Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/b311d4-e358-4721-ab8d-6e6a5f172be3/1/CxAnrOF_AGf2l8ZTYUiBkur2QTg.mft
File: CxAnrOF_AGf2l8ZTYUiBkur2QTg.mft (raw, json)
Hash identifier: eDS+eWyM9/6N27KRF78X75iRpJv7TUgJnK/C2bebwYY=
Subject key identifier: 2A:83:D3:77:14:01:41:B5:B1:83:01:A4:2F:CB:68:29:CB:0D:8D:19
Authority key identifier: 0B:10:27:AC:E1:7F:00:67:F6:97:C6:53:61:48:81:92:EA:F6:41:38
Certificate issuer: /CN=0b1027ace17f0067f697c65361488192eaf64138
Certificate serial: 01987C092DCED0D3EEF4571BC0DFD624C497
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CxAnrOF_AGf2l8ZTYUiBkur2QTg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/b311d4-e358-4721-ab8d-6e6a5f172be3/1/CxAnrOF_AGf2l8ZTYUiBkur2QTg.mft
Manifest number: 161A
Signing time: Tue 05 Aug 2025 21:00:32 +0000
Manifest this update: Tue 05 Aug 2025 21:00:32 +0000
Manifest next update: Wed 06 Aug 2025 21:00:32 +0000
Files and hashes: 1: CxAnrOF_AGf2l8ZTYUiBkur2QTg.crl (hash: oQof8n9AnwTsYXqYhTRlhAu2fqzqiPZz67sp40UZXw0=)
2: ugc9sZedf1kQim_ILlGgEqT8zEQ.roa (hash: il9YS8RE+T8nxwMQDbcqvrV75JMzYR3yLbUc6KCg+oU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/b311d4-e358-4721-ab8d-6e6a5f172be3/1/CxAnrOF_AGf2l8ZTYUiBkur2QTg.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/b311d4-e358-4721-ab8d-6e6a5f172be3/1/CxAnrOF_AGf2l8ZTYUiBkur2QTg.mft
rsync://rpki.ripe.net/repository/DEFAULT/CxAnrOF_AGf2l8ZTYUiBkur2QTg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 21:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7c:09:2d:ce:d0:d3:ee:f4:57:1b:c0:df:d6:24:c4:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b1027ace17f0067f697c65361488192eaf64138
Validity
Not Before: Aug 5 21:00:32 2025 GMT
Not After : Aug 6 21:00:32 2025 GMT
Subject: CN=2a83d377140141b5b18301a42fcb6829cb0d8d19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:10:c5:09:ce:88:d0:6d:0b:11:f4:1f:87:6e:
03:e4:b0:c0:3c:5e:9e:c9:9e:dc:11:53:8e:ff:cd:
69:f0:6b:b8:46:ae:0c:43:96:fb:8e:70:1c:df:80:
cc:da:22:f4:92:56:25:09:ca:73:b2:17:52:1d:b0:
9b:de:63:d7:5c:61:d3:e5:a5:67:e8:45:16:cb:8c:
4c:95:85:0f:31:3d:c0:98:59:2b:e2:0c:e8:f3:3a:
e0:56:b0:87:e6:d5:8c:29:d2:b9:7d:66:36:d7:72:
c6:97:2a:bf:90:2d:8a:4c:46:ce:52:b2:08:a0:ab:
c2:a6:5d:2a:48:1a:18:ce:eb:7e:ad:14:94:8b:1e:
e3:eb:8b:62:0b:f8:5d:27:10:d3:17:f5:2e:44:09:
ba:12:05:03:f1:7c:c7:21:87:20:8f:21:e7:71:fd:
43:b9:1c:6c:19:fb:dc:7f:1b:99:b7:41:9c:d5:ff:
42:33:b9:19:21:52:bf:5c:23:7d:cb:15:ed:60:98:
bf:c8:9e:ff:44:d0:27:d5:1c:a7:bc:05:a0:f2:5e:
72:a2:a2:f2:93:dd:e0:70:32:ef:8f:b6:55:28:2b:
90:42:37:c3:1f:aa:22:63:bb:7d:52:8c:e2:9e:56:
d2:a7:26:42:30:75:60:d5:27:85:32:71:24:ee:22:
58:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:83:D3:77:14:01:41:B5:B1:83:01:A4:2F:CB:68:29:CB:0D:8D:19
X509v3 Authority Key Identifier:
keyid:0B:10:27:AC:E1:7F:00:67:F6:97:C6:53:61:48:81:92:EA:F6:41:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CxAnrOF_AGf2l8ZTYUiBkur2QTg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/b311d4-e358-4721-ab8d-6e6a5f172be3/1/CxAnrOF_AGf2l8ZTYUiBkur2QTg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/b311d4-e358-4721-ab8d-6e6a5f172be3/1/CxAnrOF_AGf2l8ZTYUiBkur2QTg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:10:de:88:98:e3:7f:92:2c:20:e1:bd:58:fd:74:23:e2:5a:
52:df:d6:50:d3:88:a7:a3:99:37:a8:ac:9c:d2:b4:0e:58:14:
e4:d1:eb:43:4f:4c:17:02:91:13:9a:9e:cc:61:60:fa:95:64:
38:07:ea:82:21:37:f6:51:c4:30:96:91:b7:dd:f4:81:ed:9f:
1b:c4:b1:44:9c:7f:3c:db:51:37:b5:a6:66:9d:0d:18:38:82:
49:9c:91:1c:a5:66:74:33:89:8c:84:df:18:c4:e9:10:2b:1d:
51:fc:b7:54:47:eb:5b:5b:04:d4:46:af:e7:06:92:99:1e:72:
8b:9f:6d:9b:f0:48:6e:31:46:95:7e:32:d1:98:11:e4:ba:07:
48:9e:d4:f6:1e:49:dc:45:ec:f6:55:e2:b5:78:6a:45:09:b1:
fc:4b:7a:68:86:83:db:89:32:9f:48:ad:ed:29:7b:f6:14:00:
e6:e8:ac:a0:c1:5e:94:16:2e:fa:b5:3f:6e:1f:a3:5d:d0:62:
d7:61:de:0f:8f:35:7b:da:79:16:d2:80:57:5b:c5:94:c2:0d:
e6:cb:84:ac:7a:e9:54:75:4e:51:78:b6:6a:60:69:ae:7f:1c:
6d:21:a1:f3:84:e8:be:c9:02:43:0e:70:d7:1f:ed:10:da:d4:
ee:86:60:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 05:13:11 2025 by rpki-client