Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/7e3816-8c8e-47a0-94ec-4fc9f0d2aca3/1/CXtdFJCzhaL4DCoDJP6Y41EJFJA.mft
File: CXtdFJCzhaL4DCoDJP6Y41EJFJA.mft (raw, json)
Hash identifier: iRspUpXKoCtflb5KEUF0BeNbh+aea2Ed2bg8AswiSPo=
Subject key identifier: A7:9A:12:FC:55:F9:F5:F0:72:ED:88:27:DF:9C:0E:26:05:5D:D1:10
Authority key identifier: 09:7B:5D:14:90:B3:85:A2:F8:0C:2A:03:24:FE:98:E3:51:09:14:90
Certificate issuer: /CN=097b5d1490b385a2f80c2a0324fe98e351091490
Certificate serial: 01987BD2E5B96D19204BCF4C8E552FF2E20E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXtdFJCzhaL4DCoDJP6Y41EJFJA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/7e3816-8c8e-47a0-94ec-4fc9f0d2aca3/1/CXtdFJCzhaL4DCoDJP6Y41EJFJA.mft
Manifest number: 07DE
Signing time: Tue 05 Aug 2025 20:01:15 +0000
Manifest this update: Tue 05 Aug 2025 20:01:15 +0000
Manifest next update: Wed 06 Aug 2025 20:01:15 +0000
Files and hashes: 1: 4NykHTKnfSIJ0q7_RZtsAwpsqKA.roa (hash: w55fxLVLcagKRRaTKAUle3eBEN7JDI5LPLVo9zNJXVU=)
2: CXtdFJCzhaL4DCoDJP6Y41EJFJA.crl (hash: bd132y49s6fI2VBKY4UweAZEXPkOtFikSWEOksEK0rI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/7e3816-8c8e-47a0-94ec-4fc9f0d2aca3/1/CXtdFJCzhaL4DCoDJP6Y41EJFJA.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/7e3816-8c8e-47a0-94ec-4fc9f0d2aca3/1/CXtdFJCzhaL4DCoDJP6Y41EJFJA.mft
rsync://rpki.ripe.net/repository/DEFAULT/CXtdFJCzhaL4DCoDJP6Y41EJFJA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 17:44:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7b:d2:e5:b9:6d:19:20:4b:cf:4c:8e:55:2f:f2:e2:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097b5d1490b385a2f80c2a0324fe98e351091490
Validity
Not Before: Aug 5 20:01:15 2025 GMT
Not After : Aug 6 20:01:15 2025 GMT
Subject: CN=a79a12fc55f9f5f072ed8827df9c0e26055dd110
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:13:61:f6:ca:c9:63:2f:81:4c:54:54:e1:46:
bd:d5:61:00:f6:e3:de:39:fa:f1:5d:3f:32:10:76:
c7:20:e8:5a:06:76:6d:01:8d:5e:20:d2:8b:c9:3b:
a0:f8:80:c8:e1:aa:37:3a:92:41:32:2f:10:36:4a:
fc:27:fd:26:e7:ad:76:27:d1:9a:80:58:74:44:4e:
1d:3d:01:d6:c9:4f:75:51:05:ce:74:f8:58:c0:2b:
8a:a3:00:c3:c5:6e:f7:1f:e3:42:cd:af:13:0d:3f:
50:7e:28:ff:fa:f7:40:4c:6b:4e:56:99:16:8e:c8:
c2:c3:ba:fc:11:a6:9a:33:f3:f5:b8:b4:90:f0:84:
e3:ae:f4:5e:d9:47:90:8f:19:5a:93:00:95:cb:53:
8c:53:34:5d:57:17:56:9e:37:fe:46:b0:3f:e7:c2:
96:9e:92:65:d6:9e:1c:db:07:09:d7:dc:66:c9:aa:
bb:c5:af:7e:a5:de:4f:dd:5b:b7:e5:49:5f:a7:d2:
ef:8d:03:ec:ae:25:57:ac:8d:ec:7b:fb:bc:a3:1e:
ec:53:48:4d:34:c5:ce:05:af:4d:b8:31:7b:62:cc:
be:6b:26:7c:c4:8a:28:7f:d0:d6:52:5b:b6:df:38:
10:ca:34:58:7f:25:16:7d:26:4f:7b:63:d8:e0:5a:
34:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:9A:12:FC:55:F9:F5:F0:72:ED:88:27:DF:9C:0E:26:05:5D:D1:10
X509v3 Authority Key Identifier:
keyid:09:7B:5D:14:90:B3:85:A2:F8:0C:2A:03:24:FE:98:E3:51:09:14:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXtdFJCzhaL4DCoDJP6Y41EJFJA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/7e3816-8c8e-47a0-94ec-4fc9f0d2aca3/1/CXtdFJCzhaL4DCoDJP6Y41EJFJA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/7e3816-8c8e-47a0-94ec-4fc9f0d2aca3/1/CXtdFJCzhaL4DCoDJP6Y41EJFJA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:fa:1f:1b:02:0a:bd:fc:c2:73:28:11:e6:7a:f7:a1:c9:60:
fe:7f:0c:af:62:c3:20:ec:1d:26:fd:69:1f:7a:30:b5:53:f5:
5c:b6:fd:c2:8a:8e:3c:e7:95:fd:d8:bb:3b:e7:8a:1b:fc:4b:
ca:25:18:92:75:1b:ba:c6:eb:d5:0d:06:e8:aa:e2:78:98:b9:
64:26:78:92:a1:f3:94:8e:f8:9d:36:2b:ae:58:99:62:46:86:
9a:ab:0c:25:30:86:5e:b0:b0:e6:bf:f4:d7:2b:4d:ed:09:22:
f8:34:9d:1e:ae:4f:d6:3b:23:49:a3:fc:32:b0:4a:f8:6e:6a:
82:4d:53:23:cc:a5:28:35:d1:b2:93:95:18:8f:0f:46:a0:fd:
79:a4:23:67:d1:1d:d0:a1:11:e7:dc:32:a1:f8:8e:75:fb:b6:
8d:38:64:f4:1b:44:00:75:67:37:1b:46:15:a1:39:6d:03:54:
d2:34:01:7c:fe:99:d3:e5:38:82:bc:a8:e3:0f:1b:7c:79:3c:
95:c3:b8:11:9d:61:df:8f:b4:20:89:bb:30:40:12:ff:8a:87:
64:14:71:03:05:e5:ea:04:7d:85:ef:50:87:11:9d:d2:2d:89:
2f:a7:87:44:25:b3:52:d2:8e:50:ef:5e:52:80:e5:f3:7f:a9:
aa:f0:77:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 03:59:53 2025 by rpki-client