
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/9778b6-dc2b-4586-91de-53a07368b9ea/1/cXHYtM9nc7WfBzLg6ejSWpt3P64.mft
File: cXHYtM9nc7WfBzLg6ejSWpt3P64.mft (raw, json)
Hash identifier: /xl7t1C8Gklqm+huzjb5WlUH/oqGeCp4fQbzuMmdU4A=
Subject key identifier: 67:69:06:69:BC:82:BA:F8:A4:BE:22:E7:0E:18:64:22:82:74:E3:79
Authority key identifier: 71:71:D8:B4:CF:67:73:B5:9F:07:32:E0:E9:E8:D2:5A:9B:77:3F:AE
Certificate issuer: /CN=7171d8b4cf6773b59f0732e0e9e8d25a9b773fae
Certificate serial: 01987C0A0718128E51059CF3EC7524B95CEA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cXHYtM9nc7WfBzLg6ejSWpt3P64.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/9778b6-dc2b-4586-91de-53a07368b9ea/1/cXHYtM9nc7WfBzLg6ejSWpt3P64.mft
Manifest number: 161C
Signing time: Tue 05 Aug 2025 21:01:28 +0000
Manifest this update: Tue 05 Aug 2025 21:01:28 +0000
Manifest next update: Wed 06 Aug 2025 21:01:28 +0000
Files and hashes: 1: _Z-p7KxUVg6ghEbeseFL-OOEudI.roa (hash: su5vjqQnoBgVAVEbXkHU+T0GhwXhzdquZDKzgBwrhQ4=)
2: cXHYtM9nc7WfBzLg6ejSWpt3P64.crl (hash: fqp6Z+4CP8+Topko7NDEiYdxKY1V6NZacRg5w7z3q0Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/9778b6-dc2b-4586-91de-53a07368b9ea/1/cXHYtM9nc7WfBzLg6ejSWpt3P64.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/9778b6-dc2b-4586-91de-53a07368b9ea/1/cXHYtM9nc7WfBzLg6ejSWpt3P64.mft
rsync://rpki.ripe.net/repository/DEFAULT/cXHYtM9nc7WfBzLg6ejSWpt3P64.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 21:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7c:0a:07:18:12:8e:51:05:9c:f3:ec:75:24:b9:5c:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7171d8b4cf6773b59f0732e0e9e8d25a9b773fae
Validity
Not Before: Aug 5 21:01:28 2025 GMT
Not After : Aug 6 21:01:28 2025 GMT
Subject: CN=67690669bc82baf8a4be22e70e1864228274e379
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:25:7c:20:65:f4:cd:63:3c:f4:34:a7:a1:c7:
59:e6:49:ec:1b:b8:f1:1e:32:07:36:5f:31:28:1d:
6a:d1:c0:77:cf:25:ef:59:e4:e1:59:63:93:94:3c:
ad:7c:58:f9:ba:ba:80:41:06:18:98:52:aa:79:69:
f3:d5:7f:e2:73:96:69:ca:2c:20:35:e2:72:76:25:
ac:70:49:c6:a4:e8:2a:23:38:3e:b7:9d:87:da:ff:
44:e1:35:8b:36:8d:23:e4:07:77:f8:65:ea:56:10:
4f:60:e2:e9:96:7d:b7:07:d6:63:e4:2d:a0:28:4a:
78:a5:2f:86:99:39:5c:16:fa:ec:05:bb:bd:36:32:
07:cf:6b:06:4c:b3:56:f3:94:e8:e4:2a:62:5b:cc:
c3:e7:09:a2:be:45:09:36:1e:85:20:e7:56:a7:79:
51:5c:f3:af:86:98:2e:da:6f:66:ec:4e:6b:f3:ca:
27:29:38:4f:b6:9e:0b:c7:94:8e:6c:c4:7f:0c:d7:
23:27:da:73:7a:c1:70:af:35:05:f6:d4:f5:50:9e:
9c:f2:db:8c:29:b7:d3:0d:66:8a:0f:9e:8e:5e:89:
3a:b2:85:8c:1c:ad:68:38:eb:66:47:19:30:cf:d8:
56:38:28:dd:45:40:20:19:ed:84:a8:d7:72:4a:16:
bf:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:69:06:69:BC:82:BA:F8:A4:BE:22:E7:0E:18:64:22:82:74:E3:79
X509v3 Authority Key Identifier:
keyid:71:71:D8:B4:CF:67:73:B5:9F:07:32:E0:E9:E8:D2:5A:9B:77:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cXHYtM9nc7WfBzLg6ejSWpt3P64.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/9778b6-dc2b-4586-91de-53a07368b9ea/1/cXHYtM9nc7WfBzLg6ejSWpt3P64.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/9778b6-dc2b-4586-91de-53a07368b9ea/1/cXHYtM9nc7WfBzLg6ejSWpt3P64.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:99:b0:53:f3:7a:24:2d:f3:ab:32:14:c6:9e:03:e0:27:f2:
a8:95:e8:47:03:16:05:25:1f:1f:a1:fa:c2:b2:91:2d:5b:45:
ac:12:e3:a7:ce:dd:71:5c:40:31:a4:ac:09:99:54:36:4d:6a:
7b:ac:a6:a4:e7:c2:86:aa:b4:38:9b:97:ab:b2:8c:39:a9:0b:
40:ce:3b:09:8b:79:d3:71:cc:f6:13:31:3c:7b:b8:c4:86:89:
9e:0c:95:be:0f:fc:5e:f7:d1:ab:15:51:d4:f6:5f:4d:98:29:
81:3a:c4:0b:3a:67:19:f5:98:17:84:9a:36:6e:54:7b:a3:f3:
45:12:1b:71:ae:74:a4:9f:ed:22:79:0a:6c:2c:59:f5:b5:b5:
4e:67:a3:e3:00:93:41:67:56:0b:b7:8f:63:88:1e:70:4b:16:
a2:33:c0:79:0c:dd:57:4a:f7:2f:c5:aa:ec:08:11:7e:70:3c:
23:c6:84:81:bb:91:9c:2d:b5:4d:99:bb:6a:b6:a5:c2:10:b5:
b3:2d:04:92:54:e3:0f:ad:0e:47:04:70:02:9d:fa:09:c5:de:
68:6d:c4:68:2d:0b:ca:87:c7:79:56:86:6c:a5:10:e6:43:3d:
31:34:e9:1e:0d:a0:3c:7c:85:5e:5a:ca:a7:12:64:51:25:2a:
25:49:57:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 05:30:01 2025 by rpki-client