Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/f7189f-9d3b-4fa9-b2c1-5217df3691ab/1/x2oNsIMDONLSlh5Mj_sKtaA__l8.mft
File: x2oNsIMDONLSlh5Mj_sKtaA__l8.mft (raw, json)
Hash identifier: 8fbqd6vdaTbVoNw96VeN4up41M3r5qxeIbRbzvj0RTg=
Subject key identifier: 1D:51:69:5F:26:A4:F0:5D:D5:E2:93:8C:5B:A2:10:4A:D4:2D:9F:57
Authority key identifier: C7:6A:0D:B0:83:03:38:D2:D2:96:1E:4C:8F:FB:0A:B5:A0:3F:FE:5F
Certificate issuer: /CN=c76a0db0830338d2d2961e4c8ffb0ab5a03ffe5f
Certificate serial: 0198D5BBE5E3FF5EFD67C3E58FBC63BEC32C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x2oNsIMDONLSlh5Mj_sKtaA__l8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/f7189f-9d3b-4fa9-b2c1-5217df3691ab/1/x2oNsIMDONLSlh5Mj_sKtaA__l8.mft
Manifest number: 10D5
Signing time: Sat 23 Aug 2025 07:01:57 +0000
Manifest this update: Sat 23 Aug 2025 07:01:57 +0000
Manifest next update: Sun 24 Aug 2025 07:01:57 +0000
Files and hashes: 1: Ff3N8PO1mcQncsXGHiQUjQO2nRw.roa (hash: iiJaJiMdSghzZUoCo21ZColIpsI+U3kb/p0Er1rgouw=)
2: x2oNsIMDONLSlh5Mj_sKtaA__l8.crl (hash: 4TBP8k56TBVr8f0k/R9piX76j/0bkv7pr9n5FjModfE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/f7189f-9d3b-4fa9-b2c1-5217df3691ab/1/x2oNsIMDONLSlh5Mj_sKtaA__l8.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/f7189f-9d3b-4fa9-b2c1-5217df3691ab/1/x2oNsIMDONLSlh5Mj_sKtaA__l8.mft
rsync://rpki.ripe.net/repository/DEFAULT/x2oNsIMDONLSlh5Mj_sKtaA__l8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:e5:e3:ff:5e:fd:67:c3:e5:8f:bc:63:be:c3:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c76a0db0830338d2d2961e4c8ffb0ab5a03ffe5f
Validity
Not Before: Aug 23 07:01:57 2025 GMT
Not After : Aug 24 07:01:57 2025 GMT
Subject: CN=1d51695f26a4f05dd5e2938c5ba2104ad42d9f57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:bc:20:36:6e:a4:4a:91:6b:71:be:2c:05:51:
f1:d2:b9:fc:2b:7d:96:77:32:b7:f0:4a:b9:45:a2:
0d:4f:ea:63:b1:d7:3b:fa:fe:6e:10:ac:a1:2c:3b:
c2:97:2d:0d:6c:43:cf:2a:91:9d:49:b9:e4:24:5f:
a0:34:e2:ac:5d:12:8a:cd:4c:1a:06:c5:73:17:69:
e5:69:af:b5:a8:a0:3f:57:ca:82:d0:2b:ff:76:07:
76:0e:80:80:61:52:1e:11:6e:e4:c6:0b:74:bc:ce:
e2:31:62:c9:1c:6d:7d:32:cd:fb:4d:ed:11:1d:30:
8c:9c:81:95:7b:d1:42:cb:56:3e:12:1b:9e:63:9d:
d9:94:cd:61:81:b7:6b:8b:96:43:33:91:51:4b:37:
7a:a2:5d:59:34:42:30:0a:08:46:da:9b:03:db:87:
21:13:5a:cd:0a:c5:0d:d8:0a:25:98:ee:af:95:a2:
62:83:14:83:30:a4:40:45:01:92:68:c4:fb:5e:48:
67:d2:8c:9a:8a:e7:0d:fc:db:da:ec:0f:51:11:a8:
0a:48:4e:b9:0c:c5:ef:3b:32:15:34:e8:37:53:89:
23:15:ae:ba:75:5f:b3:17:6f:58:54:2d:e8:43:36:
ba:6b:1a:d1:62:fa:55:cb:2f:a8:4e:cc:a5:96:a6:
3b:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:51:69:5F:26:A4:F0:5D:D5:E2:93:8C:5B:A2:10:4A:D4:2D:9F:57
X509v3 Authority Key Identifier:
keyid:C7:6A:0D:B0:83:03:38:D2:D2:96:1E:4C:8F:FB:0A:B5:A0:3F:FE:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x2oNsIMDONLSlh5Mj_sKtaA__l8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/f7189f-9d3b-4fa9-b2c1-5217df3691ab/1/x2oNsIMDONLSlh5Mj_sKtaA__l8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/f7189f-9d3b-4fa9-b2c1-5217df3691ab/1/x2oNsIMDONLSlh5Mj_sKtaA__l8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:7a:e1:22:9b:72:49:95:d2:a1:66:80:61:e2:84:18:96:81:
6d:a6:05:2f:32:10:ca:ec:20:2a:ec:86:7d:e9:fe:bc:fc:4b:
52:d9:d0:10:4f:bb:79:25:3a:b7:2d:c4:10:5c:40:7f:d4:8c:
9d:04:9c:93:8e:fd:04:55:54:d2:76:9f:3c:28:13:e3:48:d0:
85:b5:8d:82:0b:8c:1d:3a:ed:4d:32:8f:00:0a:ad:a6:5b:39:
41:fc:fd:92:8b:e5:cb:1c:f3:a0:36:f1:4e:b1:6a:13:29:6b:
4c:f5:20:35:02:94:e9:97:51:c3:9f:39:e9:ff:09:5d:1c:da:
a8:f7:fa:3a:f4:fc:8d:a6:84:62:0b:c9:f1:56:0e:b5:8d:ff:
89:74:d4:d0:54:5c:3c:00:93:23:75:c4:1f:19:e3:12:66:15:
7e:97:59:97:f0:c5:2f:a0:e0:06:cb:28:5e:cf:53:e6:0c:a2:
3e:ab:cd:8e:be:d2:e5:49:30:0d:7f:cf:d4:c7:59:9a:42:12:
0b:80:fb:93:10:07:a1:99:47:5e:a7:36:4e:95:83:f1:07:c8:
60:44:26:6b:9b:98:2c:68:93:16:5d:d1:dd:41:fc:bd:5e:56:
85:06:a0:6a:99:69:a9:c8:ab:7d:4b:cd:24:a9:c9:5f:a0:58:
4b:b9:ec:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:58:53 2025 by rpki-client