
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/87702a-3af6-46c7-a123-a2e24f980b3f/1/CxhwyW7wlyOBH7iSUO6m66ljwN8.mft
File: CxhwyW7wlyOBH7iSUO6m66ljwN8.mft (raw, json)
Hash identifier: mn8TfPShRnD0xKNrBIU/VgTwBlhUJFzgKSYnODWmkuQ=
Subject key identifier: DC:D9:99:E9:B6:72:3B:FC:A8:AD:03:2A:12:A1:5F:57:2B:72:08:DD
Authority key identifier: 0B:18:70:C9:6E:F0:97:23:81:1F:B8:92:50:EE:A6:EB:A9:63:C0:DF
Certificate issuer: /CN=0b1870c96ef09723811fb89250eea6eba963c0df
Certificate serial: 0199FF22E653103D328C62164A05877C2D19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CxhwyW7wlyOBH7iSUO6m66ljwN8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/87702a-3af6-46c7-a123-a2e24f980b3f/1/CxhwyW7wlyOBH7iSUO6m66ljwN8.mft
Manifest number: 1680
Signing time: Mon 20 Oct 2025 01:01:41 +0000
Manifest this update: Mon 20 Oct 2025 01:01:41 +0000
Manifest next update: Tue 21 Oct 2025 01:01:41 +0000
Files and hashes: 1: 4R0hMhGbrDC4YVyzf1jrL8oQuI4.roa (hash: TLs9gVQTwy70mjzgj5kCuIcV2uNBgbxlOI07lSwnnow=)
2: CxhwyW7wlyOBH7iSUO6m66ljwN8.crl (hash: MsQJJQ2SpLd0NHIHfJlyT22mT1klPzGs/qDZomz//7k=)
3: cIX-WWQe1eTYBa5AEDfKv3ZFbSs.roa (hash: KXI7i+vv4GJ48vExO8crdEraeejXsQsIm7BOAxvY6pM=)
4: noPcixLpgkxwJ1ZxZM_fxPf4Csw.roa (hash: BthsLkB+ZFXPf15eE+Y7pQxlaiPPySEZY4ss84bAVsM=)
5: pkrI6iaUdda-z9WYMFjdcxpmXjo.roa (hash: hMCs1gjsYAVaOoAjArkJ6N1TgykfFMKnI+aiOTGukGc=)
6: tV6sObvzgTfPgUJ_zmLWZJP23Js.roa (hash: ruAGmOYz2wd7CtdLjtd2pZCz/+RLCcgBY+LOgFhOP3c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/87702a-3af6-46c7-a123-a2e24f980b3f/1/CxhwyW7wlyOBH7iSUO6m66ljwN8.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/87702a-3af6-46c7-a123-a2e24f980b3f/1/CxhwyW7wlyOBH7iSUO6m66ljwN8.mft
rsync://rpki.ripe.net/repository/DEFAULT/CxhwyW7wlyOBH7iSUO6m66ljwN8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:22:e6:53:10:3d:32:8c:62:16:4a:05:87:7c:2d:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b1870c96ef09723811fb89250eea6eba963c0df
Validity
Not Before: Oct 20 01:01:41 2025 GMT
Not After : Oct 21 01:01:41 2025 GMT
Subject: CN=dcd999e9b6723bfca8ad032a12a15f572b7208dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:5c:0a:8c:64:6d:86:e3:c0:d8:f8:91:bf:90:
39:48:4e:22:40:40:83:88:a9:ba:fa:28:93:e0:10:
c8:02:73:b5:61:eb:e7:fe:6e:47:26:e4:be:d5:d2:
f9:83:47:ff:d8:f6:80:c7:a7:f7:5c:4a:e4:a7:4e:
ee:ed:83:89:b4:83:20:9a:f2:e5:ba:fc:0b:77:6e:
5d:68:17:62:62:e6:0b:24:d8:5c:af:7a:0c:cd:0a:
99:94:5a:10:6a:55:cb:10:a9:06:fa:fd:17:ab:83:
14:ae:35:80:a1:a9:32:10:6c:3f:85:8f:15:10:de:
bc:e4:19:b0:10:bb:80:1c:52:be:6c:b8:aa:a6:be:
61:66:50:27:2b:8d:fd:cb:39:db:f3:45:6a:ff:38:
2f:f3:43:54:7a:ff:f8:e6:96:0b:dd:c0:64:16:c7:
cd:47:02:ff:03:08:0c:9a:a6:d6:57:14:04:65:31:
ed:be:52:f6:df:7c:b7:f9:71:eb:56:28:52:7a:8a:
00:a0:42:63:4e:62:ce:62:05:aa:b4:b7:e4:08:d8:
ea:7f:97:6b:ab:36:14:f3:3b:90:c4:38:7d:62:40:
0c:d1:98:b7:ce:5c:ab:db:8b:e1:1a:4b:c2:b4:35:
5a:28:77:97:84:9f:5d:34:d4:8a:1e:e4:8f:08:45:
ef:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:D9:99:E9:B6:72:3B:FC:A8:AD:03:2A:12:A1:5F:57:2B:72:08:DD
X509v3 Authority Key Identifier:
keyid:0B:18:70:C9:6E:F0:97:23:81:1F:B8:92:50:EE:A6:EB:A9:63:C0:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CxhwyW7wlyOBH7iSUO6m66ljwN8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/87702a-3af6-46c7-a123-a2e24f980b3f/1/CxhwyW7wlyOBH7iSUO6m66ljwN8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/87702a-3af6-46c7-a123-a2e24f980b3f/1/CxhwyW7wlyOBH7iSUO6m66ljwN8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:de:f7:44:de:61:6c:2b:fa:39:fa:ee:c0:73:7a:d7:7e:47:
92:81:64:66:53:1a:2f:da:ce:87:c5:ce:d3:86:fc:a1:c8:0a:
37:97:bb:54:2c:5a:dc:cc:d6:23:ec:44:7d:eb:16:56:be:28:
58:da:85:02:55:98:b6:f1:01:de:3c:08:27:0e:93:3a:5f:d5:
a9:c6:56:51:f6:5b:0b:44:37:6c:64:c1:7a:44:88:9c:42:f2:
58:9c:6c:f6:4a:bb:7d:05:51:f2:96:8e:15:c5:39:68:26:cc:
30:97:c9:cf:58:3e:8b:3b:c1:f8:81:5b:ae:ea:b2:fe:7d:9d:
ae:62:3c:4a:eb:46:0c:f5:fc:e1:1a:e0:aa:c4:ea:1c:f0:66:
7f:21:f6:cb:01:0c:2d:e9:51:c3:ed:09:31:a5:ea:fa:b6:7f:
fb:93:63:8c:71:87:b0:33:44:9d:69:ec:7b:16:da:47:4e:ae:
d7:1f:b7:fb:eb:b3:20:35:ab:fb:b2:59:0b:dd:80:8d:0a:4f:
d5:eb:9e:56:99:4e:7e:b2:45:71:43:a6:8a:4e:0d:b9:1e:88:
47:d5:a6:d0:73:c9:11:a4:00:98:5e:24:f7:c1:92:1f:08:f0:
33:3f:46:99:be:12:e1:80:56:75:5a:ba:cc:15:ee:3a:9e:e1:
7e:64:79:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:22:28 2025 by rpki-client