Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/f8c7e2-3282-4ebb-8508-9f9494966c54/1/cxkAeiit4HgdMS2NSUcts2dnBBY.mft
File: cxkAeiit4HgdMS2NSUcts2dnBBY.mft (raw, json)
Hash identifier: ovsqKuaaTzfDYjVYUUO3Cwev1sr5sqin2I7SnAwELFo=
Subject key identifier: 8E:68:34:A9:AF:81:EB:C5:8B:1A:CF:B6:EC:5A:A6:4A:2C:D3:52:C6
Authority key identifier: 73:19:00:7A:28:AD:E0:78:1D:31:2D:8D:49:47:2D:B3:67:67:04:16
Certificate issuer: /CN=7319007a28ade0781d312d8d49472db367670416
Certificate serial: 01974D0E07DF4FA8D469391330441F7E0FD4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cxkAeiit4HgdMS2NSUcts2dnBBY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/f8c7e2-3282-4ebb-8508-9f9494966c54/1/cxkAeiit4HgdMS2NSUcts2dnBBY.mft
Manifest number: 07FA
Signing time: Sun 08 Jun 2025 01:00:54 +0000
Manifest this update: Sun 08 Jun 2025 01:00:54 +0000
Manifest next update: Mon 09 Jun 2025 01:00:54 +0000
Files and hashes: 1: cxkAeiit4HgdMS2NSUcts2dnBBY.crl (hash: OBUXYoz6VoQnRrjnzUFM0Fwjj6TP0fspSwzb4VFSB30=)
2: rOIGMeXF9bxOY5fu4vCOE7NrCP0.roa (hash: 1nU5+mzZGJaibKrLnnLB5qj48GydY1KP7W2pluR6Ujw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/f8c7e2-3282-4ebb-8508-9f9494966c54/1/cxkAeiit4HgdMS2NSUcts2dnBBY.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/f8c7e2-3282-4ebb-8508-9f9494966c54/1/cxkAeiit4HgdMS2NSUcts2dnBBY.mft
rsync://rpki.ripe.net/repository/DEFAULT/cxkAeiit4HgdMS2NSUcts2dnBBY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 01:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4d:0e:07:df:4f:a8:d4:69:39:13:30:44:1f:7e:0f:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7319007a28ade0781d312d8d49472db367670416
Validity
Not Before: Jun 8 01:00:54 2025 GMT
Not After : Jun 9 01:00:54 2025 GMT
Subject: CN=8e6834a9af81ebc58b1acfb6ec5aa64a2cd352c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:e2:12:58:9b:a7:3d:32:5b:30:c6:7a:b8:c7:
0a:86:6f:9d:8e:ca:28:9b:14:57:0f:2d:16:37:29:
07:7a:a4:f6:20:eb:7c:15:e3:3f:24:13:56:ef:cb:
8b:89:7d:f0:40:02:54:c6:56:be:b2:90:d8:ef:de:
44:4e:e0:9e:73:1f:48:4c:35:25:d0:00:4b:cf:47:
32:83:ea:8b:62:b8:fb:1b:2e:65:eb:ae:2b:14:45:
95:57:26:2d:97:1e:78:97:85:82:90:9f:e8:d1:07:
9c:4c:b0:4b:74:cb:2b:39:00:18:d3:f8:59:b0:f9:
6c:64:14:ac:9c:14:11:2e:7c:f1:ab:24:e1:f4:0d:
71:dc:44:bb:ef:09:9e:3a:f7:de:e7:8b:ea:4f:89:
c3:1a:7d:53:dc:42:3f:7e:d2:e6:f1:0b:04:77:15:
ac:76:bc:1e:52:01:8c:46:fb:5d:77:f1:fc:57:2f:
c9:83:a7:d1:1f:ea:f7:b0:27:83:f5:ee:c1:26:81:
78:ee:1d:c1:d1:86:37:6a:41:c3:fa:7a:af:d8:40:
bd:73:ea:1e:77:8c:3f:86:37:a3:72:11:85:f9:2a:
52:b4:27:ed:5b:09:5a:36:bd:b8:cd:97:3a:26:a9:
d9:6e:a9:31:80:83:3d:5f:cb:be:d9:fb:a7:e0:26:
d3:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:68:34:A9:AF:81:EB:C5:8B:1A:CF:B6:EC:5A:A6:4A:2C:D3:52:C6
X509v3 Authority Key Identifier:
keyid:73:19:00:7A:28:AD:E0:78:1D:31:2D:8D:49:47:2D:B3:67:67:04:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cxkAeiit4HgdMS2NSUcts2dnBBY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/f8c7e2-3282-4ebb-8508-9f9494966c54/1/cxkAeiit4HgdMS2NSUcts2dnBBY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/f8c7e2-3282-4ebb-8508-9f9494966c54/1/cxkAeiit4HgdMS2NSUcts2dnBBY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:a6:9a:13:2d:45:5c:57:bb:39:ed:0b:09:83:48:a9:d5:b5:
52:9f:c8:07:85:b7:57:3a:03:d0:3f:44:87:93:e5:07:a7:2f:
fc:d3:e8:43:00:e8:b4:e6:19:dd:70:f5:4a:ca:44:91:36:c2:
49:f6:07:65:6a:9c:b2:d4:93:ae:e4:c5:2d:b8:d6:5b:d0:1e:
6d:dd:3d:81:dd:eb:cf:40:45:f5:55:7e:6a:ce:c7:7e:d2:81:
41:d7:08:e1:03:40:1c:c8:32:1e:43:07:f1:99:f4:07:e9:3a:
01:4f:f4:2a:a0:6f:de:bb:db:10:16:29:41:e4:55:ea:3d:36:
bf:2f:fd:ca:ba:9f:31:48:eb:8e:9f:27:bc:67:77:b1:c8:f1:
58:50:4d:1a:09:03:91:89:7e:fc:96:a6:d9:43:39:f5:d4:ee:
96:cc:24:bc:d7:d1:0a:1c:1a:dd:94:f4:c3:be:aa:de:ba:30:
cc:7f:d0:c6:7a:43:54:c3:d7:09:45:27:1e:2b:a2:49:75:f4:
1a:26:7a:a2:81:3f:2b:c5:97:45:c9:c5:1f:fb:0f:af:4b:64:
8f:34:ec:6d:e7:e1:27:0a:63:9c:0e:7c:1c:b1:2f:7c:5b:d9:
c2:82:47:c0:64:67:6b:ae:7e:cf:bc:aa:53:06:bb:70:5c:ed:
6e:b5:e6:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 10:28:12 2025 by rpki-client