Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/ecc2cf-ecc0-4cbb-9635-166c6a3d3ecf/1/CXa-2b-5b_oZgiBViqPVuMj5zT0.mft
File: CXa-2b-5b_oZgiBViqPVuMj5zT0.mft (raw, json)
Hash identifier: Ac8UqVa/YRx+msNIMtCGxWjFHuQJOVVO/VFzvXRueVQ=
Subject key identifier: 95:5E:5B:F3:F5:75:A1:58:81:81:BF:CF:C8:67:3E:67:C1:DE:B3:D2
Authority key identifier: 09:76:BE:D9:BF:B9:6F:FA:19:82:20:55:8A:A3:D5:B8:C8:F9:CD:3D
Certificate issuer: /CN=0976bed9bfb96ffa198220558aa3d5b8c8f9cd3d
Certificate serial: 0198D5BC513D48512E979049200B4E0C620E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXa-2b-5b_oZgiBViqPVuMj5zT0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/ecc2cf-ecc0-4cbb-9635-166c6a3d3ecf/1/CXa-2b-5b_oZgiBViqPVuMj5zT0.mft
Manifest number: B1
Signing time: Sat 23 Aug 2025 07:02:25 +0000
Manifest this update: Sat 23 Aug 2025 07:02:25 +0000
Manifest next update: Sun 24 Aug 2025 07:02:25 +0000
Files and hashes: 1: CXa-2b-5b_oZgiBViqPVuMj5zT0.crl (hash: iYfsTjPPCgDTjwt+JlRQrOd2V1MJyEvV1o1Gy3TV5hQ=)
2: aBpP3bYzGKuR6nhWBmH2ZNVu5M0.roa (hash: GDuJcoE/4sB2mx00j2kfWz5EyEq+Z7H0hLsLa7O17eM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/ecc2cf-ecc0-4cbb-9635-166c6a3d3ecf/1/CXa-2b-5b_oZgiBViqPVuMj5zT0.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/ecc2cf-ecc0-4cbb-9635-166c6a3d3ecf/1/CXa-2b-5b_oZgiBViqPVuMj5zT0.mft
rsync://rpki.ripe.net/repository/DEFAULT/CXa-2b-5b_oZgiBViqPVuMj5zT0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bc:51:3d:48:51:2e:97:90:49:20:0b:4e:0c:62:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0976bed9bfb96ffa198220558aa3d5b8c8f9cd3d
Validity
Not Before: Aug 23 07:02:25 2025 GMT
Not After : Aug 24 07:02:25 2025 GMT
Subject: CN=955e5bf3f575a1588181bfcfc8673e67c1deb3d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:37:81:c6:6d:fd:79:1b:d8:cf:c8:dd:73:1f:
19:ea:9a:51:23:e6:52:32:a6:30:f1:35:90:38:12:
3b:e5:bd:d2:df:17:ba:9f:70:82:d2:7a:9a:51:dd:
e5:99:bf:72:04:c1:3c:ef:43:38:37:a8:13:f0:4c:
61:b4:9a:74:c7:c3:44:44:cb:ad:39:5d:bf:d8:86:
ff:89:e7:f1:04:e8:98:d3:4a:2e:da:62:30:6e:1b:
a7:66:cf:4f:20:01:27:8a:83:83:81:a7:4f:17:b1:
a1:4d:f7:e8:65:44:e0:37:a9:a5:99:68:45:e1:a9:
98:99:9f:6f:d2:46:83:f1:47:6e:e8:3d:6c:08:8e:
b2:60:6c:1a:a0:a9:96:14:8d:85:7e:c9:47:4e:e7:
8d:f1:30:dd:7d:7f:33:d1:49:08:e9:6e:95:b2:eb:
6a:34:03:61:fa:c1:1a:64:b3:6e:96:0c:bb:0c:70:
4f:a9:6b:92:47:9f:2d:51:16:e7:61:ba:e5:dd:60:
f1:b8:6f:bd:74:e6:8d:66:08:7c:5d:f0:1c:4d:c7:
ed:99:68:6f:fe:15:e3:55:4e:11:b8:81:42:c3:b3:
72:20:97:bd:2a:a2:66:a0:1d:98:c2:41:66:bc:82:
ca:69:cc:02:06:c1:a1:74:45:e0:5c:7a:3a:08:0d:
f3:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:5E:5B:F3:F5:75:A1:58:81:81:BF:CF:C8:67:3E:67:C1:DE:B3:D2
X509v3 Authority Key Identifier:
keyid:09:76:BE:D9:BF:B9:6F:FA:19:82:20:55:8A:A3:D5:B8:C8:F9:CD:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXa-2b-5b_oZgiBViqPVuMj5zT0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/ecc2cf-ecc0-4cbb-9635-166c6a3d3ecf/1/CXa-2b-5b_oZgiBViqPVuMj5zT0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/ecc2cf-ecc0-4cbb-9635-166c6a3d3ecf/1/CXa-2b-5b_oZgiBViqPVuMj5zT0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:ea:d2:f9:09:58:bd:fd:40:9e:97:63:af:2f:2d:e8:a9:ac:
53:0d:63:25:47:38:ae:7c:8a:81:29:42:6a:f0:de:35:e7:26:
a1:e0:09:68:68:87:34:89:bf:0a:99:8b:d1:1a:dd:c4:6c:b9:
9e:04:95:bb:9c:0c:06:a0:d3:30:4d:d1:8d:a9:65:c8:59:2a:
c4:a1:ca:72:cf:ba:d5:af:12:7d:0e:bf:a6:cd:20:aa:c4:79:
b0:5f:a3:b1:c5:dc:c3:a9:03:32:8b:00:37:c8:d1:20:e5:79:
21:19:9d:c3:ed:e2:a2:f2:68:04:56:49:82:26:0c:71:0a:e7:
3e:ff:08:8a:14:9d:11:16:38:09:d4:08:ce:87:90:b2:b6:ad:
89:1a:4a:10:74:18:5d:4c:8e:02:81:f3:ca:de:68:fc:4b:7b:
6d:4c:5a:05:7b:d8:03:c1:cb:58:b6:99:b2:ff:c0:19:dd:6b:
0c:7f:d6:1f:bb:58:21:71:f7:c8:5b:63:05:ce:02:f7:75:97:
45:3d:27:af:f8:39:e3:e0:a1:c4:dc:8e:db:ff:dc:20:8d:e7:
58:65:f4:95:21:0c:76:79:d8:65:f7:db:51:da:3b:61:92:e7:
1d:44:fc:5b:a3:d8:79:8c:1e:66:a4:a4:60:e6:e3:8b:06:90:
3a:2f:fa:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:23:44 2025 by rpki-client