Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/a50372-da39-482e-9ad4-30becfc1b311/1/CX4FUW_IeTQGhouBCePARLcCcWw.mft
File: CX4FUW_IeTQGhouBCePARLcCcWw.mft (raw, json)
Hash identifier: q6S+vYLvr/1+CaVzKWpW77SFvyrZ7yWVzINLW2HXZGU=
Subject key identifier: E0:F1:08:86:EB:D7:24:35:F5:8A:3C:C5:22:C0:FB:BE:B8:39:A3:A4
Authority key identifier: 09:7E:05:51:6F:C8:79:34:06:86:8B:81:09:E3:C0:44:B7:02:71:6C
Certificate issuer: /CN=097e05516fc8793406868b8109e3c044b702716c
Certificate serial: 0198D6CDA564D1095DC37F1224FD08569E87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CX4FUW_IeTQGhouBCePARLcCcWw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/a50372-da39-482e-9ad4-30becfc1b311/1/CX4FUW_IeTQGhouBCePARLcCcWw.mft
Manifest number: 164B
Signing time: Sat 23 Aug 2025 12:00:58 +0000
Manifest this update: Sat 23 Aug 2025 12:00:58 +0000
Manifest next update: Sun 24 Aug 2025 12:00:58 +0000
Files and hashes: 1: CX4FUW_IeTQGhouBCePARLcCcWw.crl (hash: YZZLf6gdCwMV5pfNrg7eYIXGDp1tuGTFFWTdACU4coY=)
2: LYov3s-RBNegs9sCI5mzwI0B-OM.roa (hash: Q5JNZZskubtUF3draKhRYhTL06FaQ8LhpyPNSVMlulo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/a50372-da39-482e-9ad4-30becfc1b311/1/CX4FUW_IeTQGhouBCePARLcCcWw.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/a50372-da39-482e-9ad4-30becfc1b311/1/CX4FUW_IeTQGhouBCePARLcCcWw.mft
rsync://rpki.ripe.net/repository/DEFAULT/CX4FUW_IeTQGhouBCePARLcCcWw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:cd:a5:64:d1:09:5d:c3:7f:12:24:fd:08:56:9e:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097e05516fc8793406868b8109e3c044b702716c
Validity
Not Before: Aug 23 12:00:58 2025 GMT
Not After : Aug 24 12:00:58 2025 GMT
Subject: CN=e0f10886ebd72435f58a3cc522c0fbbeb839a3a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:de:89:16:8c:1b:1c:36:d1:80:f5:7a:91:a6:
55:f6:fd:79:03:50:8c:92:2f:d1:81:e8:35:6d:6a:
ef:7a:4b:2c:7f:a1:57:c6:5f:e3:db:51:d6:39:5d:
6c:55:02:20:91:23:df:e3:de:b1:90:3e:49:0e:df:
89:c6:4c:91:a0:28:f4:b9:3f:b4:4a:a2:ee:16:9d:
13:93:2f:b5:32:f2:35:12:b6:49:2d:6a:74:3a:f9:
c1:a6:4f:7f:15:4a:25:81:6d:3d:d2:fb:ed:0a:34:
05:2b:f3:a6:3b:e5:59:d2:51:74:5c:8f:77:57:72:
d7:a3:9f:ec:1e:ec:2c:27:d4:81:73:93:58:6e:e5:
30:9a:5a:ed:06:23:ba:63:99:89:1b:01:14:c0:8a:
61:fc:1f:15:31:8b:52:02:94:de:2c:25:ff:09:3a:
0e:d4:74:3f:b8:b3:0f:9e:72:cd:98:b0:e1:76:65:
2d:7b:91:51:e2:05:d9:c9:24:17:5d:3c:49:ba:c1:
29:1f:9f:56:c0:69:4d:3c:d0:81:28:ae:71:9e:47:
59:51:ee:d8:c5:ab:95:97:44:5c:7b:b5:e1:25:64:
d5:51:7a:d8:27:2e:d4:d5:98:bc:fc:a6:b4:f5:99:
2c:56:7b:1a:5e:7b:30:b8:bf:33:04:4a:02:b5:d7:
33:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:F1:08:86:EB:D7:24:35:F5:8A:3C:C5:22:C0:FB:BE:B8:39:A3:A4
X509v3 Authority Key Identifier:
keyid:09:7E:05:51:6F:C8:79:34:06:86:8B:81:09:E3:C0:44:B7:02:71:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CX4FUW_IeTQGhouBCePARLcCcWw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/a50372-da39-482e-9ad4-30becfc1b311/1/CX4FUW_IeTQGhouBCePARLcCcWw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/a50372-da39-482e-9ad4-30becfc1b311/1/CX4FUW_IeTQGhouBCePARLcCcWw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:82:7d:1a:58:c2:9f:fa:88:c1:f3:b3:e3:8b:81:ec:a4:d7:
81:52:ec:62:42:5a:24:b5:a2:4a:88:fa:13:86:4d:87:17:16:
bf:1b:00:65:9c:3a:94:58:3e:11:e7:cf:27:fc:90:7b:f4:fd:
f8:ca:37:7d:fa:21:46:7a:5c:a5:e5:81:b6:b2:b6:61:68:f3:
c5:ef:9f:15:6f:b7:5c:6c:a2:e0:90:62:a4:b9:81:30:c9:fe:
36:cb:b9:60:06:4e:d5:97:5c:3f:d9:9e:5e:8c:24:0d:20:b1:
6d:2f:d2:73:38:a0:b1:22:df:6a:f2:36:f3:69:3d:9f:a2:a6:
0c:cf:29:f1:92:86:8e:62:45:88:1c:6c:74:e7:29:32:14:cd:
25:fd:8e:79:a6:45:f0:e3:79:9a:16:89:6f:52:d0:08:4a:a2:
5b:37:84:f7:58:9b:5a:35:be:f3:46:b5:7c:25:6f:7a:e6:eb:
6d:e5:7c:da:77:b1:38:64:ff:ee:3c:f5:89:67:a6:1a:75:de:
24:0f:04:99:f5:29:0a:1f:93:4f:ab:24:37:9c:7a:2c:e7:80:
8a:5c:b7:f8:79:86:09:57:59:fb:9c:88:43:89:ac:3b:78:76:
32:90:0a:cb:0c:d9:f7:96:4b:2f:85:4d:38:6c:6a:3e:c8:2e:
59:dc:0a:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:07:52 2025 by rpki-client