Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/4e8d57-53ca-49c5-97ef-1c876db44fe2/1/cxZ3LvzioTP7f4cgkp0FYM7x20Y.mft
File: cxZ3LvzioTP7f4cgkp0FYM7x20Y.mft (raw, json)
Hash identifier: utztyyU+DrIPclU2cInhYrr3uZn450806fu2EIs4fAk=
Subject key identifier: B9:A9:79:6D:13:7C:1F:83:69:B0:B3:15:EA:99:EB:BB:93:B2:00:9D
Authority key identifier: 73:16:77:2E:FC:E2:A1:33:FB:7F:87:20:92:9D:05:60:CE:F1:DB:46
Certificate issuer: /CN=7316772efce2a133fb7f8720929d0560cef1db46
Certificate serial: 0198D58361E8C6F7C634777E26B78C216B58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cxZ3LvzioTP7f4cgkp0FYM7x20Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/4e8d57-53ca-49c5-97ef-1c876db44fe2/1/cxZ3LvzioTP7f4cgkp0FYM7x20Y.mft
Manifest number: 0453
Signing time: Sat 23 Aug 2025 06:00:13 +0000
Manifest this update: Sat 23 Aug 2025 06:00:13 +0000
Manifest next update: Sun 24 Aug 2025 06:00:13 +0000
Files and hashes: 1: OFaqwNs5Dyg1d88HTW2H4gncFRI.roa (hash: wFSS58IXWFEAJ1x0fwOpm9Nk9TzQ4SMDP5LPnSI+dzw=)
2: cxZ3LvzioTP7f4cgkp0FYM7x20Y.crl (hash: xq6g7YEQhmXKieWol836oeBy8J+PEP45f3IZ9qDgW28=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/4e8d57-53ca-49c5-97ef-1c876db44fe2/1/cxZ3LvzioTP7f4cgkp0FYM7x20Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/4e8d57-53ca-49c5-97ef-1c876db44fe2/1/cxZ3LvzioTP7f4cgkp0FYM7x20Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/cxZ3LvzioTP7f4cgkp0FYM7x20Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:61:e8:c6:f7:c6:34:77:7e:26:b7:8c:21:6b:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7316772efce2a133fb7f8720929d0560cef1db46
Validity
Not Before: Aug 23 06:00:13 2025 GMT
Not After : Aug 24 06:00:13 2025 GMT
Subject: CN=b9a9796d137c1f8369b0b315ea99ebbb93b2009d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:e6:56:45:b0:35:1e:0f:d2:cf:c4:96:d7:88:
bf:8b:6d:36:b0:b3:3b:c3:0a:d2:bb:d9:26:35:00:
2a:d0:34:57:ca:47:56:71:ec:04:e4:96:f1:4d:6d:
17:59:e8:e7:d3:2b:79:5a:bf:8c:6a:69:ad:25:e5:
30:44:a7:09:04:37:03:76:77:34:5e:a4:63:70:f5:
bf:45:50:49:3a:93:40:94:f9:c3:aa:38:71:c8:75:
e3:94:d7:df:e4:ba:49:e0:1f:f6:44:bc:b8:9d:50:
74:08:61:04:0f:4c:6d:d3:2f:a1:32:40:e3:11:04:
02:55:df:56:7b:8b:30:be:d7:28:9c:23:f4:30:70:
b2:b4:01:cf:5b:67:f2:85:39:61:fb:99:69:02:94:
f2:35:d8:b3:b4:a0:7b:4c:9f:94:6a:bd:dd:9d:3a:
f6:e8:f8:95:b3:33:8d:52:e2:5b:e6:04:47:0c:45:
c4:4c:cb:cc:6f:8d:40:45:7c:3a:7b:6c:17:c7:c8:
aa:c0:14:01:a3:f0:54:3a:40:34:92:cb:0f:4f:c7:
e7:fd:04:49:47:5b:e0:18:38:7e:2e:2d:9d:c2:cc:
67:19:d5:96:a6:66:9a:72:68:e6:c8:df:06:1d:17:
88:5e:1f:64:33:fe:fc:5c:fa:b0:88:3c:70:14:15:
20:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:A9:79:6D:13:7C:1F:83:69:B0:B3:15:EA:99:EB:BB:93:B2:00:9D
X509v3 Authority Key Identifier:
