
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/fac921-f552-4a8a-8b49-4fa98601ae8c/1/cBxcPyilwHENvkgp0hbInpQu8Os.mft
File: cBxcPyilwHENvkgp0hbInpQu8Os.mft (raw, json)
Hash identifier: Uhyvh7y71I9osjGyz/scLty9tWcvtWWNGwhbcpiXVfY=
Subject key identifier: 1C:CE:CD:B5:9E:62:60:51:6B:E1:31:25:3C:24:34:13:37:02:A3:A2
Authority key identifier: 70:1C:5C:3F:28:A5:C0:71:0D:BE:48:29:D2:16:C8:9E:94:2E:F0:EB
Certificate issuer: /CN=701c5c3f28a5c0710dbe4829d216c89e942ef0eb
Certificate serial: 019873E1D151E311B94A045EFCBB0834CE18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cBxcPyilwHENvkgp0hbInpQu8Os.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/fac921-f552-4a8a-8b49-4fa98601ae8c/1/cBxcPyilwHENvkgp0hbInpQu8Os.mft
Manifest number: 161A
Signing time: Mon 04 Aug 2025 07:00:35 +0000
Manifest this update: Mon 04 Aug 2025 07:00:35 +0000
Manifest next update: Tue 05 Aug 2025 07:00:35 +0000
Files and hashes: 1: Ke6BIcKr553RdNTHAAiP-pm7d4U.roa (hash: YC8hk6oKhl67AQI7JSOSYdAfbuzkCnLEvEUsrgjHG4c=)
2: cBxcPyilwHENvkgp0hbInpQu8Os.crl (hash: Wq2vSrcoK9LgGcyjjhPf3+3JMsQkxwuSY6aFyxN31VU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/fac921-f552-4a8a-8b49-4fa98601ae8c/1/cBxcPyilwHENvkgp0hbInpQu8Os.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/fac921-f552-4a8a-8b49-4fa98601ae8c/1/cBxcPyilwHENvkgp0hbInpQu8Os.mft
rsync://rpki.ripe.net/repository/DEFAULT/cBxcPyilwHENvkgp0hbInpQu8Os.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e1:d1:51:e3:11:b9:4a:04:5e:fc:bb:08:34:ce:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=701c5c3f28a5c0710dbe4829d216c89e942ef0eb
Validity
Not Before: Aug 4 07:00:35 2025 GMT
Not After : Aug 5 07:00:35 2025 GMT
Subject: CN=1ccecdb59e6260516be131253c2434133702a3a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:00:c3:86:16:c9:35:63:dc:7b:d2:20:a8:2f:
db:27:03:c9:e0:94:d9:f8:4a:2e:1e:43:35:67:6f:
99:f3:16:86:a6:6b:df:18:66:71:98:08:92:6a:b5:
52:ec:0c:a8:53:68:6d:fe:2c:6f:91:30:38:36:e5:
e1:78:7c:e6:4a:89:de:b5:97:dc:3c:3b:e5:c1:b8:
19:a0:4b:2a:c1:bd:6b:76:1a:88:3b:96:31:ac:52:
01:14:99:2b:0a:ab:d0:9a:d1:bf:5a:0b:6a:59:da:
4b:73:82:7a:99:18:09:66:67:16:56:e3:49:94:a8:
60:be:31:e6:39:f1:04:06:11:14:3a:12:36:a2:ae:
6a:3e:00:a4:2e:5c:67:a3:9c:08:36:10:0a:f3:85:
39:0c:5a:90:d7:94:77:86:2d:1e:37:91:6f:57:d1:
53:c5:5e:4e:4a:28:29:86:7a:3d:e2:d5:a2:a1:88:
59:85:be:67:3f:cd:c8:d3:c4:01:99:94:74:80:11:
1a:74:ab:48:46:8c:90:f2:6d:19:d4:27:58:1f:17:
41:db:6d:7c:67:65:ad:45:0e:21:26:16:26:0b:f4:
35:fa:8e:fc:21:ea:67:87:03:fe:db:a7:fa:1b:ed:
f3:05:92:f4:00:be:75:c2:96:1c:69:fb:ea:1a:ee:
25:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:CE:CD:B5:9E:62:60:51:6B:E1:31:25:3C:24:34:13:37:02:A3:A2
X509v3 Authority Key Identifier:
keyid:70:1C:5C:3F:28:A5:C0:71:0D:BE:48:29:D2:16:C8:9E:94:2E:F0:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cBxcPyilwHENvkgp0hbInpQu8Os.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/fac921-f552-4a8a-8b49-4fa98601ae8c/1/cBxcPyilwHENvkgp0hbInpQu8Os.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/fac921-f552-4a8a-8b49-4fa98601ae8c/1/cBxcPyilwHENvkgp0hbInpQu8Os.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:5c:49:22:4f:fb:ac:e7:f7:1b:18:bc:73:5c:49:90:c0:6c:
0a:a1:f3:30:c2:08:4f:e3:8d:cf:2e:22:36:59:fd:eb:b0:9e:
cd:21:00:ce:a7:8b:54:d3:32:5f:37:f6:29:77:ba:0c:28:6a:
85:0c:4e:9f:1b:52:82:2f:3d:2f:8e:9a:5b:d5:73:fc:3c:ed:
f3:70:97:5e:b7:27:50:bb:93:56:b6:c5:4f:fa:51:5e:ed:7d:
40:3f:3f:f4:9c:fc:1b:b4:3d:76:38:8b:c5:95:ba:d7:7c:64:
19:c2:0d:b6:94:af:7e:0f:bf:d4:f7:f3:b8:79:ca:59:e5:f7:
54:ba:9d:ae:fd:80:4a:34:53:4a:81:6f:a9:ca:a9:27:72:02:
be:cc:f0:47:1c:f9:1d:d3:16:dd:e6:f0:62:04:5f:31:0e:ec:
e4:18:79:d7:e0:a6:df:67:a7:5b:17:ed:11:16:01:d2:4e:73:
12:95:4c:63:06:4e:98:2b:4e:91:0c:64:8a:ee:8f:c6:00:43:
19:83:cd:3c:f3:1a:42:69:3e:87:06:1f:55:e2:c0:2b:c1:cf:
51:64:7c:3e:54:78:2b:ac:8a:f9:59:b7:66:ee:8d:53:f3:a5:
18:b9:bf:fa:5c:1b:6f:55:7f:ee:b5:1a:03:ac:9d:bf:0f:4e:
05:5c:bc:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:05:49 2025 by rpki-client