Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/4b4df7-d72b-474f-963f-59e6a6d4d576/1/CxsxjlBXocEDQWB83d2ttG1xq_U.mft
File: CxsxjlBXocEDQWB83d2ttG1xq_U.mft (raw, json)
Hash identifier: sYnFmms6YAcciaehhloIqlnojchi831dfBLmqaTXf9o=
Subject key identifier: E5:7D:25:97:30:ED:5E:2E:A8:04:C2:A6:07:48:98:A8:5F:77:91:D6
Authority key identifier: 0B:1B:31:8E:50:57:A1:C1:03:41:60:7C:DD:DD:AD:B4:6D:71:AB:F5
Certificate issuer: /CN=0b1b318e5057a1c10341607cddddadb46d71abf5
Certificate serial: 019A0035278E8723E1C297831FD4D2787813
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CxsxjlBXocEDQWB83d2ttG1xq_U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/4b4df7-d72b-474f-963f-59e6a6d4d576/1/CxsxjlBXocEDQWB83d2ttG1xq_U.mft
Manifest number: 16E6
Signing time: Mon 20 Oct 2025 06:01:14 +0000
Manifest this update: Mon 20 Oct 2025 06:01:14 +0000
Manifest next update: Tue 21 Oct 2025 06:01:14 +0000
Files and hashes: 1: CxsxjlBXocEDQWB83d2ttG1xq_U.crl (hash: 0kCp7rL4DQBcY3Z8iSWGlLxZsldmRpx5/9b5ddrJm8E=)
2: TO80eqDFXQYl6CGIoinTDRQ723A.roa (hash: s5/qxS+QcBwb4YurVep+bFST0F2tBLYaOg/4Lpz+Qgk=)
3: bQ7_HzmWbxe1bpqsnmG8t2z9J54.roa (hash: uTKgZb6MWbd79qCA3p5te2MUGcoD6xRmcaj1CluWZYI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/4b4df7-d72b-474f-963f-59e6a6d4d576/1/CxsxjlBXocEDQWB83d2ttG1xq_U.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/4b4df7-d72b-474f-963f-59e6a6d4d576/1/CxsxjlBXocEDQWB83d2ttG1xq_U.mft
rsync://rpki.ripe.net/repository/DEFAULT/CxsxjlBXocEDQWB83d2ttG1xq_U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 06:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:00:35:27:8e:87:23:e1:c2:97:83:1f:d4:d2:78:78:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b1b318e5057a1c10341607cddddadb46d71abf5
Validity
Not Before: Oct 20 06:01:14 2025 GMT
Not After : Oct 21 06:01:14 2025 GMT
Subject: CN=e57d259730ed5e2ea804c2a6074898a85f7791d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:c5:8e:41:b3:28:e7:5c:f8:3c:1d:1a:96:e1:
78:c5:28:9a:5e:de:de:e0:00:73:86:a5:43:01:17:
b6:80:a5:97:f4:c2:43:19:21:71:4a:7c:2f:5b:85:
b4:bf:46:1b:fb:11:90:b7:9c:61:25:b4:59:f3:64:
26:97:40:50:a0:39:6e:ba:b9:47:28:70:1a:95:0a:
bd:a5:10:c0:ce:f4:13:d6:ba:90:71:3f:02:30:79:
30:3f:3f:76:39:7c:13:93:b1:82:f8:3b:0f:f3:68:
97:97:4e:c5:70:32:5a:2b:1f:01:b9:d6:7a:e9:4c:
15:0d:4f:21:22:17:0e:17:91:dd:6a:cd:cc:d6:c7:
fc:1c:bb:5e:77:a4:6c:50:57:d7:a5:3a:81:25:ae:
7d:e4:63:27:1a:1c:52:88:9c:08:e3:b5:37:70:4e:
4a:6d:5d:96:33:0e:d4:34:2e:08:7e:22:0b:10:ff:
68:d9:e8:62:29:83:3f:32:a3:16:da:57:0e:ef:86:
3a:63:8e:88:9d:58:82:f0:28:48:65:8c:90:c4:20:
73:e4:f6:bf:b1:71:7a:45:1c:02:3a:76:ef:63:18:
cd:fe:9d:7c:e4:1a:1b:ef:e0:8a:34:9f:94:6e:eb:
5c:a3:1b:d1:c3:cf:07:66:26:77:5d:ed:d2:65:8a:
9b:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:7D:25:97:30:ED:5E:2E:A8:04:C2:A6:07:48:98:A8:5F:77:91:D6
X509v3 Authority Key Identifier:
keyid:0B:1B:31:8E:50:57:A1:C1:03:41:60:7C:DD:DD:AD:B4:6D:71:AB:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CxsxjlBXocEDQWB83d2ttG1xq_U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/4b4df7-d72b-474f-963f-59e6a6d4d576/1/CxsxjlBXocEDQWB83d2ttG1xq_U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/4b4df7-d72b-474f-963f-59e6a6d4d576/1/CxsxjlBXocEDQWB83d2ttG1xq_U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:98:bc:43:88:3c:40:0f:38:27:7c:76:2d:54:bb:5e:68:99:
73:cd:2e:33:1a:55:e0:1f:5e:58:38:79:b8:d6:ba:af:8b:6a:
52:b7:ff:4d:27:35:d7:d1:a4:8c:05:ff:87:41:5b:18:50:97:
f9:3c:18:c6:8f:9a:46:e3:d0:bb:e5:19:9d:5e:dd:19:0a:23:
ee:57:1d:7f:9d:14:d9:77:0f:c2:31:d0:e1:8b:b0:42:65:5e:
ff:a9:8f:be:85:d8:fe:4e:1d:f1:b8:e2:e9:9f:10:43:65:9e:
36:3d:7e:1b:d8:52:af:b4:0a:bf:7a:6b:8d:2e:3a:29:4b:cd:
ce:79:6f:ae:79:a6:74:c2:b8:44:02:4c:58:5e:d3:09:7e:44:
2f:c0:d8:c2:f7:cf:62:d9:b2:c5:e8:3b:5a:d8:e3:a2:f8:ec:
fc:62:35:5b:48:36:22:02:8c:6e:77:23:86:7c:82:64:75:7d:
41:1a:6d:e8:26:8c:1e:68:e9:c9:68:03:b7:29:ac:b2:0c:53:
02:84:57:f9:24:0c:0e:a7:2b:26:b0:78:4b:da:7a:84:d4:1a:
08:f2:bb:ca:ad:00:67:3d:5f:39:14:96:87:b5:85:b5:20:da:
52:8f:c7:a6:0c:d0:a9:c5:cf:11:30:06:0d:11:5b:42:8f:a0:
69:70:93:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 15:50:46 2025 by rpki-client