Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/172e0b-8cbb-402e-8f2c-8595b4500884/1/cxwTgoWLDclamtvqRyizH54iwNg.mft
File: cxwTgoWLDclamtvqRyizH54iwNg.mft (raw, json)
Hash identifier: yhMi73togscJ6tacHB8f18QhAs1G5x+w3CyyYWL+dx8=
Subject key identifier: CD:95:FB:45:B4:42:84:5F:FA:71:88:86:EB:EE:06:60:75:18:23:1A
Authority key identifier: 73:1C:13:82:85:8B:0D:C9:5A:9A:DB:EA:47:28:B3:1F:9E:22:C0:D8
Certificate issuer: /CN=731c1382858b0dc95a9adbea4728b31f9e22c0d8
Certificate serial: 0199FBEBF59E4D2A19B02074C4459E4ABAC2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cxwTgoWLDclamtvqRyizH54iwNg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/172e0b-8cbb-402e-8f2c-8595b4500884/1/cxwTgoWLDclamtvqRyizH54iwNg.mft
Manifest number: 083F
Signing time: Sun 19 Oct 2025 10:02:49 +0000
Manifest this update: Sun 19 Oct 2025 10:02:49 +0000
Manifest next update: Mon 20 Oct 2025 10:02:49 +0000
Files and hashes: 1: cxwTgoWLDclamtvqRyizH54iwNg.crl (hash: tXxdrW3gNmqeej9pwia11MCEdwdnQrAmrWhNeYTuzwI=)
2: xsLt5XL-OWIaNdR6BZ8HbsppEGM.roa (hash: fVuO1qpyondG1qElrhxFzaCfBXaBgOTcL+nbs40PcY0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/172e0b-8cbb-402e-8f2c-8595b4500884/1/cxwTgoWLDclamtvqRyizH54iwNg.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/172e0b-8cbb-402e-8f2c-8595b4500884/1/cxwTgoWLDclamtvqRyizH54iwNg.mft
rsync://rpki.ripe.net/repository/DEFAULT/cxwTgoWLDclamtvqRyizH54iwNg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:f5:9e:4d:2a:19:b0:20:74:c4:45:9e:4a:ba:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=731c1382858b0dc95a9adbea4728b31f9e22c0d8
Validity
Not Before: Oct 19 10:02:49 2025 GMT
Not After : Oct 20 10:02:49 2025 GMT
Subject: CN=cd95fb45b442845ffa718886ebee06607518231a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:e2:fa:30:13:9e:b8:dd:b5:74:45:bd:a0:c6:
1a:d2:b4:25:94:f2:6c:92:78:22:ca:53:aa:4b:ad:
79:7e:28:4a:15:7e:0a:a5:cd:fd:3a:56:9d:02:06:
18:94:72:b4:d3:6e:59:c7:bc:20:fe:6a:96:da:a8:
41:d6:97:ca:be:3e:21:b5:53:bf:a2:94:2c:b6:b0:
34:3e:56:14:89:6d:4c:49:db:36:99:8a:33:26:3d:
71:7d:0e:c9:2e:37:79:8a:5b:23:99:cb:75:ab:59:
e3:23:b6:53:c7:46:40:0b:d9:18:da:a1:e8:25:86:
e7:d1:04:c6:12:73:7d:0e:4d:71:96:0c:84:59:d9:
6f:44:9c:2c:87:33:54:de:7d:50:ba:b5:b0:14:93:
e0:29:3a:6a:18:ce:38:c5:82:48:c7:fc:b4:9a:c7:
77:e7:d7:68:06:19:ad:80:7f:ca:77:5d:86:59:0c:
fb:12:7c:43:3a:66:fb:a3:1c:aa:b8:67:a5:48:28:
ea:89:2a:3b:9c:25:50:e0:14:62:db:12:00:25:27:
8e:8c:93:c7:99:89:d4:df:42:86:72:09:87:0e:2d:
ce:9b:48:8c:37:dd:a3:33:52:04:6c:06:21:66:81:
87:37:1c:00:f2:9d:27:96:e4:6a:cc:9a:25:79:4a:
16:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:95:FB:45:B4:42:84:5F:FA:71:88:86:EB:EE:06:60:75:18:23:1A
X509v3 Authority Key Identifier:
keyid:73:1C:13:82:85:8B:0D:C9:5A:9A:DB:EA:47:28:B3:1F:9E:22:C0:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cxwTgoWLDclamtvqRyizH54iwNg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/172e0b-8cbb-402e-8f2c-8595b4500884/1/cxwTgoWLDclamtvqRyizH54iwNg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/172e0b-8cbb-402e-8f2c-8595b4500884/1/cxwTgoWLDclamtvqRyizH54iwNg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:5a:aa:4e:47:d4:bf:79:bd:71:50:f7:60:d7:9a:92:cf:f9:
0f:79:96:d1:56:bc:ae:d9:68:74:22:0d:d1:e3:3d:95:4f:c6:
8c:55:f6:d5:42:4a:cf:a1:df:8b:93:9f:b6:16:a3:34:56:65:
83:24:1b:f8:20:02:c7:53:1d:14:b2:5b:85:0a:43:c0:fd:f6:
f6:95:16:72:20:b5:aa:25:9b:02:d9:e6:9e:e9:70:84:fd:7a:
fd:ac:2a:49:0d:d5:c2:ab:87:26:72:b6:39:da:84:d3:f6:dd:
0e:ca:cd:99:6a:74:fc:fc:0b:d8:46:5b:b2:df:ca:1f:e1:5f:
a1:15:c2:61:2c:25:0b:77:b4:7e:23:c3:ee:f1:56:7b:5b:18:
ce:01:d3:17:4f:c0:c4:05:de:41:0f:2f:0f:da:0c:0a:ba:d4:
c1:6d:49:b8:a9:4a:ef:fe:36:de:c7:ec:e0:2f:62:81:47:86:
a6:03:d1:e0:b6:f2:f6:25:be:fb:f3:81:4f:27:60:6b:d9:7f:
c2:79:39:57:e1:69:62:1e:71:a6:19:71:ec:17:8f:e1:06:56:
2e:6d:8f:13:37:05:ad:33:91:72:56:29:a7:7c:3e:0c:b4:45:
89:77:25:10:f1:a5:c0:95:d6:d4:a2:42:38:f1:a5:55:c8:96:
f1:db:8d:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:33:16 2025 by rpki-client