Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/7c4e32-6c20-41c1-a85f-fdd3a815abb8/1/xTOO_ORJT1uSXw6a9zZRwcvx4Ew.mft
File: xTOO_ORJT1uSXw6a9zZRwcvx4Ew.mft (raw, json)
Hash identifier: j5L0L6SVf4fKu3iKXRziYLQ4tZVaFmrgco/2VS0d6as=
Subject key identifier: 48:04:E8:04:51:EF:44:84:4D:61:D0:0C:18:AC:5B:AE:46:68:B0:69
Authority key identifier: C5:33:8E:FC:E4:49:4F:5B:92:5F:0E:9A:F7:36:51:C1:CB:F1:E0:4C
Certificate issuer: /CN=c5338efce4494f5b925f0e9af73651c1cbf1e04c
Certificate serial: 019A228995AC5249C3A3F0B9A69C1ED422C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xTOO_ORJT1uSXw6a9zZRwcvx4Ew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/7c4e32-6c20-41c1-a85f-fdd3a815abb8/1/xTOO_ORJT1uSXw6a9zZRwcvx4Ew.mft
Manifest number: 01AC
Signing time: Sun 26 Oct 2025 22:00:33 +0000
Manifest this update: Sun 26 Oct 2025 22:00:33 +0000
Manifest next update: Mon 27 Oct 2025 22:00:33 +0000
Files and hashes: 1: YZ1rgmmdGJTdnaDAgDl2-yE974E.roa (hash: Lb3bg3bm9QZky/VWwidZy1sN1eo2ThSodX/AgWbvOtQ=)
2: _5i050DixZy2EtKOhz8lOMgCfIg.roa (hash: /YfNbDhqCMdFRtH+NtU0vFR+Vi8QHGbG/GrA2aaBEwM=)
3: xTOO_ORJT1uSXw6a9zZRwcvx4Ew.crl (hash: zRp0mT75jHdqH3aOFMEqAt7DYjWyLy79u3DBzo0wPmo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/7c4e32-6c20-41c1-a85f-fdd3a815abb8/1/xTOO_ORJT1uSXw6a9zZRwcvx4Ew.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/7c4e32-6c20-41c1-a85f-fdd3a815abb8/1/xTOO_ORJT1uSXw6a9zZRwcvx4Ew.mft
rsync://rpki.ripe.net/repository/DEFAULT/xTOO_ORJT1uSXw6a9zZRwcvx4Ew.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 19:48:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:22:89:95:ac:52:49:c3:a3:f0:b9:a6:9c:1e:d4:22:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5338efce4494f5b925f0e9af73651c1cbf1e04c
Validity
Not Before: Oct 26 22:00:33 2025 GMT
Not After : Oct 27 22:00:33 2025 GMT
Subject: CN=4804e80451ef44844d61d00c18ac5bae4668b069
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:30:b1:31:dc:28:4d:86:fb:58:c6:e4:6f:8e:
8c:2d:ca:4e:c2:31:22:b2:bf:da:d0:81:11:3f:9c:
1c:26:45:8a:f7:1d:6f:b5:a3:f9:1b:a8:1c:90:84:
33:47:50:47:24:2b:db:15:aa:f8:e1:6e:bc:0a:4b:
70:e3:de:85:e5:60:32:55:69:f3:fe:90:f5:b4:ff:
7b:f7:b9:19:17:7f:67:61:0e:97:40:9f:d4:38:82:
1a:63:e6:63:b2:f9:81:9c:d7:ac:31:04:32:26:2d:
7a:c9:5a:0d:fe:d4:1c:7c:fd:da:3c:35:28:75:3b:
28:e4:a7:b6:4c:fe:8c:ee:c8:2e:42:6c:80:1c:67:
ed:82:f7:fb:24:b5:e4:bd:95:00:2c:4b:dd:1f:d5:
09:0b:b5:83:58:77:2a:d1:b5:ba:b8:32:f6:79:01:
41:00:42:82:ca:ba:d5:9e:c9:74:ae:32:a8:be:d3:
5f:87:25:02:0e:f0:7f:62:1e:4f:8c:f4:46:4f:9c:
c2:a1:1c:e5:8e:f2:26:a5:8c:5a:bb:88:fa:5e:47:
0f:e8:98:5e:d8:9b:da:33:b4:8d:cd:b4:26:b3:08:
61:62:02:3d:dd:2e:4b:d3:78:7a:1f:7f:71:67:be:
b0:c8:19:b4:0b:ce:db:98:9e:ad:1e:b3:ae:b2:21:
55:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:04:E8:04:51:EF:44:84:4D:61:D0:0C:18:AC:5B:AE:46:68:B0:69
X509v3 Authority Key Identifier:
keyid:C5:33:8E:FC:E4:49:4F:5B:92:5F:0E:9A:F7:36:51:C1:CB:F1:E0:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xTOO_ORJT1uSXw6a9zZRwcvx4Ew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/7c4e32-6c20-41c1-a85f-fdd3a815abb8/1/xTOO_ORJT1uSXw6a9zZRwcvx4Ew.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/7c4e32-6c20-41c1-a85f-fdd3a815abb8/1/xTOO_ORJT1uSXw6a9zZRwcvx4Ew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:f5:4e:97:35:78:b5:9d:be:37:31:17:55:91:19:1f:26:65:
f4:38:36:87:94:cd:6b:4f:d8:3b:ac:12:03:9d:f0:fb:13:e9:
63:93:4c:89:b6:98:93:a0:8c:dd:0c:b8:ba:b3:a2:ae:c2:73:
07:78:10:0d:1d:4a:22:0e:c5:13:39:87:ef:06:90:b0:e1:62:
33:ad:7f:8c:a1:cd:ca:72:c8:eb:51:6c:7a:ab:46:be:bf:b5:
bd:30:f7:c8:6c:60:06:57:b7:b5:a1:68:0d:21:e5:2b:e4:ac:
99:af:82:7b:52:35:e8:cf:db:7e:16:48:68:fa:04:ac:69:d0:
40:a6:28:7d:44:18:23:7f:ac:70:c9:00:54:0b:49:22:3a:07:
1d:e3:7d:64:ec:56:10:45:ca:a7:8d:c4:d9:6c:a0:c2:0a:bc:
bd:cc:1b:26:6b:5e:8b:d6:d5:ae:39:56:dc:83:52:52:bc:bb:
4c:ae:11:a7:44:84:c7:94:1a:31:8b:23:d9:e8:e1:f6:05:45:
e2:c0:bf:a7:4e:5c:eb:7c:57:98:8e:58:c1:76:9b:92:4f:2a:
e5:36:78:28:6c:a8:1b:09:38:a9:0b:38:ca:0c:5b:c2:8c:55:
b1:05:ef:20:bd:ac:b0:fd:56:84:fa:fe:a3:bb:72:ab:73:0c:
81:9a:ae:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 04:21:49 2025 by rpki-client