Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/4429a4-0b36-4ced-846f-e20a654fca95/1/cx2a1ATs2vpw6ppMnRC5gBgp6h8.mft
File: cx2a1ATs2vpw6ppMnRC5gBgp6h8.mft (raw, json)
Hash identifier: OyMU7CrDUx/7INaqgnTf2zotgHyxZiFXMCwEsx7GWV4=
Subject key identifier: 5F:D2:76:C4:A5:6E:2D:DE:7A:00:30:9A:01:9C:F8:DC:06:05:44:E5
Authority key identifier: 73:1D:9A:D4:04:EC:DA:FA:70:EA:9A:4C:9D:10:B9:80:18:29:EA:1F
Certificate issuer: /CN=731d9ad404ecdafa70ea9a4c9d10b9801829ea1f
Certificate serial: 0198D473DA93F8B59D7CDC9BF90ADD4A609A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cx2a1ATs2vpw6ppMnRC5gBgp6h8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/4429a4-0b36-4ced-846f-e20a654fca95/1/cx2a1ATs2vpw6ppMnRC5gBgp6h8.mft
Manifest number: 107A
Signing time: Sat 23 Aug 2025 01:03:39 +0000
Manifest this update: Sat 23 Aug 2025 01:03:39 +0000
Manifest next update: Sun 24 Aug 2025 01:03:39 +0000
Files and hashes: 1: 5kIp4bFmAr9lOCjBtU4-CSX7D0w.roa (hash: zS6XZLioq/dFM9rTCOe5dC9siPtnmQmcYc9glHbFesE=)
2: WZoVc8N-YD-8FMKAITneTMD8_4k.roa (hash: d546sm0t0rb46HppUnfY7MCyS/rnnp2kV23n3HY9/us=)
3: bZJxdCs0gWqYryxwQS8EGlLZ93c.roa (hash: ZMF+prTjcHa6DFcnagp286MUC0TlcS1uVKhgY1MMJNc=)
4: cx2a1ATs2vpw6ppMnRC5gBgp6h8.crl (hash: 33Wqzm33n6Y/5ev/uwn7I8VXyW1rNFOqLJnsZ763fWM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/4429a4-0b36-4ced-846f-e20a654fca95/1/cx2a1ATs2vpw6ppMnRC5gBgp6h8.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/4429a4-0b36-4ced-846f-e20a654fca95/1/cx2a1ATs2vpw6ppMnRC5gBgp6h8.mft
rsync://rpki.ripe.net/repository/DEFAULT/cx2a1ATs2vpw6ppMnRC5gBgp6h8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:03:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:73:da:93:f8:b5:9d:7c:dc:9b:f9:0a:dd:4a:60:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=731d9ad404ecdafa70ea9a4c9d10b9801829ea1f
Validity
Not Before: Aug 23 01:03:39 2025 GMT
Not After : Aug 24 01:03:39 2025 GMT
Subject: CN=5fd276c4a56e2dde7a00309a019cf8dc060544e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:2c:b7:b1:aa:8a:73:12:b1:ac:19:75:a5:ea:
0f:08:6c:3f:5d:29:31:d8:52:5e:66:e0:cc:f4:f0:
e9:f0:fb:d4:20:42:bd:c7:d1:d2:11:d8:32:86:de:
3b:5e:ad:f4:e3:89:16:48:e2:b2:c2:cc:76:ed:11:
60:e2:92:7d:fb:19:8c:d9:0e:56:76:b8:b5:9e:a1:
fa:12:e2:c3:00:f8:51:92:13:f9:99:d4:fb:ef:c5:
66:3c:57:d9:80:4d:42:67:13:84:76:a6:35:36:0e:
93:53:2d:46:7b:a9:12:3e:65:67:ac:00:a6:9f:7b:
e5:40:ef:b8:0b:17:98:6c:52:73:c0:33:d7:c6:96:
de:25:14:c3:03:ac:82:a6:bf:32:ab:70:8a:2a:d6:
cd:15:4d:58:d7:27:41:c1:dc:81:2f:ca:de:e5:fd:
e7:60:20:2d:12:1c:9d:1d:05:61:98:08:87:6f:a4:
a5:e5:a5:47:76:00:16:59:1c:51:34:27:5d:99:ab:
33:57:f6:4a:6e:ab:79:9f:5f:01:38:da:9c:3c:fe:
40:cf:a4:6a:fa:7a:42:cf:0a:a9:e5:49:99:c5:83:
b3:c1:83:ee:46:7d:b3:07:b3:71:e6:15:54:b2:21:
7c:4f:28:b3:34:81:6d:66:c1:be:b3:a0:31:af:1a:
d9:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:D2:76:C4:A5:6E:2D:DE:7A:00:30:9A:01:9C:F8:DC:06:05:44:E5
X509v3 Authority Key Identifier:
keyid:73:1D:9A:D4:04:EC:DA:FA:70:EA:9A:4C:9D:10:B9:80:18:29:EA:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cx2a1ATs2vpw6ppMnRC5gBgp6h8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/4429a4-0b36-4ced-846f-e20a654fca95/1/cx2a1ATs2vpw6ppMnRC5gBgp6h8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/4429a4-0b36-4ced-846f-e20a654fca95/1/cx2a1ATs2vpw6ppMnRC5gBgp6h8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:58:64:11:4d:3d:0d:ff:04:35:48:1c:a3:95:9d:6d:b1:2d:
d2:bd:52:00:ce:49:be:b5:90:2e:d1:86:dc:9d:e9:1d:aa:81:
1c:0b:90:f7:ef:01:cc:5d:4c:a9:34:7c:01:8f:6f:70:af:6e:
6b:63:51:0e:c9:74:83:26:6b:7a:19:67:f1:83:96:b6:4b:d9:
45:b1:83:fd:fb:ab:75:c3:5f:6e:57:14:e0:9a:d4:0c:a5:c3:
81:62:86:c5:fb:03:d2:87:36:9d:61:b8:95:ed:b8:72:dc:d0:
ff:13:09:fd:51:be:e8:8a:69:01:d9:a6:9c:e4:c9:42:e5:3c:
c3:1f:9c:e5:04:80:a4:8c:89:46:f8:9f:e1:57:7d:e7:b4:80:
c7:56:a3:6d:01:1e:99:cc:de:46:14:37:69:0c:d1:d4:29:d3:
ae:2c:2e:b0:ac:f4:b8:93:a8:96:50:37:ef:e9:19:da:c3:ee:
19:63:ee:f7:40:c3:21:9f:01:73:76:ca:12:fa:61:64:b6:f1:
84:7e:17:d5:48:96:7e:49:99:97:6d:53:9a:65:50:9c:09:68:
61:5c:5f:bc:f1:50:6a:b1:9b:ab:73:16:53:87:d8:40:e4:20:
2a:05:8d:76:69:76:f1:f5:b6:14:4c:2f:f0:0f:97:96:12:16:
0a:e4:68:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:50:23 2025 by rpki-client