Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/ecc2cf-ecc0-4cbb-9635-166c6a3d3ecf/1/CXa-2b-5b_oZgiBViqPVuMj5zT0.mft
File: CXa-2b-5b_oZgiBViqPVuMj5zT0.mft (raw, json)
Hash identifier: mgovyCfP5Wzm/fQTrAmqX9obQVUGwmmooqP94gyzEMA=
Subject key identifier: 39:4B:9D:9C:8E:CB:59:E3:D3:C2:92:D1:8C:C8:3E:4F:D8:66:2E:DC
Authority key identifier: 09:76:BE:D9:BF:B9:6F:FA:19:82:20:55:8A:A3:D5:B8:C8:F9:CD:3D
Certificate issuer: /CN=0976bed9bfb96ffa198220558aa3d5b8c8f9cd3d
Certificate serial: 01987CE5B2820DD922CFF457A81522525DDB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXa-2b-5b_oZgiBViqPVuMj5zT0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/ecc2cf-ecc0-4cbb-9635-166c6a3d3ecf/1/CXa-2b-5b_oZgiBViqPVuMj5zT0.mft
Manifest number: 83
Signing time: Wed 06 Aug 2025 01:01:24 +0000
Manifest this update: Wed 06 Aug 2025 01:01:24 +0000
Manifest next update: Thu 07 Aug 2025 01:01:24 +0000
Files and hashes: 1: CXa-2b-5b_oZgiBViqPVuMj5zT0.crl (hash: wkkgKcwGINyO/jthPGPRFVvGpZ/SwGlnPEXIqa+F0lE=)
2: aBpP3bYzGKuR6nhWBmH2ZNVu5M0.roa (hash: GDuJcoE/4sB2mx00j2kfWz5EyEq+Z7H0hLsLa7O17eM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/ecc2cf-ecc0-4cbb-9635-166c6a3d3ecf/1/CXa-2b-5b_oZgiBViqPVuMj5zT0.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/ecc2cf-ecc0-4cbb-9635-166c6a3d3ecf/1/CXa-2b-5b_oZgiBViqPVuMj5zT0.mft
rsync://rpki.ripe.net/repository/DEFAULT/CXa-2b-5b_oZgiBViqPVuMj5zT0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 23:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7c:e5:b2:82:0d:d9:22:cf:f4:57:a8:15:22:52:5d:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0976bed9bfb96ffa198220558aa3d5b8c8f9cd3d
Validity
Not Before: Aug 6 01:01:24 2025 GMT
Not After : Aug 7 01:01:24 2025 GMT
Subject: CN=394b9d9c8ecb59e3d3c292d18cc83e4fd8662edc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:83:69:07:00:ea:5f:9b:c3:b4:6b:26:c6:c3:
98:dc:f3:02:11:8f:15:14:12:9d:05:b5:48:1c:c5:
84:d8:11:d8:5f:47:1f:cb:e7:ed:64:c7:39:f3:4d:
9e:f6:ce:2f:37:2a:a4:89:97:21:80:2c:24:61:83:
54:46:88:0e:d7:73:f1:63:e0:53:52:e5:54:17:ca:
9d:8b:48:41:46:56:da:9a:58:cb:20:31:ac:e1:83:
3f:b8:c3:b7:f8:99:2e:58:d6:87:cd:48:35:aa:e2:
8f:c4:26:39:34:71:45:8f:7e:0a:b3:f5:fc:57:07:
d3:f4:c1:20:b2:5b:f5:df:f6:a8:31:d0:32:5f:36:
d3:86:14:40:fb:71:40:68:2c:46:07:ac:73:70:ed:
86:50:3f:92:9f:34:b2:79:3f:28:40:88:91:11:3b:
00:ae:77:5e:49:f8:e4:36:3c:b0:3a:7c:9d:5c:48:
4a:03:6b:80:35:ef:42:f0:70:2c:65:25:02:c3:1f:
24:0f:0c:00:00:00:ac:79:e9:92:ab:e8:f8:4e:65:
08:5c:54:2c:73:af:db:9b:80:ac:d2:52:04:50:c8:
b9:f6:82:6b:64:20:51:da:70:a3:79:61:15:c9:df:
9a:71:27:4b:0f:9a:99:16:20:02:39:8a:d7:e4:fb:
85:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:4B:9D:9C:8E:CB:59:E3:D3:C2:92:D1:8C:C8:3E:4F:D8:66:2E:DC
X509v3 Authority Key Identifier:
keyid:09:76:BE:D9:BF:B9:6F:FA:19:82:20:55:8A:A3:D5:B8:C8:F9:CD:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXa-2b-5b_oZgiBViqPVuMj5zT0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/ecc2cf-ecc0-4cbb-9635-166c6a3d3ecf/1/CXa-2b-5b_oZgiBViqPVuMj5zT0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/ecc2cf-ecc0-4cbb-9635-166c6a3d3ecf/1/CXa-2b-5b_oZgiBViqPVuMj5zT0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:fc:c5:48:4a:f7:20:26:30:35:32:3e:6f:2a:ae:eb:4f:0e:
ec:c0:af:7b:c6:79:00:f3:e9:80:10:a0:d9:67:87:37:13:29:
2c:6f:92:1e:a7:d7:79:1e:37:ff:2f:43:90:7a:b6:93:88:27:
b6:4e:88:7d:19:31:b8:c9:c9:2b:d6:4e:8f:ea:a3:98:61:fe:
ff:57:b9:98:38:c7:61:03:9b:c2:c2:5e:82:5e:47:13:de:5a:
e2:90:ca:d6:53:e7:99:5b:d0:1e:1f:a3:b5:d2:9f:12:e1:b7:
2b:56:89:2f:64:aa:89:8d:94:81:fd:e7:5e:13:16:56:93:32:
cd:a4:51:5f:2e:c9:2d:15:5b:d0:51:00:00:14:2c:02:3e:57:
78:3d:63:2e:51:7b:e5:71:20:b7:26:05:20:5a:11:48:48:14:
18:8b:1d:b4:58:30:e2:7b:21:1c:b6:35:17:4a:24:cb:9c:94:
60:eb:0c:55:92:f9:59:df:ee:87:08:6e:ee:dc:91:df:9b:c8:
b9:eb:eb:43:4d:57:f2:08:85:93:13:e2:e5:03:f9:c1:1e:7e:
74:09:b2:f6:c8:ff:66:e2:6a:9a:6a:fa:34:26:04:c1:9d:41:
b7:d2:78:58:c5:e5:18:52:55:72:87:7b:26:7d:9a:50:8f:a4:
b1:a1:6a:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 05:21:00 2025 by rpki-client