Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/4429a4-0b36-4ced-846f-e20a654fca95/1/cx2a1ATs2vpw6ppMnRC5gBgp6h8.mft
File: cx2a1ATs2vpw6ppMnRC5gBgp6h8.mft (raw, json)
Hash identifier: DdDCIeOy9Ol/YnMbDazxBGsD8CCWG2W+MCRMd/+6kh0=
Subject key identifier: 9F:52:6B:33:6C:54:04:D1:7E:2A:E2:24:38:B2:05:C2:84:B9:2F:8E
Authority key identifier: 73:1D:9A:D4:04:EC:DA:FA:70:EA:9A:4C:9D:10:B9:80:18:29:EA:1F
Certificate issuer: /CN=731d9ad404ecdafa70ea9a4c9d10b9801829ea1f
Certificate serial: 019849661938B7D15189A2CA1481BAC05C8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cx2a1ATs2vpw6ppMnRC5gBgp6h8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/4429a4-0b36-4ced-846f-e20a654fca95/1/cx2a1ATs2vpw6ppMnRC5gBgp6h8.mft
Manifest number: 1032
Signing time: Sun 27 Jul 2025 01:01:24 +0000
Manifest this update: Sun 27 Jul 2025 01:01:24 +0000
Manifest next update: Mon 28 Jul 2025 01:01:24 +0000
Files and hashes: 1: 5kIp4bFmAr9lOCjBtU4-CSX7D0w.roa (hash: zS6XZLioq/dFM9rTCOe5dC9siPtnmQmcYc9glHbFesE=)
2: WZoVc8N-YD-8FMKAITneTMD8_4k.roa (hash: d546sm0t0rb46HppUnfY7MCyS/rnnp2kV23n3HY9/us=)
3: bZJxdCs0gWqYryxwQS8EGlLZ93c.roa (hash: ZMF+prTjcHa6DFcnagp286MUC0TlcS1uVKhgY1MMJNc=)
4: cx2a1ATs2vpw6ppMnRC5gBgp6h8.crl (hash: yd8WdzTQN5QONlruQLNC9GMfRW8tP92+ts/q/pfqbaY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/4429a4-0b36-4ced-846f-e20a654fca95/1/cx2a1ATs2vpw6ppMnRC5gBgp6h8.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/4429a4-0b36-4ced-846f-e20a654fca95/1/cx2a1ATs2vpw6ppMnRC5gBgp6h8.mft
rsync://rpki.ripe.net/repository/DEFAULT/cx2a1ATs2vpw6ppMnRC5gBgp6h8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:66:19:38:b7:d1:51:89:a2:ca:14:81:ba:c0:5c:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=731d9ad404ecdafa70ea9a4c9d10b9801829ea1f
Validity
Not Before: Jul 27 01:01:24 2025 GMT
Not After : Jul 28 01:01:24 2025 GMT
Subject: CN=9f526b336c5404d17e2ae22438b205c284b92f8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:7c:2c:9c:60:4f:ae:94:36:f4:68:41:93:b5:
27:04:9f:57:6c:8f:b7:12:3b:55:8d:e6:68:89:5e:
18:40:27:b7:da:af:c5:f7:d0:71:f1:40:59:f3:68:
fb:62:73:9d:63:64:1b:17:ee:43:b3:95:26:26:95:
af:74:82:79:9f:e2:8a:74:c4:df:79:69:71:f8:36:
d6:64:c0:66:38:30:23:74:c3:2c:2d:2f:dc:71:e9:
3e:50:23:61:3c:6d:65:1f:d6:03:d6:75:7d:b5:8a:
be:bb:d1:f2:98:5f:c8:67:c3:e1:41:c8:d5:c5:ed:
81:2a:bb:ff:51:aa:c6:d2:dc:22:87:d0:46:e9:fa:
29:4c:67:0e:70:aa:55:82:f5:d4:30:f6:e5:6e:2e:
4d:b1:4f:56:4d:c9:53:7c:08:e6:95:da:47:53:09:
76:f1:dc:54:7b:5d:49:2a:54:2f:b3:e0:11:bb:43:
3b:72:52:4a:a1:df:a7:94:5c:83:e4:bc:8d:9a:35:
f0:9d:58:e9:df:53:dd:f9:57:d2:f3:7c:b3:da:ae:
3b:7d:99:fe:43:94:32:e8:85:1e:a9:6c:8f:80:d4:
1a:9e:b4:2a:ba:ce:6b:3d:92:27:96:93:d0:e1:3c:
a2:7d:c1:d4:a5:86:c6:2a:ce:76:8c:89:a3:ef:f4:
9d:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:52:6B:33:6C:54:04:D1:7E:2A:E2:24:38:B2:05:C2:84:B9:2F:8E
X509v3 Authority Key Identifier:
