Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/9620ce-43f0-42bc-af59-435bda5bd048/1/cxU1ourrxowWV6r89aeIyHUdm2I.mft
File: cxU1ourrxowWV6r89aeIyHUdm2I.mft (raw, json)
Hash identifier: n7lQu/VWRQ9YzvHIfS0VU20p7GcYwve/bi3CDA0GOyQ=
Subject key identifier: F1:7C:5B:92:EF:68:FE:1C:71:7D:85:AF:F5:B5:02:7C:B4:1D:A3:9C
Authority key identifier: 73:15:35:A2:EA:EB:C6:8C:16:57:AA:FC:F5:A7:88:C8:75:1D:9B:62
Certificate issuer: /CN=731535a2eaebc68c1657aafcf5a788c8751d9b62
Certificate serial: 019828927A7A2F759DF43033D6532E6A7D4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cxU1ourrxowWV6r89aeIyHUdm2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/9620ce-43f0-42bc-af59-435bda5bd048/1/cxU1ourrxowWV6r89aeIyHUdm2I.mft
Manifest number: 14CC
Signing time: Sun 20 Jul 2025 16:02:24 +0000
Manifest this update: Sun 20 Jul 2025 16:02:24 +0000
Manifest next update: Mon 21 Jul 2025 16:02:24 +0000
Files and hashes: 1: JsiUY4utQyGLQkMCxP2vm1DnYkM.roa (hash: t9dxvm0FP5XnZVQ8+CoMdOpLdpUdElKJXDgxciqeHNU=)
2: VS0vQXyTV30uKtTHz_uaATpRmNI.roa (hash: bd6zfzzABUQlbCGm2yH6xBJFNFWYvrN9JXn/fjw4bhU=)
3: cxU1ourrxowWV6r89aeIyHUdm2I.crl (hash: JaMXDRsuH1sM4Spod0J00483Suvx/txn9FSZZN3sfpc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/9620ce-43f0-42bc-af59-435bda5bd048/1/cxU1ourrxowWV6r89aeIyHUdm2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/9620ce-43f0-42bc-af59-435bda5bd048/1/cxU1ourrxowWV6r89aeIyHUdm2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/cxU1ourrxowWV6r89aeIyHUdm2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Jul 2025 16:02:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:28:92:7a:7a:2f:75:9d:f4:30:33:d6:53:2e:6a:7d:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=731535a2eaebc68c1657aafcf5a788c8751d9b62
Validity
Not Before: Jul 20 16:02:24 2025 GMT
Not After : Jul 21 16:02:24 2025 GMT
Subject: CN=f17c5b92ef68fe1c717d85aff5b5027cb41da39c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:78:d6:a1:ce:aa:c2:d6:26:70:ed:29:88:b8:
4c:10:45:b8:b8:46:f4:da:a3:68:cb:8a:7b:d8:95:
1b:3d:fa:5b:15:44:32:4d:ab:7e:13:f1:2a:e2:3e:
c2:92:13:aa:be:f5:ad:af:aa:51:6a:e5:02:76:28:
84:8f:e4:bb:16:6d:d8:04:1d:d8:5e:6b:ea:c9:ab:
79:bf:fe:77:48:79:bf:0e:f4:64:b2:95:66:b8:04:
e4:5e:ce:85:f6:9e:01:81:ec:5f:90:39:2b:a0:95:
ac:7a:5d:57:06:d5:f8:cc:8b:63:e0:d3:9b:a3:6f:
db:19:3a:de:92:9a:38:bf:e6:ad:78:11:a4:99:2f:
08:14:5a:ad:4a:59:35:60:70:71:8c:32:21:61:9c:
b3:23:46:7a:af:16:ed:40:52:f3:ab:5e:35:49:69:
88:10:f9:fd:d3:36:cb:c6:0c:e8:b6:1f:8e:38:a1:
9f:a9:8b:45:30:a5:49:28:1a:99:fa:5f:34:ea:d6:
67:d9:0f:59:d4:62:67:e4:1f:99:53:0d:ad:5c:02:
99:26:d1:27:69:2d:f7:4b:7c:bf:99:c7:ec:83:4b:
19:8e:07:71:ab:33:2d:09:45:fb:44:de:35:fa:54:
e9:78:c3:c2:71:97:82:8d:4f:96:90:f4:73:2b:dc:
1d:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:7C:5B:92:EF:68:FE:1C:71:7D:85:AF:F5:B5:02:7C:B4:1D:A3:9C
X509v3 Authority Key Identifier:
keyid:73:15:35:A2:EA:EB:C6:8C:16:57:AA:FC:F5:A7:88:C8:75:1D:9B:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cxU1ourrxowWV6r89aeIyHUdm2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/9620ce-43f0-42bc-af59-435bda5bd048/1/cxU1ourrxowWV6r89aeIyHUdm2I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/9620ce-43f0-42bc-af59-435bda5bd048/1/cxU1ourrxowWV6r89aeIyHUdm2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:27:de:53:c6:1a:0c:ff:21:11:2c:2f:96:fd:01:ce:a5:98:
75:a7:12:c4:71:55:83:d9:33:a9:af:41:fa:fa:e9:90:50:eb:
a2:4d:33:1a:d0:df:24:d0:60:85:8b:90:2b:39:08:6e:ca:47:
e7:4f:1e:00:e7:6b:e5:5e:a5:b5:0a:57:90:0f:61:a8:6d:50:
17:bb:2b:d2:0e:bb:08:22:d7:37:5b:f1:49:4d:63:7d:22:7c:
20:3e:72:f2:8e:a1:62:96:34:57:fa:48:e6:6f:4b:70:eb:8d:
e2:d1:94:61:fd:12:30:d9:6f:cb:d4:d4:d5:6f:85:e8:73:60:
86:b0:09:d0:fe:08:4b:a9:22:a8:e8:cf:75:e3:ba:b4:c5:4e:
ae:67:87:18:db:a3:72:c9:b1:c3:f2:a8:4c:ea:2d:20:ff:60:
e7:8e:31:db:bb:ce:68:5d:6a:df:a0:e9:35:5b:c8:a8:7b:2b:
f6:65:9c:59:e6:5d:ca:1a:f8:b5:00:27:4c:0b:98:5d:40:a9:
5d:39:fc:97:4e:cf:25:8a:34:54:11:34:fa:67:e5:9e:91:8c:
aa:93:b5:53:77:24:d2:72:f8:de:02:42:b0:19:39:78:52:47:
2d:e2:65:27:18:8c:ea:ed:4b:5c:1d:17:97:e3:5d:c7:0e:fc:
61:19:33:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 00:25:50 2025 by rpki-client