Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/1a5a96-d36e-4f3a-9b34-0548d3895a55/1/Cx5y89CVf1puO9G4RKEqYUdEkCc.mft
File: Cx5y89CVf1puO9G4RKEqYUdEkCc.mft (raw, json)
Hash identifier: V/GQVMtjfPXJDHRTMgwAfeuQtoZ9PK62dLPCzxTUSTY=
Subject key identifier: DF:2A:40:B2:C3:DF:6C:03:81:5B:CF:2D:77:CD:30:0F:AD:06:BB:77
Authority key identifier: 0B:1E:72:F3:D0:95:7F:5A:6E:3B:D1:B8:44:A1:2A:61:47:44:90:27
Certificate issuer: /CN=0b1e72f3d0957f5a6e3bd1b844a12a6147449027
Certificate serial: 0199277B6D970DE341975F48053847D32277
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cx5y89CVf1puO9G4RKEqYUdEkCc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/1a5a96-d36e-4f3a-9b34-0548d3895a55/1/Cx5y89CVf1puO9G4RKEqYUdEkCc.mft
Manifest number: 1689
Signing time: Mon 08 Sep 2025 04:00:24 +0000
Manifest this update: Mon 08 Sep 2025 04:00:24 +0000
Manifest next update: Tue 09 Sep 2025 04:00:24 +0000
Files and hashes: 1: 1qKATTVt2l9Amr30ivUd4qpcDQ8.roa (hash: D9mOfQXdZlNktupQVZacZwiNwms/ptwHflaY7QzV5Xk=)
2: 54AIlsCbzgy0XCYwE0wdAC4kiqw.roa (hash: yJyuDkNiVUNUnxXEpeacfSUjn5at6QtcOaws+zppt2w=)
3: Cx5y89CVf1puO9G4RKEqYUdEkCc.crl (hash: ZY40Z8JNq4zHHsipG50yYbKjNYjihSZ0yEmj98bjkIU=)
4: I9n8PdlI12zk3ftrt5ZejA1FrCU.roa (hash: kf3O7lpj7s7VfmT2vuNx6GwPZjLLFUhTpSV85VBR1i4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/1a5a96-d36e-4f3a-9b34-0548d3895a55/1/Cx5y89CVf1puO9G4RKEqYUdEkCc.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/1a5a96-d36e-4f3a-9b34-0548d3895a55/1/Cx5y89CVf1puO9G4RKEqYUdEkCc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Cx5y89CVf1puO9G4RKEqYUdEkCc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 09 Sep 2025 01:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:27:7b:6d:97:0d:e3:41:97:5f:48:05:38:47:d3:22:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b1e72f3d0957f5a6e3bd1b844a12a6147449027
Validity
Not Before: Sep 8 04:00:24 2025 GMT
Not After : Sep 9 04:00:24 2025 GMT
Subject: CN=df2a40b2c3df6c03815bcf2d77cd300fad06bb77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:51:b2:4e:0e:82:45:0e:0d:e9:1a:c9:6a:c7:
de:c6:75:08:08:1f:77:08:3f:f6:0b:f0:6b:fd:8e:
f9:f6:44:5f:d1:a6:60:d9:59:7c:08:ce:20:2a:f6:
24:4f:5e:e7:5a:83:b1:af:44:c3:2a:23:40:60:51:
c0:e2:89:ba:ac:83:20:06:fe:f7:b6:63:d0:16:31:
61:cf:c5:df:99:58:4a:ec:1d:e0:f1:3c:fc:01:d9:
3f:85:16:e6:16:64:26:17:07:9f:e2:16:39:48:53:
e2:11:11:60:f2:df:89:4d:a1:8f:86:1e:ca:8c:00:
0b:db:35:ea:a5:42:97:5e:25:54:2c:ef:80:87:4a:
9a:8f:32:23:0f:7f:1b:f1:7b:49:af:30:04:1b:e5:
8b:4c:37:f2:8d:56:10:61:de:5d:79:b7:18:52:18:
1b:ca:ad:a9:64:81:ab:88:97:ee:cf:70:44:fa:00:
9a:e8:cc:44:79:6c:af:5b:c1:2f:da:64:29:37:1f:
6e:f1:41:0a:6c:4f:5f:0f:1a:1d:87:46:8e:08:63:
c2:f7:0a:c6:92:60:c2:3f:15:d1:f7:48:7b:c0:29:
82:ee:7b:bc:bd:99:15:ac:bb:2c:17:28:07:ff:e4:
d8:61:de:a3:04:d3:8d:4f:b8:61:c2:5f:75:4c:57:
a8:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:2A:40:B2:C3:DF:6C:03:81:5B:CF:2D:77:CD:30:0F:AD:06:BB:77
X509v3 Authority Key Identifier:
keyid:0B:1E:72:F3:D0:95:7F:5A:6E:3B:D1:B8:44:A1:2A:61:47:44:90:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cx5y89CVf1puO9G4RKEqYUdEkCc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/1a5a96-d36e-4f3a-9b34-0548d3895a55/1/Cx5y89CVf1puO9G4RKEqYUdEkCc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/1a5a96-d36e-4f3a-9b34-0548d3895a55/1/Cx5y89CVf1puO9G4RKEqYUdEkCc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:e2:b5:52:8d:55:0f:0d:cb:2a:fc:cb:df:16:52:3f:01:21:
d3:ba:7d:a6:8e:5d:d9:3d:e0:a5:3a:5b:e6:8d:e4:08:d3:4d:
48:07:9b:51:83:86:7e:e6:d7:00:ac:a5:38:90:dd:6d:e6:5b:
6c:02:52:db:81:80:4d:45:3d:e8:c2:f7:9f:44:56:f1:23:d2:
bf:e4:79:d2:be:db:1f:eb:a6:9c:db:d4:fb:16:23:4e:18:8d:
ce:ea:ba:bd:b8:d7:3f:ff:6e:e9:2d:67:d7:e6:36:6d:a0:2f:
1c:35:dd:f7:56:f8:8f:fe:72:f6:83:85:5f:9a:8b:90:ce:11:
c4:4c:a9:e5:e1:c3:1d:34:03:8f:96:c2:f5:6e:c7:3d:8c:94:
9c:17:a4:ce:b2:91:d9:a6:ff:0c:7b:b1:31:3f:fd:ca:ac:fd:
46:3b:7f:8e:41:8a:8a:60:34:e3:d4:15:36:42:77:f7:79:de:
02:23:f2:a0:21:8a:01:56:eb:09:6f:2b:9b:d1:6d:97:3e:10:
1b:09:f9:7f:13:4f:56:90:41:1d:7f:6e:45:10:c7:cc:89:86:
c6:b0:96:53:e4:c3:ad:d0:0c:4f:ae:9f:61:bc:6f:63:a3:9a:
ea:c9:a8:9c:07:c1:9e:67:79:21:8d:8e:87:2d:e4:3d:e3:f6:
54:d3:ca:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 8 10:02:02 2025 by rpki-client