Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/7c4e32-6c20-41c1-a85f-fdd3a815abb8/1/xTOO_ORJT1uSXw6a9zZRwcvx4Ew.mft
File: xTOO_ORJT1uSXw6a9zZRwcvx4Ew.mft (raw, json)
Hash identifier: i0d4YgDX2dLeTxYPls0/9RBrnb525qSNAOXTygPKuMc=
Subject key identifier: 13:C4:74:7C:B5:17:D7:6C:2A:7E:32:FE:7E:98:5F:4A:FF:E4:FD:2A
Authority key identifier: C5:33:8E:FC:E4:49:4F:5B:92:5F:0E:9A:F7:36:51:C1:CB:F1:E0:4C
Certificate issuer: /CN=c5338efce4494f5b925f0e9af73651c1cbf1e04c
Certificate serial: 0198D404C200F5F78FCB125945D1882ADFD4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xTOO_ORJT1uSXw6a9zZRwcvx4Ew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/7c4e32-6c20-41c1-a85f-fdd3a815abb8/1/xTOO_ORJT1uSXw6a9zZRwcvx4Ew.mft
Manifest number: FE
Signing time: Fri 22 Aug 2025 23:02:18 +0000
Manifest this update: Fri 22 Aug 2025 23:02:18 +0000
Manifest next update: Sat 23 Aug 2025 23:02:18 +0000
Files and hashes: 1: _5i050DixZy2EtKOhz8lOMgCfIg.roa (hash: /YfNbDhqCMdFRtH+NtU0vFR+Vi8QHGbG/GrA2aaBEwM=)
2: xTOO_ORJT1uSXw6a9zZRwcvx4Ew.crl (hash: +U68l4vxCpMF6f3mnbX789MHrlr2mzam/tY5TNoP/64=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/7c4e32-6c20-41c1-a85f-fdd3a815abb8/1/xTOO_ORJT1uSXw6a9zZRwcvx4Ew.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/7c4e32-6c20-41c1-a85f-fdd3a815abb8/1/xTOO_ORJT1uSXw6a9zZRwcvx4Ew.mft
rsync://rpki.ripe.net/repository/DEFAULT/xTOO_ORJT1uSXw6a9zZRwcvx4Ew.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Aug 2025 23:02:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:04:c2:00:f5:f7:8f:cb:12:59:45:d1:88:2a:df:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5338efce4494f5b925f0e9af73651c1cbf1e04c
Validity
Not Before: Aug 22 23:02:18 2025 GMT
Not After : Aug 23 23:02:18 2025 GMT
Subject: CN=13c4747cb517d76c2a7e32fe7e985f4affe4fd2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:a3:9e:f9:90:70:52:c0:de:a7:64:7d:7f:a1:
5b:c5:e0:66:7b:64:b9:53:77:ba:03:ba:a4:45:cb:
fc:a5:2c:34:be:28:34:b8:a6:15:30:1f:af:a6:45:
53:16:95:0e:7a:ae:27:08:eb:d2:f2:e9:75:4a:51:
31:1b:84:6c:40:53:38:0a:da:47:4d:db:ba:80:72:
96:7f:9f:47:d7:e9:e6:a8:37:b8:cb:8d:62:32:91:
54:b6:3c:d3:9d:03:bf:be:40:3e:c4:5c:f7:35:b4:
8d:32:9f:c9:a7:7c:84:df:ea:24:89:49:33:d2:a1:
7b:4a:c1:18:45:fc:bc:55:e8:70:97:27:36:bb:8c:
bf:6c:cb:06:20:73:85:46:c5:17:6b:d5:af:15:45:
f5:73:07:ee:a9:06:64:cf:e6:c3:5b:7d:1d:a3:06:
c7:65:d1:10:8a:6b:e6:6b:77:78:66:e6:72:ae:5f:
c9:b5:75:1e:f4:27:54:ff:3e:8a:2e:ca:82:70:cc:
07:8a:b6:81:50:a7:c2:9f:cf:53:a0:1c:fe:5e:1e:
c2:f1:4e:38:e2:b0:76:ab:6d:f2:3d:c4:c2:5d:f4:
aa:2c:b8:cb:13:3d:07:20:22:c1:a1:c6:dc:39:ee:
57:cd:bd:d6:b5:38:99:c2:fc:2b:fe:12:e1:8d:4b:
bf:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:C4:74:7C:B5:17:D7:6C:2A:7E:32:FE:7E:98:5F:4A:FF:E4:FD:2A
X509v3 Authority Key Identifier:
keyid:C5:33:8E:FC:E4:49:4F:5B:92:5F:0E:9A:F7:36:51:C1:CB:F1:E0:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xTOO_ORJT1uSXw6a9zZRwcvx4Ew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/7c4e32-6c20-41c1-a85f-fdd3a815abb8/1/xTOO_ORJT1uSXw6a9zZRwcvx4Ew.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/7c4e32-6c20-41c1-a85f-fdd3a815abb8/1/xTOO_ORJT1uSXw6a9zZRwcvx4Ew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:28:a6:c2:4f:2c:f6:87:ee:47:c4:83:f4:90:1a:83:40:f9:
f3:cb:12:3a:4a:88:b9:a6:29:6f:3c:8c:69:06:5c:3f:9c:01:
a0:29:05:9f:47:d4:a8:96:49:64:c5:e9:f8:71:61:cf:b8:dc:
16:9d:e1:dc:d9:cc:8b:92:f1:01:83:86:dc:18:47:ec:9a:26:
05:a6:c6:94:71:f1:27:a3:a3:85:c0:29:71:83:58:41:ea:aa:
61:c6:c2:8f:ac:19:d0:f6:68:1f:0c:8f:2c:98:54:6d:72:cf:
93:cb:bf:49:a3:21:fc:4e:ed:1f:c2:1a:4a:62:58:16:06:7d:
a3:cd:9d:ab:00:77:3e:4d:90:78:9a:fd:39:71:74:78:62:71:
fb:2f:c4:e6:31:37:cc:5f:6a:83:ec:0c:63:45:78:af:ad:cd:
81:d2:38:15:83:2b:6a:ae:0b:47:50:2d:54:95:04:63:29:36:
b4:a7:30:3b:25:54:3d:12:21:99:e2:cf:59:02:a8:d3:3c:06:
5b:34:bd:49:59:55:55:31:3c:a3:08:1d:4b:23:a8:b0:72:a0:
ed:9d:39:c0:ee:bc:05:24:e9:80:33:68:5a:05:10:ac:ba:b6:
c9:bb:57:97:93:9e:5c:65:1f:ab:4d:c8:92:a0:ef:6b:6e:b0:
d4:f7:1e:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:19:29 2025 by rpki-client