Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/9620ce-43f0-42bc-af59-435bda5bd048/1/cxU1ourrxowWV6r89aeIyHUdm2I.mft
File: cxU1ourrxowWV6r89aeIyHUdm2I.mft (raw, json)
Hash identifier: fFKlX9ZT2KvgENnEdbme3n/TxlBKPT1uJG7aMhMO8cA=
Subject key identifier: D8:50:EC:49:2C:73:DE:1D:E7:4F:5C:01:02:06:E6:FC:E3:A1:A4:C5
Authority key identifier: 73:15:35:A2:EA:EB:C6:8C:16:57:AA:FC:F5:A7:88:C8:75:1D:9B:62
Certificate issuer: /CN=731535a2eaebc68c1657aafcf5a788c8751d9b62
Certificate serial: 0199FDD9FC4BADB25415247042D394BB6699
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cxU1ourrxowWV6r89aeIyHUdm2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/9620ce-43f0-42bc-af59-435bda5bd048/1/cxU1ourrxowWV6r89aeIyHUdm2I.mft
Manifest number: 15BF
Signing time: Sun 19 Oct 2025 19:02:25 +0000
Manifest this update: Sun 19 Oct 2025 19:02:25 +0000
Manifest next update: Mon 20 Oct 2025 19:02:25 +0000
Files and hashes: 1: JsiUY4utQyGLQkMCxP2vm1DnYkM.roa (hash: t9dxvm0FP5XnZVQ8+CoMdOpLdpUdElKJXDgxciqeHNU=)
2: VS0vQXyTV30uKtTHz_uaATpRmNI.roa (hash: bd6zfzzABUQlbCGm2yH6xBJFNFWYvrN9JXn/fjw4bhU=)
3: cxU1ourrxowWV6r89aeIyHUdm2I.crl (hash: BrwW7rmTIYCK2DUNeGYt8vqm5djHDm+q1wdTUyAQOKQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/9620ce-43f0-42bc-af59-435bda5bd048/1/cxU1ourrxowWV6r89aeIyHUdm2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/9620ce-43f0-42bc-af59-435bda5bd048/1/cxU1ourrxowWV6r89aeIyHUdm2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/cxU1ourrxowWV6r89aeIyHUdm2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d9:fc:4b:ad:b2:54:15:24:70:42:d3:94:bb:66:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=731535a2eaebc68c1657aafcf5a788c8751d9b62
Validity
Not Before: Oct 19 19:02:25 2025 GMT
Not After : Oct 20 19:02:25 2025 GMT
Subject: CN=d850ec492c73de1de74f5c010206e6fce3a1a4c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:84:d9:95:f2:1b:44:62:be:3a:75:4b:52:f4:
37:7f:6b:d6:2d:63:ec:eb:85:85:ed:f9:17:64:dd:
19:b6:80:8a:aa:7d:c4:38:97:1b:fa:9c:bc:bf:26:
fc:0d:a3:1b:13:06:cb:f8:81:cd:39:8b:7f:6b:f6:
4d:2e:37:2e:49:db:71:e3:13:b7:a4:85:ef:48:db:
82:84:0e:54:17:d0:fc:57:de:b7:e8:e3:64:0d:2e:
47:5b:ba:4f:73:ba:05:ce:c7:17:3d:0e:50:6c:42:
f0:26:3e:c6:d0:cc:74:ff:0d:31:19:88:cb:a0:bd:
af:71:eb:3e:0d:74:9d:15:71:f7:b4:17:7c:56:c2:
40:97:92:c5:78:50:be:91:97:94:d0:85:07:be:92:
dd:0e:39:fe:c8:e0:41:04:42:31:42:31:4d:95:f4:
28:16:65:93:08:f7:d8:2d:de:46:40:fc:ce:6e:72:
92:24:8a:48:00:69:0e:b0:39:5d:32:f7:e9:8e:e2:
88:34:d8:e4:a2:27:f7:de:0c:9b:60:4d:39:b4:2b:
35:08:c5:dc:98:76:30:f4:99:05:8f:ce:31:d3:32:
1f:15:d0:d8:70:54:3f:fd:bf:37:04:c8:a8:2c:92:
e4:77:e3:fe:27:38:54:ea:60:4e:18:c1:46:2f:16:
1f:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:50:EC:49:2C:73:DE:1D:E7:4F:5C:01:02:06:E6:FC:E3:A1:A4:C5
X509v3 Authority Key Identifier:
keyid:73:15:35:A2:EA:EB:C6:8C:16:57:AA:FC:F5:A7:88:C8:75:1D:9B:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cxU1ourrxowWV6r89aeIyHUdm2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/9620ce-43f0-42bc-af59-435bda5bd048/1/cxU1ourrxowWV6r89aeIyHUdm2I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/9620ce-43f0-42bc-af59-435bda5bd048/1/cxU1ourrxowWV6r89aeIyHUdm2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:80:db:eb:5d:95:a9:d8:da:b1:19:79:bc:25:08:2b:47:4b:
70:9d:82:c3:4a:37:eb:d4:d8:32:a6:67:28:bc:94:bd:60:78:
7e:14:e8:de:6e:0e:b1:97:a9:d5:66:f1:09:5b:1d:bf:f7:58:
a2:71:9f:2c:40:e0:e8:a3:ff:91:6f:ef:b7:77:53:05:b1:61:
80:40:c0:ee:9f:25:84:8d:9b:6d:5a:74:11:b1:cd:66:47:bb:
e6:76:b4:3f:7d:27:03:ab:64:63:0f:d6:3d:ef:db:4a:48:fa:
b0:9c:6b:75:fc:44:43:e4:96:b2:47:10:db:5b:94:2d:5a:a2:
07:fc:9e:61:4f:e6:a4:b8:f4:87:20:f4:67:dd:53:a3:90:c0:
dc:c9:86:75:db:15:a0:38:74:f6:d3:4b:d8:82:30:a6:51:6a:
2d:06:0b:db:c8:e5:3c:8b:d7:db:cd:0d:df:97:37:db:74:21:
95:b3:98:b5:65:4f:3f:1d:f5:6e:bc:0f:62:cd:04:90:cf:f5:
86:4d:11:80:27:6e:7e:6c:07:c3:66:77:72:8b:2d:13:ef:2f:
b2:2a:52:32:b5:f5:5e:e4:3b:ce:88:47:96:8a:cb:2c:8c:00:
9d:03:84:52:ed:91:20:08:b5:44:0b:81:d0:56:13:ce:ec:7a:
e0:fb:b1:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 21:12:13 2025 by rpki-client