Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/4e8d57-53ca-49c5-97ef-1c876db44fe2/1/cxZ3LvzioTP7f4cgkp0FYM7x20Y.mft
File: cxZ3LvzioTP7f4cgkp0FYM7x20Y.mft (raw, json)
Hash identifier: q8CaunXeqmwcAX4ulqbLD5syIPhX2VwK0OJ8YdrXXyE=
Subject key identifier: B4:16:33:E5:22:4F:63:AD:E5:B2:01:89:0B:8F:1B:EB:65:0D:1C:8A
Authority key identifier: 73:16:77:2E:FC:E2:A1:33:FB:7F:87:20:92:9D:05:60:CE:F1:DB:46
Certificate issuer: /CN=7316772efce2a133fb7f8720929d0560cef1db46
Certificate serial: 0199FCFD7485BB00352496B74FDA1E6E3C60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cxZ3LvzioTP7f4cgkp0FYM7x20Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/4e8d57-53ca-49c5-97ef-1c876db44fe2/1/cxZ3LvzioTP7f4cgkp0FYM7x20Y.mft
Manifest number: 04EC
Signing time: Sun 19 Oct 2025 15:01:32 +0000
Manifest this update: Sun 19 Oct 2025 15:01:32 +0000
Manifest next update: Mon 20 Oct 2025 15:01:32 +0000
Files and hashes: 1: OFaqwNs5Dyg1d88HTW2H4gncFRI.roa (hash: wFSS58IXWFEAJ1x0fwOpm9Nk9TzQ4SMDP5LPnSI+dzw=)
2: cxZ3LvzioTP7f4cgkp0FYM7x20Y.crl (hash: 2hTvY5riEfPj958xbxRMga9Jy8ePL/tSsPkmHRc/Szg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/4e8d57-53ca-49c5-97ef-1c876db44fe2/1/cxZ3LvzioTP7f4cgkp0FYM7x20Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/4e8d57-53ca-49c5-97ef-1c876db44fe2/1/cxZ3LvzioTP7f4cgkp0FYM7x20Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/cxZ3LvzioTP7f4cgkp0FYM7x20Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:fd:74:85:bb:00:35:24:96:b7:4f:da:1e:6e:3c:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7316772efce2a133fb7f8720929d0560cef1db46
Validity
Not Before: Oct 19 15:01:32 2025 GMT
Not After : Oct 20 15:01:32 2025 GMT
Subject: CN=b41633e5224f63ade5b201890b8f1beb650d1c8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:ca:49:e3:56:5c:f4:a1:0e:41:10:d9:ec:af:
e9:c2:91:d9:92:10:7d:65:e5:41:65:ac:57:28:fb:
e4:1c:e4:a5:61:8a:bb:5f:f0:67:c9:0e:b1:f7:2a:
21:4e:2b:97:5e:d8:13:69:d6:1d:5f:53:66:10:47:
4c:3f:4f:26:29:d8:7f:8f:2a:60:f5:d9:4d:0c:46:
09:08:74:3e:7d:8a:1d:b2:91:6f:a5:88:0c:1f:72:
f7:ee:dd:74:50:cd:0a:91:77:9d:dc:09:bf:c5:9c:
50:04:65:2a:8d:8c:33:6e:13:9b:cf:0e:ee:07:74:
7f:e6:f3:11:d3:ba:c3:23:c9:11:b8:1d:99:e7:2f:
7d:73:72:c8:a9:c4:5e:45:3a:0d:d7:d5:98:70:df:
87:7f:4f:e4:ed:71:0f:57:3d:d5:b8:c2:3f:9b:60:
b6:d2:22:61:cf:65:58:77:85:e4:c9:d8:d2:11:5a:
3a:1f:09:60:4d:f1:3d:7d:3a:0a:9f:49:2f:34:ff:
c3:da:46:b1:fe:67:64:ef:f6:df:e4:8c:fa:04:35:
8a:b8:38:4b:64:df:a0:70:33:cb:de:da:9a:1e:09:
da:bf:f3:2e:c8:1a:01:d8:11:f7:c1:e8:e6:06:98:
93:26:ac:96:63:1f:63:39:d3:2b:32:2a:4d:2b:5b:
9d:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:16:33:E5:22:4F:63:AD:E5:B2:01:89:0B:8F:1B:EB:65:0D:1C:8A
X509v3 Authority Key Identifier:
keyid:73:16:77:2E:FC:E2:A1:33:FB:7F:87:20:92:9D:05:60:CE:F1:DB:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cxZ3LvzioTP7f4cgkp0FYM7x20Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/4e8d57-53ca-49c5-97ef-1c876db44fe2/1/cxZ3LvzioTP7f4cgkp0FYM7x20Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/4e8d57-53ca-49c5-97ef-1c876db44fe2/1/cxZ3LvzioTP7f4cgkp0FYM7x20Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:fb:23:29:63:a4:00:2e:3e:3a:05:85:1e:60:81:e7:08:8e:
fc:d8:0e:d7:11:a6:bc:8e:84:89:12:83:ff:4a:2a:20:51:d0:
4e:57:b1:f1:c7:80:c5:64:50:28:43:07:7d:21:5f:54:b7:72:
d3:e8:ee:59:2e:93:c1:a4:d4:5d:38:19:2b:a1:d8:a8:ea:59:
a0:48:3b:77:c1:2e:41:b3:f4:10:50:87:f5:ab:9d:2a:4f:e0:
5b:1f:ae:ff:3b:20:42:b4:66:0a:54:f7:af:38:de:fb:b5:fa:
b5:13:52:d6:90:4f:a1:2b:05:cb:bd:d9:a9:8a:92:17:95:7d:
46:37:80:96:54:ed:be:1e:66:7a:cc:91:90:8d:19:09:cd:6c:
4c:e0:f0:b3:f9:22:64:3b:95:7c:57:bd:4a:44:44:ca:6e:80:
bd:71:63:29:87:64:f5:83:99:4d:d1:8c:98:f3:b1:6b:13:07:
51:0d:c9:59:57:20:1f:7a:c8:d8:e3:1a:30:e6:75:42:35:a4:
4d:28:58:18:77:fd:5a:db:aa:03:06:10:2f:db:6e:8f:1d:6e:
a9:86:8f:51:54:59:79:77:5a:19:15:eb:c9:7d:a7:c9:96:d9:
fd:0a:49:f2:e8:f7:6b:f9:33:ad:70:b3:19:e8:94:2d:7a:3a:
ad:8a:6f:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:07:29 2025 by rpki-client