Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/9620ce-43f0-42bc-af59-435bda5bd048/1/cxU1ourrxowWV6r89aeIyHUdm2I.mft
File: cxU1ourrxowWV6r89aeIyHUdm2I.mft (raw, json)
Hash identifier: VpJCSUp83cYoSRfZQ0ygHIgoQiXk9TFXIM+UtFGGsME=
Subject key identifier: 43:D0:B7:C9:D2:77:43:93:55:15:12:87:1A:F1:C0:45:71:8E:07:97
Authority key identifier: 73:15:35:A2:EA:EB:C6:8C:16:57:AA:FC:F5:A7:88:C8:75:1D:9B:62
Certificate issuer: /CN=731535a2eaebc68c1657aafcf5a788c8751d9b62
Certificate serial: 0198D473D49716621BD8CC624E78B5E2F72C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cxU1ourrxowWV6r89aeIyHUdm2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/9620ce-43f0-42bc-af59-435bda5bd048/1/cxU1ourrxowWV6r89aeIyHUdm2I.mft
Manifest number: 1525
Signing time: Sat 23 Aug 2025 01:03:37 +0000
Manifest this update: Sat 23 Aug 2025 01:03:37 +0000
Manifest next update: Sun 24 Aug 2025 01:03:37 +0000
Files and hashes: 1: JsiUY4utQyGLQkMCxP2vm1DnYkM.roa (hash: t9dxvm0FP5XnZVQ8+CoMdOpLdpUdElKJXDgxciqeHNU=)
2: VS0vQXyTV30uKtTHz_uaATpRmNI.roa (hash: bd6zfzzABUQlbCGm2yH6xBJFNFWYvrN9JXn/fjw4bhU=)
3: cxU1ourrxowWV6r89aeIyHUdm2I.crl (hash: 1AdmGQKAYa5rUINscj3qUNSvyoi7j9LIBmvwkFjIO/o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/9620ce-43f0-42bc-af59-435bda5bd048/1/cxU1ourrxowWV6r89aeIyHUdm2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/9620ce-43f0-42bc-af59-435bda5bd048/1/cxU1ourrxowWV6r89aeIyHUdm2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/cxU1ourrxowWV6r89aeIyHUdm2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:03:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:73:d4:97:16:62:1b:d8:cc:62:4e:78:b5:e2:f7:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=731535a2eaebc68c1657aafcf5a788c8751d9b62
Validity
Not Before: Aug 23 01:03:37 2025 GMT
Not After : Aug 24 01:03:37 2025 GMT
Subject: CN=43d0b7c9d2774393551512871af1c045718e0797
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:b0:6e:ab:3c:da:dc:76:67:86:7d:51:de:3b:
11:e1:fa:67:58:be:52:93:3d:7a:4e:62:b7:96:a3:
23:72:21:de:fe:c4:32:97:7f:67:44:4e:8e:9c:c1:
20:bf:e2:17:f2:85:48:ec:ae:14:59:b6:58:2c:1d:
fa:cd:54:fa:09:53:8a:fc:89:f4:df:01:f8:cb:15:
13:cc:9b:c8:34:8c:40:78:eb:d2:32:1a:56:b9:17:
76:1d:b4:09:00:b2:35:d3:59:3b:81:0e:8e:ce:25:
b8:71:13:f8:7b:f4:8f:3f:51:d7:e4:38:1c:ac:d1:
5a:3c:6b:78:92:98:fa:74:54:23:a8:3a:79:f0:16:
3a:a8:34:47:58:c3:60:9b:95:7b:ac:52:bc:10:c7:
c0:55:35:b5:3c:c3:66:f0:78:5d:95:ae:11:a6:c9:
39:b1:8e:9a:c7:a0:80:a3:08:b5:a0:c6:ac:19:af:
5d:20:69:7b:1f:62:02:a4:ba:dc:37:38:e0:ab:98:
ac:1b:1c:a0:18:2d:01:cf:d2:85:9a:41:ff:ba:ea:
47:99:49:f3:8f:bd:98:67:9d:6a:5a:71:c2:0f:b2:
a1:45:9f:50:30:80:fa:c1:19:c3:85:65:6d:04:79:
ff:9e:a1:91:88:26:f1:4c:a7:86:1c:ee:21:f9:39:
26:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:D0:B7:C9:D2:77:43:93:55:15:12:87:1A:F1:C0:45:71:8E:07:97
X509v3 Authority Key Identifier:
