Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/02c254-36bf-4c8c-98d9-7e9837a9228c/1/x2omXKitcnOooTChdjKD0v8bTdo.mft
File: x2omXKitcnOooTChdjKD0v8bTdo.mft (raw, json)
Hash identifier: 7lba8bl5tjr90qEFTsncGdKZsOoTzyNnWJoGJf+Flzk=
Subject key identifier: 08:D3:49:61:D9:90:5B:AD:7F:0F:0C:6D:02:7F:4B:90:5F:13:59:39
Authority key identifier: C7:6A:26:5C:A8:AD:72:73:A8:A1:30:A1:76:32:83:D2:FF:1B:4D:DA
Certificate issuer: /CN=c76a265ca8ad7273a8a130a1763283d2ff1b4dda
Certificate serial: 0197B6A244534CA5AA7DFAE7F532E4A507D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x2omXKitcnOooTChdjKD0v8bTdo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/02c254-36bf-4c8c-98d9-7e9837a9228c/1/x2omXKitcnOooTChdjKD0v8bTdo.mft
Manifest number: 13D9
Signing time: Sat 28 Jun 2025 13:02:56 +0000
Manifest this update: Sat 28 Jun 2025 13:02:56 +0000
Manifest next update: Sun 29 Jun 2025 13:02:56 +0000
Files and hashes: 1: nHRmCOgf4MDZq-VWKLaXfvZ-bz8.roa (hash: 5Mcf4NqGw75Ujcm8ujMV0dwvrhU39vCuPFd4mY9vPEw=)
2: x2omXKitcnOooTChdjKD0v8bTdo.crl (hash: vB9nvWvi8leMXLVD09XbGQvYW1PjrPEAyeoKo2fgx1w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/02c254-36bf-4c8c-98d9-7e9837a9228c/1/x2omXKitcnOooTChdjKD0v8bTdo.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/02c254-36bf-4c8c-98d9-7e9837a9228c/1/x2omXKitcnOooTChdjKD0v8bTdo.mft
rsync://rpki.ripe.net/repository/DEFAULT/x2omXKitcnOooTChdjKD0v8bTdo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:02:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a2:44:53:4c:a5:aa:7d:fa:e7:f5:32:e4:a5:07:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c76a265ca8ad7273a8a130a1763283d2ff1b4dda
Validity
Not Before: Jun 28 13:02:56 2025 GMT
Not After : Jun 29 13:02:56 2025 GMT
Subject: CN=08d34961d9905bad7f0f0c6d027f4b905f135939
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:5f:31:d3:0e:20:65:69:66:55:e5:bf:2e:1a:
8c:4c:27:e3:ea:58:fe:57:65:91:b8:6f:79:b2:c2:
2c:1f:2d:bc:c0:43:80:59:c6:3b:ca:db:56:76:10:
f2:ff:5e:3b:6c:a6:47:68:de:67:ef:2c:ec:39:02:
a7:29:ea:35:d2:38:8b:11:87:ce:7d:45:a1:63:0c:
a4:16:a1:b7:84:91:14:6d:6e:a3:54:eb:a0:6b:1e:
3d:72:31:ef:d0:79:ab:f7:6c:22:4c:e6:60:cd:62:
6b:94:01:d8:8b:4c:b7:ec:08:67:41:10:de:b6:12:
b6:02:9b:43:9a:2c:a0:5e:08:2f:24:2d:17:2c:fd:
47:45:ee:d2:b0:6b:18:fa:a6:30:08:f0:23:b2:9f:
21:46:44:aa:db:b9:b9:3a:74:2e:ac:da:a7:67:f3:
6e:27:5e:54:ab:7b:c2:a8:0c:ec:f5:06:47:c9:17:
aa:df:57:88:f4:70:75:9b:a6:4a:0a:a5:01:cf:c8:
1c:e4:d6:38:01:04:5b:be:ba:e1:0c:2b:8d:35:2a:
8a:07:26:4b:9b:bf:ca:4f:84:1b:9d:91:36:47:61:
22:39:a4:73:9f:51:cc:b8:1a:9e:2c:01:65:28:b8:
95:cf:74:12:f7:58:7b:80:a7:f3:b7:d0:b7:37:dd:
6f:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:D3:49:61:D9:90:5B:AD:7F:0F:0C:6D:02:7F:4B:90:5F:13:59:39
X509v3 Authority Key Identifier:
keyid:C7:6A:26:5C:A8:AD:72:73:A8:A1:30:A1:76:32:83:D2:FF:1B:4D:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x2omXKitcnOooTChdjKD0v8bTdo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/02c254-36bf-4c8c-98d9-7e9837a9228c/1/x2omXKitcnOooTChdjKD0v8bTdo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/02c254-36bf-4c8c-98d9-7e9837a9228c/1/x2omXKitcnOooTChdjKD0v8bTdo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:9f:41:59:e5:6b:89:34:83:f0:b9:ce:66:19:2f:dd:fa:7b:
d0:6c:44:b7:26:91:64:4a:91:1b:6b:6c:bc:10:2f:0d:1f:e3:
5d:85:9d:4f:17:f4:ac:6a:d3:98:45:fc:4d:cd:f8:cb:5c:ba:
ae:10:4f:f8:38:df:ca:7c:9c:61:f9:b2:c5:87:d5:e0:5d:55:
22:d0:bc:8f:a3:ce:d2:e7:b0:15:82:55:cb:05:0b:3a:68:91:
64:08:5b:cc:7f:c1:ab:ad:0b:19:64:45:8d:89:3c:52:cd:01:
2c:7d:6f:b0:e0:35:06:71:e5:20:a4:d8:86:50:2e:90:75:51:
e8:66:49:7d:4c:80:7e:b1:3a:a3:63:6c:a2:e8:e5:ce:23:26:
59:53:13:00:c2:52:27:28:1f:c2:f0:13:31:eb:22:3d:ce:d3:
91:0b:4a:22:fd:87:34:8f:a3:7e:fb:4b:5e:1c:14:8f:0b:2e:
cc:6c:6c:3c:90:2a:23:85:9d:6b:5c:b7:4e:06:41:f6:dc:a5:
7b:81:b0:64:da:71:f5:94:fe:5e:f1:32:a5:da:95:e8:46:0f:
96:a4:26:49:7f:d1:6f:de:e8:87:69:ee:8d:f3:95:d4:6a:48:
57:d9:bf:44:4c:25:b9:02:04:01:80:93:9e:e0:91:87:44:9c:
f7:0c:85:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:22:45 2025 by rpki-client