Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/1a5a96-d36e-4f3a-9b34-0548d3895a55/1/Cx5y89CVf1puO9G4RKEqYUdEkCc.mft
File: Cx5y89CVf1puO9G4RKEqYUdEkCc.mft (raw, json)
Hash identifier: wcVy81fyLPPayYHLGwF5Ay8XG1ongrt4oSEMGk9c2lQ=
Subject key identifier: 6D:3A:8E:FD:FF:F1:5F:01:D9:5F:BD:DC:C9:58:9F:1A:41:6A:09:E3
Authority key identifier: 0B:1E:72:F3:D0:95:7F:5A:6E:3B:D1:B8:44:A1:2A:61:47:44:90:27
Certificate issuer: /CN=0b1e72f3d0957f5a6e3bd1b844a12a6147449027
Certificate serial: 019873E3C1D63AC2FC8C2B7E31C88448184B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cx5y89CVf1puO9G4RKEqYUdEkCc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/1a5a96-d36e-4f3a-9b34-0548d3895a55/1/Cx5y89CVf1puO9G4RKEqYUdEkCc.mft
Manifest number: 162C
Signing time: Mon 04 Aug 2025 07:02:42 +0000
Manifest this update: Mon 04 Aug 2025 07:02:42 +0000
Manifest next update: Tue 05 Aug 2025 07:02:42 +0000
Files and hashes: 1: 1qKATTVt2l9Amr30ivUd4qpcDQ8.roa (hash: D9mOfQXdZlNktupQVZacZwiNwms/ptwHflaY7QzV5Xk=)
2: 54AIlsCbzgy0XCYwE0wdAC4kiqw.roa (hash: yJyuDkNiVUNUnxXEpeacfSUjn5at6QtcOaws+zppt2w=)
3: Cx5y89CVf1puO9G4RKEqYUdEkCc.crl (hash: /oYtsgMgLfdvmjIcJ7QtK8AZEETw27KRWAU8/vRyQoc=)
4: I9n8PdlI12zk3ftrt5ZejA1FrCU.roa (hash: kf3O7lpj7s7VfmT2vuNx6GwPZjLLFUhTpSV85VBR1i4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/1a5a96-d36e-4f3a-9b34-0548d3895a55/1/Cx5y89CVf1puO9G4RKEqYUdEkCc.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/1a5a96-d36e-4f3a-9b34-0548d3895a55/1/Cx5y89CVf1puO9G4RKEqYUdEkCc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Cx5y89CVf1puO9G4RKEqYUdEkCc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 07:02:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e3:c1:d6:3a:c2:fc:8c:2b:7e:31:c8:84:48:18:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b1e72f3d0957f5a6e3bd1b844a12a6147449027
Validity
Not Before: Aug 4 07:02:42 2025 GMT
Not After : Aug 5 07:02:42 2025 GMT
Subject: CN=6d3a8efdfff15f01d95fbddcc9589f1a416a09e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:8d:f6:3f:e2:ae:76:78:4f:6f:ed:34:c8:c6:
8d:24:0b:bd:21:2f:9a:3a:2c:8d:a3:23:2b:cd:05:
9a:31:7d:e9:d8:4c:74:c2:3e:2c:dc:34:45:9a:f2:
0f:44:a0:6d:ee:f5:23:75:9a:dd:06:76:69:3c:ed:
0d:4e:97:48:00:ea:bd:51:e7:28:59:1c:87:0e:7f:
d9:4b:3f:ef:9e:c7:22:78:44:1d:83:88:42:67:56:
4c:5e:7d:a6:32:d5:c3:fb:44:df:63:be:05:ee:c9:
9f:cc:b0:d1:fc:5a:3a:a8:f9:1f:a6:bf:31:58:43:
28:37:aa:0c:cc:75:52:c4:6d:14:e9:89:85:fe:58:
27:64:31:a1:96:de:58:b7:04:02:6e:bc:be:80:73:
db:45:9b:6c:27:ac:f7:df:96:47:7f:aa:ec:51:39:
b4:87:ac:10:13:e4:23:c5:a0:38:79:28:f5:21:b8:
db:43:12:29:65:e7:e0:d9:ea:d7:ee:e5:60:78:49:
3f:2e:87:48:3a:72:4f:f2:19:e0:dc:ff:68:e9:69:
a2:46:97:ef:ec:88:45:6b:ad:bf:ff:ca:1d:f7:10:
7d:0a:89:b0:67:18:cb:71:97:99:3e:3b:70:57:0d:
c9:87:e0:54:2b:a0:2d:38:91:f2:c8:97:86:1b:8a:
9c:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:3A:8E:FD:FF:F1:5F:01:D9:5F:BD:DC:C9:58:9F:1A:41:6A:09:E3
X509v3 Authority Key Identifier:
keyid:0B:1E:72:F3:D0:95:7F:5A:6E:3B:D1:B8:44:A1:2A:61:47:44:90:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cx5y89CVf1puO9G4RKEqYUdEkCc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/1a5a96-d36e-4f3a-9b34-0548d3895a55/1/Cx5y89CVf1puO9G4RKEqYUdEkCc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/1a5a96-d36e-4f3a-9b34-0548d3895a55/1/Cx5y89CVf1puO9G4RKEqYUdEkCc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:27:1d:fe:c6:f3:8f:bd:61:77:3e:98:da:dc:45:96:ee:ad:
f7:12:03:b3:cf:b9:ae:39:b6:6a:f9:26:18:95:15:e7:26:c1:
a2:75:f4:d9:6c:ee:70:7d:f8:c6:b6:d4:97:c3:8e:09:78:6f:
8a:03:b3:09:51:8a:00:13:13:70:f4:67:cc:b0:bc:bf:07:69:
b1:3a:76:dd:21:b2:94:b7:7b:2f:3d:18:8f:b0:c2:29:96:45:
43:10:df:d8:5b:73:9a:ad:02:c9:81:87:dd:64:6f:0e:6f:9d:
fb:5a:de:9b:08:f4:39:17:47:52:65:cf:bc:fa:84:db:09:54:
9e:b3:18:8a:1d:3f:de:4e:96:e9:e8:59:f9:99:16:1c:39:b0:
5e:3b:db:0c:7a:c2:0e:17:a5:5a:ee:4c:25:a4:88:5a:4d:56:
8e:21:2e:1e:61:d8:52:1a:bc:65:31:63:d0:de:b1:3c:ca:35:
ac:eb:d9:9f:0c:72:aa:26:ec:13:87:fc:34:33:b4:d1:13:28:
c4:7d:30:93:81:e2:17:eb:5f:ab:f5:b7:79:8f:48:d0:8a:e1:
be:a6:87:e6:48:3a:3e:99:7b:3c:98:6a:f3:c8:d1:fa:90:48:
f8:5c:e0:17:ad:ee:5d:46:77:73:8b:f6:b3:99:54:1b:2d:17:
e2:da:e9:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 14:18:58 2025 by rpki-client