keyid:73:15:35:A2:EA:EB:C6:8C:16:57:AA:FC:F5:A7:88:C8:75:1D:9B:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cxU1ourrxowWV6r89aeIyHUdm2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/9620ce-43f0-42bc-af59-435bda5bd048/1/cxU1ourrxowWV6r89aeIyHUdm2I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/9620ce-43f0-42bc-af59-435bda5bd048/1/cxU1ourrxowWV6r89aeIyHUdm2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:b6:d2:3f:92:82:91:ef:27:07:13:16:e8:96:7b:63:4a:34:
5d:b2:7c:7b:d3:59:0e:7e:a4:84:57:47:35:0a:e8:5d:1e:7d:
b5:14:ae:8d:07:aa:34:69:d2:40:10:5a:f3:52:50:1a:0a:02:
d2:8a:e4:dd:0f:b4:cd:6e:a5:a6:6f:cc:4a:25:fc:d7:5a:99:
cf:fe:3b:25:55:c9:75:5d:50:ff:82:3e:53:5d:d3:6e:74:9a:
d9:30:dd:b5:d4:d8:3e:cb:9a:db:3c:0b:5a:b4:44:28:50:4f:
8c:0e:ba:e8:93:bf:5f:65:54:66:90:39:2a:57:af:02:1f:bd:
42:a7:39:6d:85:ea:4b:00:68:31:25:a6:33:a5:67:35:0e:0a:
b8:c8:fa:eb:95:75:c3:3b:b3:bf:8d:8e:52:99:7d:8a:6e:30:
33:5a:6c:fd:f9:24:49:53:a6:b1:10:bb:4c:fd:90:08:c5:30:
62:48:23:80:7f:35:e9:0f:15:2a:cd:a4:8e:79:11:81:90:fd:
4d:e6:79:71:3c:45:db:82:67:dc:11:f0:6c:3d:74:e3:0a:9e:
22:12:10:2f:8a:1c:77:34:74:a6:43:24:90:7d:96:f2:34:f6:
a5:e1:ea:f0:d6:d6:5f:e7:80:57:c9:94:a1:9c:7f:48:a5:a4:
57:ef:88:48
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjUc9SXFmIb2MxiTni14vcsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDczMTUzNWEyZWFlYmM2OGMxNjU3YWFmY2Y1YTc4OGM4NzUx
ZDliNjIwHhcNMjUwODIzMDEwMzM3WhcNMjUwODI0MDEwMzM3WjAzMTEwLwYDVQQD
Eyg0M2QwYjdjOWQyNzc0MzkzNTUxNTEyODcxYWYxYzA0NTcxOGUwNzk3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv7Buqzza3HZnhn1R3jsR4fpnWL5S
kz16TmK3lqMjciHe/sQyl39nRE6OnMEgv+IX8oVI7K4UWbZYLB36zVT6CVOK/In0
3wH4yxUTzJvINIxAeOvSMhpWuRd2HbQJALI101k7gQ6OziW4cRP4e/SPP1HX5Dgc
rNFaPGt4kpj6dFQjqDp58BY6qDRHWMNgm5V7rFK8EMfAVTW1PMNm8Hhdla4Rpsk5
sY6ax6CAowi1oMasGa9dIGl7H2ICpLrcNzjgq5isGxygGC0Bz9KFmkH/uupHmUnz
j72YZ51qWnHCD7KhRZ9QMID6wRnDhWVtBHn/nqGRiCbxTKeGHO4h+TkmNQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEPQt8nSd0OTVRUShxrxwEVxjgeXMB8GA1UdIwQY
MBaAFHMVNaLq68aMFleq/PWniMh1HZtiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY3hVMW91cnJ4b3dXVjZyODlhZUl5SFVkbTJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZS85NjIwY2UtNDNmMC00MmJjLWFmNTkt
NDM1YmRhNWJkMDQ4LzEvY3hVMW91cnJ4b3dXVjZyODlhZUl5SFVkbTJJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZS85NjIwY2UtNDNmMC00MmJjLWFmNTktNDM1YmRhNWJkMDQ4
LzEvY3hVMW91cnJ4b3dXVjZyODlhZUl5SFVkbTJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAT7bSP5KC
ke8nBxMW6JZ7Y0o0XbJ8e9NZDn6khFdHNQroXR59tRSujQeqNGnSQBBa81JQGgoC
0ork3Q+0zW6lpm/MSiX811qZz/47JVXJdV1Q/4I+U13TbnSa2TDdtdTYPsua2zwL
WrREKFBPjA666JO/X2VUZpA5KlevAh+9Qqc5bYXqSwBoMSWmM6VnNQ4KuMj665V1
wzuzv42OUpl9im4wM1ps/fkkSVOmsRC7TP2QCMUwYkgjgH816Q8VKs2kjnkRgZD9
TeZ5cTxF24Jn3BHwbD104wqeIhIQL4ocdzR0pkMkkH2W8jT2peHq8NbWX+eAV8mU
oZx/SKWkV++ISA==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:36:32 2025 by rpki-client