keyid:73:1D:9A:D4:04:EC:DA:FA:70:EA:9A:4C:9D:10:B9:80:18:29:EA:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cx2a1ATs2vpw6ppMnRC5gBgp6h8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/4429a4-0b36-4ced-846f-e20a654fca95/1/cx2a1ATs2vpw6ppMnRC5gBgp6h8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/4429a4-0b36-4ced-846f-e20a654fca95/1/cx2a1ATs2vpw6ppMnRC5gBgp6h8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:b4:69:36:80:d6:75:95:9b:64:29:75:6b:af:7b:d3:a1:0b:
62:3d:98:0a:dc:4b:ed:ba:dc:de:4d:2d:fa:eb:fe:ba:75:78:
fa:aa:d6:95:e9:0a:f0:ac:f1:98:72:61:1e:42:a8:ef:ec:d9:
23:be:6e:63:9a:9a:f4:6a:d2:05:1f:0b:80:22:31:f5:9b:83:
d7:25:5d:73:87:8b:4f:93:02:ce:70:3c:0d:53:fd:c0:89:7e:
98:7c:f6:b7:90:5f:2a:79:da:71:21:61:66:69:fc:1d:50:ad:
4e:fe:fb:d1:8b:b4:dd:b4:df:de:15:c6:3e:0f:52:33:34:32:
4a:a1:5e:4b:4f:6c:ac:e1:19:23:8f:1c:34:eb:1d:75:1d:f6:
71:22:ec:fc:65:59:d9:9a:89:95:bb:81:11:4b:d2:71:f9:0c:
aa:6c:8e:07:03:33:5e:c6:c3:74:c7:e4:9b:8d:34:11:35:36:
18:70:1e:89:12:a4:5f:a8:81:1a:a7:8e:9b:22:2b:78:b3:53:
88:89:9d:b4:33:8e:21:45:15:17:70:80:4f:d1:aa:b5:ef:23:
69:18:c5:4f:32:76:4c:26:4a:ab:1b:21:0d:0f:e7:a5:2a:1b:
cd:da:3f:c9:1b:a4:28:58:dc:f7:5e:59:68:bb:07:87:ea:fe:
39:65:6b:d5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhJZhk4t9FRiaLKFIG6wFyOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDczMWQ5YWQ0MDRlY2RhZmE3MGVhOWE0YzlkMTBiOTgwMTgy
OWVhMWYwHhcNMjUwNzI3MDEwMTI0WhcNMjUwNzI4MDEwMTI0WjAzMTEwLwYDVQQD
Eyg5ZjUyNmIzMzZjNTQwNGQxN2UyYWUyMjQzOGIyMDVjMjg0YjkyZjhlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhXwsnGBPrpQ29GhBk7UnBJ9XbI+3
EjtVjeZoiV4YQCe32q/F99Bx8UBZ82j7YnOdY2QbF+5Ds5UmJpWvdIJ5n+KKdMTf
eWlx+DbWZMBmODAjdMMsLS/ccek+UCNhPG1lH9YD1nV9tYq+u9HymF/IZ8PhQcjV
xe2BKrv/UarG0twih9BG6fopTGcOcKpVgvXUMPblbi5NsU9WTclTfAjmldpHUwl2
8dxUe11JKlQvs+ARu0M7clJKod+nlFyD5LyNmjXwnVjp31Pd+VfS83yz2q47fZn+
Q5Qy6IUeqWyPgNQanrQqus5rPZInlpPQ4TyifcHUpYbGKs52jImj7/SdBQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ9SazNsVATRfiriJDiyBcKEuS+OMB8GA1UdIwQY
MBaAFHMdmtQE7Nr6cOqaTJ0QuYAYKeofMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY3gyYTFBVHMydnB3NnBwTW5SQzVnQmdwNmg4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC80NDI5YTQtMGIzNi00Y2VkLTg0NmYt
ZTIwYTY1NGZjYTk1LzEvY3gyYTFBVHMydnB3NnBwTW5SQzVnQmdwNmg4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMC80NDI5YTQtMGIzNi00Y2VkLTg0NmYtZTIwYTY1NGZjYTk1
LzEvY3gyYTFBVHMydnB3NnBwTW5SQzVnQmdwNmg4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAd7RpNoDW
dZWbZCl1a69706ELYj2YCtxL7brc3k0t+uv+unV4+qrWlekK8KzxmHJhHkKo7+zZ
I75uY5qa9GrSBR8LgCIx9ZuD1yVdc4eLT5MCznA8DVP9wIl+mHz2t5BfKnnacSFh
Zmn8HVCtTv770Yu03bTf3hXGPg9SMzQySqFeS09srOEZI48cNOsddR32cSLs/GVZ
2ZqJlbuBEUvScfkMqmyOBwMzXsbDdMfkm400ETU2GHAeiRKkX6iBGqeOmyIreLNT
iImdtDOOIUUVF3CAT9Gqte8jaRjFTzJ2TCZKqxshDQ/npSobzdo/yRukKFjc915Z
aLsHh+r+OWVr1Q==
-----END CERTIFICATE-----
Generated at Sun Jul 27 04:38:28 2025 by rpki-client