Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/4b4df7-d72b-474f-963f-59e6a6d4d576/1/CxsxjlBXocEDQWB83d2ttG1xq_U.mft
File: CxsxjlBXocEDQWB83d2ttG1xq_U.mft (raw, json)
Hash identifier: M7uEhLRiJFb77oRbSrueRW20PslzaQ2TUWM/lnUSUbQ=
Subject key identifier: 9F:40:FB:E6:22:00:F4:43:19:B5:C8:AE:41:81:B0:CB:A7:29:15:EA
Authority key identifier: 0B:1B:31:8E:50:57:A1:C1:03:41:60:7C:DD:DD:AD:B4:6D:71:AB:F5
Certificate issuer: /CN=0b1b318e5057a1c10341607cddddadb46d71abf5
Certificate serial: 019848527C4B4484AB37BBEAB846BC428F2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CxsxjlBXocEDQWB83d2ttG1xq_U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/4b4df7-d72b-474f-963f-59e6a6d4d576/1/CxsxjlBXocEDQWB83d2ttG1xq_U.mft
Manifest number: 1602
Signing time: Sat 26 Jul 2025 20:00:21 +0000
Manifest this update: Sat 26 Jul 2025 20:00:21 +0000
Manifest next update: Sun 27 Jul 2025 20:00:21 +0000
Files and hashes: 1: CxsxjlBXocEDQWB83d2ttG1xq_U.crl (hash: u+Jvg2sgroygs3u+j7EznCONcXNW/8Zpr1cXL5AVsMA=)
2: bQ7_HzmWbxe1bpqsnmG8t2z9J54.roa (hash: uTKgZb6MWbd79qCA3p5te2MUGcoD6xRmcaj1CluWZYI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/4b4df7-d72b-474f-963f-59e6a6d4d576/1/CxsxjlBXocEDQWB83d2ttG1xq_U.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/4b4df7-d72b-474f-963f-59e6a6d4d576/1/CxsxjlBXocEDQWB83d2ttG1xq_U.mft
rsync://rpki.ripe.net/repository/DEFAULT/CxsxjlBXocEDQWB83d2ttG1xq_U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:52:7c:4b:44:84:ab:37:bb:ea:b8:46:bc:42:8f:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b1b318e5057a1c10341607cddddadb46d71abf5
Validity
Not Before: Jul 26 20:00:21 2025 GMT
Not After : Jul 27 20:00:21 2025 GMT
Subject: CN=9f40fbe62200f44319b5c8ae4181b0cba72915ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:d5:89:33:55:cc:bc:6b:fb:99:eb:ff:cc:b6:
60:dd:bc:47:95:63:21:d5:c4:91:54:0f:27:fb:bb:
de:ad:43:74:00:4c:23:ad:73:d0:0a:1e:34:82:7c:
01:73:1d:8d:9f:98:a8:2a:94:55:ff:42:c4:26:23:
83:d6:c6:9c:4d:99:08:86:c3:d5:04:04:4b:dd:e7:
3b:51:37:4b:4b:93:9e:6a:35:c0:3b:9c:4c:92:18:
49:95:09:d6:38:3a:8c:f5:1e:9b:64:a6:ff:6a:31:
3b:d1:aa:7d:74:a8:9a:b9:1b:63:7a:56:0a:eb:91:
3e:49:87:d4:35:9a:37:e0:6d:51:e8:52:f6:89:ce:
a4:72:d1:71:c1:01:0c:88:21:14:63:4e:d7:61:f3:
b4:14:3d:c5:5e:cb:bb:e1:9f:8d:83:37:a2:0b:b0:
99:a3:a1:e5:27:e5:db:66:ac:69:24:5b:fc:bf:ed:
b8:d9:4e:f7:dc:c9:f9:4e:86:d9:cf:01:b1:da:2b:
a5:8d:ff:ed:f2:32:2d:65:e2:38:56:e0:19:69:aa:
f3:d3:9a:60:b0:b1:39:ce:c6:8a:a7:93:52:84:ca:
6e:6e:af:b9:60:b9:64:2a:67:2d:65:81:f1:f0:ac:
11:d6:5f:c2:5c:5b:82:ee:5f:76:47:33:9b:ee:51:
93:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:40:FB:E6:22:00:F4:43:19:B5:C8:AE:41:81:B0:CB:A7:29:15:EA
X509v3 Authority Key Identifier:
keyid:0B:1B:31:8E:50:57:A1:C1:03:41:60:7C:DD:DD:AD:B4:6D:71:AB:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CxsxjlBXocEDQWB83d2ttG1xq_U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/4b4df7-d72b-474f-963f-59e6a6d4d576/1/CxsxjlBXocEDQWB83d2ttG1xq_U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/4b4df7-d72b-474f-963f-59e6a6d4d576/1/CxsxjlBXocEDQWB83d2ttG1xq_U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:c5:9d:2b:fd:6d:6d:53:ae:2c:de:dc:7b:14:a0:45:5d:4c:
de:b5:06:1c:a3:34:92:97:89:1b:34:3b:38:ca:4c:06:0a:17:
09:22:d6:77:6f:b7:51:fb:37:31:94:a8:65:2a:b4:f4:14:45:
64:55:02:33:15:06:5f:f8:9a:ec:53:ee:02:13:a2:73:55:c8:
f4:73:3d:54:7f:d2:f2:af:b1:f3:f9:eb:3b:64:b8:ff:d1:ed:
d5:5e:e8:7d:0f:95:38:1b:cb:13:3c:3c:90:b0:b7:a0:51:65:
bb:9a:98:f8:e2:b1:57:db:fe:ba:fe:6d:d5:86:b7:03:0a:a5:
f8:9a:99:81:c8:9a:57:8f:b3:25:e0:07:82:32:3f:15:52:9a:
d1:31:aa:89:7f:f1:f1:9a:3e:34:ab:0b:c7:c2:0c:22:9d:be:
da:6a:53:68:77:e5:48:8e:3c:af:0b:60:85:ce:ba:4c:29:9f:
92:f5:d1:bf:1a:82:e3:c4:22:c8:ac:83:a3:24:72:31:da:bd:
28:2b:7e:9b:76:4b:93:63:67:cc:a9:8b:cb:a5:48:a4:87:93:
d3:26:3b:8c:2a:4a:77:07:58:4b:6d:82:17:9b:70:3f:1f:20:
00:28:cd:b4:5f:eb:85:8c:ce:f1:de:2c:6d:1f:a3:06:ed:14:
0b:b3:19:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 05:17:11 2025 by rpki-client