Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/f8c7e2-3282-4ebb-8508-9f9494966c54/1/cxkAeiit4HgdMS2NSUcts2dnBBY.mft
File: cxkAeiit4HgdMS2NSUcts2dnBBY.mft (raw, json)
Hash identifier: vYf7eWsldDqEIvmF0svA8sdoiX3iYyCAqBJOeOZA6iA=
Subject key identifier: F6:00:6B:56:1E:97:E1:04:BF:C8:CD:D3:B5:CB:C2:09:AC:F0:F9:79
Authority key identifier: 73:19:00:7A:28:AD:E0:78:1D:31:2D:8D:49:47:2D:B3:67:67:04:16
Certificate issuer: /CN=7319007a28ade0781d312d8d49472db367670416
Certificate serial: 019963FE49A6CB31EC52D6834DFE21178FD2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cxkAeiit4HgdMS2NSUcts2dnBBY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/f8c7e2-3282-4ebb-8508-9f9494966c54/1/cxkAeiit4HgdMS2NSUcts2dnBBY.mft
Manifest number: 090F
Signing time: Fri 19 Sep 2025 22:00:33 +0000
Manifest this update: Fri 19 Sep 2025 22:00:33 +0000
Manifest next update: Sat 20 Sep 2025 22:00:33 +0000
Files and hashes: 1: cxkAeiit4HgdMS2NSUcts2dnBBY.crl (hash: G/yDZDrex3AFqsi5HtIU40ZUuLqbMqHftVAIzAdrVOw=)
2: rOIGMeXF9bxOY5fu4vCOE7NrCP0.roa (hash: 1nU5+mzZGJaibKrLnnLB5qj48GydY1KP7W2pluR6Ujw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/f8c7e2-3282-4ebb-8508-9f9494966c54/1/cxkAeiit4HgdMS2NSUcts2dnBBY.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/f8c7e2-3282-4ebb-8508-9f9494966c54/1/cxkAeiit4HgdMS2NSUcts2dnBBY.mft
rsync://rpki.ripe.net/repository/DEFAULT/cxkAeiit4HgdMS2NSUcts2dnBBY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 20 Sep 2025 22:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:63:fe:49:a6:cb:31:ec:52:d6:83:4d:fe:21:17:8f:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7319007a28ade0781d312d8d49472db367670416
Validity
Not Before: Sep 19 22:00:33 2025 GMT
Not After : Sep 20 22:00:33 2025 GMT
Subject: CN=f6006b561e97e104bfc8cdd3b5cbc209acf0f979
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:18:79:4d:3b:1f:35:6b:1e:87:be:04:93:fc:
fd:c1:77:d0:33:a0:8c:fa:83:6f:47:38:35:78:53:
bf:6d:bc:e2:21:44:59:5a:fa:c5:b9:60:33:2c:91:
22:be:14:c6:8a:eb:7c:e5:80:1e:55:69:33:d6:98:
7d:24:3c:45:02:75:af:9e:e8:66:64:3b:6e:9c:ea:
19:d2:3f:a8:b9:0e:66:e2:87:f3:92:92:be:3b:85:
dd:c7:27:b5:90:97:c4:9f:6f:6c:13:1a:3f:fa:a3:
83:a4:2e:e4:2e:1c:8b:47:78:39:21:6f:a4:1b:e0:
1a:da:d7:82:02:27:7c:ac:7e:82:35:d7:73:84:e2:
3c:2d:e1:0c:01:8c:b2:61:b0:68:82:b6:48:22:0a:
1b:e9:17:6a:70:68:c6:26:c9:b9:fe:20:43:5a:c2:
5a:6c:fb:7c:77:03:c2:65:82:9c:9f:56:fb:19:50:
7d:31:4d:e9:67:06:15:7c:bf:91:d8:21:fc:48:c7:
9b:3d:87:c9:31:71:7d:05:e1:2e:21:88:b1:3c:c3:
49:e0:63:33:c4:f9:07:41:4f:9e:ee:51:03:80:4f:
92:99:8e:b3:ff:81:67:8f:fd:f3:e3:07:80:ad:bb:
40:5c:20:86:61:94:d9:20:92:c3:bd:f0:38:c6:ef:
a1:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:00:6B:56:1E:97:E1:04:BF:C8:CD:D3:B5:CB:C2:09:AC:F0:F9:79
X509v3 Authority Key Identifier:
keyid:73:19:00:7A:28:AD:E0:78:1D:31:2D:8D:49:47:2D:B3:67:67:04:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cxkAeiit4HgdMS2NSUcts2dnBBY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/f8c7e2-3282-4ebb-8508-9f9494966c54/1/cxkAeiit4HgdMS2NSUcts2dnBBY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/f8c7e2-3282-4ebb-8508-9f9494966c54/1/cxkAeiit4HgdMS2NSUcts2dnBBY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:79:2c:20:68:1d:28:37:12:75:7b:ba:08:74:38:ac:df:59:
50:47:65:7b:e7:66:25:20:49:90:39:76:08:5d:23:7b:fd:ec:
b4:8c:6b:e6:61:35:c8:12:71:85:76:14:b2:f7:ab:8d:3c:7b:
52:bc:36:fe:49:0a:50:f1:c7:44:ee:13:91:92:15:f3:60:b4:
e9:94:6f:26:e5:ab:72:64:48:90:10:71:e9:11:c5:0a:56:46:
ec:1b:96:41:b8:a0:9f:bf:c3:56:03:d1:47:bb:f9:14:ca:f1:
79:45:95:52:c7:9f:bb:57:90:19:38:e1:74:08:f9:0a:7e:82:
2a:2d:64:d6:4c:8d:93:f0:e1:2d:1d:6c:cf:f5:ed:3e:41:48:
97:18:a9:57:59:f7:a9:14:7b:4e:c9:9e:6e:d5:67:dd:0b:03:
4d:0a:71:65:c5:ad:bc:79:e4:7e:da:a9:83:15:99:82:f6:bf:
24:ba:42:f9:04:b2:36:41:d4:10:3f:3f:df:06:a8:58:19:7d:
92:a2:54:f5:fc:e7:72:9f:b2:d2:12:49:92:d6:7f:40:e3:30:
b8:76:7a:db:18:d2:3e:ec:69:0e:91:15:d2:23:ac:59:6e:d4:
2f:b7:7d:44:aa:f3:7d:e2:42:ff:de:88:1a:54:79:28:a7:5b:
4b:41:4c:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 20 07:17:35 2025 by rpki-client