
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/b585ac-8618-415a-87ec-d1d8db148ec2/1/cXhwDxYZ7BzTTZcAOSFT7EtiMfw.mft
File: cXhwDxYZ7BzTTZcAOSFT7EtiMfw.mft (raw, json)
Hash identifier: o3uBXi9LnU6o+BrBBitpEnQHqH+VzuUu/YhYtM6G7WU=
Subject key identifier: 6A:AA:E7:CC:12:49:3C:9D:67:57:F6:A3:EE:25:0C:EE:34:46:46:10
Authority key identifier: 71:78:70:0F:16:19:EC:1C:D3:4D:97:00:39:21:53:EC:4B:62:31:FC
Certificate issuer: /CN=7178700f1619ec1cd34d9700392153ec4b6231fc
Certificate serial: 01987E662EB2F56C6A9D38BE41E15B565DB1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cXhwDxYZ7BzTTZcAOSFT7EtiMfw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/b585ac-8618-415a-87ec-d1d8db148ec2/1/cXhwDxYZ7BzTTZcAOSFT7EtiMfw.mft
Manifest number: 161D
Signing time: Wed 06 Aug 2025 08:01:22 +0000
Manifest this update: Wed 06 Aug 2025 08:01:22 +0000
Manifest next update: Thu 07 Aug 2025 08:01:22 +0000
Files and hashes: 1: SCQLL9FrRwZS3_4QAQMFwFWEnMU.roa (hash: hA+a1SinlIIzAIvLt/cO3Kjqq6i5Xzb+bDE4vvr8VPM=)
2: cXhwDxYZ7BzTTZcAOSFT7EtiMfw.crl (hash: txET/so7rBEl6UXx0VrBf9nuCIWfWuEB1+ry00P6csw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/b585ac-8618-415a-87ec-d1d8db148ec2/1/cXhwDxYZ7BzTTZcAOSFT7EtiMfw.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/b585ac-8618-415a-87ec-d1d8db148ec2/1/cXhwDxYZ7BzTTZcAOSFT7EtiMfw.mft
rsync://rpki.ripe.net/repository/DEFAULT/cXhwDxYZ7BzTTZcAOSFT7EtiMfw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 08:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7e:66:2e:b2:f5:6c:6a:9d:38:be:41:e1:5b:56:5d:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7178700f1619ec1cd34d9700392153ec4b6231fc
Validity
Not Before: Aug 6 08:01:22 2025 GMT
Not After : Aug 7 08:01:22 2025 GMT
Subject: CN=6aaae7cc12493c9d6757f6a3ee250cee34464610
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:cb:dc:98:ac:3b:11:e5:4a:1e:cd:2e:9b:86:
d4:1e:d4:48:d9:be:aa:b3:fa:6c:71:32:38:11:8e:
14:83:2d:57:17:07:df:90:34:7a:83:4b:f0:29:b4:
91:68:24:8a:03:61:30:da:ba:a5:b3:33:7e:37:af:
1d:02:31:44:fb:9b:95:01:24:44:b4:a7:4e:76:77:
d1:32:70:fb:aa:3d:dc:f9:0b:7b:e7:bb:d7:91:ef:
9d:78:9d:fb:eb:a2:fb:87:b0:5f:b7:71:f5:b0:26:
d9:b1:ea:2b:36:ae:3b:fd:2b:89:28:dc:39:1c:5e:
7a:cf:3c:34:71:78:bc:5b:b0:de:8f:d8:a5:55:15:
59:c5:9a:11:67:9b:9c:1a:91:6d:45:16:6a:7d:08:
bd:d4:8b:2b:f0:c4:b5:2b:9c:65:c8:48:a8:3a:57:
d7:4c:0a:a6:9d:3f:d2:16:bd:72:10:b9:88:e7:97:
15:8c:fa:68:ec:06:e9:bd:98:ea:42:7a:1d:88:ff:
57:61:67:b4:4f:e1:a2:bd:98:be:d7:f4:af:de:a8:
a7:5d:6f:32:22:e3:f6:be:8a:cb:9d:34:7b:1d:64:
97:bd:61:bf:05:7a:19:be:d1:90:ed:46:55:cc:14:
3f:27:b2:bf:3d:a6:fa:5b:9a:21:f4:3d:97:ec:4a:
36:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:AA:E7:CC:12:49:3C:9D:67:57:F6:A3:EE:25:0C:EE:34:46:46:10
X509v3 Authority Key Identifier:
keyid:71:78:70:0F:16:19:EC:1C:D3:4D:97:00:39:21:53:EC:4B:62:31:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cXhwDxYZ7BzTTZcAOSFT7EtiMfw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/b585ac-8618-415a-87ec-d1d8db148ec2/1/cXhwDxYZ7BzTTZcAOSFT7EtiMfw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/b585ac-8618-415a-87ec-d1d8db148ec2/1/cXhwDxYZ7BzTTZcAOSFT7EtiMfw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:a1:4f:e9:18:9e:d1:06:61:a4:41:04:7e:89:ec:72:ce:fb:
70:8c:2b:e9:e3:57:90:14:d1:f6:05:34:52:6f:c7:3f:b2:31:
7f:f8:ff:ce:77:c2:bf:f0:aa:3c:1b:9e:18:cb:ff:c7:e7:0c:
20:31:32:71:cb:ba:27:da:51:ec:da:16:6f:75:32:e2:53:13:
21:ec:f5:09:ae:65:b9:85:c9:94:54:b3:fa:72:70:b9:4a:9c:
a6:03:a0:b6:31:66:bf:2a:83:9b:1e:ef:d9:6f:05:17:90:0a:
f0:44:bf:0d:97:a8:53:e6:0b:10:64:ad:03:e8:99:08:a1:05:
cf:43:b2:1f:a2:5c:f9:cf:ae:57:a0:ad:0a:e0:f7:5d:1a:e2:
aa:0f:75:bc:12:48:4b:c2:36:8b:8a:15:5a:bd:d6:d6:06:21:
2c:2a:18:4c:51:21:78:b3:f6:c2:b6:c7:e7:ee:d4:1f:15:b6:
f2:59:c9:50:c1:e4:73:b5:0d:e0:06:57:9c:96:0b:3d:5b:46:
4d:d6:89:e0:e2:ff:1a:b6:73:ef:30:53:65:5f:07:ec:da:ae:
4d:a3:ef:47:07:ab:73:dc:d6:3d:2e:9b:5a:1a:9c:c9:ac:3d:
04:00:46:bf:52:e8:01:37:bc:09:6f:d0:94:37:67:5f:ca:fe:
f8:cb:40:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 14:11:41 2025 by rpki-client