keyid:73:16:77:2E:FC:E2:A1:33:FB:7F:87:20:92:9D:05:60:CE:F1:DB:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cxZ3LvzioTP7f4cgkp0FYM7x20Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/4e8d57-53ca-49c5-97ef-1c876db44fe2/1/cxZ3LvzioTP7f4cgkp0FYM7x20Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/4e8d57-53ca-49c5-97ef-1c876db44fe2/1/cxZ3LvzioTP7f4cgkp0FYM7x20Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:d4:3a:af:0f:12:56:3b:9f:10:68:0f:ea:f8:2c:6b:c8:1f:
4d:84:9f:fd:b6:88:d4:de:c0:3a:66:64:b2:36:e2:30:57:0c:
3d:4d:a6:1c:6b:58:27:54:75:86:a4:5d:fd:0c:3c:4f:d6:33:
98:5e:35:f6:91:bd:05:06:ca:bf:8f:07:74:00:d6:c0:94:a8:
92:79:2b:82:b7:c7:c7:69:32:11:e6:10:f2:36:19:27:dc:2e:
04:71:a2:7d:6c:ec:85:d6:91:86:1f:15:b6:14:c1:81:9a:22:
ba:eb:bf:61:4c:39:74:37:60:52:80:c8:a9:e3:f4:95:9d:c9:
2a:0c:01:a5:5e:98:5c:ee:d7:aa:ce:92:1a:2a:f6:5b:d2:b3:
6d:29:13:11:69:0b:2f:d5:31:50:a8:4a:4c:67:4c:54:7b:43:
04:f6:35:d9:ff:76:d7:b4:32:a1:6f:23:20:0b:b2:09:9a:f6:
5e:3d:44:e2:28:3a:90:32:cc:64:af:1b:c9:3d:e9:8a:c5:67:
2d:0c:1c:b0:2e:6a:6a:94:d8:e6:ba:ea:d8:b8:a5:fb:e5:b9:
e0:4f:a9:0d:24:2e:4d:9b:f2:46:19:dd:ad:c4:22:43:37:d8:
6f:30:10:11:f9:d0:12:ed:76:a0:46:50:4c:64:ac:47:8d:7f:
af:b7:30:56
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVg2HoxvfGNHd+JreMIWtYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDczMTY3NzJlZmNlMmExMzNmYjdmODcyMDkyOWQwNTYwY2Vm
MWRiNDYwHhcNMjUwODIzMDYwMDEzWhcNMjUwODI0MDYwMDEzWjAzMTEwLwYDVQQD
EyhiOWE5Nzk2ZDEzN2MxZjgzNjliMGIzMTVlYTk5ZWJiYjkzYjIwMDlkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApOZWRbA1Hg/Sz8SW14i/i202sLM7
wwrSu9kmNQAq0DRXykdWcewE5JbxTW0XWejn0yt5Wr+MammtJeUwRKcJBDcDdnc0
XqRjcPW/RVBJOpNAlPnDqjhxyHXjlNff5LpJ4B/2RLy4nVB0CGEED0xt0y+hMkDj
EQQCVd9We4swvtconCP0MHCytAHPW2fyhTlh+5lpApTyNdiztKB7TJ+Uar3dnTr2
6PiVszONUuJb5gRHDEXETMvMb41ARXw6e2wXx8iqwBQBo/BUOkA0kssPT8fn/QRJ
R1vgGDh+Li2dwsxnGdWWpmaacmjmyN8GHReIXh9kM/78XPqwiDxwFBUgpQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLmpeW0TfB+DabCzFeqZ67uTsgCdMB8GA1UdIwQY
MBaAFHMWdy784qEz+3+HIJKdBWDO8dtGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY3haM0x2emlvVFA3ZjRjZ2twMEZZTTd4MjBZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC80ZThkNTctNTNjYS00OWM1LTk3ZWYt
MWM4NzZkYjQ0ZmUyLzEvY3haM0x2emlvVFA3ZjRjZ2twMEZZTTd4MjBZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMC80ZThkNTctNTNjYS00OWM1LTk3ZWYtMWM4NzZkYjQ0ZmUy
LzEvY3haM0x2emlvVFA3ZjRjZ2twMEZZTTd4MjBZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALtQ6rw8S
VjufEGgP6vgsa8gfTYSf/baI1N7AOmZksjbiMFcMPU2mHGtYJ1R1hqRd/Qw8T9Yz
mF419pG9BQbKv48HdADWwJSoknkrgrfHx2kyEeYQ8jYZJ9wuBHGifWzshdaRhh8V
thTBgZoiuuu/YUw5dDdgUoDIqeP0lZ3JKgwBpV6YXO7Xqs6SGir2W9KzbSkTEWkL
L9UxUKhKTGdMVHtDBPY12f9217QyoW8jIAuyCZr2Xj1E4ig6kDLMZK8byT3pisVn
LQwcsC5qapTY5rrq2Lil++W54E+pDSQuTZvyRhndrcQiQzfYbzAQEfnQEu12oEZQ
TGSsR41/r7cwVg==
-----END CERTIFICATE-----
Generated at Sat Aug 23 11:31:37 2025 by rpki-client