Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/b311d4-e358-4721-ab8d-6e6a5f172be3/1/CxAnrOF_AGf2l8ZTYUiBkur2QTg.mft
File: CxAnrOF_AGf2l8ZTYUiBkur2QTg.mft (raw, json)
Hash identifier: tFwb3ET6Gp+DuJfhwd1vBW+3pKy1JWMReFeK+EbuzRY=
Subject key identifier: A1:78:67:C5:69:D5:8C:50:9A:1B:86:C4:0B:B1:C4:42:FD:67:42:37
Authority key identifier: 0B:10:27:AC:E1:7F:00:67:F6:97:C6:53:61:48:81:92:EA:F6:41:38
Certificate issuer: /CN=0b1027ace17f0067f697c65361488192eaf64138
Certificate serial: 01976BBD1A5B7DC6AA1D090EBADD90E50F0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CxAnrOF_AGf2l8ZTYUiBkur2QTg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/b311d4-e358-4721-ab8d-6e6a5f172be3/1/CxAnrOF_AGf2l8ZTYUiBkur2QTg.mft
Manifest number: 158D
Signing time: Sat 14 Jun 2025 00:00:44 +0000
Manifest this update: Sat 14 Jun 2025 00:00:44 +0000
Manifest next update: Sun 15 Jun 2025 00:00:44 +0000
Files and hashes: 1: CxAnrOF_AGf2l8ZTYUiBkur2QTg.crl (hash: pMphTCf6Es2fm/vLYKvv/mkbU8qdzcYK6x0ln6VTi90=)
2: ugc9sZedf1kQim_ILlGgEqT8zEQ.roa (hash: il9YS8RE+T8nxwMQDbcqvrV75JMzYR3yLbUc6KCg+oU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/b311d4-e358-4721-ab8d-6e6a5f172be3/1/CxAnrOF_AGf2l8ZTYUiBkur2QTg.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/b311d4-e358-4721-ab8d-6e6a5f172be3/1/CxAnrOF_AGf2l8ZTYUiBkur2QTg.mft
rsync://rpki.ripe.net/repository/DEFAULT/CxAnrOF_AGf2l8ZTYUiBkur2QTg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 00:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6b:bd:1a:5b:7d:c6:aa:1d:09:0e:ba:dd:90:e5:0f:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b1027ace17f0067f697c65361488192eaf64138
Validity
Not Before: Jun 14 00:00:44 2025 GMT
Not After : Jun 15 00:00:44 2025 GMT
Subject: CN=a17867c569d58c509a1b86c40bb1c442fd674237
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:fd:c9:bb:13:7a:5d:f3:ff:96:4b:a5:99:c3:
92:c6:28:1f:7d:d4:21:fa:f7:a7:6a:3d:fc:a8:c7:
a0:47:7f:9f:b5:bf:d6:90:d1:d1:b2:dc:f2:6e:f2:
f1:be:11:a4:aa:8a:a5:ce:a3:c7:cb:ff:da:21:af:
71:f3:46:af:8a:f9:19:61:c4:6c:1c:89:05:68:7c:
6a:85:fd:cb:ac:09:6f:91:3f:e7:23:e0:5a:14:4d:
0e:a1:f8:60:67:0e:65:aa:82:45:a4:0f:89:eb:e0:
26:c6:bf:3e:a4:96:9e:e8:86:24:f7:8d:6a:49:5a:
d9:f7:4d:c3:57:b8:a9:82:c9:7c:41:ef:f6:3d:1e:
5b:85:01:b4:00:1d:74:a1:b9:fd:dc:d3:f9:17:da:
ad:47:95:8e:b6:65:33:2c:71:b5:50:3e:42:7d:61:
b2:71:d3:35:fb:5d:70:a2:0b:4c:08:0a:8d:eb:f9:
8b:1d:38:64:19:18:97:9d:7c:80:9a:96:10:94:11:
0e:ac:11:e1:1b:63:2a:71:df:5a:a8:5d:2d:1a:0e:
57:c0:ca:de:07:5e:85:bb:76:29:d3:89:bf:06:62:
13:ed:67:3b:0f:b4:b1:8b:39:d6:cc:7e:e4:fc:a0:
00:8d:ed:72:41:48:b9:42:6e:f0:5c:49:da:08:cf:
66:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:78:67:C5:69:D5:8C:50:9A:1B:86:C4:0B:B1:C4:42:FD:67:42:37
X509v3 Authority Key Identifier:
keyid:0B:10:27:AC:E1:7F:00:67:F6:97:C6:53:61:48:81:92:EA:F6:41:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CxAnrOF_AGf2l8ZTYUiBkur2QTg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/b311d4-e358-4721-ab8d-6e6a5f172be3/1/CxAnrOF_AGf2l8ZTYUiBkur2QTg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/b311d4-e358-4721-ab8d-6e6a5f172be3/1/CxAnrOF_AGf2l8ZTYUiBkur2QTg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:cb:18:83:e3:9a:a8:76:7e:09:8e:a6:24:41:7e:c5:70:1a:
01:22:74:d4:aa:c6:bf:9f:0b:36:cc:40:37:85:c7:6f:e7:66:
6a:9f:a7:34:b8:a8:6a:e4:ba:ff:35:b9:98:07:e2:58:01:3d:
38:6c:c8:35:e5:3c:35:7f:55:8e:f6:b7:24:e8:44:35:9a:66:
ba:68:6b:e2:02:6a:01:0b:14:99:07:02:1d:62:9b:9a:9c:01:
99:d2:d4:58:10:1b:3b:9c:b9:db:2d:3a:97:c8:54:2f:92:79:
be:3a:fd:42:67:57:ac:b7:13:b9:a1:28:52:6d:10:72:74:d6:
10:cf:2a:06:92:df:a9:51:de:87:3d:1b:7a:88:f7:75:99:a3:
a4:1b:23:54:58:60:31:5b:08:54:31:1d:6c:48:e5:47:21:4f:
bc:01:d4:87:27:04:ef:d9:e5:3e:95:3f:66:80:3d:67:17:40:
ea:71:51:49:60:f8:d2:cd:b4:e0:fd:be:85:a0:56:cc:be:48:
0f:1b:35:6d:3d:fd:12:57:04:1a:b3:a0:50:de:5e:9c:df:01:
9e:54:8d:d3:1e:30:b9:e1:8e:5a:28:66:78:3e:97:df:ef:42:
f4:12:2e:a0:37:83:9c:7b:51:82:75:69:53:d5:4b:0e:b6:4a:
9e:c0:c4:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 09:55:47 2025 by rpki-client