Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/4429a4-0b36-4ced-846f-e20a654fca95/1/cx2a1ATs2vpw6ppMnRC5gBgp6h8.mft
File: cx2a1ATs2vpw6ppMnRC5gBgp6h8.mft (raw, json)
Hash identifier: kxb+InD/mfmvYD/J1aoblzeDNsW5COyFPo+jrHX9DBI=
Subject key identifier: D2:C8:85:9E:38:5A:69:FF:19:0D:E3:62:BB:E3:E4:F5:50:FF:22:37
Authority key identifier: 73:1D:9A:D4:04:EC:DA:FA:70:EA:9A:4C:9D:10:B9:80:18:29:EA:1F
Certificate issuer: /CN=731d9ad404ecdafa70ea9a4c9d10b9801829ea1f
Certificate serial: 019873E1D115E63F277D8FA2FA2D88FF15E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cx2a1ATs2vpw6ppMnRC5gBgp6h8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/4429a4-0b36-4ced-846f-e20a654fca95/1/cx2a1ATs2vpw6ppMnRC5gBgp6h8.mft
Manifest number: 1048
Signing time: Mon 04 Aug 2025 07:00:35 +0000
Manifest this update: Mon 04 Aug 2025 07:00:35 +0000
Manifest next update: Tue 05 Aug 2025 07:00:35 +0000
Files and hashes: 1: 5kIp4bFmAr9lOCjBtU4-CSX7D0w.roa (hash: zS6XZLioq/dFM9rTCOe5dC9siPtnmQmcYc9glHbFesE=)
2: WZoVc8N-YD-8FMKAITneTMD8_4k.roa (hash: d546sm0t0rb46HppUnfY7MCyS/rnnp2kV23n3HY9/us=)
3: bZJxdCs0gWqYryxwQS8EGlLZ93c.roa (hash: ZMF+prTjcHa6DFcnagp286MUC0TlcS1uVKhgY1MMJNc=)
4: cx2a1ATs2vpw6ppMnRC5gBgp6h8.crl (hash: 61jQCqkCcRPGVb2N3hcgaqSyi37y1c0sLmhNHBkWv1Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/4429a4-0b36-4ced-846f-e20a654fca95/1/cx2a1ATs2vpw6ppMnRC5gBgp6h8.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/4429a4-0b36-4ced-846f-e20a654fca95/1/cx2a1ATs2vpw6ppMnRC5gBgp6h8.mft
rsync://rpki.ripe.net/repository/DEFAULT/cx2a1ATs2vpw6ppMnRC5gBgp6h8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e1:d1:15:e6:3f:27:7d:8f:a2:fa:2d:88:ff:15:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=731d9ad404ecdafa70ea9a4c9d10b9801829ea1f
Validity
Not Before: Aug 4 07:00:35 2025 GMT
Not After : Aug 5 07:00:35 2025 GMT
Subject: CN=d2c8859e385a69ff190de362bbe3e4f550ff2237
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:37:04:d8:89:44:0f:9a:ae:b2:59:c2:36:9c:
ee:74:38:1d:d2:95:4c:50:af:15:0f:08:40:c3:1b:
43:48:08:54:5b:c2:e9:ee:db:48:ff:b1:63:7d:e9:
1a:35:7e:b7:9d:27:86:37:15:27:55:b3:a8:14:dd:
2f:7d:0a:8b:f6:4f:72:1d:a2:5a:8e:42:71:3b:9c:
79:78:9d:b9:c7:6a:b1:b3:cd:9a:ea:8d:d3:5c:7c:
74:60:5a:aa:1d:e2:b9:0d:92:59:29:97:b9:25:8f:
06:a4:dd:d8:74:64:5c:ea:1b:fa:87:e8:14:58:ea:
08:eb:8b:d4:04:fa:ae:f8:09:cd:1e:10:f8:c3:2d:
20:0b:67:e7:26:43:de:16:6f:fc:0c:c9:15:f6:2a:
b5:fc:ef:b4:a1:63:d8:00:31:c8:eb:40:66:18:5c:
f2:5c:6e:a0:fd:b0:8e:82:ea:0d:16:1c:1a:b2:a7:
38:25:f1:2b:26:67:0d:f8:4b:08:f4:29:05:07:83:
32:01:57:92:9c:31:52:0b:e1:11:e2:16:ce:6c:90:
43:07:67:fa:61:6f:90:eb:60:b1:ac:10:90:af:37:
ed:a3:43:5b:8e:79:93:af:5d:22:ef:6c:68:12:e9:
1c:9b:c3:15:5b:83:f0:00:ed:dd:0a:b7:5c:75:ea:
80:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:C8:85:9E:38:5A:69:FF:19:0D:E3:62:BB:E3:E4:F5:50:FF:22:37
X509v3 Authority Key Identifier:
keyid:73:1D:9A:D4:04:EC:DA:FA:70:EA:9A:4C:9D:10:B9:80:18:29:EA:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cx2a1ATs2vpw6ppMnRC5gBgp6h8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/4429a4-0b36-4ced-846f-e20a654fca95/1/cx2a1ATs2vpw6ppMnRC5gBgp6h8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/4429a4-0b36-4ced-846f-e20a654fca95/1/cx2a1ATs2vpw6ppMnRC5gBgp6h8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:dc:6d:b7:97:7b:66:84:ea:87:3f:36:19:48:78:c6:55:6b:
ea:64:b2:a2:b5:ab:cf:c1:d5:24:ab:3c:c7:b2:13:50:c3:12:
c3:05:c6:0f:c8:b4:13:3c:8d:62:d2:94:2f:3d:34:3e:a3:4c:
b3:b5:4d:f2:4d:85:ad:69:06:4a:b4:1c:71:da:d7:e6:70:9c:
e7:19:8f:9b:5d:d1:8d:04:12:3f:53:91:96:ff:ba:99:f1:29:
78:f0:fb:19:65:03:18:27:e4:74:1b:9f:0d:af:00:5f:37:c2:
a2:40:ed:13:b2:c0:8e:66:00:57:d1:4b:59:db:ee:01:76:33:
ee:ed:00:ac:b5:1a:a6:7c:90:08:a9:63:d3:e7:ce:f2:d0:1d:
3c:03:05:ef:30:f6:61:5d:e0:13:39:46:89:9b:3f:10:13:87:
e6:29:c0:db:50:f3:6e:ad:0f:3a:23:16:e9:98:3b:04:26:72:
ef:e7:01:b7:dd:4a:9a:68:ca:0f:aa:d7:ea:9a:b6:ed:ae:40:
13:d7:82:c4:a4:44:6e:e0:4a:21:01:3b:63:ef:7a:64:47:d6:
a9:62:e2:ed:91:46:02:60:e5:0e:7c:99:12:4b:54:7b:a1:e3:
ad:22:e0:ba:53:e0:26:d7:e6:dd:58:26:36:5c:24:ec:40:30:
94:c6:77:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:07:02 2025 by rpki-client