Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/8154e3-286b-46a3-b8a5-52356cd5da90/1/xSJOpF0IHUAv_Wv03ZXj_28txIE.mft
File: xSJOpF0IHUAv_Wv03ZXj_28txIE.mft (raw, json)
Hash identifier: iQnr93RPV4FhAZ2H5usC6GQwRdtlta522G9vX8W/mZU=
Subject key identifier: D0:54:49:B8:13:CD:C1:57:78:48:D1:C0:66:36:6C:52:EA:A0:2D:42
Authority key identifier: C5:22:4E:A4:5D:08:1D:40:2F:FD:6B:F4:DD:95:E3:FF:6F:2D:C4:81
Certificate issuer: /CN=c5224ea45d081d402ffd6bf4dd95e3ff6f2dc481
Certificate serial: 0198D65F02FFCE99A38009B97FA82738E448
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xSJOpF0IHUAv_Wv03ZXj_28txIE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/8154e3-286b-46a3-b8a5-52356cd5da90/1/xSJOpF0IHUAv_Wv03ZXj_28txIE.mft
Manifest number: 0B03
Signing time: Sat 23 Aug 2025 10:00:07 +0000
Manifest this update: Sat 23 Aug 2025 10:00:07 +0000
Manifest next update: Sun 24 Aug 2025 10:00:07 +0000
Files and hashes: 1: O93k6bKhYCgLqm1pwPcFwndFJfc.roa (hash: mGQ92ARMuHfH2tnd6YZOf6zGRFHFURqcW968Yoazf28=)
2: xSJOpF0IHUAv_Wv03ZXj_28txIE.crl (hash: OP8N7QdVPdKeswDcEGEnvj3vyIXz/BRu0Kj1ZRt6j7s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/8154e3-286b-46a3-b8a5-52356cd5da90/1/xSJOpF0IHUAv_Wv03ZXj_28txIE.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/8154e3-286b-46a3-b8a5-52356cd5da90/1/xSJOpF0IHUAv_Wv03ZXj_28txIE.mft
rsync://rpki.ripe.net/repository/DEFAULT/xSJOpF0IHUAv_Wv03ZXj_28txIE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:02:ff:ce:99:a3:80:09:b9:7f:a8:27:38:e4:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5224ea45d081d402ffd6bf4dd95e3ff6f2dc481
Validity
Not Before: Aug 23 10:00:07 2025 GMT
Not After : Aug 24 10:00:07 2025 GMT
Subject: CN=d05449b813cdc1577848d1c066366c52eaa02d42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:44:5e:c7:e3:5b:9f:67:36:f1:0c:6e:0d:b3:
cc:ea:0a:b5:1f:96:0e:32:22:fb:2a:38:00:5e:00:
fd:f5:61:5b:32:0e:43:ae:f2:a2:2e:a9:9b:53:81:
df:7a:06:88:ef:77:54:c2:ce:d1:6b:43:7c:70:24:
64:af:6f:68:f7:d9:1c:ae:27:12:b3:28:36:b8:35:
8b:ea:74:5a:ec:a4:17:43:0b:d8:a2:d2:e5:77:30:
7e:f9:f4:cb:44:b7:e3:ac:2e:7e:59:75:18:0f:44:
d8:c4:74:67:c4:9f:62:b7:98:69:8d:08:bc:80:0c:
4e:70:e7:5c:8d:a3:0f:90:f6:56:13:0d:c0:08:81:
f5:9a:ac:82:ec:a3:fe:83:a8:4c:67:d4:79:e9:14:
56:2d:f0:96:73:a2:c0:69:a5:22:69:cc:a1:8c:65:
8d:d3:b3:21:74:69:6f:21:47:73:b8:34:c8:ff:d8:
fb:9c:fb:d4:4a:ae:fa:63:b6:88:a4:70:fe:53:5a:
17:51:ee:61:e0:6b:35:d9:6a:37:08:4e:08:67:02:
91:d1:c5:31:d7:e5:3a:92:25:66:05:f7:7f:fd:83:
2a:1c:80:dd:4e:f9:dd:ca:d6:eb:0d:6c:11:f6:77:
90:9f:60:0d:67:97:00:54:50:f6:21:56:a9:57:cd:
11:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:54:49:B8:13:CD:C1:57:78:48:D1:C0:66:36:6C:52:EA:A0:2D:42
X509v3 Authority Key Identifier:
keyid:C5:22:4E:A4:5D:08:1D:40:2F:FD:6B:F4:DD:95:E3:FF:6F:2D:C4:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xSJOpF0IHUAv_Wv03ZXj_28txIE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/8154e3-286b-46a3-b8a5-52356cd5da90/1/xSJOpF0IHUAv_Wv03ZXj_28txIE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/8154e3-286b-46a3-b8a5-52356cd5da90/1/xSJOpF0IHUAv_Wv03ZXj_28txIE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:34:69:32:2f:6e:04:9b:da:dd:6f:0f:7e:fd:3d:9e:ff:4c:
63:74:f7:21:d6:3e:bf:37:69:33:8c:87:70:83:fd:80:9c:e4:
06:99:32:a5:41:36:e7:d7:83:c9:69:e7:be:47:01:da:da:de:
6d:55:c3:49:06:24:41:42:a8:5f:c0:d4:d2:ed:37:02:ef:76:
de:46:ae:1f:eb:6e:2d:9d:9b:0b:40:6d:41:f3:32:f4:eb:e4:
49:a3:5a:80:c3:59:c3:d6:0a:f9:f9:2a:52:1f:8f:40:cd:a9:
78:5e:25:38:0d:65:73:22:97:68:a9:86:d8:9d:c3:ce:11:a8:
0c:40:0f:3f:cf:ea:55:7f:8f:b4:2c:73:92:b9:50:7a:16:89:
45:da:8f:8a:f2:82:d2:fc:26:fd:d8:4e:2b:92:e4:16:61:2a:
15:bc:33:b8:e1:f4:39:75:b4:12:ad:1a:91:e4:df:32:44:28:
20:78:3a:54:e7:2c:95:52:0f:b2:04:b8:fb:65:bb:1f:69:e3:
93:fa:70:06:fa:9a:7f:c0:dd:64:c4:62:0d:95:36:49:c7:49:
6b:80:20:f3:53:84:10:3a:2d:b9:82:76:46:39:03:31:1d:9e:
14:c0:52:2a:05:5d:90:32:0e:28:19:d3:3c:53:eb:7f:b8:d3:
b9:b0:a2:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:32:16 2025 by rpki-client