Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/172e0b-8cbb-402e-8f2c-8595b4500884/1/cxwTgoWLDclamtvqRyizH54iwNg.mft
File: cxwTgoWLDclamtvqRyizH54iwNg.mft (raw, json)
Hash identifier: GQrkr6N8BdzOqHmOLiZD/dwy86tZ+9hBwGGfpo+aAG8=
Subject key identifier: 5B:49:4D:0C:13:88:A7:CE:10:BD:33:68:48:ED:22:D1:40:F7:CE:C4
Authority key identifier: 73:1C:13:82:85:8B:0D:C9:5A:9A:DB:EA:47:28:B3:1F:9E:22:C0:D8
Certificate issuer: /CN=731c1382858b0dc95a9adbea4728b31f9e22c0d8
Certificate serial: 0197C61515CF86719EE3F05680130F0D102E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cxwTgoWLDclamtvqRyizH54iwNg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/172e0b-8cbb-402e-8f2c-8595b4500884/1/cxwTgoWLDclamtvqRyizH54iwNg.mft
Manifest number: 071A
Signing time: Tue 01 Jul 2025 13:02:39 +0000
Manifest this update: Tue 01 Jul 2025 13:02:39 +0000
Manifest next update: Wed 02 Jul 2025 13:02:39 +0000
Files and hashes: 1: cxwTgoWLDclamtvqRyizH54iwNg.crl (hash: f9lVPSyc5kPEG1eUBU9W1lzDqX6wuQJfsf87yfG3J+4=)
2: xsLt5XL-OWIaNdR6BZ8HbsppEGM.roa (hash: fVuO1qpyondG1qElrhxFzaCfBXaBgOTcL+nbs40PcY0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/172e0b-8cbb-402e-8f2c-8595b4500884/1/cxwTgoWLDclamtvqRyizH54iwNg.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/172e0b-8cbb-402e-8f2c-8595b4500884/1/cxwTgoWLDclamtvqRyizH54iwNg.mft
rsync://rpki.ripe.net/repository/DEFAULT/cxwTgoWLDclamtvqRyizH54iwNg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 02 Jul 2025 08:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c6:15:15:cf:86:71:9e:e3:f0:56:80:13:0f:0d:10:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=731c1382858b0dc95a9adbea4728b31f9e22c0d8
Validity
Not Before: Jul 1 13:02:39 2025 GMT
Not After : Jul 2 13:02:39 2025 GMT
Subject: CN=5b494d0c1388a7ce10bd336848ed22d140f7cec4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:b9:bc:da:00:bc:e2:ef:08:c5:a4:85:df:d8:
72:af:9b:ed:3d:af:65:07:f3:5c:e9:88:82:fd:d6:
a3:c9:3b:6f:87:51:59:a1:3f:21:40:ee:f1:d1:b3:
58:3b:ab:03:a1:a6:00:0f:d5:c7:ba:72:8e:00:c8:
96:de:59:ff:83:e6:17:6a:80:a2:e7:f3:4d:bb:40:
8b:92:08:07:38:38:6a:42:e9:aa:23:dc:ad:fa:8c:
09:28:d2:20:b2:85:18:66:3e:e4:40:f4:ab:10:cf:
a8:08:c5:43:a8:88:d8:2e:37:49:b6:55:f7:38:2f:
f9:95:9e:58:e4:eb:69:17:fd:71:51:b9:8a:35:e9:
a4:48:a8:8f:d7:94:ff:52:bd:b4:54:34:9f:32:cc:
5f:33:28:42:a4:79:09:d7:a2:19:a7:9a:f9:4f:a6:
ea:cf:17:c4:b7:8a:aa:f3:ff:02:47:53:30:52:8a:
ad:72:b1:2c:43:6c:70:05:1f:73:17:30:4d:68:5b:
a3:08:ac:5c:0e:99:f1:d9:0c:1b:90:5c:06:8a:95:
1f:7b:79:11:e9:b4:42:62:0e:2e:7f:94:52:50:b9:
e3:58:d6:bd:6d:59:70:81:e5:cd:37:ab:f1:be:a2:
b7:7b:52:b3:dc:50:06:32:23:23:7f:27:17:fc:11:
db:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:49:4D:0C:13:88:A7:CE:10:BD:33:68:48:ED:22:D1:40:F7:CE:C4
X509v3 Authority Key Identifier:
keyid:73:1C:13:82:85:8B:0D:C9:5A:9A:DB:EA:47:28:B3:1F:9E:22:C0:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cxwTgoWLDclamtvqRyizH54iwNg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/172e0b-8cbb-402e-8f2c-8595b4500884/1/cxwTgoWLDclamtvqRyizH54iwNg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/172e0b-8cbb-402e-8f2c-8595b4500884/1/cxwTgoWLDclamtvqRyizH54iwNg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:00:2d:c8:34:28:e9:1e:ae:e2:f5:1c:af:77:50:88:6e:d2:
1c:0d:a9:2b:0a:69:8d:bb:ff:54:be:48:68:09:0c:3b:e9:0c:
62:7d:ab:1e:dd:3f:5c:99:b1:bb:65:5c:f9:aa:ee:8d:22:6e:
ec:3e:3f:d6:ea:a0:83:f8:37:17:4a:c3:fd:2f:b1:c7:3c:b1:
e1:a3:42:7e:df:21:36:6f:02:b1:61:0a:8c:f3:43:17:62:11:
a3:8e:bf:43:40:27:f1:cc:3d:76:c7:56:3b:1e:6b:f9:2a:df:
2a:3b:55:42:c9:fc:8c:c2:38:d4:ff:51:ab:34:79:60:ab:e2:
40:71:74:91:ae:37:12:da:f2:2c:77:56:93:38:a4:89:1b:e4:
68:68:74:4f:8c:f3:7d:20:b6:ce:76:d1:4e:aa:cc:ed:83:c6:
51:8c:f6:2d:7c:9d:2b:63:10:f6:a5:4f:eb:b1:b5:b2:63:29:
1a:a8:ab:7a:d6:8b:76:79:74:d3:b7:ec:12:35:80:9b:ba:67:
98:27:e6:56:44:a8:dd:85:3b:4b:89:63:17:86:06:3c:98:a2:
a8:87:e3:e6:a4:de:d5:01:2a:fc:0e:45:58:ba:80:3e:55:fa:
58:c3:66:83:51:d0:f0:b5:00:d5:fe:db:90:bb:86:48:97:97:
fc:fc:e6:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 18:11:37 2025 by rpki-client