Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/a50372-da39-482e-9ad4-30becfc1b311/1/CX4FUW_IeTQGhouBCePARLcCcWw.mft
File: CX4FUW_IeTQGhouBCePARLcCcWw.mft (raw, json)
Hash identifier: 48pKxYhr4xLgbOXeAyDF0BbvGKsDXU6i0RG1i1iEA78=
Subject key identifier: 2F:67:C6:49:9B:96:56:43:C1:27:4D:3E:16:B0:1B:52:3F:2B:F7:9E
Authority key identifier: 09:7E:05:51:6F:C8:79:34:06:86:8B:81:09:E3:C0:44:B7:02:71:6C
Certificate issuer: /CN=097e05516fc8793406868b8109e3c044b702716c
Certificate serial: 019881D546720CFEFFECF9ED796494A93A67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CX4FUW_IeTQGhouBCePARLcCcWw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/a50372-da39-482e-9ad4-30becfc1b311/1/CX4FUW_IeTQGhouBCePARLcCcWw.mft
Manifest number: 161F
Signing time: Thu 07 Aug 2025 00:01:34 +0000
Manifest this update: Thu 07 Aug 2025 00:01:34 +0000
Manifest next update: Fri 08 Aug 2025 00:01:34 +0000
Files and hashes: 1: CX4FUW_IeTQGhouBCePARLcCcWw.crl (hash: Ta/fCgUCDOq6WM8jVLoWcrgpa9GXjsOk7pY3C+IxkB4=)
2: LYov3s-RBNegs9sCI5mzwI0B-OM.roa (hash: Q5JNZZskubtUF3draKhRYhTL06FaQ8LhpyPNSVMlulo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/a50372-da39-482e-9ad4-30becfc1b311/1/CX4FUW_IeTQGhouBCePARLcCcWw.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/a50372-da39-482e-9ad4-30becfc1b311/1/CX4FUW_IeTQGhouBCePARLcCcWw.mft
rsync://rpki.ripe.net/repository/DEFAULT/CX4FUW_IeTQGhouBCePARLcCcWw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 20:46:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:81:d5:46:72:0c:fe:ff:ec:f9:ed:79:64:94:a9:3a:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097e05516fc8793406868b8109e3c044b702716c
Validity
Not Before: Aug 7 00:01:34 2025 GMT
Not After : Aug 8 00:01:34 2025 GMT
Subject: CN=2f67c6499b965643c1274d3e16b01b523f2bf79e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:d0:60:02:45:ee:88:9e:f8:7b:6a:4a:9a:e7:
5d:35:55:b6:50:17:c7:21:35:21:4b:0b:97:df:cb:
5a:d8:0e:02:18:d2:11:ce:bd:2a:19:34:b9:d0:51:
0a:db:d4:ce:7c:7d:d6:da:4a:ce:75:38:3b:87:12:
65:ae:b3:10:ce:a4:29:3c:99:5c:50:29:9c:9c:5d:
4a:d1:fb:d8:09:f4:37:46:a9:d9:95:3f:74:77:b9:
10:b0:a7:85:b9:cf:ed:d3:64:88:73:fd:07:fe:75:
ab:d5:04:06:85:3d:bf:45:0c:a6:87:47:4f:c3:49:
7a:bd:29:66:de:72:e6:66:f5:d5:49:7c:80:65:f4:
fd:66:ed:0e:55:09:b0:18:b6:42:22:c9:b1:7b:b9:
02:3b:c3:e8:fd:6e:93:cf:36:d7:d1:a4:46:42:56:
a4:bf:90:1b:79:de:a6:c4:12:b4:bd:12:c3:ad:0f:
a1:dd:b8:f4:23:78:fe:94:e6:5b:55:43:06:71:20:
ae:93:02:36:75:0f:d4:e1:57:d3:c8:4c:7e:27:b7:
0a:bc:32:ed:fb:22:f0:f3:15:22:e0:a6:96:41:9d:
00:45:c2:48:95:1f:e1:ac:b1:e5:ee:79:f6:d8:04:
e8:e7:39:78:91:b5:8d:52:d4:3c:97:b6:d0:bc:f8:
f4:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:67:C6:49:9B:96:56:43:C1:27:4D:3E:16:B0:1B:52:3F:2B:F7:9E
X509v3 Authority Key Identifier:
keyid:09:7E:05:51:6F:C8:79:34:06:86:8B:81:09:E3:C0:44:B7:02:71:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CX4FUW_IeTQGhouBCePARLcCcWw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/a50372-da39-482e-9ad4-30becfc1b311/1/CX4FUW_IeTQGhouBCePARLcCcWw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/a50372-da39-482e-9ad4-30becfc1b311/1/CX4FUW_IeTQGhouBCePARLcCcWw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:17:f7:ad:a3:aa:73:43:2f:7f:30:b3:e7:45:ae:cc:28:f7:
a5:c5:35:b7:b3:5c:b8:c6:d5:6d:7e:f3:19:04:f0:ff:ef:d9:
3d:26:3f:97:96:67:c3:4f:93:9b:2d:d1:cb:dc:eb:09:98:41:
4b:55:66:98:e5:67:f3:6d:7b:68:24:da:a7:38:47:28:79:45:
c0:c2:a3:1f:cd:ad:54:18:0b:ee:d0:88:0e:c5:a1:71:60:40:
02:e6:3c:66:15:c6:22:cb:3f:ad:7b:43:f0:6a:87:73:0a:44:
55:f3:18:d1:ce:6b:b2:f6:e3:db:c6:2b:d0:fe:63:63:f2:dd:
9f:77:7b:fc:9d:a5:82:6d:98:47:5e:43:f9:e1:6f:16:3d:b8:
d3:28:78:73:8d:e3:38:a9:7d:90:89:6c:b4:d3:0f:39:15:4d:
5c:51:6d:f9:30:ed:c5:18:f8:fd:97:14:2b:12:60:ea:10:52:
d6:3f:37:c2:35:09:a3:c7:00:5f:27:65:a1:85:f5:12:15:e0:
6a:f9:fc:80:27:26:ab:67:38:69:1c:fe:02:1b:6d:51:de:e1:
c6:7b:ec:e4:99:e2:2a:5e:af:a6:64:c9:df:56:30:95:10:62:
01:04:c0:db:48:ca:2a:7d:d7:3a:ca:80:7a:5c:9f:64:8c:e5:
4a:09:77:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 04:24:49 2025 by rpki-client