Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/4b4df7-d72b-474f-963f-59e6a6d4d576/1/CxsxjlBXocEDQWB83d2ttG1xq_U.mft
File: CxsxjlBXocEDQWB83d2ttG1xq_U.mft (raw, json)
Hash identifier: C+DyjE5J+wkp5TZPqrDAhOWTvkgvFMDlCrfQWA9wQf0=
Subject key identifier: 5C:DF:1E:1A:F8:F2:CE:B9:74:21:A2:0D:C1:A9:C6:0A:CE:70:A2:02
Authority key identifier: 0B:1B:31:8E:50:57:A1:C1:03:41:60:7C:DD:DD:AD:B4:6D:71:AB:F5
Certificate issuer: /CN=0b1b318e5057a1c10341607cddddadb46d71abf5
Certificate serial: 0197B77C063B9884A1B846CF041A169FAB96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CxsxjlBXocEDQWB83d2ttG1xq_U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/4b4df7-d72b-474f-963f-59e6a6d4d576/1/CxsxjlBXocEDQWB83d2ttG1xq_U.mft
Manifest number: 15B7
Signing time: Sat 28 Jun 2025 17:00:47 +0000
Manifest this update: Sat 28 Jun 2025 17:00:47 +0000
Manifest next update: Sun 29 Jun 2025 17:00:47 +0000
Files and hashes: 1: CxsxjlBXocEDQWB83d2ttG1xq_U.crl (hash: IRJ2a/fQkFJR2ftYjTyJUoaJpKE2uGcjz9Wjeleea14=)
2: bQ7_HzmWbxe1bpqsnmG8t2z9J54.roa (hash: uTKgZb6MWbd79qCA3p5te2MUGcoD6xRmcaj1CluWZYI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/4b4df7-d72b-474f-963f-59e6a6d4d576/1/CxsxjlBXocEDQWB83d2ttG1xq_U.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/4b4df7-d72b-474f-963f-59e6a6d4d576/1/CxsxjlBXocEDQWB83d2ttG1xq_U.mft
rsync://rpki.ripe.net/repository/DEFAULT/CxsxjlBXocEDQWB83d2ttG1xq_U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:06:3b:98:84:a1:b8:46:cf:04:1a:16:9f:ab:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b1b318e5057a1c10341607cddddadb46d71abf5
Validity
Not Before: Jun 28 17:00:47 2025 GMT
Not After : Jun 29 17:00:47 2025 GMT
Subject: CN=5cdf1e1af8f2ceb97421a20dc1a9c60ace70a202
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:4a:b8:1a:a0:cf:64:29:94:64:5f:ed:5c:d6:
90:57:a3:ab:de:b9:be:c2:b4:3b:43:52:b4:34:66:
b4:70:52:8a:5f:2a:3a:c6:a5:e1:72:72:d5:ae:1e:
5a:9d:3c:68:b0:e2:48:d7:43:03:4d:d3:00:51:b8:
b4:da:fe:64:99:3a:ea:d0:09:ed:47:a5:5e:f8:7b:
35:b3:46:c4:9a:97:67:81:9e:29:6e:4d:ef:66:8c:
8e:2c:bc:5f:70:85:77:ea:38:43:c8:19:65:25:fd:
bf:8c:73:d2:83:4a:8b:32:24:5f:9b:48:1e:0f:4b:
c6:93:b5:91:5c:3e:87:73:44:b2:3b:89:a3:0c:58:
b3:66:af:fa:7c:c9:c8:0b:2a:4f:13:71:af:2e:59:
c1:9a:36:ec:35:a8:00:9f:18:56:d7:b7:3b:d2:a1:
b3:e7:a3:07:73:4d:a1:38:41:80:51:9f:04:dd:f5:
97:3f:9a:04:f0:f8:a6:40:01:2e:33:6b:66:a8:08:
2e:8e:18:6c:ad:31:92:bc:d6:8a:f0:c1:72:7f:1f:
9d:4b:56:32:e9:22:34:33:3a:dd:7e:a9:5f:37:45:
09:17:ea:e7:96:0b:5c:0e:e4:b3:9f:f3:c4:63:ed:
9c:e1:28:84:64:3c:eb:2d:d4:38:b2:4b:4e:ce:f8:
e4:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:DF:1E:1A:F8:F2:CE:B9:74:21:A2:0D:C1:A9:C6:0A:CE:70:A2:02
X509v3 Authority Key Identifier:
keyid:0B:1B:31:8E:50:57:A1:C1:03:41:60:7C:DD:DD:AD:B4:6D:71:AB:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CxsxjlBXocEDQWB83d2ttG1xq_U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/4b4df7-d72b-474f-963f-59e6a6d4d576/1/CxsxjlBXocEDQWB83d2ttG1xq_U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/4b4df7-d72b-474f-963f-59e6a6d4d576/1/CxsxjlBXocEDQWB83d2ttG1xq_U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:11:d5:fa:3d:86:e9:18:9a:37:21:34:75:ac:87:68:99:03:
5f:0a:df:c7:4b:60:d7:0e:be:56:ca:dc:0e:a3:2b:d3:d5:ae:
3c:ef:db:8f:0a:3a:e5:69:ef:23:f5:89:01:61:13:73:11:53:
08:97:7f:6e:47:e6:17:68:78:7c:9a:0d:6f:e1:89:76:17:3c:
0a:46:78:47:35:3a:bc:c9:62:e6:62:95:ca:05:c0:c5:a8:39:
85:79:4b:e9:69:8b:c6:f2:04:82:62:51:52:3a:9c:32:ba:43:
de:c1:f2:11:8d:10:4f:1b:d8:6b:2a:37:52:2b:8c:5a:28:95:
71:96:63:0a:f6:4d:51:15:20:d1:b4:c4:02:b5:22:da:d9:d2:
94:78:a3:e5:33:ba:7e:d8:ed:11:c2:e8:d7:fa:5d:fc:35:95:
34:79:60:08:67:99:db:c0:9c:e9:1f:c5:32:f3:0e:ae:49:a0:
ad:4d:dc:2f:03:8e:54:2a:1b:f9:85:66:98:53:a8:84:f6:f6:
f4:c9:4b:ac:19:72:49:00:a7:a5:dd:69:a4:b8:e6:13:b7:d4:
d4:4e:33:4c:72:94:47:2d:64:00:68:fa:03:78:4c:62:5b:38:
9c:06:6b:80:8a:8d:7e:5a:0a:c1:e9:e0:81:7b:fa:c0:cf:70:
06:d7:e7:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:47:37 2025 by rpki-client