Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/8154e3-286b-46a3-b8a5-52356cd5da90/1/xSJOpF0IHUAv_Wv03ZXj_28txIE.mft
File: xSJOpF0IHUAv_Wv03ZXj_28txIE.mft (raw, json)
Hash identifier: 29OvfzxlapSUbp7py0zQm+9EQW50sMcK+8347eeaZaM=
Subject key identifier: C1:E5:02:6E:57:49:8F:B5:C7:4D:67:1D:31:6D:F3:FD:2B:19:A4:3D
Authority key identifier: C5:22:4E:A4:5D:08:1D:40:2F:FD:6B:F4:DD:95:E3:FF:6F:2D:C4:81
Certificate issuer: /CN=c5224ea45d081d402ffd6bf4dd95e3ff6f2dc481
Certificate serial: 0199FDD9A5B403A219F114F5971D7BE0CDF9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xSJOpF0IHUAv_Wv03ZXj_28txIE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/8154e3-286b-46a3-b8a5-52356cd5da90/1/xSJOpF0IHUAv_Wv03ZXj_28txIE.mft
Manifest number: 0B9C
Signing time: Sun 19 Oct 2025 19:02:03 +0000
Manifest this update: Sun 19 Oct 2025 19:02:03 +0000
Manifest next update: Mon 20 Oct 2025 19:02:03 +0000
Files and hashes: 1: O93k6bKhYCgLqm1pwPcFwndFJfc.roa (hash: mGQ92ARMuHfH2tnd6YZOf6zGRFHFURqcW968Yoazf28=)
2: xSJOpF0IHUAv_Wv03ZXj_28txIE.crl (hash: PDSZ10mAYlG2CaUFGRtWj4qmsqshJW41CSR7YDd6Yws=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/8154e3-286b-46a3-b8a5-52356cd5da90/1/xSJOpF0IHUAv_Wv03ZXj_28txIE.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/8154e3-286b-46a3-b8a5-52356cd5da90/1/xSJOpF0IHUAv_Wv03ZXj_28txIE.mft
rsync://rpki.ripe.net/repository/DEFAULT/xSJOpF0IHUAv_Wv03ZXj_28txIE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d9:a5:b4:03:a2:19:f1:14:f5:97:1d:7b:e0:cd:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5224ea45d081d402ffd6bf4dd95e3ff6f2dc481
Validity
Not Before: Oct 19 19:02:03 2025 GMT
Not After : Oct 20 19:02:03 2025 GMT
Subject: CN=c1e5026e57498fb5c74d671d316df3fd2b19a43d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:f4:9e:a7:f5:f2:bf:8a:3d:c7:b5:a6:03:33:
53:54:13:99:e2:32:88:9c:66:d1:a1:5a:af:fb:98:
80:a2:27:05:cd:2d:06:3e:b2:ee:1e:c3:20:e9:a8:
c2:70:24:c6:6f:dc:bf:a6:42:33:e6:fe:7a:16:b8:
08:53:d1:97:8a:66:94:e4:d1:fc:17:3c:49:ed:d4:
41:c9:80:3e:0e:84:c5:db:4b:ff:18:46:db:fd:1f:
ad:93:d4:98:5c:8f:ef:e5:59:62:fd:24:ed:c5:85:
b5:eb:32:5a:00:c7:5e:12:a5:d8:4a:42:de:e4:ed:
cb:59:af:a3:cf:6f:4a:5b:2a:ad:e5:e7:c0:57:f8:
6f:a4:a4:f7:50:b8:10:0e:f8:0c:f3:d1:b7:43:78:
dc:f1:68:13:8a:d3:f4:9a:3a:a7:d8:52:6f:52:ae:
7f:dd:fa:c9:08:a6:a9:d5:bd:a7:d7:9d:6a:53:60:
83:0d:85:9c:1a:7c:22:9a:72:43:77:bb:3d:93:96:
a6:7e:36:9a:78:cc:b1:fc:aa:ce:ba:95:e0:3c:1e:
b6:01:5c:f6:1f:63:9c:e6:48:e4:d9:a7:49:64:f3:
66:a2:fc:d1:99:15:57:bc:14:dc:14:ee:ef:26:df:
84:4b:81:db:2c:91:7f:84:e0:cc:51:6f:e7:4d:98:
fe:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:E5:02:6E:57:49:8F:B5:C7:4D:67:1D:31:6D:F3:FD:2B:19:A4:3D
X509v3 Authority Key Identifier:
keyid:C5:22:4E:A4:5D:08:1D:40:2F:FD:6B:F4:DD:95:E3:FF:6F:2D:C4:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xSJOpF0IHUAv_Wv03ZXj_28txIE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/8154e3-286b-46a3-b8a5-52356cd5da90/1/xSJOpF0IHUAv_Wv03ZXj_28txIE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/8154e3-286b-46a3-b8a5-52356cd5da90/1/xSJOpF0IHUAv_Wv03ZXj_28txIE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c8:5a:c5:1b:80:20:d6:28:58:91:68:3b:39:55:86:7c:55:b7:
00:70:d8:cb:02:7a:aa:4b:86:12:2e:15:c0:df:34:36:c4:3e:
97:b8:12:08:ce:85:bd:33:09:4a:5a:8d:96:26:a2:6f:4c:e3:
19:aa:da:4e:e1:6d:ba:8e:e0:1a:74:de:2d:11:1d:a5:2f:c5:
16:a0:32:d8:ba:13:7f:30:81:87:06:dc:eb:fd:1c:30:ca:40:
93:bd:0b:4d:0e:ba:39:2f:e3:d7:b1:53:c7:9f:41:56:1b:d5:
84:d3:cd:55:20:6a:e4:d3:e0:33:a4:e2:78:f5:3d:74:8f:35:
7a:1e:3f:47:6d:b3:5d:00:39:89:23:58:e6:f7:68:c7:1e:93:
2e:bc:48:dc:ac:3e:b0:11:8f:9d:11:57:a0:7c:cd:fd:66:f3:
55:61:c8:88:70:93:fa:76:60:a2:fa:46:be:9a:5d:cf:ab:d8:
8a:17:33:a7:36:32:38:80:e9:b7:47:67:75:3d:61:ef:fb:a9:
78:16:ee:c6:9c:e2:12:b8:02:29:ce:b2:78:bc:ee:bc:76:18:
b8:48:d9:3b:bf:09:3c:bf:f7:62:60:93:d4:72:51:f1:01:89:
6d:01:be:78:c7:61:95:a9:4d:53:ee:2b:d2:06:aa:fd:86:84:
92:18:93:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:59:08 2025 by rpki-client