Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/360a9d-b121-45ae-830d-066b63237d85/1/cxidJrrn-Fy04Gq1q1Nt5agMFqE.mft
File: cxidJrrn-Fy04Gq1q1Nt5agMFqE.mft (raw, json)
Hash identifier: NEhOFFhNzJnGs2ffYE6Y7hME84iVNToA8w+5urZwcZ8=
Subject key identifier: 11:5D:E8:1E:DD:7B:8D:40:3C:BB:5E:67:D7:AF:0B:51:86:13:1E:FA
Authority key identifier: 73:18:9D:26:BA:E7:F8:5C:B4:E0:6A:B5:AB:53:6D:E5:A8:0C:16:A1
Certificate issuer: /CN=73189d26bae7f85cb4e06ab5ab536de5a80c16a1
Certificate serial: 0198575840844C7718B0D3C70A3928258664
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cxidJrrn-Fy04Gq1q1Nt5agMFqE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/360a9d-b121-45ae-830d-066b63237d85/1/cxidJrrn-Fy04Gq1q1Nt5agMFqE.mft
Manifest number: 1609
Signing time: Tue 29 Jul 2025 18:00:58 +0000
Manifest this update: Tue 29 Jul 2025 18:00:58 +0000
Manifest next update: Wed 30 Jul 2025 18:00:58 +0000
Files and hashes: 1: 5j4kigVKwcUINFkbJ3xSgMqflUw.roa (hash: kVxN2YetN80jXaobnulfC7lyMJ7WxoaWB7joRYX4FHo=)
2: cxidJrrn-Fy04Gq1q1Nt5agMFqE.crl (hash: rB9cEuVR2Dn0dAeCe8HVMFv972XqCj78zqHWr3+paTY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/360a9d-b121-45ae-830d-066b63237d85/1/cxidJrrn-Fy04Gq1q1Nt5agMFqE.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/360a9d-b121-45ae-830d-066b63237d85/1/cxidJrrn-Fy04Gq1q1Nt5agMFqE.mft
rsync://rpki.ripe.net/repository/DEFAULT/cxidJrrn-Fy04Gq1q1Nt5agMFqE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Jul 2025 18:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:57:58:40:84:4c:77:18:b0:d3:c7:0a:39:28:25:86:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73189d26bae7f85cb4e06ab5ab536de5a80c16a1
Validity
Not Before: Jul 29 18:00:58 2025 GMT
Not After : Jul 30 18:00:58 2025 GMT
Subject: CN=115de81edd7b8d403cbb5e67d7af0b5186131efa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:af:bc:e0:d4:65:20:51:0d:ea:a8:f5:de:53:
1d:fb:f2:bc:16:a8:88:94:2d:ae:b1:9e:f5:0f:21:
16:4e:23:db:42:87:d9:9b:09:f0:27:ef:7f:90:2b:
b0:7c:c5:aa:e0:32:81:d7:62:32:46:2c:b4:41:c7:
a8:52:75:6e:64:aa:ee:c0:72:35:ee:1b:23:a9:c0:
a1:38:77:78:9b:9e:d1:d5:ab:00:e0:a4:dd:56:a9:
e0:c6:99:76:20:fd:11:37:8d:97:94:56:95:40:cd:
61:09:42:49:6c:4c:c9:14:93:e7:e2:00:d1:5b:9c:
b7:97:2c:9c:32:3c:89:e3:07:7b:38:b3:7a:fe:a4:
7a:e0:98:df:06:38:c7:59:5d:95:d2:15:d6:b5:50:
03:c1:3f:0d:69:e3:6d:b2:dc:18:ba:d2:84:ff:a6:
bc:da:d1:b1:77:91:7b:f3:fc:ee:5c:3e:3c:55:13:
b8:34:52:ec:50:19:c2:e5:b4:eb:dc:83:2f:be:01:
e0:97:e1:91:98:e5:db:83:59:8f:45:79:9d:1f:82:
69:0d:92:12:32:31:35:0a:85:14:a3:56:f9:22:0e:
14:85:5c:61:26:c4:7c:c8:8f:3f:e3:ba:14:d4:74:
30:89:75:68:1f:35:21:b5:1f:ef:dc:99:97:69:ef:
ca:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:5D:E8:1E:DD:7B:8D:40:3C:BB:5E:67:D7:AF:0B:51:86:13:1E:FA
X509v3 Authority Key Identifier:
