Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/9778b6-dc2b-4586-91de-53a07368b9ea/1/cXHYtM9nc7WfBzLg6ejSWpt3P64.mft
File: cXHYtM9nc7WfBzLg6ejSWpt3P64.mft (raw, json)
Hash identifier: nyWDtEZF1rg/QJ/E4N4DNomiqgUq/K9hLoaDjkolITc=
Subject key identifier: 65:3A:94:C5:5E:27:E1:7C:53:DC:B3:12:88:30:E8:5D:87:E1:60:66
Authority key identifier: 71:71:D8:B4:CF:67:73:B5:9F:07:32:E0:E9:E8:D2:5A:9B:77:3F:AE
Certificate issuer: /CN=7171d8b4cf6773b59f0732e0e9e8d25a9b773fae
Certificate serial: 019845F6045D470090FEF5D3D573517EB020
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cXHYtM9nc7WfBzLg6ejSWpt3P64.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/9778b6-dc2b-4586-91de-53a07368b9ea/1/cXHYtM9nc7WfBzLg6ejSWpt3P64.mft
Manifest number: 1600
Signing time: Sat 26 Jul 2025 09:00:07 +0000
Manifest this update: Sat 26 Jul 2025 09:00:07 +0000
Manifest next update: Sun 27 Jul 2025 09:00:07 +0000
Files and hashes: 1: _Z-p7KxUVg6ghEbeseFL-OOEudI.roa (hash: su5vjqQnoBgVAVEbXkHU+T0GhwXhzdquZDKzgBwrhQ4=)
2: cXHYtM9nc7WfBzLg6ejSWpt3P64.crl (hash: VoOldrtaKjXQXJrXQVMMzu7utyJzlWPJZWMrOMHfV0U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/9778b6-dc2b-4586-91de-53a07368b9ea/1/cXHYtM9nc7WfBzLg6ejSWpt3P64.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/9778b6-dc2b-4586-91de-53a07368b9ea/1/cXHYtM9nc7WfBzLg6ejSWpt3P64.mft
rsync://rpki.ripe.net/repository/DEFAULT/cXHYtM9nc7WfBzLg6ejSWpt3P64.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 06:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:45:f6:04:5d:47:00:90:fe:f5:d3:d5:73:51:7e:b0:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7171d8b4cf6773b59f0732e0e9e8d25a9b773fae
Validity
Not Before: Jul 26 09:00:07 2025 GMT
Not After : Jul 27 09:00:07 2025 GMT
Subject: CN=653a94c55e27e17c53dcb3128830e85d87e16066
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:08:fc:91:db:af:b8:2f:78:19:a0:88:f2:a4:
a6:78:a2:3b:40:5e:84:ad:a0:79:55:9c:81:c6:77:
38:4a:6d:5d:3d:86:96:55:68:98:91:bb:28:9a:2b:
4b:cb:99:34:8f:c3:89:8d:a3:ef:88:64:08:96:e1:
e1:ec:a9:8c:c2:15:61:6e:e0:6b:4e:7e:87:5d:ea:
df:dd:ee:4d:15:f1:3a:84:4e:59:e5:19:b5:c1:e1:
a7:f1:f8:ad:ea:92:db:5a:94:1e:b6:42:e4:c6:5d:
f0:69:c5:bc:26:fb:38:6a:82:83:62:34:dd:98:4c:
fa:fd:04:68:af:a3:e7:de:46:28:aa:f3:76:e9:36:
a8:b6:34:75:80:79:15:3f:53:e3:0b:b6:ff:dc:05:
f2:d6:73:8a:30:8a:ff:d2:77:7e:84:c8:8e:db:16:
3e:7f:c6:b4:b2:ff:88:32:c9:e0:91:ca:0f:03:0c:
97:17:b5:e6:46:ce:e2:cd:ce:0c:d3:4d:4b:49:a3:
06:e9:8a:50:08:95:84:4d:a1:15:0d:90:fc:7f:58:
c3:55:1c:41:8c:75:d4:29:d1:e1:3b:67:67:fb:6e:
d9:c7:d6:12:c6:6c:20:90:42:50:01:b5:54:f1:6a:
90:73:40:c9:27:8c:96:00:ad:b9:ca:66:65:09:b5:
76:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:3A:94:C5:5E:27:E1:7C:53:DC:B3:12:88:30:E8:5D:87:E1:60:66
X509v3 Authority Key Identifier:
keyid:71:71:D8:B4:CF:67:73:B5:9F:07:32:E0:E9:E8:D2:5A:9B:77:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cXHYtM9nc7WfBzLg6ejSWpt3P64.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/9778b6-dc2b-4586-91de-53a07368b9ea/1/cXHYtM9nc7WfBzLg6ejSWpt3P64.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/9778b6-dc2b-4586-91de-53a07368b9ea/1/cXHYtM9nc7WfBzLg6ejSWpt3P64.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:82:1f:1c:e6:95:e7:1c:75:c0:f4:35:be:32:04:c2:88:8a:
17:c7:4f:51:de:39:44:0f:2f:c4:3c:09:52:57:50:e8:9f:59:
59:f3:4a:a4:bb:50:44:c8:f1:9d:df:77:a1:c9:dd:54:91:bd:
7e:8e:7b:f2:9d:50:2a:f7:cd:0a:f1:b8:9d:73:e2:a0:ef:d7:
f4:8f:40:d6:d3:c9:79:56:ff:5b:c8:fd:08:d3:4b:26:e9:e2:
11:11:81:91:6d:f6:f3:85:00:27:f2:1c:94:6a:69:9e:1f:79:
ec:19:41:fe:27:b0:36:30:fb:be:37:82:7f:8e:0e:48:e2:d4:
74:d5:d0:18:06:53:1f:b6:92:c9:65:b9:dc:97:e3:55:dc:fa:
99:63:7c:03:06:b9:45:a0:93:bf:b5:cb:f7:ef:c7:53:16:45:
a3:c6:0e:07:eb:a9:2d:26:55:c4:f9:6a:b4:bc:3d:42:4e:ef:
ec:ba:e0:e3:d2:bd:22:ea:1b:a8:7b:e3:ce:44:1e:40:98:cc:
2f:c2:79:d9:62:c7:77:47:b6:87:b4:1f:e3:c0:36:97:e6:d0:
ab:91:08:78:dd:ac:0b:f7:47:61:64:81:8e:d9:db:17:eb:80:
81:a1:b4:81:6b:2c:17:5e:53:48:49:f9:f4:e5:87:59:72:d4:
64:37:37:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 15:09:03 2025 by rpki-client