuFe-Ue8VMC4nJU.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/269290-59ff-4233-8fa0-27550b219507/1/_xoKdVQ4VwOXSuFe-Ue8VMC4nJU.mft
rsync://rpki.ripe.net/repository/DEFAULT/_xoKdVQ4VwOXSuFe-Ue8VMC4nJU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:c3:2f:85:73:78:12:e1:9b:99:96:a1:3d:07:7d:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff1a0a7554385703974ae15ef947bc54c0b89c95
Validity
Not Before: Sep 7 06:00:40 2025 GMT
Not After : Sep 8 06:00:40 2025 GMT
Subject: CN=0ee902c09288e88a222e6a0172006ac7cc55fe4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:f6:61:96:67:cc:1e:f1:ab:5d:e9:d3:86:0d:
9e:2d:c7:87:0d:6d:f6:83:ea:17:c4:d7:63:c2:b8:
0a:2c:56:8f:48:fd:70:42:6e:54:8e:61:40:57:27:
30:34:14:99:38:38:fb:6e:d2:25:72:de:c3:eb:e8:
95:d4:5d:f6:91:a5:94:40:44:95:03:b9:d0:75:93:
d6:b3:9c:e5:3a:d5:31:89:60:58:60:0f:5f:02:67:
71:3a:cd:4f:2b:5d:33:24:2e:8d:7d:07:4e:16:4a:
d0:cd:42:28:bb:1b:4b:66:45:23:a2:ed:c1:e6:9c:
b0:10:54:27:3f:d1:a2:e6:d6:c3:a3:e0:15:3d:26:
d7:ae:06:4e:f2:d0:f7:6b:30:4c:71:89:ca:98:99:
4b:fc:c2:a5:4e:c8:b9:9e:fb:f4:8a:10:7d:a3:7e:
5b:23:ec:f5:f8:b6:47:5e:12:32:0c:f6:96:c3:21:
c0:6d:94:4d:7c:99:2d:2a:fd:88:fe:c8:2e:ff:cd:
81:ab:10:88:27:e7:5c:77:5f:c0:38:92:df:32:6a:
7c:69:15:3b:50:c2:8f:21:e3:f0:f0:5c:0e:b6:6a:
ed:69:f2:bf:f2:eb:9f:c0:f5:0c:1e:f3:53:16:52:
da:bb:6e:d4:80:b5:57:a5:b2:5d:21:28:8c:5d:d2:
12:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:E9:02:C0:92:88:E8:8A:22:2E:6A:01:72:00:6A:C7:CC:55:FE:4E
X509v3 Authority Key Identifier:
keyid:FF:1A:0A:75:54:38:57:03:97:4A:E1:5E:F9:47:BC:54:C0:B8:9C:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_xoKdVQ4VwOXSuFe-Ue8VMC4nJU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/269290-59ff-4233-8fa0-27550b219507/1/_xoKdVQ4VwOXSuFe-Ue8VMC4nJU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/269290-59ff-4233-8fa0-27550b219507/1/_xoKdVQ4VwOXSuFe-Ue8VMC4nJU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:e5:27:5b:f5:45:cd:21:15:c7:4b:21:b1:cc:31:cd:8a:45:
9e:2c:dd:24:fd:8a:e8:92:c9:a2:a0:ea:53:2d:e9:3e:6b:aa:
cc:42:33:44:78:79:7f:07:94:99:76:74:9a:72:d6:b3:37:fc:
ec:d5:88:b4:93:55:7b:c5:d7:f1:e2:0b:66:e9:9e:ed:09:d5:
7d:c0:2d:27:2e:9c:1d:5b:29:e2:47:9d:0a:06:aa:c6:7c:13:
6e:a8:57:43:c9:6a:d6:5b:cc:e5:ae:a1:d0:cc:f0:7c:58:f0:
85:b9:71:50:35:7b:1f:66:39:9c:62:b7:67:92:60:2c:06:fa:
7b:d0:f0:8d:6d:68:06:a9:b1:71:e2:1e:42:ee:c7:18:41:ae:
5c:fa:97:88:2c:50:f7:6c:50:6c:85:34:8c:88:a9:f7:30:09:
26:35:1c:29:9b:a5:c8:e2:ea:84:f0:29:5d:4e:88:3f:b6:a3:
87:9e:f8:e3:98:c3:78:12:67:a8:fd:38:a3:76:39:ac:55:c3:
88:e7:1b:f2:f4:08:b8:cf:2b:96:85:15:43:4b:67:4a:83:3c:
39:32:30:c0:a0:65:16:df:c1:a1:03:1f:a6:ec:88:0b:74:72:
78:06:a3:0e:8a:25:ef:96:fe:da:c7:74:91:1c:88:8c:7e:7b:
3a:9a:52:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:21:04 2025 by rpki-client