Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/f7189f-9d3b-4fa9-b2c1-5217df3691ab/1/x2oNsIMDONLSlh5Mj_sKtaA__l8.mft
File: x2oNsIMDONLSlh5Mj_sKtaA__l8.mft (raw, json)
Hash identifier: KYUr2INs6kWE1Tr46oyb4i4zqeXrE316PrKnT1ZVoHQ=
Subject key identifier: 82:05:1B:EB:54:7C:96:CA:35:A0:F8:FE:0A:29:4E:04:C2:69:4E:2E
Authority key identifier: C7:6A:0D:B0:83:03:38:D2:D2:96:1E:4C:8F:FB:0A:B5:A0:3F:FE:5F
Certificate issuer: /CN=c76a0db0830338d2d2961e4c8ffb0ab5a03ffe5f
Certificate serial: 0199345C164EFAEE9FC1F8FA1B1645DE69DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x2oNsIMDONLSlh5Mj_sKtaA__l8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/f7189f-9d3b-4fa9-b2c1-5217df3691ab/1/x2oNsIMDONLSlh5Mj_sKtaA__l8.mft
Manifest number: 1106
Signing time: Wed 10 Sep 2025 16:01:14 +0000
Manifest this update: Wed 10 Sep 2025 16:01:14 +0000
Manifest next update: Thu 11 Sep 2025 16:01:14 +0000
Files and hashes: 1: Ff3N8PO1mcQncsXGHiQUjQO2nRw.roa (hash: iiJaJiMdSghzZUoCo21ZColIpsI+U3kb/p0Er1rgouw=)
2: x2oNsIMDONLSlh5Mj_sKtaA__l8.crl (hash: U7AOhylPLfL55AtFULHATkxnazehwd/AVpTzcIX4UmU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/f7189f-9d3b-4fa9-b2c1-5217df3691ab/1/x2oNsIMDONLSlh5Mj_sKtaA__l8.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/f7189f-9d3b-4fa9-b2c1-5217df3691ab/1/x2oNsIMDONLSlh5Mj_sKtaA__l8.mft
rsync://rpki.ripe.net/repository/DEFAULT/x2oNsIMDONLSlh5Mj_sKtaA__l8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 16:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:34:5c:16:4e:fa:ee:9f:c1:f8:fa:1b:16:45:de:69:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c76a0db0830338d2d2961e4c8ffb0ab5a03ffe5f
Validity
Not Before: Sep 10 16:01:14 2025 GMT
Not After : Sep 11 16:01:14 2025 GMT
Subject: CN=82051beb547c96ca35a0f8fe0a294e04c2694e2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:b8:43:da:a5:47:5b:65:45:b9:82:40:5a:46:
4f:9f:f0:48:57:ca:20:99:b6:b7:a3:64:e1:2b:23:
a3:cb:e5:9d:d7:f4:9b:df:ee:a0:0e:3d:f1:1f:73:
7e:66:d4:fc:9e:12:e3:75:9e:e7:75:c4:41:8e:d5:
12:fe:27:79:12:50:da:22:e0:28:44:5a:92:89:4c:
03:17:be:3f:6f:03:7f:11:72:b2:05:d6:1e:a5:77:
ea:68:b4:35:cf:f9:58:08:ce:d3:8c:a4:fe:11:8a:
be:82:19:90:fc:e7:bd:ef:8d:c8:93:63:b6:b7:ad:
6e:fe:85:2e:20:c2:73:47:52:ec:b8:ae:99:85:bc:
4f:ab:01:0b:20:e9:2b:11:2e:97:a5:88:e2:f3:c4:
0d:09:d4:d4:40:fb:aa:82:f3:a3:37:59:57:30:1a:
62:ad:92:49:3c:ff:ed:72:ea:63:3a:f6:24:4a:c6:
f2:53:a6:43:e2:48:6c:f6:a6:33:f5:27:f7:2d:74:
f5:fc:5e:7d:fe:e5:8a:b8:04:98:76:71:4a:2a:67:
d6:42:b3:56:7e:c6:f3:c7:50:42:dd:44:5b:40:c1:
34:08:92:1b:cc:59:51:59:bc:db:cb:ae:74:09:4b:
2a:48:ce:6d:7e:6c:75:aa:0f:d9:33:42:6b:47:b2:
1b:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:05:1B:EB:54:7C:96:CA:35:A0:F8:FE:0A:29:4E:04:C2:69:4E:2E
X509v3 Authority Key Identifier:
keyid:C7:6A:0D:B0:83:03:38:D2:D2:96:1E:4C:8F:FB:0A:B5:A0:3F:FE:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x2oNsIMDONLSlh5Mj_sKtaA__l8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/f7189f-9d3b-4fa9-b2c1-5217df3691ab/1/x2oNsIMDONLSlh5Mj_sKtaA__l8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/f7189f-9d3b-4fa9-b2c1-5217df3691ab/1/x2oNsIMDONLSlh5Mj_sKtaA__l8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d6:45:69:3f:fa:37:6c:98:c2:7e:f1:f8:ad:95:23:91:ff:e7:
6c:7c:fa:b5:03:35:78:1a:22:3b:db:70:b8:34:9b:41:f3:2e:
51:5c:74:a9:fe:82:e6:34:21:26:4c:09:22:8c:42:44:77:6f:
a0:18:03:d2:3b:05:86:45:1e:85:e9:5a:f9:9e:e8:5b:ea:bb:
50:8c:f3:4e:41:e4:e7:05:72:e2:1e:ce:27:10:4a:de:33:2f:
fa:10:3e:1b:77:60:07:e2:86:8b:20:6e:12:43:25:dc:d5:8c:
47:86:64:b4:ab:7e:a8:11:d9:c6:ce:7b:d6:2f:42:d8:d2:b1:
71:9c:8d:40:c2:b6:c7:f0:6d:55:c2:5b:1d:ce:3e:4b:3b:e0:
69:ab:4c:4f:0b:ee:b7:06:41:a9:41:3f:86:3a:06:11:e5:6d:
01:8e:ae:86:77:bb:e5:08:4e:9c:a6:59:70:aa:2c:8f:2b:b8:
bb:94:88:61:ac:cf:e2:27:75:bf:d0:e5:9f:48:43:c6:01:91:
19:ac:d7:5a:49:6d:05:4b:ec:b1:85:43:18:de:cc:b5:53:77:
00:0b:cc:6c:d5:ee:a0:ba:d0:c4:db:d8:ab:0e:a8:90:e0:4e:
2d:97:25:df:91:c5:51:00:24:96:34:9c:82:08:df:69:73:d5:
ea:35:99:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 11 00:05:03 2025 by rpki-client