Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/9620ce-43f0-42bc-af59-435bda5bd048/1/cxU1ourrxowWV6r89aeIyHUdm2I.mft
File: cxU1ourrxowWV6r89aeIyHUdm2I.mft (raw, json)
Hash identifier: 1V7IlXgIHxF3wxUSikdLqt3vM45G5TnWt36rta5X2e0=
Subject key identifier: EF:37:EA:B8:48:28:3F:D6:2D:DB:A2:E2:CD:BA:F7:05:C5:7D:3C:0A
Authority key identifier: 73:15:35:A2:EA:EB:C6:8C:16:57:AA:FC:F5:A7:88:C8:75:1D:9B:62
Certificate issuer: /CN=731535a2eaebc68c1657aafcf5a788c8751d9b62
Certificate serial: 01988CFD9119F1BA48AE482DB14A88ED80B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cxU1ourrxowWV6r89aeIyHUdm2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/9620ce-43f0-42bc-af59-435bda5bd048/1/cxU1ourrxowWV6r89aeIyHUdm2I.mft
Manifest number: 1500
Signing time: Sat 09 Aug 2025 04:01:24 +0000
Manifest this update: Sat 09 Aug 2025 04:01:24 +0000
Manifest next update: Sun 10 Aug 2025 04:01:24 +0000
Files and hashes: 1: JsiUY4utQyGLQkMCxP2vm1DnYkM.roa (hash: t9dxvm0FP5XnZVQ8+CoMdOpLdpUdElKJXDgxciqeHNU=)
2: VS0vQXyTV30uKtTHz_uaATpRmNI.roa (hash: bd6zfzzABUQlbCGm2yH6xBJFNFWYvrN9JXn/fjw4bhU=)
3: cxU1ourrxowWV6r89aeIyHUdm2I.crl (hash: HxGk/LIJvrqhvnfiXJSPe0fkqH+3MsinwnIUG3xoGX8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/9620ce-43f0-42bc-af59-435bda5bd048/1/cxU1ourrxowWV6r89aeIyHUdm2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/9620ce-43f0-42bc-af59-435bda5bd048/1/cxU1ourrxowWV6r89aeIyHUdm2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/cxU1ourrxowWV6r89aeIyHUdm2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 04:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8c:fd:91:19:f1:ba:48:ae:48:2d:b1:4a:88:ed:80:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=731535a2eaebc68c1657aafcf5a788c8751d9b62
Validity
Not Before: Aug 9 04:01:24 2025 GMT
Not After : Aug 10 04:01:24 2025 GMT
Subject: CN=ef37eab848283fd62ddba2e2cdbaf705c57d3c0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:77:51:f6:3f:f2:f5:32:e6:95:f9:29:b8:d6:
a0:54:a5:57:ae:18:87:7d:9c:8e:7c:bf:6c:71:21:
28:b6:f6:9f:6c:f7:50:0b:0f:b2:c8:6a:03:36:0a:
46:89:b2:29:98:35:fe:e8:14:ac:2d:27:d3:21:f0:
19:55:61:a9:b3:48:b0:02:d9:67:28:3f:19:8e:80:
23:86:4f:cf:83:84:4f:59:c9:a5:74:f2:7c:1e:6c:
e6:8f:ef:e4:0a:12:87:06:1d:9a:ab:5b:69:b5:ed:
58:90:0e:33:0f:b5:69:f9:96:0e:48:f6:99:84:55:
22:2c:35:16:79:5f:4d:ca:67:3f:bc:60:69:fd:36:
29:5d:5a:ef:ba:9d:19:8f:67:de:45:bd:14:4f:86:
0f:ff:8e:3b:a8:59:2f:04:40:20:8b:fb:85:0c:d1:
6b:bb:7f:81:d3:53:7b:91:22:c4:b4:e1:c0:60:89:
5b:5c:52:5c:16:30:fc:3c:92:2f:9a:93:9f:18:e0:
df:fe:58:28:08:8b:4b:b9:a0:89:7b:24:d7:de:b9:
32:b1:1b:0d:92:6b:c8:ef:7b:ac:0c:44:21:42:6b:
3f:c4:79:95:f7:9e:eb:7f:00:84:1d:85:42:a6:25:
47:97:2b:31:a7:23:ca:e9:5e:0b:7a:19:96:87:9e:
29:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:37:EA:B8:48:28:3F:D6:2D:DB:A2:E2:CD:BA:F7:05:C5:7D:3C:0A
X509v3 Authority Key Identifier:
keyid:73:15:35:A2:EA:EB:C6:8C:16:57:AA:FC:F5:A7:88:C8:75:1D:9B:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cxU1ourrxowWV6r89aeIyHUdm2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/9620ce-43f0-42bc-af59-435bda5bd048/1/cxU1ourrxowWV6r89aeIyHUdm2I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/9620ce-43f0-42bc-af59-435bda5bd048/1/cxU1ourrxowWV6r89aeIyHUdm2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:52:8e:c2:4c:20:c2:83:50:9b:2f:b6:9f:e8:33:9b:dc:9c:
5a:48:bb:64:a7:d1:24:fa:e8:f1:3b:60:29:53:89:e7:81:b2:
c0:80:fa:77:93:35:ff:26:f2:ab:bb:5b:e1:95:e9:94:83:aa:
6d:34:43:11:e6:8b:66:84:b2:8c:ce:b1:85:ea:91:5a:9a:ba:
f8:43:bd:ba:7b:89:79:a5:35:f8:45:7d:12:18:59:4e:02:11:
c4:21:19:00:1e:33:d1:ed:26:77:05:fd:ab:0b:4e:77:92:01:
de:d6:88:e5:87:81:eb:ad:d2:1f:3c:aa:0c:d1:33:22:38:14:
22:32:6a:c0:53:83:75:e4:3e:92:3d:0b:14:1c:c1:87:07:93:
41:51:1c:f6:a8:72:9a:0e:26:ef:4c:51:46:c4:3f:31:5c:b4:
60:1b:e2:02:d5:fc:0c:25:b1:04:f0:bb:89:9a:f8:05:57:c7:
23:ba:c4:cc:4d:99:39:a9:53:22:17:1f:2d:c9:ca:fa:67:3c:
08:09:be:88:98:c1:b6:9b:d0:c4:43:66:1d:68:5f:f0:75:af:
1b:be:af:e2:9a:8f:06:bf:61:f3:fd:a1:f2:fc:f6:0a:21:07:
ac:44:ac:75:57:86:bd:86:dc:17:78:d5:0a:af:45:76:08:06:
23:ac:68:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 10:41:15 2025 by rpki-client