Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/172e0b-8cbb-402e-8f2c-8595b4500884/1/cxwTgoWLDclamtvqRyizH54iwNg.mft
File: cxwTgoWLDclamtvqRyizH54iwNg.mft (raw, json)
Hash identifier: adM9d0pCGRmtrL03o8CwGLDXKPsHeynmrM39ekpn8oc=
Subject key identifier: E6:33:B8:77:46:DF:31:16:F0:DF:5F:9F:49:FA:C8:C2:C2:27:DD:26
Authority key identifier: 73:1C:13:82:85:8B:0D:C9:5A:9A:DB:EA:47:28:B3:1F:9E:22:C0:D8
Certificate issuer: /CN=731c1382858b0dc95a9adbea4728b31f9e22c0d8
Certificate serial: 01988CFEAC699FC1771A4EC25E0A7D9F18A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cxwTgoWLDclamtvqRyizH54iwNg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/172e0b-8cbb-402e-8f2c-8595b4500884/1/cxwTgoWLDclamtvqRyizH54iwNg.mft
Manifest number: 0781
Signing time: Sat 09 Aug 2025 04:02:37 +0000
Manifest this update: Sat 09 Aug 2025 04:02:37 +0000
Manifest next update: Sun 10 Aug 2025 04:02:37 +0000
Files and hashes: 1: cxwTgoWLDclamtvqRyizH54iwNg.crl (hash: m7hzybuIydy1MPz+jibZTgPEc7nTmZGFKQxIcWg7yHs=)
2: xsLt5XL-OWIaNdR6BZ8HbsppEGM.roa (hash: fVuO1qpyondG1qElrhxFzaCfBXaBgOTcL+nbs40PcY0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/172e0b-8cbb-402e-8f2c-8595b4500884/1/cxwTgoWLDclamtvqRyizH54iwNg.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/172e0b-8cbb-402e-8f2c-8595b4500884/1/cxwTgoWLDclamtvqRyizH54iwNg.mft
rsync://rpki.ripe.net/repository/DEFAULT/cxwTgoWLDclamtvqRyizH54iwNg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 04:02:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8c:fe:ac:69:9f:c1:77:1a:4e:c2:5e:0a:7d:9f:18:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=731c1382858b0dc95a9adbea4728b31f9e22c0d8
Validity
Not Before: Aug 9 04:02:37 2025 GMT
Not After : Aug 10 04:02:37 2025 GMT
Subject: CN=e633b87746df3116f0df5f9f49fac8c2c227dd26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:51:3c:79:3f:ca:52:a3:10:81:94:ed:6f:7d:
c4:74:26:29:8d:9f:65:e5:ca:a1:68:0f:2c:2f:e5:
f9:0c:43:97:33:0c:bc:5c:df:1d:a7:9f:bd:7d:cb:
6b:f3:c7:68:e9:a8:3a:17:2d:d9:0e:0f:91:da:fd:
f3:d3:59:0c:35:b9:7e:d0:f0:3f:6a:82:fb:6f:57:
05:9b:16:be:fc:32:95:cf:a8:66:96:f7:75:b9:ce:
b9:db:74:a9:7b:d1:e3:09:70:8e:40:01:8d:b0:a6:
b2:b1:1e:2d:d2:ca:f5:18:b9:63:90:04:27:bc:ab:
04:f6:17:a4:04:90:b0:6c:4b:65:23:f6:47:ed:2d:
d1:4a:07:aa:33:be:42:b2:c0:7c:38:3f:83:0d:75:
e8:12:b6:43:c1:8c:a9:59:a9:81:37:a0:e2:01:16:
c5:9c:9d:6d:52:25:ff:fa:1b:e2:c0:5c:fb:02:fa:
9e:7a:a5:76:41:77:05:e0:6f:16:3e:d6:dd:c1:e0:
ca:62:e0:13:0f:3d:a9:6c:43:43:d7:66:fd:94:f3:
60:b4:88:d6:a1:98:ff:df:36:9f:d1:50:55:98:a8:
79:02:17:b3:85:45:05:68:69:f2:5a:6c:a9:2e:f6:
d7:6b:1c:15:34:a0:19:23:e2:2d:94:fe:c8:7c:bb:
47:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:33:B8:77:46:DF:31:16:F0:DF:5F:9F:49:FA:C8:C2:C2:27:DD:26
X509v3 Authority Key Identifier:
keyid:73:1C:13:82:85:8B:0D:C9:5A:9A:DB:EA:47:28:B3:1F:9E:22:C0:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cxwTgoWLDclamtvqRyizH54iwNg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/172e0b-8cbb-402e-8f2c-8595b4500884/1/cxwTgoWLDclamtvqRyizH54iwNg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/172e0b-8cbb-402e-8f2c-8595b4500884/1/cxwTgoWLDclamtvqRyizH54iwNg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:16:7c:a4:c0:fe:53:49:31:2d:dc:cc:bf:c1:3a:3a:b6:0d:
ef:65:a7:d4:ae:52:32:4d:64:60:ed:6b:06:d1:09:a0:e0:29:
87:18:c1:3b:f4:8e:58:87:5a:ed:9d:9d:dc:ae:5c:ca:a0:a9:
2d:2c:c9:92:12:73:81:ad:b5:8f:d2:78:b3:26:6d:12:58:3a:
a0:ba:a5:1d:a0:77:20:f6:48:6d:61:8c:3b:dc:9e:02:4d:f2:
25:b6:09:cd:15:99:85:e7:7f:bf:45:99:99:d1:73:98:3f:12:
cf:32:ad:8d:4f:c7:02:c7:00:05:d6:e0:7d:5b:2e:50:e8:77:
d6:0e:b0:d3:86:c5:0e:b9:c1:91:aa:6a:af:aa:1d:c9:01:82:
d1:0f:e0:c4:5f:0f:32:e9:aa:77:b5:9e:ca:81:83:99:7d:79:
9b:ce:77:c2:40:f6:a2:9d:be:8d:b0:05:1a:b3:10:8e:2e:60:
20:58:e8:02:56:81:bb:23:94:52:ec:17:0d:76:74:60:9a:50:
a0:b8:6c:3c:54:b6:ca:ae:cf:a2:69:46:e1:69:23:e1:3f:7f:
6c:4c:aa:5b:2f:1d:4e:9b:b1:11:51:d8:83:ca:d8:dc:2a:c2:
06:db:40:3f:38:97:ca:23:03:9a:97:75:92:ca:63:fd:3c:11:
e4:f7:e0:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 14:19:26 2025 by rpki-client