Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/a50372-da39-482e-9ad4-30becfc1b311/1/CX4FUW_IeTQGhouBCePARLcCcWw.mft
File: CX4FUW_IeTQGhouBCePARLcCcWw.mft (raw, json)
Hash identifier: FKR+6Fr1O8qgkj6rDiwFjvRmZCBQbZLKvKArGAvu1dI=
Subject key identifier: 52:48:1C:36:DC:34:51:1F:47:B9:C5:E0:69:FE:C9:FE:58:C4:BE:06
Authority key identifier: 09:7E:05:51:6F:C8:79:34:06:86:8B:81:09:E3:C0:44:B7:02:71:6C
Certificate issuer: /CN=097e05516fc8793406868b8109e3c044b702716c
Certificate serial: 0199FC584378643916D4E6FF338263035B7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CX4FUW_IeTQGhouBCePARLcCcWw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/a50372-da39-482e-9ad4-30becfc1b311/1/CX4FUW_IeTQGhouBCePARLcCcWw.mft
Manifest number: 16E3
Signing time: Sun 19 Oct 2025 12:01:06 +0000
Manifest this update: Sun 19 Oct 2025 12:01:06 +0000
Manifest next update: Mon 20 Oct 2025 12:01:06 +0000
Files and hashes: 1: CX4FUW_IeTQGhouBCePARLcCcWw.crl (hash: S/rxeYjWOsH1bd/dtD05xHhKAcj7Op2Yx2D5QQsIMuA=)
2: LYov3s-RBNegs9sCI5mzwI0B-OM.roa (hash: Q5JNZZskubtUF3draKhRYhTL06FaQ8LhpyPNSVMlulo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/a50372-da39-482e-9ad4-30becfc1b311/1/CX4FUW_IeTQGhouBCePARLcCcWw.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/a50372-da39-482e-9ad4-30becfc1b311/1/CX4FUW_IeTQGhouBCePARLcCcWw.mft
rsync://rpki.ripe.net/repository/DEFAULT/CX4FUW_IeTQGhouBCePARLcCcWw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:43:78:64:39:16:d4:e6:ff:33:82:63:03:5b:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097e05516fc8793406868b8109e3c044b702716c
Validity
Not Before: Oct 19 12:01:06 2025 GMT
Not After : Oct 20 12:01:06 2025 GMT
Subject: CN=52481c36dc34511f47b9c5e069fec9fe58c4be06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:4b:55:c9:f6:13:0d:30:44:2e:e8:e8:a9:a0:
aa:15:df:a2:f1:11:a8:32:31:c0:3c:68:14:03:94:
99:84:8e:7f:da:2c:13:83:f8:f3:91:1c:c7:27:86:
79:8f:9b:a8:d1:27:c9:10:1d:c4:69:85:59:fb:60:
eb:c3:c2:b1:54:75:9c:c1:b3:8d:d7:4b:45:a6:07:
96:27:87:c1:49:14:c2:fd:69:82:3c:f6:03:ec:2b:
21:fe:7c:5b:5d:e6:20:80:92:27:6b:f8:85:8e:86:
4d:eb:3c:46:4e:34:c4:33:05:86:3d:fa:0d:19:4e:
18:b7:f2:05:2c:95:73:bf:56:c8:72:ca:9a:b5:e6:
74:45:a0:38:ce:36:fb:c7:ec:ed:a5:a2:fb:4d:be:
d1:b0:5c:04:9b:6e:ae:fa:bf:d9:0d:47:fc:74:65:
bb:e8:1b:17:be:e4:02:de:9b:ae:40:2a:a0:84:12:
d2:3a:ab:4e:7b:33:b8:b8:c6:d7:52:6c:78:35:ea:
89:07:28:4b:39:f7:e2:76:c6:ff:cb:84:2a:1a:fd:
a4:90:7a:1f:fd:df:de:22:5a:21:c8:bb:c9:fc:bc:
74:0c:da:03:36:6f:5b:95:d7:d6:23:dd:99:12:0e:
74:4a:3b:d4:35:9d:92:0a:cb:f1:b5:93:db:ce:6f:
a6:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:48:1C:36:DC:34:51:1F:47:B9:C5:E0:69:FE:C9:FE:58:C4:BE:06
X509v3 Authority Key Identifier:
keyid:09:7E:05:51:6F:C8:79:34:06:86:8B:81:09:E3:C0:44:B7:02:71:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CX4FUW_IeTQGhouBCePARLcCcWw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/a50372-da39-482e-9ad4-30becfc1b311/1/CX4FUW_IeTQGhouBCePARLcCcWw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/a50372-da39-482e-9ad4-30becfc1b311/1/CX4FUW_IeTQGhouBCePARLcCcWw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:83:63:e7:91:57:0b:2c:3f:f8:49:2c:a1:9d:45:02:2d:f5:
a9:79:16:ea:fd:69:fe:cc:16:77:a6:69:9f:65:0e:cf:aa:d7:
c0:80:aa:19:7a:56:e9:d3:b8:78:51:3b:53:84:0c:64:8b:32:
f0:6d:4e:21:58:50:0d:88:ec:37:5c:0f:7e:e5:9d:a0:92:a3:
bf:45:87:f2:85:ae:39:78:65:6e:88:d5:4f:21:a6:72:2c:75:
56:02:72:58:10:7e:d0:96:53:a6:b0:80:54:3a:02:d5:99:01:
7e:de:af:8c:b8:5b:eb:a2:38:7b:d3:9e:50:cd:db:08:0b:13:
29:66:4e:bd:e0:89:a7:73:fb:1c:97:eb:f4:22:e9:82:d6:39:
5b:32:2c:70:20:d6:a9:0f:d9:a8:19:ac:a6:b7:ca:b1:7d:d0:
24:96:1c:c3:09:f8:ad:bc:4e:ad:df:4d:35:ae:02:27:80:29:
91:73:0b:52:bf:a8:7b:17:b4:fa:9d:76:a6:eb:be:9b:89:05:
f6:58:65:19:e2:50:73:1e:bf:58:b6:45:ad:7f:21:c6:75:31:
28:2c:e4:5d:e0:67:dd:41:43:f7:fa:85:b6:8e:91:c6:43:29:
68:a6:ee:a3:67:53:72:df:67:90:5a:10:38:e3:51:1b:3c:12:
dc:8c:61:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:07:57 2025 by rpki-client