Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/b585ac-8618-415a-87ec-d1d8db148ec2/1/cXhwDxYZ7BzTTZcAOSFT7EtiMfw.mft
File: cXhwDxYZ7BzTTZcAOSFT7EtiMfw.mft (raw, json)
Hash identifier: yNoN/+eJ5laeX44AsKln+zZTr2aFFr/nnZwyiW07rHA=
Subject key identifier: 12:BA:12:B3:88:75:AC:A7:5B:09:DA:E0:81:D7:37:48:BF:B7:45:05
Authority key identifier: 71:78:70:0F:16:19:EC:1C:D3:4D:97:00:39:21:53:EC:4B:62:31:FC
Certificate issuer: /CN=7178700f1619ec1cd34d9700392153ec4b6231fc
Certificate serial: 0199228CCFC51AC2CA1FC0ECF14DBE480D41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cXhwDxYZ7BzTTZcAOSFT7EtiMfw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/b585ac-8618-415a-87ec-d1d8db148ec2/1/cXhwDxYZ7BzTTZcAOSFT7EtiMfw.mft
Manifest number: 1672
Signing time: Sun 07 Sep 2025 05:01:17 +0000
Manifest this update: Sun 07 Sep 2025 05:01:17 +0000
Manifest next update: Mon 08 Sep 2025 05:01:17 +0000
Files and hashes: 1: SCQLL9FrRwZS3_4QAQMFwFWEnMU.roa (hash: hA+a1SinlIIzAIvLt/cO3Kjqq6i5Xzb+bDE4vvr8VPM=)
2: cXhwDxYZ7BzTTZcAOSFT7EtiMfw.crl (hash: K98zWRyUZX7qOERPyZntxS95bC8BHOEF3FKn/EKSTkM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/b585ac-8618-415a-87ec-d1d8db148ec2/1/cXhwDxYZ7BzTTZcAOSFT7EtiMfw.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/b585ac-8618-415a-87ec-d1d8db148ec2/1/cXhwDxYZ7BzTTZcAOSFT7EtiMfw.mft
rsync://rpki.ripe.net/repository/DEFAULT/cXhwDxYZ7BzTTZcAOSFT7EtiMfw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:8c:cf:c5:1a:c2:ca:1f:c0:ec:f1:4d:be:48:0d:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7178700f1619ec1cd34d9700392153ec4b6231fc
Validity
Not Before: Sep 7 05:01:17 2025 GMT
Not After : Sep 8 05:01:17 2025 GMT
Subject: CN=12ba12b38875aca75b09dae081d73748bfb74505
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:b5:7a:8d:12:38:32:c4:92:0a:12:4f:52:9f:
c3:8b:26:a1:f7:e2:74:ae:b9:17:a7:20:06:75:59:
42:bd:0a:3b:4e:60:84:50:53:0d:c7:b5:f5:41:e2:
94:0b:94:f4:29:c2:1b:8a:33:51:3f:05:5b:76:2c:
65:2f:d7:13:84:59:6d:bf:29:ab:f2:3f:0c:38:ac:
3b:4a:ed:3f:95:10:9d:5d:f4:b0:a8:58:79:a9:81:
45:6f:67:24:cd:5b:9f:4b:a1:5e:e4:2b:09:e7:7d:
31:ce:db:ea:7f:e3:f5:7c:54:5a:fd:aa:15:0e:30:
b9:1b:51:ac:f6:16:e1:73:66:45:b3:a5:f7:ef:80:
fc:84:93:29:17:22:5e:ab:4c:5f:99:18:42:02:c3:
47:ae:11:33:2a:df:6c:b0:b9:ce:e0:7a:80:ab:72:
28:f2:3a:d5:4b:ab:ea:4b:17:83:b2:fc:0e:53:46:
68:8d:0d:56:87:c5:7e:44:d8:0e:81:e2:98:7f:56:
93:2d:cd:4a:d9:52:78:8b:c6:cc:01:2b:f2:e6:02:
96:3b:1b:1a:f8:78:f0:fa:9a:14:cd:26:3c:26:d2:
4a:d4:0f:ee:a2:ea:64:60:93:3c:79:8b:94:ff:42:
c2:fd:d6:7e:2e:9e:04:5e:b3:6f:b9:40:29:d1:0d:
9c:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:BA:12:B3:88:75:AC:A7:5B:09:DA:E0:81:D7:37:48:BF:B7:45:05
X509v3 Authority Key Identifier:
keyid:71:78:70:0F:16:19:EC:1C:D3:4D:97:00:39:21:53:EC:4B:62:31:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cXhwDxYZ7BzTTZcAOSFT7EtiMfw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/b585ac-8618-415a-87ec-d1d8db148ec2/1/cXhwDxYZ7BzTTZcAOSFT7EtiMfw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/b585ac-8618-415a-87ec-d1d8db148ec2/1/cXhwDxYZ7BzTTZcAOSFT7EtiMfw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:15:79:d3:5c:6e:9d:86:43:b3:e4:60:1a:27:ca:0e:99:d9:
83:6b:dc:88:2d:4a:25:93:a4:c2:d1:a4:c2:70:30:10:ce:8e:
b0:cb:af:d0:49:1c:87:5c:ad:89:2f:df:f2:4c:3c:28:62:57:
94:83:20:6f:9c:ca:c4:45:b9:f9:8c:ce:d5:23:bc:57:b8:8b:
a1:04:fc:64:e4:83:dd:7d:ec:35:05:07:69:54:f8:ad:06:9f:
5d:fb:7b:71:aa:ec:be:a6:9c:d1:49:de:7f:4a:dc:0e:85:2c:
19:db:b1:7e:34:1d:26:b7:97:2b:3c:ec:db:41:7c:dc:28:81:
70:a6:50:a5:31:53:a6:98:d8:d4:9a:c4:b6:5c:6e:cf:12:6d:
22:f8:74:fe:ac:e4:ce:49:88:5f:b1:cf:fe:3e:55:59:54:8d:
aa:33:41:cc:db:d5:07:f4:de:5c:12:5a:bc:fe:2f:5f:1c:d5:
bb:02:e7:18:92:78:cc:05:9e:1d:b5:48:5e:b1:37:ad:c4:04:
cf:86:a9:03:37:da:37:1a:d3:ec:1b:6f:87:c2:43:ee:5d:1a:
47:12:fb:a5:72:fa:f3:2e:eb:dc:69:92:60:97:dd:b3:84:43:
a8:ca:c4:b7:90:f6:a5:44:d6:90:8b:92:8f:b2:f3:48:9e:2f:
b2:54:74:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:25:03 2025 by rpki-client