Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/a50372-da39-482e-9ad4-30becfc1b311/1/CX4FUW_IeTQGhouBCePARLcCcWw.mft
File: CX4FUW_IeTQGhouBCePARLcCcWw.mft (raw, json)
Hash identifier: 3un7jAm+dVbk41nOafwtXtf8WmBeooBbzcgEQc9Wgk0=
Subject key identifier: 84:52:1C:CB:DA:D9:BD:9E:C6:EC:EB:83:EC:4C:EF:3C:92:05:F0:76
Authority key identifier: 09:7E:05:51:6F:C8:79:34:06:86:8B:81:09:E3:C0:44:B7:02:71:6C
Certificate issuer: /CN=097e05516fc8793406868b8109e3c044b702716c
Certificate serial: 0197B70EF36235B903C41DA14EF5744818E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CX4FUW_IeTQGhouBCePARLcCcWw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/a50372-da39-482e-9ad4-30becfc1b311/1/CX4FUW_IeTQGhouBCePARLcCcWw.mft
Manifest number: 15B6
Signing time: Sat 28 Jun 2025 15:01:39 +0000
Manifest this update: Sat 28 Jun 2025 15:01:39 +0000
Manifest next update: Sun 29 Jun 2025 15:01:39 +0000
Files and hashes: 1: CX4FUW_IeTQGhouBCePARLcCcWw.crl (hash: Er+y/lipl1RPvkunJ5U+RfG7NzYr2OJesBvz8Eppko0=)
2: LYov3s-RBNegs9sCI5mzwI0B-OM.roa (hash: Q5JNZZskubtUF3draKhRYhTL06FaQ8LhpyPNSVMlulo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/a50372-da39-482e-9ad4-30becfc1b311/1/CX4FUW_IeTQGhouBCePARLcCcWw.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/a50372-da39-482e-9ad4-30becfc1b311/1/CX4FUW_IeTQGhouBCePARLcCcWw.mft
rsync://rpki.ripe.net/repository/DEFAULT/CX4FUW_IeTQGhouBCePARLcCcWw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:f3:62:35:b9:03:c4:1d:a1:4e:f5:74:48:18:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097e05516fc8793406868b8109e3c044b702716c
Validity
Not Before: Jun 28 15:01:39 2025 GMT
Not After : Jun 29 15:01:39 2025 GMT
Subject: CN=84521ccbdad9bd9ec6eceb83ec4cef3c9205f076
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:be:00:8b:57:7b:d8:df:7a:65:a9:a3:0e:f5:
32:21:9e:e1:ea:e7:73:16:a6:bd:55:cb:01:7e:51:
66:fd:77:e1:bc:9c:2c:e8:4f:c1:c7:18:c5:34:df:
df:85:a9:9f:bc:58:94:b5:91:4d:6d:9c:c4:b4:ea:
1d:43:d1:e1:09:a0:28:81:44:ed:40:0a:ff:5d:42:
f0:ea:66:0d:46:cd:30:14:13:64:05:b5:b9:2d:09:
ef:f6:65:42:19:8d:91:1d:e7:af:2b:5a:0d:c9:6d:
bc:5c:21:d5:97:69:c4:57:d7:b8:64:3f:22:59:0c:
19:39:4c:f9:08:3c:20:a1:e0:c3:2f:8e:0b:44:33:
d2:d8:88:09:ca:df:12:9a:3a:0b:70:f5:4f:47:43:
15:65:26:9c:16:2b:d5:e5:69:50:ba:9f:cd:01:4b:
5b:ea:24:d8:1e:d1:83:84:13:a6:bc:96:fa:5e:ae:
8d:d2:9a:cd:23:51:b6:74:36:df:b7:83:94:ac:db:
3f:b9:ff:56:5e:55:93:d1:9e:f8:4b:df:4e:85:c8:
b8:22:88:30:f3:23:bf:b9:a7:f7:44:32:0d:68:f5:
e3:91:09:d7:73:ad:fd:de:36:a3:c1:9f:3e:89:1e:
2d:3a:51:96:bd:69:d3:d8:81:c7:60:7d:4e:b3:7e:
36:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:52:1C:CB:DA:D9:BD:9E:C6:EC:EB:83:EC:4C:EF:3C:92:05:F0:76
X509v3 Authority Key Identifier:
keyid:09:7E:05:51:6F:C8:79:34:06:86:8B:81:09:E3:C0:44:B7:02:71:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CX4FUW_IeTQGhouBCePARLcCcWw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/a50372-da39-482e-9ad4-30becfc1b311/1/CX4FUW_IeTQGhouBCePARLcCcWw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/a50372-da39-482e-9ad4-30becfc1b311/1/CX4FUW_IeTQGhouBCePARLcCcWw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:b0:73:00:69:e1:58:dc:f7:9b:e6:81:03:be:b4:ab:c3:c8:
fa:af:b4:86:47:73:c5:56:3f:7f:ab:c1:3e:f3:9a:40:4f:e6:
df:37:15:d1:e6:d8:fc:30:9e:0b:7c:73:92:fa:32:cc:94:f7:
23:88:a5:05:bd:e6:fa:7c:d1:36:c3:4c:ac:21:8c:eb:1b:30:
91:f6:6e:5a:9a:15:42:1f:b7:3a:cc:3c:3d:0a:2a:1e:93:c1:
9f:db:45:1f:a8:a4:1b:e7:3e:ad:72:72:da:87:35:03:be:f2:
bc:38:af:d2:50:2a:2c:fb:61:5b:d0:e6:72:98:fd:0c:b2:ad:
5f:e9:27:a8:cc:25:63:bd:39:e5:16:e1:33:8e:6d:0e:83:29:
f3:26:bf:91:c2:f6:42:ac:cd:ab:c7:fc:17:e1:fe:ec:e6:2c:
98:af:ca:d6:80:21:33:0d:9e:96:94:d9:1b:69:75:4f:44:7f:
6b:54:14:a5:d2:5d:50:30:9d:7b:31:e7:f1:b8:ce:55:09:2d:
06:cb:91:5c:91:4b:16:02:23:2d:23:9c:d1:0c:9f:09:59:f3:
54:96:c7:04:9c:33:f1:cb:f6:b1:0d:25:c4:b1:f2:2e:3b:c9:
fe:10:2c:94:73:8e:62:a5:fb:7d:bc:3a:df:e6:79:d8:da:87:
8e:6b:6d:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:01:52 2025 by rpki-client