Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/b311d4-e358-4721-ab8d-6e6a5f172be3/1/CxAnrOF_AGf2l8ZTYUiBkur2QTg.mft
File: CxAnrOF_AGf2l8ZTYUiBkur2QTg.mft (raw, json)
Hash identifier: UkyIrxfm4MFtIR599/RYqUZkhCiSNk+qbgGr/xUmjsQ=
Subject key identifier: 8C:F6:75:72:E7:9F:14:E3:7D:5E:3C:0A:A7:5D:11:90:2D:2C:C7:9E
Authority key identifier: 0B:10:27:AC:E1:7F:00:67:F6:97:C6:53:61:48:81:92:EA:F6:41:38
Certificate issuer: /CN=0b1027ace17f0067f697c65361488192eaf64138
Certificate serial: 01985569232A7F573BA0A3A7CF2B28330F7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CxAnrOF_AGf2l8ZTYUiBkur2QTg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/b311d4-e358-4721-ab8d-6e6a5f172be3/1/CxAnrOF_AGf2l8ZTYUiBkur2QTg.mft
Manifest number: 1606
Signing time: Tue 29 Jul 2025 09:00:10 +0000
Manifest this update: Tue 29 Jul 2025 09:00:10 +0000
Manifest next update: Wed 30 Jul 2025 09:00:10 +0000
Files and hashes: 1: CxAnrOF_AGf2l8ZTYUiBkur2QTg.crl (hash: T5N/KjgYK6h0QhVjbXLACcE3XfdYPUx1nNbEMNEoNgQ=)
2: ugc9sZedf1kQim_ILlGgEqT8zEQ.roa (hash: il9YS8RE+T8nxwMQDbcqvrV75JMzYR3yLbUc6KCg+oU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/b311d4-e358-4721-ab8d-6e6a5f172be3/1/CxAnrOF_AGf2l8ZTYUiBkur2QTg.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/b311d4-e358-4721-ab8d-6e6a5f172be3/1/CxAnrOF_AGf2l8ZTYUiBkur2QTg.mft
rsync://rpki.ripe.net/repository/DEFAULT/CxAnrOF_AGf2l8ZTYUiBkur2QTg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Jul 2025 08:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:55:69:23:2a:7f:57:3b:a0:a3:a7:cf:2b:28:33:0f:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b1027ace17f0067f697c65361488192eaf64138
Validity
Not Before: Jul 29 09:00:10 2025 GMT
Not After : Jul 30 09:00:10 2025 GMT
Subject: CN=8cf67572e79f14e37d5e3c0aa75d11902d2cc79e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:3d:be:3e:e7:bc:80:a9:58:dd:04:51:2a:71:
85:40:b3:26:7c:0f:4e:82:72:d4:e2:9d:49:86:7b:
8b:42:f1:4d:e8:83:a6:0a:e3:a2:e9:91:59:6e:03:
28:a6:04:e3:09:79:fc:8e:36:05:30:a8:54:18:8b:
15:0a:61:8f:1b:35:3a:5a:4b:34:f9:f8:1f:f7:b6:
7d:e3:7f:58:15:d3:6c:1a:05:0a:4c:c3:ec:19:a1:
ce:e9:7e:31:aa:05:05:e2:f4:ea:1f:f6:ba:69:d2:
7f:fc:4a:04:e8:b7:10:06:d5:e7:da:74:ab:ee:b0:
da:6e:17:13:4a:90:96:98:6d:26:b3:19:bf:2e:56:
9d:c0:7b:65:79:fc:0a:22:0f:56:48:58:13:2b:c0:
ce:ae:1c:f1:a9:a1:31:83:76:bf:0a:74:ab:17:59:
c7:56:bf:33:77:2e:99:b4:ac:42:17:cb:b3:e2:07:
71:c5:6b:93:74:fd:43:8e:54:40:b4:b9:68:87:cb:
0e:a3:db:97:cf:83:fd:32:3b:30:c0:93:a8:b4:39:
76:65:05:15:0f:3b:97:87:13:fc:31:48:fe:65:b8:
ac:51:d8:dd:6e:5f:3a:8b:2c:99:56:9c:de:95:3b:
c5:dd:4e:1e:a8:5e:98:7e:2a:bf:aa:48:7a:ef:51:
3d:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:F6:75:72:E7:9F:14:E3:7D:5E:3C:0A:A7:5D:11:90:2D:2C:C7:9E
X509v3 Authority Key Identifier:
keyid:0B:10:27:AC:E1:7F:00:67:F6:97:C6:53:61:48:81:92:EA:F6:41:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CxAnrOF_AGf2l8ZTYUiBkur2QTg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/b311d4-e358-4721-ab8d-6e6a5f172be3/1/CxAnrOF_AGf2l8ZTYUiBkur2QTg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/b311d4-e358-4721-ab8d-6e6a5f172be3/1/CxAnrOF_AGf2l8ZTYUiBkur2QTg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:b5:9e:d0:44:71:7b:0a:e1:74:5c:39:39:40:7f:3e:ef:be:
b9:f4:8f:58:1d:73:c9:8b:d3:d9:be:2a:aa:f4:c2:64:c4:33:
16:39:e0:0a:29:c9:94:21:94:61:03:91:2d:a9:dc:7e:fe:26:
99:e5:4b:06:5d:04:c2:7b:6e:19:5a:32:c0:61:3f:29:5b:98:
11:48:ec:33:9b:62:fe:a1:d5:0f:4f:7e:99:38:5e:d1:49:50:
06:40:7d:dd:aa:0b:e1:bd:46:9e:41:9b:21:99:18:95:87:6e:
e5:4e:16:31:ea:ec:a6:73:67:e9:f7:24:c3:36:b4:6e:41:ca:
02:e3:07:80:8b:19:40:89:6c:34:10:4c:5d:1f:c0:09:9f:03:
ad:7c:2d:c8:af:65:42:a5:99:0d:65:ca:e2:57:95:5a:e6:48:
61:1a:e2:ce:2b:c9:c0:de:90:f0:e0:cd:1c:2c:b6:e4:18:56:
e4:06:2c:ad:2c:bd:62:6b:c7:d4:68:9e:d1:0f:cb:03:a2:01:
88:e7:7f:8f:13:21:ac:68:18:9e:4b:ae:3c:ca:e1:ae:70:97:
e8:0b:ff:aa:9d:a5:8d:5e:4d:7a:10:61:a0:9c:34:c2:1a:40:
fe:cb:85:4d:69:62:07:36:80:74:51:2a:c5:7c:bc:74:c9:b6:
48:c5:78:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 14:41:48 2025 by rpki-client