Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/f8c7e2-3282-4ebb-8508-9f9494966c54/1/cxkAeiit4HgdMS2NSUcts2dnBBY.mft
File: cxkAeiit4HgdMS2NSUcts2dnBBY.mft (raw, json)
Hash identifier: IJ41p+MTu+EtF7hkRaULXuh/t6VIdYdrqCn+fsP4iKU=
Subject key identifier: 35:28:C1:05:B1:43:E1:F2:48:0C:86:84:ED:43:0F:BB:74:31:D1:AE
Authority key identifier: 73:19:00:7A:28:AD:E0:78:1D:31:2D:8D:49:47:2D:B3:67:67:04:16
Certificate issuer: /CN=7319007a28ade0781d312d8d49472db367670416
Certificate serial: 019A5375D1C73F6F610320451D139A3B8499
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cxkAeiit4HgdMS2NSUcts2dnBBY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/f8c7e2-3282-4ebb-8508-9f9494966c54/1/cxkAeiit4HgdMS2NSUcts2dnBBY.mft
Manifest number: 098B
Signing time: Wed 05 Nov 2025 10:00:21 +0000
Manifest this update: Wed 05 Nov 2025 10:00:21 +0000
Manifest next update: Thu 06 Nov 2025 10:00:21 +0000
Files and hashes: 1: cxkAeiit4HgdMS2NSUcts2dnBBY.crl (hash: dvfMjJ19c0VaQmBxF8NOAMXXGZdTfX0hRN2ccOqPDGE=)
2: rOIGMeXF9bxOY5fu4vCOE7NrCP0.roa (hash: 1nU5+mzZGJaibKrLnnLB5qj48GydY1KP7W2pluR6Ujw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/f8c7e2-3282-4ebb-8508-9f9494966c54/1/cxkAeiit4HgdMS2NSUcts2dnBBY.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/f8c7e2-3282-4ebb-8508-9f9494966c54/1/cxkAeiit4HgdMS2NSUcts2dnBBY.mft
rsync://rpki.ripe.net/repository/DEFAULT/cxkAeiit4HgdMS2NSUcts2dnBBY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 10:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:75:d1:c7:3f:6f:61:03:20:45:1d:13:9a:3b:84:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7319007a28ade0781d312d8d49472db367670416
Validity
Not Before: Nov 5 10:00:21 2025 GMT
Not After : Nov 6 10:00:21 2025 GMT
Subject: CN=3528c105b143e1f2480c8684ed430fbb7431d1ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:bf:b4:46:1c:41:ac:47:06:be:51:fb:e9:b7:
6a:f2:68:96:90:10:08:bd:a4:0d:49:a7:c7:86:12:
d4:c2:28:da:a8:88:84:2f:83:4f:98:bc:28:2e:0d:
78:27:83:4b:c9:d2:f9:5d:44:db:d3:c7:c0:d2:86:
1f:55:15:fd:c7:63:ea:a5:fe:a1:f7:6f:a8:89:31:
00:f1:28:7b:6b:ee:2c:0c:7d:13:92:35:25:12:55:
e2:25:06:50:e8:75:0b:c9:fa:ec:df:cd:8a:c0:5a:
98:14:12:14:35:fb:17:73:e8:67:f3:e4:d3:d8:f4:
0a:d6:bc:e6:55:af:32:78:a6:53:40:da:fc:48:30:
9f:39:91:06:3f:6d:6e:58:b9:f1:f1:ca:a9:12:2d:
fa:93:ea:a0:11:30:14:6d:89:2b:7c:92:c1:af:3d:
69:ba:4a:85:3a:4f:70:4c:6a:5a:37:0c:59:26:b2:
07:f8:0c:7d:ba:60:c0:bb:56:f0:3e:d0:1e:d0:a4:
6d:57:6e:d0:26:d4:21:3c:a2:42:7c:12:15:d7:32:
1f:79:ef:cb:7a:83:72:fd:03:25:f3:e0:45:f3:58:
bf:f0:22:75:35:62:06:a4:6a:4d:0e:8f:44:f1:49:
6f:b4:29:28:28:76:ca:f2:9a:3b:97:c5:03:22:5c:
92:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:28:C1:05:B1:43:E1:F2:48:0C:86:84:ED:43:0F:BB:74:31:D1:AE
X509v3 Authority Key Identifier:
keyid:73:19:00:7A:28:AD:E0:78:1D:31:2D:8D:49:47:2D:B3:67:67:04:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cxkAeiit4HgdMS2NSUcts2dnBBY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/f8c7e2-3282-4ebb-8508-9f9494966c54/1/cxkAeiit4HgdMS2NSUcts2dnBBY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/f8c7e2-3282-4ebb-8508-9f9494966c54/1/cxkAeiit4HgdMS2NSUcts2dnBBY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:10:c3:aa:a9:32:7d:6e:c6:a9:c5:de:7e:5c:62:ae:2d:cf:
a4:55:20:66:af:eb:77:36:e7:92:8f:04:d5:dc:44:ec:d7:b7:
35:ee:24:68:52:7f:af:d3:f8:72:ef:ac:e3:04:db:d9:91:c1:
2c:4b:18:d6:53:34:e4:ca:71:d6:94:2e:b0:12:a4:84:1d:ee:
ff:34:89:49:51:de:d0:35:c9:d3:36:63:ae:5e:93:8e:e7:66:
f1:c6:92:60:ba:3b:b8:e1:58:9a:01:a3:28:bf:b2:84:44:49:
12:18:95:00:fe:94:88:52:fd:a5:1f:11:40:c5:3a:98:96:fa:
f9:bb:71:a3:12:cf:36:34:63:89:29:09:1c:2e:1b:36:e8:6f:
9d:74:02:82:0d:89:6e:36:41:ac:95:07:a7:47:e2:70:e0:f4:
5f:e7:6c:8e:13:d3:13:36:15:eb:44:fd:0e:e7:89:a8:9a:a7:
1c:d4:3a:a0:82:df:a3:94:69:20:f5:47:7a:00:e9:35:fd:21:
57:76:c1:01:be:61:a9:a7:be:7f:9e:a7:e8:df:0f:23:b5:8f:
ef:48:9a:71:1d:c9:20:b1:39:b1:3b:fd:07:59:57:8b:f3:b5:
c4:10:f9:57:78:e3:11:e1:e0:a9:2a:7c:91:2b:d1:e1:a9:a2:
5a:87:3e:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 17:40:28 2025 by rpki-client