Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/ecc2cf-ecc0-4cbb-9635-166c6a3d3ecf/1/CXa-2b-5b_oZgiBViqPVuMj5zT0.mft
File: CXa-2b-5b_oZgiBViqPVuMj5zT0.mft (raw, json)
Hash identifier: MLmO3lU7waGdqG0sLxzBimnyHB0vco7r29g80mmGEyE=
Subject key identifier: FF:11:FF:59:0D:B9:15:32:E0:01:86:45:78:1F:B7:E5:7F:B3:9A:D2
Authority key identifier: 09:76:BE:D9:BF:B9:6F:FA:19:82:20:55:8A:A3:D5:B8:C8:F9:CD:3D
Certificate issuer: /CN=0976bed9bfb96ffa198220558aa3d5b8c8f9cd3d
Certificate serial: 0197B7EA7BA2861B34FC1F5B5F9A3085F6F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXa-2b-5b_oZgiBViqPVuMj5zT0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/ecc2cf-ecc0-4cbb-9635-166c6a3d3ecf/1/CXa-2b-5b_oZgiBViqPVuMj5zT0.mft
Manifest number: 1D
Signing time: Sat 28 Jun 2025 19:01:26 +0000
Manifest this update: Sat 28 Jun 2025 19:01:26 +0000
Manifest next update: Sun 29 Jun 2025 19:01:26 +0000
Files and hashes: 1: CXa-2b-5b_oZgiBViqPVuMj5zT0.crl (hash: /UswrJmN3984kzLsSiggRxFXTcP4t9J4ZBSOShQg9FY=)
2: aBpP3bYzGKuR6nhWBmH2ZNVu5M0.roa (hash: GDuJcoE/4sB2mx00j2kfWz5EyEq+Z7H0hLsLa7O17eM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/ecc2cf-ecc0-4cbb-9635-166c6a3d3ecf/1/CXa-2b-5b_oZgiBViqPVuMj5zT0.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/ecc2cf-ecc0-4cbb-9635-166c6a3d3ecf/1/CXa-2b-5b_oZgiBViqPVuMj5zT0.mft
rsync://rpki.ripe.net/repository/DEFAULT/CXa-2b-5b_oZgiBViqPVuMj5zT0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:7b:a2:86:1b:34:fc:1f:5b:5f:9a:30:85:f6:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0976bed9bfb96ffa198220558aa3d5b8c8f9cd3d
Validity
Not Before: Jun 28 19:01:26 2025 GMT
Not After : Jun 29 19:01:26 2025 GMT
Subject: CN=ff11ff590db91532e0018645781fb7e57fb39ad2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:c8:6f:b3:b9:ab:77:21:4c:d0:f5:11:42:9c:
e0:2b:3e:a7:bd:75:99:98:5a:be:f9:65:37:c9:27:
94:09:e6:fb:fc:88:0a:fc:2f:93:31:ab:64:a6:61:
7b:3b:82:95:c9:9a:4d:bf:34:70:8f:06:b7:39:2d:
c0:9b:09:de:da:95:35:9c:95:d1:9b:92:cd:ed:9b:
51:50:93:1d:94:f4:59:2a:ab:cc:79:19:57:b4:c6:
43:cd:68:fd:f6:cb:bb:45:94:1a:93:44:c7:d4:6f:
a2:e7:5f:66:7c:98:63:e7:32:df:f8:48:58:95:d7:
24:38:60:c0:86:e9:53:02:03:d6:48:da:56:f6:7a:
c1:35:6d:c2:12:80:9f:2a:b4:1a:75:48:e6:36:52:
49:4a:a2:7f:56:3f:2d:30:0f:60:cd:d7:74:65:f6:
d0:e3:8b:43:9d:c1:18:db:d4:53:ae:b7:c1:57:f1:
ed:56:3f:1f:96:92:59:56:52:b6:53:0d:18:e2:be:
22:65:b0:e4:03:a5:18:2a:94:78:09:5c:df:53:b6:
c3:31:01:1c:f9:9d:3f:0c:ad:bb:c6:df:37:ff:3a:
1e:81:fa:26:85:ae:3e:88:15:67:0f:ee:ca:f0:3a:
92:01:f4:16:4a:d5:7b:7a:c0:ae:99:93:52:b1:ca:
08:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:11:FF:59:0D:B9:15:32:E0:01:86:45:78:1F:B7:E5:7F:B3:9A:D2
X509v3 Authority Key Identifier:
keyid:09:76:BE:D9:BF:B9:6F:FA:19:82:20:55:8A:A3:D5:B8:C8:F9:CD:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXa-2b-5b_oZgiBViqPVuMj5zT0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/ecc2cf-ecc0-4cbb-9635-166c6a3d3ecf/1/CXa-2b-5b_oZgiBViqPVuMj5zT0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/ecc2cf-ecc0-4cbb-9635-166c6a3d3ecf/1/CXa-2b-5b_oZgiBViqPVuMj5zT0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:2a:07:80:c3:68:27:f5:ad:56:87:ae:1e:9d:fb:43:ab:32:
f2:7c:f3:e0:1c:a2:1c:21:c6:89:e1:e1:78:d7:d6:6e:93:fa:
b1:94:60:47:8f:ee:40:5a:21:70:dd:d2:29:9a:35:1a:42:7a:
25:32:b5:36:fd:80:78:0b:eb:1c:c8:6a:51:81:13:fb:5c:2e:
80:b9:64:f9:90:8e:df:8f:b3:0d:c3:c3:e5:f0:1c:de:1b:55:
9d:22:93:cd:45:3c:f1:96:10:bb:fa:48:8c:71:85:97:f5:1b:
78:a4:5f:15:1b:3c:3b:da:89:07:db:a9:df:86:78:24:e4:69:
f4:33:f8:fc:72:ed:47:11:e0:af:cb:61:ba:f1:f1:4b:58:e9:
22:35:4b:38:a4:78:a0:32:e0:db:ae:28:36:9e:a0:b8:12:c3:
af:38:9a:a8:ef:26:6c:af:28:ca:b1:95:99:b0:a6:c1:88:3e:
de:9d:d4:71:a0:30:c3:4f:0e:ac:5e:7d:30:e1:82:6f:5c:87:
54:90:51:94:39:ed:f0:c2:49:a2:80:93:15:62:49:2a:ec:86:
7e:cb:26:91:a6:cf:05:aa:15:74:d4:1a:64:04:33:6d:b2:67:
ae:9c:48:89:ae:ad:d7:c5:33:0d:23:fb:b9:1d:76:80:81:4d:
42:db:ca:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:31:43 2025 by rpki-client