Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/7e3816-8c8e-47a0-94ec-4fc9f0d2aca3/1/CXtdFJCzhaL4DCoDJP6Y41EJFJA.mft
File: CXtdFJCzhaL4DCoDJP6Y41EJFJA.mft (raw, json)
Hash identifier: 2me+jiXzV5ZA+vGsoWKHpccJxoeeyyXZGzFoxw8f1lU=
Subject key identifier: C1:42:4C:07:BE:E4:07:7A:DB:6B:BD:8E:82:57:54:B7:F8:40:F7:88
Authority key identifier: 09:7B:5D:14:90:B3:85:A2:F8:0C:2A:03:24:FE:98:E3:51:09:14:90
Certificate issuer: /CN=097b5d1490b385a2f80c2a0324fe98e351091490
Certificate serial: 0198D69898A8DB86F23CEAABDF1E86B41E49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXtdFJCzhaL4DCoDJP6Y41EJFJA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/7e3816-8c8e-47a0-94ec-4fc9f0d2aca3/1/CXtdFJCzhaL4DCoDJP6Y41EJFJA.mft
Manifest number: 080D
Signing time: Sat 23 Aug 2025 11:03:01 +0000
Manifest this update: Sat 23 Aug 2025 11:03:01 +0000
Manifest next update: Sun 24 Aug 2025 11:03:01 +0000
Files and hashes: 1: 4NykHTKnfSIJ0q7_RZtsAwpsqKA.roa (hash: w55fxLVLcagKRRaTKAUle3eBEN7JDI5LPLVo9zNJXVU=)
2: CXtdFJCzhaL4DCoDJP6Y41EJFJA.crl (hash: oG6+og7+ehg5p+5nbIglriJhOXns6myEXB+TMWbKHsY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/7e3816-8c8e-47a0-94ec-4fc9f0d2aca3/1/CXtdFJCzhaL4DCoDJP6Y41EJFJA.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/7e3816-8c8e-47a0-94ec-4fc9f0d2aca3/1/CXtdFJCzhaL4DCoDJP6Y41EJFJA.mft
rsync://rpki.ripe.net/repository/DEFAULT/CXtdFJCzhaL4DCoDJP6Y41EJFJA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:98:98:a8:db:86:f2:3c:ea:ab:df:1e:86:b4:1e:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097b5d1490b385a2f80c2a0324fe98e351091490
Validity
Not Before: Aug 23 11:03:01 2025 GMT
Not After : Aug 24 11:03:01 2025 GMT
Subject: CN=c1424c07bee4077adb6bbd8e825754b7f840f788
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:1c:39:27:02:aa:72:f6:bf:b7:cf:c0:c9:81:
4e:98:5e:04:49:88:5c:42:1c:da:15:b9:44:ca:25:
d3:9d:3b:86:e4:3f:e7:a6:02:13:a6:ae:e4:8f:f8:
0d:e2:c7:23:44:15:3f:6a:82:69:bb:e5:c3:0f:73:
d0:61:db:33:01:c1:9e:6c:a5:4d:eb:11:fa:d1:91:
07:14:b0:68:dd:27:15:1a:74:85:f6:21:cd:c4:96:
b2:62:84:a1:ab:1b:fc:cb:58:a4:a4:c9:f8:15:0b:
5c:88:5a:75:7c:59:92:1f:d0:f1:1c:c9:6a:1f:9b:
ad:7f:cc:98:5f:31:13:82:76:e8:46:d6:13:3c:5e:
df:d8:43:07:3a:b9:20:fa:57:64:7c:23:e0:81:d5:
52:c7:b1:77:96:1b:5c:ec:68:d6:87:45:41:be:51:
db:93:7b:20:e2:fd:61:51:c6:37:a5:e6:62:ce:86:
01:a8:03:bb:eb:52:47:75:c2:9e:0e:6b:da:c6:dd:
aa:90:6c:cf:4d:4c:79:7c:93:5e:54:db:cd:76:ca:
e4:c4:ab:f4:28:2a:f8:f6:f5:dc:be:f1:4e:2c:00:
23:b5:53:c4:93:6f:f0:ec:1c:dc:8d:41:3a:bd:36:
b3:b3:54:ea:cd:7d:ee:69:d5:02:3d:0e:7b:69:ab:
5d:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:42:4C:07:BE:E4:07:7A:DB:6B:BD:8E:82:57:54:B7:F8:40:F7:88
X509v3 Authority Key Identifier:
keyid:09:7B:5D:14:90:B3:85:A2:F8:0C:2A:03:24:FE:98:E3:51:09:14:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXtdFJCzhaL4DCoDJP6Y41EJFJA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/7e3816-8c8e-47a0-94ec-4fc9f0d2aca3/1/CXtdFJCzhaL4DCoDJP6Y41EJFJA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/7e3816-8c8e-47a0-94ec-4fc9f0d2aca3/1/CXtdFJCzhaL4DCoDJP6Y41EJFJA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:7d:a9:bc:53:23:e2:8d:23:d4:3f:0e:7f:cc:d6:79:00:ed:
b7:2e:54:87:2a:5e:25:10:ed:c5:fb:c1:9b:55:52:57:fa:76:
80:6a:e0:a3:fd:d9:24:f2:8f:b3:d9:b1:af:eb:d6:10:7d:97:
b8:37:60:05:72:df:2b:4d:56:09:44:a5:7d:31:2b:14:2e:0d:
b3:99:1e:aa:79:c2:1d:5a:74:52:19:ee:f5:f0:dd:0d:3f:c1:
01:2d:96:e6:0f:87:92:6c:47:e0:d3:dc:f7:09:06:f3:d5:4b:
ca:0a:87:7f:c1:f7:de:30:e9:49:b4:58:e4:85:a5:42:e1:6a:
18:87:ac:ac:40:c5:40:da:7d:76:94:52:65:84:48:9b:4f:2d:
cc:30:09:03:46:b3:15:c8:12:92:4e:7a:5b:db:97:e1:fa:03:
47:89:0d:f5:5f:82:8f:48:0d:7e:b2:1d:53:f3:77:ee:45:ce:
9e:07:23:af:0b:aa:1b:ed:a8:94:3f:2b:86:53:8d:20:36:2d:
74:90:a2:9d:89:f6:75:fc:9f:81:8b:b9:c9:f3:83:a3:df:23:
fa:c2:15:e4:d1:62:8f:ec:38:b5:f0:01:50:be:8c:b8:3f:aa:
4a:17:f2:3a:05:48:12:5a:5c:80:e8:a9:23:83:c5:8c:11:a1:
cb:a4:f3:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:38:28 2025 by rpki-client