Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/172e0b-8cbb-402e-8f2c-8595b4500884/1/cxwTgoWLDclamtvqRyizH54iwNg.mft
File: cxwTgoWLDclamtvqRyizH54iwNg.mft (raw, json)
Hash identifier: xc6fljWgfSAWm+U1xplMAsV2m7g+NppVryXos77qClY=
Subject key identifier: 0C:3F:5B:4E:54:53:B7:D7:29:AD:23:B4:C9:03:D6:F7:D8:7B:0B:57
Authority key identifier: 73:1C:13:82:85:8B:0D:C9:5A:9A:DB:EA:47:28:B3:1F:9E:22:C0:D8
Certificate issuer: /CN=731c1382858b0dc95a9adbea4728b31f9e22c0d8
Certificate serial: 019A4EF49C9DF1A3B7AF356308866497C4F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cxwTgoWLDclamtvqRyizH54iwNg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/172e0b-8cbb-402e-8f2c-8595b4500884/1/cxwTgoWLDclamtvqRyizH54iwNg.mft
Manifest number: 086A
Signing time: Tue 04 Nov 2025 13:00:44 +0000
Manifest this update: Tue 04 Nov 2025 13:00:44 +0000
Manifest next update: Wed 05 Nov 2025 13:00:44 +0000
Files and hashes: 1: cxwTgoWLDclamtvqRyizH54iwNg.crl (hash: Yi3xKz86CXS0rsRs1aAg8Kew9AOCwuvr2DRVVmpxse4=)
2: xsLt5XL-OWIaNdR6BZ8HbsppEGM.roa (hash: fVuO1qpyondG1qElrhxFzaCfBXaBgOTcL+nbs40PcY0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/172e0b-8cbb-402e-8f2c-8595b4500884/1/cxwTgoWLDclamtvqRyizH54iwNg.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/172e0b-8cbb-402e-8f2c-8595b4500884/1/cxwTgoWLDclamtvqRyizH54iwNg.mft
rsync://rpki.ripe.net/repository/DEFAULT/cxwTgoWLDclamtvqRyizH54iwNg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:9c:9d:f1:a3:b7:af:35:63:08:86:64:97:c4:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=731c1382858b0dc95a9adbea4728b31f9e22c0d8
Validity
Not Before: Nov 4 13:00:44 2025 GMT
Not After : Nov 5 13:00:44 2025 GMT
Subject: CN=0c3f5b4e5453b7d729ad23b4c903d6f7d87b0b57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:bc:d6:f6:e5:d3:1b:23:26:a7:2d:9e:7a:f3:
4e:5c:dc:ba:1f:cb:e6:68:84:3c:65:48:8d:b5:09:
0d:ad:c3:48:91:ce:15:05:07:b3:54:fb:03:06:c8:
2d:d9:ae:2c:6d:ea:34:d0:15:07:06:f6:24:7b:02:
b2:cb:a5:31:b1:96:c3:bb:86:38:c1:40:50:25:a8:
23:ab:32:eb:10:5a:40:b4:b6:ff:6d:2d:4f:61:82:
91:d1:d1:7f:75:f4:17:dd:dd:d9:5f:f8:85:63:d7:
ac:cc:56:c4:be:20:9b:28:d1:4a:39:b4:8c:1f:c1:
df:3e:d1:fc:4a:8c:aa:b1:98:29:3c:72:64:bf:87:
0a:b6:24:77:09:75:73:70:02:41:f7:8c:4c:e9:8b:
99:cd:c8:d4:c7:ee:87:30:f2:69:22:16:53:b2:98:
77:03:a2:5c:5f:d8:d1:3a:10:fa:29:7a:fb:84:31:
cb:fd:21:bb:5d:9f:f3:f5:d6:42:5d:df:f0:79:75:
1e:fd:35:7c:8a:a6:d6:d3:7c:04:66:b3:db:e9:99:
03:0f:88:c9:d2:cd:97:6b:a8:bd:59:45:54:8c:f1:
1c:5e:31:f7:bf:6a:9f:dc:16:a5:e7:96:b2:83:e9:
72:7a:4e:4a:7d:54:78:54:b6:15:b7:34:7e:72:47:
02:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:3F:5B:4E:54:53:B7:D7:29:AD:23:B4:C9:03:D6:F7:D8:7B:0B:57
X509v3 Authority Key Identifier:
keyid:73:1C:13:82:85:8B:0D:C9:5A:9A:DB:EA:47:28:B3:1F:9E:22:C0:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cxwTgoWLDclamtvqRyizH54iwNg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/172e0b-8cbb-402e-8f2c-8595b4500884/1/cxwTgoWLDclamtvqRyizH54iwNg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/172e0b-8cbb-402e-8f2c-8595b4500884/1/cxwTgoWLDclamtvqRyizH54iwNg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:11:6b:c3:dd:cc:c5:b6:0d:34:68:ca:85:02:2b:43:bb:aa:
20:2f:a2:0b:c8:8c:f2:12:bd:59:e8:e1:63:f3:cb:00:b9:b8:
1f:16:00:8f:4d:57:35:90:97:32:d0:ff:16:29:4f:90:85:ec:
20:4d:d2:44:70:da:8c:b0:2c:4a:d7:4c:48:1c:0d:2e:1e:d3:
87:6a:5e:1a:83:97:de:ff:98:f4:79:79:19:df:6f:23:ac:06:
de:44:ed:08:41:3c:69:7d:bd:39:1c:6f:b8:f1:23:00:8d:b3:
7d:c8:b8:83:35:de:27:90:1c:9f:88:d0:4b:ea:6e:2f:fa:70:
0e:40:9c:e7:fc:05:50:43:82:03:d0:50:71:00:1d:76:96:c8:
a5:a1:73:0d:8c:19:29:fa:fa:65:24:ec:2b:51:5f:6a:2c:b6:
12:85:ba:83:d7:a5:ba:35:7a:29:43:94:8f:81:5a:b1:9e:fe:
2c:a3:a4:df:6b:df:0b:75:cf:03:92:a5:11:a0:f9:9e:90:df:
e3:c1:00:11:fe:87:77:65:c3:4c:da:35:cc:3c:d0:65:e4:56:
27:ed:22:86:e1:25:af:ad:d3:4a:15:3c:19:2f:a1:87:32:71:
b0:a0:73:13:34:83:8c:7d:41:23:e8:07:b4:47:cc:60:18:ff:
81:3a:33:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:54:38 2025 by rpki-client