Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/9620ce-43f0-42bc-af59-435bda5bd048/1/cxU1ourrxowWV6r89aeIyHUdm2I.mft
File: cxU1ourrxowWV6r89aeIyHUdm2I.mft (raw, json)
Hash identifier: 85mBK27Z2k3rVR+QnCXzVyUoXKIdtNPAaDSKxenVaiw=
Subject key identifier: B0:AF:5F:82:E3:11:E4:40:EE:42:46:C5:DE:33:14:FC:C9:55:BC:61
Authority key identifier: 73:15:35:A2:EA:EB:C6:8C:16:57:AA:FC:F5:A7:88:C8:75:1D:9B:62
Certificate issuer: /CN=731535a2eaebc68c1657aafcf5a788c8751d9b62
Certificate serial: 019738E1E6B0883018A1A314943B65DE657E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cxU1ourrxowWV6r89aeIyHUdm2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/9620ce-43f0-42bc-af59-435bda5bd048/1/cxU1ourrxowWV6r89aeIyHUdm2I.mft
Manifest number: 1450
Signing time: Wed 04 Jun 2025 03:00:18 +0000
Manifest this update: Wed 04 Jun 2025 03:00:18 +0000
Manifest next update: Thu 05 Jun 2025 03:00:18 +0000
Files and hashes: 1: JsiUY4utQyGLQkMCxP2vm1DnYkM.roa (hash: t9dxvm0FP5XnZVQ8+CoMdOpLdpUdElKJXDgxciqeHNU=)
2: VS0vQXyTV30uKtTHz_uaATpRmNI.roa (hash: bd6zfzzABUQlbCGm2yH6xBJFNFWYvrN9JXn/fjw4bhU=)
3: cxU1ourrxowWV6r89aeIyHUdm2I.crl (hash: JmSQ89pdqP6b3sguOCrtR4YtiGgu7EALjUtN/0fq6hc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/9620ce-43f0-42bc-af59-435bda5bd048/1/cxU1ourrxowWV6r89aeIyHUdm2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/9620ce-43f0-42bc-af59-435bda5bd048/1/cxU1ourrxowWV6r89aeIyHUdm2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/cxU1ourrxowWV6r89aeIyHUdm2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Jun 2025 03:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:38:e1:e6:b0:88:30:18:a1:a3:14:94:3b:65:de:65:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=731535a2eaebc68c1657aafcf5a788c8751d9b62
Validity
Not Before: Jun 4 03:00:18 2025 GMT
Not After : Jun 5 03:00:18 2025 GMT
Subject: CN=b0af5f82e311e440ee4246c5de3314fcc955bc61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:53:39:38:cd:a5:92:b8:a7:43:19:1f:e6:75:
6a:61:d0:19:38:4c:22:42:67:3a:53:b7:3f:c0:94:
b9:75:3d:ed:4d:75:ff:d9:3f:da:52:16:16:da:0f:
82:76:d7:2b:9c:7d:9d:fc:23:85:46:2f:bd:1c:d1:
37:72:71:ee:e7:dc:3d:24:51:7b:43:36:37:8a:bf:
1c:12:ab:67:d2:4a:c1:f3:ec:06:8f:f4:a4:51:d1:
a7:91:03:06:75:63:40:bd:a6:32:15:22:de:28:8a:
d8:ad:2e:83:90:81:53:ea:c4:02:13:cf:de:6a:ed:
8c:75:7a:44:5a:49:4d:e1:86:d1:d6:3f:61:06:07:
30:28:e6:45:6a:84:ba:5a:33:3d:4c:cd:58:b5:62:
4a:32:06:75:77:8d:63:87:c4:88:55:77:18:29:d2:
c0:73:76:ad:6e:12:8b:42:85:c4:24:cb:ad:e3:c1:
b4:88:21:0a:80:43:a1:78:e5:1c:77:60:47:60:c7:
c7:d3:b5:40:c3:6a:50:ca:2a:dd:ab:ac:9a:86:0b:
14:9c:70:b5:04:d4:8c:96:c2:6c:61:ab:8b:1f:42:
2c:5d:e5:2f:4f:87:6f:e0:e6:1f:c0:37:00:9e:cf:
fb:bf:d9:3d:67:07:51:f7:9c:d2:96:e4:64:58:54:
ba:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:AF:5F:82:E3:11:E4:40:EE:42:46:C5:DE:33:14:FC:C9:55:BC:61
X509v3 Authority Key Identifier:
keyid:73:15:35:A2:EA:EB:C6:8C:16:57:AA:FC:F5:A7:88:C8:75:1D:9B:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cxU1ourrxowWV6r89aeIyHUdm2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/9620ce-43f0-42bc-af59-435bda5bd048/1/cxU1ourrxowWV6r89aeIyHUdm2I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/9620ce-43f0-42bc-af59-435bda5bd048/1/cxU1ourrxowWV6r89aeIyHUdm2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:42:92:9e:47:9c:4b:cd:49:9a:d7:8d:5c:94:e5:00:cc:3f:
d2:d2:c6:04:30:4a:8d:67:1e:3a:e1:a2:2d:37:5c:76:c5:b5:
7a:4f:02:16:d8:a2:47:cb:60:d5:d3:5e:1c:8f:98:0c:b8:fb:
d5:26:91:5d:17:89:b1:9e:fb:a5:cd:5e:e9:37:04:5f:6b:c0:
80:ef:61:99:ca:30:76:c0:de:aa:c4:d1:16:8e:f4:ea:52:37:
ea:96:5d:70:bc:4c:6f:19:c1:14:70:f4:c4:95:b1:69:c9:4a:
48:f9:c1:d2:9c:bb:71:d5:39:77:67:cc:c5:bd:60:e9:46:9a:
53:53:50:d1:e3:7c:29:98:15:c3:f2:cb:44:8a:7d:aa:41:d3:
a3:3a:d0:9f:ce:06:a2:d2:7f:09:0b:f1:44:05:be:cf:96:e2:
5a:35:06:1e:b8:e5:7c:16:b0:58:f4:16:7b:ef:b9:05:15:f0:
01:07:4e:c5:2e:4d:88:af:7d:09:38:79:76:0e:ef:b6:b1:91:
a6:4c:eb:e3:70:4f:23:0b:6f:19:1f:81:c3:25:fc:bd:58:7e:
8b:3c:ce:40:bb:a6:ff:7e:c5:c3:78:61:38:67:8f:fc:aa:5b:
6d:e8:4e:ca:f1:bf:34:b5:be:70:45:a1:cb:a7:04:39:de:43:
b8:f9:a5:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 12:09:05 2025 by rpki-client