Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/7c4e32-6c20-41c1-a85f-fdd3a815abb8/1/xTOO_ORJT1uSXw6a9zZRwcvx4Ew.mft
File: xTOO_ORJT1uSXw6a9zZRwcvx4Ew.mft (raw, json)
Hash identifier: bsrPPuUESZzEYeDwW47jS+1sjlrOdTZmRA3GnD4PE/I=
Subject key identifier: 59:A7:5D:49:26:D1:2A:D3:D2:DD:5D:16:2E:13:0D:35:9E:21:04:26
Authority key identifier: C5:33:8E:FC:E4:49:4F:5B:92:5F:0E:9A:F7:36:51:C1:CB:F1:E0:4C
Certificate issuer: /CN=c5338efce4494f5b925f0e9af73651c1cbf1e04c
Certificate serial: 0199FDDA0D5E721D1DF91B23365B0ED083C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xTOO_ORJT1uSXw6a9zZRwcvx4Ew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/7c4e32-6c20-41c1-a85f-fdd3a815abb8/1/xTOO_ORJT1uSXw6a9zZRwcvx4Ew.mft
Manifest number: 0199
Signing time: Sun 19 Oct 2025 19:02:29 +0000
Manifest this update: Sun 19 Oct 2025 19:02:29 +0000
Manifest next update: Mon 20 Oct 2025 19:02:29 +0000
Files and hashes: 1: YZ1rgmmdGJTdnaDAgDl2-yE974E.roa (hash: Lb3bg3bm9QZky/VWwidZy1sN1eo2ThSodX/AgWbvOtQ=)
2: _5i050DixZy2EtKOhz8lOMgCfIg.roa (hash: /YfNbDhqCMdFRtH+NtU0vFR+Vi8QHGbG/GrA2aaBEwM=)
3: xTOO_ORJT1uSXw6a9zZRwcvx4Ew.crl (hash: hnPPtwVtLi/QOneSZIXpPUyBTdw8Yl8QvSRmA7IZGuc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/7c4e32-6c20-41c1-a85f-fdd3a815abb8/1/xTOO_ORJT1uSXw6a9zZRwcvx4Ew.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/7c4e32-6c20-41c1-a85f-fdd3a815abb8/1/xTOO_ORJT1uSXw6a9zZRwcvx4Ew.mft
rsync://rpki.ripe.net/repository/DEFAULT/xTOO_ORJT1uSXw6a9zZRwcvx4Ew.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 19:02:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:da:0d:5e:72:1d:1d:f9:1b:23:36:5b:0e:d0:83:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5338efce4494f5b925f0e9af73651c1cbf1e04c
Validity
Not Before: Oct 19 19:02:29 2025 GMT
Not After : Oct 20 19:02:29 2025 GMT
Subject: CN=59a75d4926d12ad3d2dd5d162e130d359e210426
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:06:6d:7c:32:0a:22:b2:6a:6c:90:b8:5c:78:
7e:a3:a8:9b:ab:42:28:49:cd:f6:8c:bd:27:f8:a6:
11:27:a7:b5:5a:e2:cb:49:0c:a0:d0:db:97:69:bc:
a0:71:6a:4c:ac:b6:66:b1:a9:f3:d2:53:c8:2c:e8:
99:ed:a0:e0:d6:e5:2d:c0:ea:bc:5c:80:20:0a:d6:
38:08:23:82:2c:bc:77:3d:b5:68:41:2b:e2:ee:ea:
8d:b5:ad:4c:99:49:4f:1e:e6:c0:68:50:53:ac:e8:
91:3d:f4:3f:b6:57:15:1a:7d:19:f2:63:68:1a:91:
59:ea:06:8a:41:7a:34:71:d9:4b:61:bf:68:32:ee:
36:c9:10:54:ca:d7:cc:db:bc:a3:c2:93:d5:1a:e7:
8f:67:fe:36:48:8e:b4:85:ff:fb:e3:87:00:86:70:
f0:c2:05:81:6e:a0:26:29:c1:6a:1d:58:66:3e:85:
e7:fe:5b:e6:c2:f6:6e:bd:b0:d3:f4:aa:44:c3:6a:
3a:52:d6:a9:a0:b2:18:d3:91:54:61:30:2a:85:1a:
ff:5c:f0:46:e4:2a:b9:1d:aa:ab:bb:53:b3:36:0d:
a2:09:60:5e:2b:2b:cc:cd:d0:72:65:72:24:fe:7c:
a5:9d:6b:f5:47:75:db:6f:17:12:50:2a:e2:e4:39:
b5:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:A7:5D:49:26:D1:2A:D3:D2:DD:5D:16:2E:13:0D:35:9E:21:04:26
X509v3 Authority Key Identifier:
keyid:C5:33:8E:FC:E4:49:4F:5B:92:5F:0E:9A:F7:36:51:C1:CB:F1:E0:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xTOO_ORJT1uSXw6a9zZRwcvx4Ew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/7c4e32-6c20-41c1-a85f-fdd3a815abb8/1/xTOO_ORJT1uSXw6a9zZRwcvx4Ew.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/7c4e32-6c20-41c1-a85f-fdd3a815abb8/1/xTOO_ORJT1uSXw6a9zZRwcvx4Ew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:30:94:fa:af:b1:40:f8:cd:3c:33:52:29:e9:bb:67:5e:fc:
0c:71:5e:0c:ef:e4:40:ef:a5:68:86:b2:a5:93:23:26:2c:7a:
dd:31:e9:54:73:b4:c1:74:a9:01:fb:8c:38:b7:19:cd:6c:8e:
ae:f6:25:1f:e1:00:d5:3d:e0:98:dd:56:0c:3c:ea:99:9d:ae:
fe:81:95:d5:80:55:47:53:42:38:c3:c4:4a:78:52:ae:6b:fa:
9d:d0:16:25:57:12:0e:86:18:61:a8:18:7d:3e:af:ba:20:4d:
bb:2a:48:e7:e2:cd:5f:d8:b2:00:1f:77:3d:a7:8e:42:e9:77:
cb:cc:9a:47:a5:23:9d:bf:e4:a7:f0:50:28:a9:db:d0:2b:85:
7f:c1:94:6d:ec:31:20:d4:9b:84:98:a8:a4:a9:29:92:13:a5:
5f:b3:bc:78:b8:9f:54:91:8f:a5:0a:9d:c9:9e:e8:fe:7f:5f:
cb:3d:fc:d5:f6:6b:15:e8:7d:65:b1:48:26:26:7e:db:8c:e0:
2e:dc:8e:83:28:02:eb:a3:58:00:b1:88:be:52:ff:de:0b:f1:
ff:84:ad:11:4d:58:18:d4:44:fe:4f:c3:c9:74:31:94:f8:d6:
19:68:10:e9:05:35:2e:45:36:25:5a:ef:99:e0:a7:ad:ce:d4:
7f:f9:3e:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 03:42:00 2025 by rpki-client