Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/802e05-0d5b-4589-916b-90c17eb751f4/1/XoaLAuUZ3X5pTHrx5wi91mNpvd8.mft
File: XoaLAuUZ3X5pTHrx5wi91mNpvd8.mft (raw, json)
Hash identifier: Ho5ADPHCIgzDAPXBABOIAm5IIumUb03PDvY1toVUxgM=
Subject key identifier: FF:FA:F9:03:D0:0A:07:56:B2:81:22:96:93:84:03:BF:8B:51:F6:3A
Authority key identifier: 5E:86:8B:02:E5:19:DD:7E:69:4C:7A:F1:E7:08:BD:D6:63:69:BD:DF
Certificate issuer: /CN=5e868b02e519dd7e694c7af1e708bdd66369bddf
Certificate serial: 0198D4A8091AC4CB12D8D739ED24ED5FABD7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XoaLAuUZ3X5pTHrx5wi91mNpvd8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/802e05-0d5b-4589-916b-90c17eb751f4/1/XoaLAuUZ3X5pTHrx5wi91mNpvd8.mft
Manifest number: 0BBD
Signing time: Sat 23 Aug 2025 02:00:38 +0000
Manifest this update: Sat 23 Aug 2025 02:00:38 +0000
Manifest next update: Sun 24 Aug 2025 02:00:38 +0000
Files and hashes: 1: 4nKgTO7nMwv7E5XkGZGra4Dj7eU.roa (hash: /DJ3vJxgq5Ik8hchhiF1sG1wu/bXrSEOv/Tfe2hOIxg=)
2: XoaLAuUZ3X5pTHrx5wi91mNpvd8.crl (hash: saa2xZL03cXeem0PMkOMstHRonMVPNEBFgpR+oSB/UY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/802e05-0d5b-4589-916b-90c17eb751f4/1/XoaLAuUZ3X5pTHrx5wi91mNpvd8.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/802e05-0d5b-4589-916b-90c17eb751f4/1/XoaLAuUZ3X5pTHrx5wi91mNpvd8.mft
rsync://rpki.ripe.net/repository/DEFAULT/XoaLAuUZ3X5pTHrx5wi91mNpvd8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 02:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:a8:09:1a:c4:cb:12:d8:d7:39:ed:24:ed:5f:ab:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e868b02e519dd7e694c7af1e708bdd66369bddf
Validity
Not Before: Aug 23 02:00:38 2025 GMT
Not After : Aug 24 02:00:38 2025 GMT
Subject: CN=fffaf903d00a0756b2812296938403bf8b51f63a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:14:5c:79:fb:e8:9c:ac:7c:74:95:90:2c:04:
ad:07:0d:f5:8a:5d:6a:70:7e:01:68:be:9f:0f:44:
c0:af:00:6e:3f:5c:59:c2:1a:d1:1b:42:34:75:d9:
a0:fd:0d:7b:69:ec:5c:74:97:4a:6a:10:6e:a9:fb:
b6:41:fc:62:65:e3:a1:d4:cb:7e:76:d6:5a:c7:c3:
79:d2:bc:fa:d2:6e:06:2c:19:21:4d:8f:99:53:43:
b2:28:62:ed:80:2a:97:dd:63:b8:7e:57:b6:50:7f:
5a:10:7e:c7:61:43:2f:c8:df:53:ce:1f:ad:a0:6c:
be:3c:c4:52:7a:ff:28:81:d6:41:8f:d0:5d:c7:55:
f9:c2:a1:28:d6:8e:7d:75:4e:bf:93:f1:2e:50:49:
e8:0b:c2:62:f3:72:c0:71:0e:85:57:81:78:69:41:
b1:c7:0d:07:e0:f4:7e:d9:28:92:fc:21:db:df:69:
df:a9:ea:3d:25:1f:56:b8:b0:c3:e5:f9:f6:cb:d8:
a4:be:47:e7:46:ef:d8:43:3f:24:0f:49:bc:63:a3:
cf:7b:aa:78:a7:65:44:87:f7:d2:2c:c8:86:36:f9:
8c:ab:cf:90:7d:6b:9d:d2:52:db:ec:00:ac:05:a5:
50:f1:4a:7f:f9:e7:ed:1f:5e:35:d3:42:34:98:e8:
85:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:FA:F9:03:D0:0A:07:56:B2:81:22:96:93:84:03:BF:8B:51:F6:3A
X509v3 Authority Key Identifier:
keyid:5E:86:8B:02:E5:19:DD:7E:69:4C:7A:F1:E7:08:BD:D6:63:69:BD:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XoaLAuUZ3X5pTHrx5wi91mNpvd8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/802e05-0d5b-4589-916b-90c17eb751f4/1/XoaLAuUZ3X5pTHrx5wi91mNpvd8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/802e05-0d5b-4589-916b-90c17eb751f4/1/XoaLAuUZ3X5pTHrx5wi91mNpvd8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:e0:82:40:bd:84:8f:36:7e:75:df:1b:a0:25:6f:0d:85:8e:
74:d2:15:fa:4b:bd:e0:ff:ac:70:99:61:f2:1c:8d:f5:78:fe:
10:28:b2:25:22:6b:43:4e:da:e5:22:ce:0f:90:b6:2e:19:60:
b0:95:89:be:bc:4f:27:50:b3:fd:49:11:2d:d9:c2:8c:b6:16:
0c:1e:7c:93:c1:c1:47:71:c5:5b:0d:f2:5d:d7:19:13:29:0e:
e7:a8:e9:ee:7e:fc:88:16:e8:2d:d8:7b:9c:fa:e4:d4:f4:00:
c2:b0:89:27:2d:a3:75:c9:07:55:ea:a9:e1:6d:32:a1:54:cd:
cd:89:95:79:87:ff:de:f6:fb:d5:74:68:c1:ac:ca:4e:d3:02:
96:e2:e4:00:91:21:4c:39:6f:91:1d:7f:39:5d:17:0b:d7:38:
e6:73:94:94:62:ff:c1:f0:38:3b:4b:ba:28:20:dc:38:b3:b7:
f4:fc:96:30:20:25:92:ce:55:66:6a:d5:2b:9c:5e:42:c2:62:
86:93:72:b2:5b:d6:14:c3:ea:f3:6e:91:67:9e:5f:23:7a:f5:
9b:40:48:f6:ad:25:f1:d4:71:b7:8a:92:0d:db:a5:f6:86:ee:
e0:dd:75:e1:42:90:f4:72:be:5b:0b:93:cf:d2:b8:33:fa:a2:
03:cf:ec:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:32:33 2025 by rpki-client