keyid:73:18:9D:26:BA:E7:F8:5C:B4:E0:6A:B5:AB:53:6D:E5:A8:0C:16:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cxidJrrn-Fy04Gq1q1Nt5agMFqE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/360a9d-b121-45ae-830d-066b63237d85/1/cxidJrrn-Fy04Gq1q1Nt5agMFqE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/360a9d-b121-45ae-830d-066b63237d85/1/cxidJrrn-Fy04Gq1q1Nt5agMFqE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:00:03:cc:c1:de:0d:9e:68:55:8e:68:26:8f:0f:09:49:c5:
dd:96:45:d4:bd:40:7a:8f:0e:d5:c5:01:d5:ce:50:64:54:00:
71:af:fc:64:e3:c7:82:f3:5c:e4:68:33:d4:c7:76:a9:b5:14:
a5:8f:27:b4:16:5a:02:b1:ec:33:9d:a9:10:6f:3b:5e:02:bf:
98:28:be:e5:75:cd:17:e0:7a:1d:17:49:2d:03:4b:91:44:1e:
a0:21:c8:6f:c8:cb:fa:59:03:ee:0d:8c:a0:bc:ca:67:da:37:
6b:a4:18:fa:3a:5f:ae:12:4a:15:8b:bb:98:55:ba:28:a6:4b:
dd:61:df:f0:7d:1c:b0:dd:e9:e7:38:e8:b9:76:44:1a:10:9e:
d1:86:0e:2f:34:0d:7c:52:b8:ab:cf:ab:3f:77:15:6d:35:0d:
4b:fb:da:a1:b6:3d:0e:3e:af:33:11:e4:72:73:6f:35:db:a1:
61:77:49:8f:e2:fe:94:0c:28:a2:61:9e:9a:50:f6:1c:33:6f:
f7:ec:02:f4:33:7e:fb:be:37:6b:20:e0:e5:cf:a3:0a:ae:95:
ba:b5:5a:3a:88:a9:87:2a:c2:ad:0c:eb:0f:be:26:f3:cd:98:
73:fb:30:2a:39:c0:b2:74:70:94:0e:0a:1d:78:2c:e0:3f:eb:
91:85:05:f3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhXWECETHcYsNPHCjkoJYZkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDczMTg5ZDI2YmFlN2Y4NWNiNGUwNmFiNWFiNTM2ZGU1YTgw
YzE2YTEwHhcNMjUwNzI5MTgwMDU4WhcNMjUwNzMwMTgwMDU4WjAzMTEwLwYDVQQD
EygxMTVkZTgxZWRkN2I4ZDQwM2NiYjVlNjdkN2FmMGI1MTg2MTMxZWZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj6+84NRlIFEN6qj13lMd+/K8FqiI
lC2usZ71DyEWTiPbQofZmwnwJ+9/kCuwfMWq4DKB12IyRiy0QceoUnVuZKruwHI1
7hsjqcChOHd4m57R1asA4KTdVqngxpl2IP0RN42XlFaVQM1hCUJJbEzJFJPn4gDR
W5y3lyycMjyJ4wd7OLN6/qR64JjfBjjHWV2V0hXWtVADwT8NaeNtstwYutKE/6a8
2tGxd5F78/zuXD48VRO4NFLsUBnC5bTr3IMvvgHgl+GRmOXbg1mPRXmdH4JpDZIS
MjE1CoUUo1b5Ig4UhVxhJsR8yI8/47oU1HQwiXVoHzUhtR/v3JmXae/KDwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBFd6B7de41APLteZ9evC1GGEx76MB8GA1UdIwQY
MBaAFHMYnSa65/hctOBqtatTbeWoDBahMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY3hpZEpycm4tRnkwNEdxMXExTnQ1YWdNRnFFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi8zNjBhOWQtYjEyMS00NWFlLTgzMGQt
MDY2YjYzMjM3ZDg1LzEvY3hpZEpycm4tRnkwNEdxMXExTnQ1YWdNRnFFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yi8zNjBhOWQtYjEyMS00NWFlLTgzMGQtMDY2YjYzMjM3ZDg1
LzEvY3hpZEpycm4tRnkwNEdxMXExTnQ1YWdNRnFFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvQADzMHe
DZ5oVY5oJo8PCUnF3ZZF1L1Aeo8O1cUB1c5QZFQAca/8ZOPHgvNc5Ggz1Md2qbUU
pY8ntBZaArHsM52pEG87XgK/mCi+5XXNF+B6HRdJLQNLkUQeoCHIb8jL+lkD7g2M
oLzKZ9o3a6QY+jpfrhJKFYu7mFW6KKZL3WHf8H0csN3p5zjouXZEGhCe0YYOLzQN
fFK4q8+rP3cVbTUNS/vaobY9Dj6vMxHkcnNvNduhYXdJj+L+lAwoomGemlD2HDNv
9+wC9DN++743ayDg5c+jCq6VurVaOoiphyrCrQzrD74m882Yc/swKjnAsnRwlA4K
HXgs4D/rkYUF8w==
-----END CERTIFICATE-----
Generated at Wed Jul 30 02:41:20 2025 by rpki-client