Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/f8c7e2-3282-4ebb-8508-9f9494966c54/1/cxkAeiit4HgdMS2NSUcts2dnBBY.mft
File: cxkAeiit4HgdMS2NSUcts2dnBBY.mft (raw, json)
Hash identifier: 2pPrw5nXaZyVS3IKCCOo9XwtKFlCecSKqh0gTdn/Cb4=
Subject key identifier: 8B:D3:27:44:3B:CA:0F:6C:2D:59:09:AE:72:73:31:1C:CF:F0:99:24
Authority key identifier: 73:19:00:7A:28:AD:E0:78:1D:31:2D:8D:49:47:2D:B3:67:67:04:16
Certificate issuer: /CN=7319007a28ade0781d312d8d49472db367670416
Certificate serial: 01984A09B2FBD56F3CDA8E4C8CDA69617F3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cxkAeiit4HgdMS2NSUcts2dnBBY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/f8c7e2-3282-4ebb-8508-9f9494966c54/1/cxkAeiit4HgdMS2NSUcts2dnBBY.mft
Manifest number: 087D
Signing time: Sun 27 Jul 2025 04:00:06 +0000
Manifest this update: Sun 27 Jul 2025 04:00:06 +0000
Manifest next update: Mon 28 Jul 2025 04:00:06 +0000
Files and hashes: 1: cxkAeiit4HgdMS2NSUcts2dnBBY.crl (hash: DbPz3Ewcmf9JpIiC959PSwkQEoBPsQfhSlp6dvOLj7c=)
2: rOIGMeXF9bxOY5fu4vCOE7NrCP0.roa (hash: 1nU5+mzZGJaibKrLnnLB5qj48GydY1KP7W2pluR6Ujw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/f8c7e2-3282-4ebb-8508-9f9494966c54/1/cxkAeiit4HgdMS2NSUcts2dnBBY.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/f8c7e2-3282-4ebb-8508-9f9494966c54/1/cxkAeiit4HgdMS2NSUcts2dnBBY.mft
rsync://rpki.ripe.net/repository/DEFAULT/cxkAeiit4HgdMS2NSUcts2dnBBY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:09:b2:fb:d5:6f:3c:da:8e:4c:8c:da:69:61:7f:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7319007a28ade0781d312d8d49472db367670416
Validity
Not Before: Jul 27 04:00:06 2025 GMT
Not After : Jul 28 04:00:06 2025 GMT
Subject: CN=8bd327443bca0f6c2d5909ae7273311ccff09924
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:c1:3e:71:d1:72:ce:86:20:51:c0:e7:da:ab:
1c:c7:b1:d9:19:71:46:10:03:45:7c:98:db:98:b6:
85:72:2e:ef:c8:8b:2f:4e:e4:6b:35:70:c3:32:79:
e0:9d:8f:87:39:62:b7:be:86:f2:a3:3c:f5:c7:18:
0f:df:4f:69:cf:a9:22:ae:1f:d9:fe:d6:be:6b:78:
25:5a:1a:2e:f8:92:0b:2e:90:a1:3f:30:37:c4:60:
fd:36:76:de:58:d0:d3:1d:48:6c:58:54:b1:e8:8b:
2b:95:11:42:fe:5f:3c:0a:4c:ff:78:08:93:9e:8f:
37:de:7c:80:0e:a4:f6:14:eb:7d:ab:2b:c6:cf:c7:
cd:86:7a:4b:8c:ed:6c:69:3e:f8:2c:78:5e:ee:ea:
24:db:e8:1c:21:56:a8:1f:15:79:dd:36:87:ea:47:
9f:0b:10:1c:68:90:d4:3f:1a:a0:eb:07:c6:ed:24:
6a:ee:8e:84:f6:a5:26:eb:86:13:b8:75:42:47:8d:
95:9e:0f:10:a4:df:88:16:1b:a8:6d:83:55:28:3c:
b5:a3:7e:3f:cc:e6:62:a3:25:2b:79:dc:dc:cd:55:
56:8f:46:8c:43:ed:34:b9:24:93:2a:83:f0:a3:70:
68:6d:58:9f:91:9c:d7:31:dc:61:87:1c:21:ff:9f:
b2:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:D3:27:44:3B:CA:0F:6C:2D:59:09:AE:72:73:31:1C:CF:F0:99:24
X509v3 Authority Key Identifier:
keyid:73:19:00:7A:28:AD:E0:78:1D:31:2D:8D:49:47:2D:B3:67:67:04:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cxkAeiit4HgdMS2NSUcts2dnBBY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/f8c7e2-3282-4ebb-8508-9f9494966c54/1/cxkAeiit4HgdMS2NSUcts2dnBBY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/f8c7e2-3282-4ebb-8508-9f9494966c54/1/cxkAeiit4HgdMS2NSUcts2dnBBY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:34:16:c3:f0:b8:96:8b:2b:95:f7:74:91:4c:c0:42:52:26:
08:8e:f1:f4:01:e9:21:69:39:29:f3:df:27:3a:b6:c9:b9:05:
22:15:c5:71:9a:39:35:9e:8f:15:d3:3c:b4:ef:13:6d:11:f7:
26:4c:33:da:b2:67:f0:19:69:a0:80:df:c6:a0:eb:71:a7:dd:
d1:00:7a:c8:9e:7e:bf:26:bd:ff:a3:de:c4:66:a4:ad:4e:2e:
c1:a8:41:cf:cc:75:9f:ed:70:96:f0:cf:26:21:f9:19:c0:14:
4a:12:63:29:3c:29:84:4d:0a:4c:89:c7:f3:da:48:06:da:5d:
6b:b3:5e:40:48:82:23:d3:8a:57:2a:07:04:55:d6:3d:00:19:
f3:29:e6:d3:24:5a:f7:11:bc:d1:a4:24:38:6c:61:ba:20:93:
b9:79:94:8c:99:d8:87:ff:61:b9:16:72:39:8b:7b:36:91:e7:
56:b6:05:46:31:c2:01:ec:35:68:77:e2:10:4a:75:38:8b:d0:
87:e9:92:2f:a0:7c:01:b8:c1:58:e5:50:bc:e4:68:d5:d0:95:
3b:57:64:8e:21:bb:c9:b6:c9:ee:2a:71:75:3d:e4:c7:59:e7:
84:06:17:1a:7d:82:36:84:0d:be:53:6c:3c:5d:62:6a:94:40:
91:15:99:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 05:16:14 2025 by rpki-client