Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/85ee02-6f43-4927-ab5d-ed57b24b4465/1/Cxk2KBuGcHoF1VoB-IsuZT17Puk.mft
File: Cxk2KBuGcHoF1VoB-IsuZT17Puk.mft (raw, json)
Hash identifier: IhLdpv3xjgk/IAJefRFk2wOnrQ1simacOj72k5Ms33c=
Subject key identifier: DD:2A:2F:7D:E2:12:8F:90:48:2F:A1:CB:D8:65:BA:74:F8:BB:BE:C1
Authority key identifier: 0B:19:36:28:1B:86:70:7A:05:D5:5A:01:F8:8B:2E:65:3D:7B:3E:E9
Certificate issuer: /CN=0b1936281b86707a05d55a01f88b2e653d7b3ee9
Certificate serial: 0199FBEAAAAD6BDF714CC51E610DA47504F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cxk2KBuGcHoF1VoB-IsuZT17Puk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/85ee02-6f43-4927-ab5d-ed57b24b4465/1/Cxk2KBuGcHoF1VoB-IsuZT17Puk.mft
Manifest number: 06A2
Signing time: Sun 19 Oct 2025 10:01:24 +0000
Manifest this update: Sun 19 Oct 2025 10:01:24 +0000
Manifest next update: Mon 20 Oct 2025 10:01:24 +0000
Files and hashes: 1: 4vVSxg0KLKszb_U4S9rSdoaFOw8.roa (hash: RPAXRjtOt5jMNeEYJ4PrQAbbA73WZ8/bw4emEczQVts=)
2: Cxk2KBuGcHoF1VoB-IsuZT17Puk.crl (hash: W9Yh0NllZ/jmkazMp1VgN0Mz5xQSO6ge2yHmuGzqSgE=)
3: t3uXJVNYIcETNH2wbIt0kGmTa3E.roa (hash: TpjYWQB/dEWPF8i95tLxQWL3noXfiwIkXuk9Gm2aR3o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/85ee02-6f43-4927-ab5d-ed57b24b4465/1/Cxk2KBuGcHoF1VoB-IsuZT17Puk.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/85ee02-6f43-4927-ab5d-ed57b24b4465/1/Cxk2KBuGcHoF1VoB-IsuZT17Puk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Cxk2KBuGcHoF1VoB-IsuZT17Puk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ea:aa:ad:6b:df:71:4c:c5:1e:61:0d:a4:75:04:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b1936281b86707a05d55a01f88b2e653d7b3ee9
Validity
Not Before: Oct 19 10:01:24 2025 GMT
Not After : Oct 20 10:01:24 2025 GMT
Subject: CN=dd2a2f7de2128f90482fa1cbd865ba74f8bbbec1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:d7:0d:a3:7c:67:71:d0:e5:ac:99:41:cb:3b:
91:8f:da:a8:ee:5a:05:27:4d:5f:1c:84:c1:f0:ae:
7e:9c:70:9e:40:4c:bc:33:0e:6d:83:43:e0:bb:33:
9e:a9:7d:3b:58:26:1f:65:d8:9b:ec:3c:34:be:e5:
1e:9b:47:c7:b8:83:97:c8:19:58:2e:9a:db:d3:3f:
b4:3e:de:38:93:d8:30:e4:42:51:57:12:80:b6:9e:
97:69:86:05:0e:1a:da:d1:ef:8a:03:a3:82:60:c2:
c3:a7:05:b1:37:69:6a:f2:3f:52:b5:a4:26:0c:e5:
dc:81:5c:98:50:f1:9e:de:c6:6c:50:8b:3f:b9:20:
0e:24:a4:ef:65:37:97:81:b6:5a:c2:8b:62:91:76:
92:59:70:d5:5f:40:30:3e:77:13:fe:37:77:43:90:
6c:6b:03:8c:e5:4c:9e:8c:4f:98:4e:46:66:00:9e:
55:b6:69:82:f9:9b:0f:34:16:e8:43:7f:04:bc:cc:
95:fd:fd:87:15:7e:20:9b:65:c7:e1:b6:f8:20:f8:
7c:16:64:7b:61:4f:7f:d5:2c:c8:8c:04:92:b0:e3:
66:a9:96:b2:cd:19:41:9e:ce:e4:16:8b:99:62:6b:
54:28:c8:f7:73:9b:41:82:6a:57:5f:33:41:76:29:
3b:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:2A:2F:7D:E2:12:8F:90:48:2F:A1:CB:D8:65:BA:74:F8:BB:BE:C1
X509v3 Authority Key Identifier:
keyid:0B:19:36:28:1B:86:70:7A:05:D5:5A:01:F8:8B:2E:65:3D:7B:3E:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cxk2KBuGcHoF1VoB-IsuZT17Puk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/85ee02-6f43-4927-ab5d-ed57b24b4465/1/Cxk2KBuGcHoF1VoB-IsuZT17Puk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/85ee02-6f43-4927-ab5d-ed57b24b4465/1/Cxk2KBuGcHoF1VoB-IsuZT17Puk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:4b:45:4f:07:27:8a:59:eb:bb:b5:08:27:71:d7:65:e5:80:
75:13:c5:21:e3:73:39:f4:32:cc:b0:54:bd:58:ea:b2:94:23:
40:24:ff:b3:37:e2:e1:19:cf:5f:b2:0f:b7:d6:2c:d8:fb:9e:
83:b0:34:47:6e:e2:2a:f6:10:51:0c:40:58:6e:91:45:eb:55:
4c:91:c1:1b:ab:b6:e5:0b:0e:f0:63:02:89:92:a8:66:fa:8a:
4d:9b:a5:aa:3c:6a:06:62:3c:11:55:de:c5:4e:cd:c0:ee:58:
75:2f:92:73:84:20:75:1a:86:96:03:ea:5d:cf:f5:09:9a:6e:
d2:8c:cd:59:3e:96:3d:1b:2c:55:8c:fc:57:e9:6d:ed:61:79:
58:5a:9b:7f:99:8f:92:1f:70:c6:6d:6b:cf:80:59:b8:a6:8c:
a3:96:bc:7c:c2:d1:0a:b8:3c:3f:75:6a:8f:1d:2a:6f:93:11:
bd:61:6e:76:23:b3:91:12:d7:62:28:3d:00:10:f9:54:a4:4f:
41:c8:7b:48:70:5b:78:cb:c2:4e:47:26:bb:3f:5c:3e:6f:90:
aa:b4:9b:7c:06:b7:7b:cd:59:f9:ea:4b:8e:86:32:0d:8d:51:
7a:d4:2f:e7:fe:32:94:9f:d0:b8:ff:55:58:f7:cf:af:5a:e4:
ee:0b:3c:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:06:45 2025 by rpki-client