Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/02c254-36bf-4c8c-98d9-7e9837a9228c/1/x2omXKitcnOooTChdjKD0v8bTdo.mft
File: x2omXKitcnOooTChdjKD0v8bTdo.mft (raw, json)
Hash identifier: /uqfV8G2RC/8FCa4KZPaiM9EWJzWma1jzihh3dAGnlk=
Subject key identifier: E8:25:D6:86:F3:68:DB:92:D0:A1:AD:1E:D6:D3:1A:27:FE:CB:9C:81
Authority key identifier: C7:6A:26:5C:A8:AD:72:73:A8:A1:30:A1:76:32:83:D2:FF:1B:4D:DA
Certificate issuer: /CN=c76a265ca8ad7273a8a130a1763283d2ff1b4dda
Certificate serial: 0198D660FC2977C26D9F6D6BC6060F7FAE1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x2omXKitcnOooTChdjKD0v8bTdo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/02c254-36bf-4c8c-98d9-7e9837a9228c/1/x2omXKitcnOooTChdjKD0v8bTdo.mft
Manifest number: 146E
Signing time: Sat 23 Aug 2025 10:02:16 +0000
Manifest this update: Sat 23 Aug 2025 10:02:16 +0000
Manifest next update: Sun 24 Aug 2025 10:02:16 +0000
Files and hashes: 1: nHRmCOgf4MDZq-VWKLaXfvZ-bz8.roa (hash: 5Mcf4NqGw75Ujcm8ujMV0dwvrhU39vCuPFd4mY9vPEw=)
2: x2omXKitcnOooTChdjKD0v8bTdo.crl (hash: 3vvRhwOVfzcHIEZgFAg3yl+1n+aVEkgydhrPwzpDZE0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/02c254-36bf-4c8c-98d9-7e9837a9228c/1/x2omXKitcnOooTChdjKD0v8bTdo.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/02c254-36bf-4c8c-98d9-7e9837a9228c/1/x2omXKitcnOooTChdjKD0v8bTdo.mft
rsync://rpki.ripe.net/repository/DEFAULT/x2omXKitcnOooTChdjKD0v8bTdo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:fc:29:77:c2:6d:9f:6d:6b:c6:06:0f:7f:ae:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c76a265ca8ad7273a8a130a1763283d2ff1b4dda
Validity
Not Before: Aug 23 10:02:16 2025 GMT
Not After : Aug 24 10:02:16 2025 GMT
Subject: CN=e825d686f368db92d0a1ad1ed6d31a27fecb9c81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:1b:5e:a3:c0:21:d5:15:ec:21:2e:a2:e7:fd:
7c:3c:6c:96:79:ff:df:13:26:5d:c6:df:32:ac:0f:
a6:25:8e:ba:90:07:66:84:56:19:c0:c9:15:80:39:
da:d1:00:af:9f:e7:42:15:b8:46:78:49:31:4c:51:
e9:d4:bd:4d:f5:e2:b5:98:94:1a:77:33:a3:df:d8:
28:c1:fb:b7:5b:21:f3:c8:1a:f4:5f:6c:43:eb:57:
ac:6c:de:bc:b5:55:78:7d:92:54:9e:75:4b:ab:32:
cd:1c:d4:71:2b:95:51:f9:98:ec:2e:94:86:7d:a9:
df:ba:2b:6e:69:71:38:4f:9d:e9:e2:4a:73:1c:f1:
b4:6f:34:95:94:8d:1f:b4:af:d9:39:b1:66:3c:06:
9e:56:dc:0f:23:08:5d:67:03:3e:f3:a2:0a:fc:6d:
82:c4:14:25:96:d2:7f:b8:43:54:50:99:13:fe:26:
4a:6d:c0:35:de:ea:c2:69:fd:16:43:f4:8e:b1:0e:
13:f0:22:66:ec:92:8a:27:15:0b:2a:42:9a:fc:3d:
90:6d:62:ed:55:fe:ff:66:ba:41:bd:59:64:92:54:
38:4c:ff:17:69:ba:18:73:dd:b3:fc:04:6e:cb:9d:
7c:dc:81:be:ab:17:5d:bd:a2:f0:a5:49:ae:b3:b3:
cf:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:25:D6:86:F3:68:DB:92:D0:A1:AD:1E:D6:D3:1A:27:FE:CB:9C:81
X509v3 Authority Key Identifier:
keyid:C7:6A:26:5C:A8:AD:72:73:A8:A1:30:A1:76:32:83:D2:FF:1B:4D:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x2omXKitcnOooTChdjKD0v8bTdo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/02c254-36bf-4c8c-98d9-7e9837a9228c/1/x2omXKitcnOooTChdjKD0v8bTdo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/02c254-36bf-4c8c-98d9-7e9837a9228c/1/x2omXKitcnOooTChdjKD0v8bTdo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:cd:a4:e9:7e:57:21:d6:55:e4:1d:c1:22:91:43:b4:3b:68:
43:4d:0d:3d:75:34:32:24:ec:1b:d2:f6:66:e0:b4:a6:d6:a9:
57:f8:fe:f0:98:c3:64:e4:76:ca:89:c5:ef:63:83:71:4d:44:
37:af:55:f9:16:43:75:53:a5:a5:ee:c1:f5:4b:ca:7b:f5:49:
c6:7f:bd:1b:08:55:93:70:28:09:78:f7:a4:78:3d:bc:56:d5:
fc:d8:ff:04:f5:6e:15:73:5d:ed:5e:3d:2a:18:34:7e:6f:aa:
dc:68:ba:84:51:55:32:3c:31:2d:f8:c9:fd:5e:30:f9:e9:f2:
a2:36:9d:27:c6:69:12:49:c8:ba:17:ae:bd:c5:0d:0f:17:ad:
53:4c:de:c2:68:70:7d:bb:25:ee:e3:e8:b6:a0:5c:f7:4b:fd:
51:df:a9:e5:17:92:27:68:dc:15:8a:3e:ef:58:2d:fe:f5:ca:
07:61:a9:b6:19:3e:ba:9a:f9:ad:1a:c2:44:34:94:1d:bc:68:
f0:f1:fc:29:5b:6d:d9:ce:2b:58:c9:c2:6e:e5:6e:10:c6:ca:
cc:fd:3d:13:48:b7:06:cf:1d:34:ac:9d:83:61:bd:86:42:38:
09:59:89:19:22:d8:f6:04:28:f2:88:19:80:d9:e5:c2:81:9f:
d6:dd:6a:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:23:20 2025 by rpki-client