Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/b311d4-e358-4721-ab8d-6e6a5f172be3/1/CxAnrOF_AGf2l8ZTYUiBkur2QTg.mft
File: CxAnrOF_AGf2l8ZTYUiBkur2QTg.mft (raw, json)
Hash identifier: ijjn6/8qUaUB9l/eAV56jnypOFBxLrlcwAc2LtQOyQ4=
Subject key identifier: 70:A8:F3:55:CC:34:34:3F:D3:B8:4B:37:7A:5A:05:1C:A0:B6:62:95
Authority key identifier: 0B:10:27:AC:E1:7F:00:67:F6:97:C6:53:61:48:81:92:EA:F6:41:38
Certificate issuer: /CN=0b1027ace17f0067f697c65361488192eaf64138
Certificate serial: 01974EC533E3AA9E1155E34A44C0379EB996
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CxAnrOF_AGf2l8ZTYUiBkur2QTg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/b311d4-e358-4721-ab8d-6e6a5f172be3/1/CxAnrOF_AGf2l8ZTYUiBkur2QTg.mft
Manifest number: 157E
Signing time: Sun 08 Jun 2025 09:00:36 +0000
Manifest this update: Sun 08 Jun 2025 09:00:36 +0000
Manifest next update: Mon 09 Jun 2025 09:00:36 +0000
Files and hashes: 1: CxAnrOF_AGf2l8ZTYUiBkur2QTg.crl (hash: 8TTYAF3frHnqVcFj+cCppr1Z4TBqGaohM9ncSDJjSw0=)
2: ugc9sZedf1kQim_ILlGgEqT8zEQ.roa (hash: il9YS8RE+T8nxwMQDbcqvrV75JMzYR3yLbUc6KCg+oU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/b311d4-e358-4721-ab8d-6e6a5f172be3/1/CxAnrOF_AGf2l8ZTYUiBkur2QTg.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/b311d4-e358-4721-ab8d-6e6a5f172be3/1/CxAnrOF_AGf2l8ZTYUiBkur2QTg.mft
rsync://rpki.ripe.net/repository/DEFAULT/CxAnrOF_AGf2l8ZTYUiBkur2QTg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4e:c5:33:e3:aa:9e:11:55:e3:4a:44:c0:37:9e:b9:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b1027ace17f0067f697c65361488192eaf64138
Validity
Not Before: Jun 8 09:00:36 2025 GMT
Not After : Jun 9 09:00:36 2025 GMT
Subject: CN=70a8f355cc34343fd3b84b377a5a051ca0b66295
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:bb:72:4a:c6:12:82:4a:c8:f8:c4:64:ca:11:
39:85:92:14:03:7e:50:61:d5:a1:aa:c7:1a:c3:c0:
cd:00:a9:b8:fc:28:8c:41:2c:87:e5:5a:3f:ad:9d:
ab:a6:49:8c:df:04:30:a3:c7:f2:11:57:48:4d:bd:
56:01:48:f8:b9:53:61:fc:8b:9c:37:5f:80:e6:a6:
d6:49:e7:4d:8b:1c:5f:a1:53:0e:50:5e:83:2c:fa:
5f:10:b8:28:f9:73:08:a1:ad:2a:df:50:63:fc:c6:
e0:10:86:41:91:6a:50:a1:ca:78:8a:de:a1:37:3b:
50:29:95:8f:be:e8:1c:74:87:de:5b:0f:d9:9a:e4:
c8:d1:b2:00:38:7d:52:1a:04:0d:12:24:0a:1c:bb:
3d:a0:a1:ce:90:bb:da:2f:ee:0c:48:dd:9a:cf:3f:
d0:d9:84:c7:eb:27:2d:c7:40:46:ec:5c:48:a0:d2:
f2:e5:f0:30:86:e8:31:4c:67:3b:f9:17:b3:84:72:
17:55:69:a4:dd:b0:5d:6f:10:d0:f6:70:60:39:ed:
28:6c:a5:a9:96:c1:bb:e1:19:39:52:53:f0:20:3f:
ab:ce:a5:a8:7b:ad:4d:fe:51:55:fc:b5:da:ba:20:
6a:7a:41:8b:74:81:30:89:2e:7f:01:85:dc:a0:74:
4c:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:A8:F3:55:CC:34:34:3F:D3:B8:4B:37:7A:5A:05:1C:A0:B6:62:95
X509v3 Authority Key Identifier:
keyid:0B:10:27:AC:E1:7F:00:67:F6:97:C6:53:61:48:81:92:EA:F6:41:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CxAnrOF_AGf2l8ZTYUiBkur2QTg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/b311d4-e358-4721-ab8d-6e6a5f172be3/1/CxAnrOF_AGf2l8ZTYUiBkur2QTg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/b311d4-e358-4721-ab8d-6e6a5f172be3/1/CxAnrOF_AGf2l8ZTYUiBkur2QTg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:31:5e:4e:fd:61:2c:18:b7:47:54:09:44:28:a0:52:cd:e9:
27:98:b0:4e:09:7c:c4:a6:07:2f:2d:d8:6d:ff:4d:cc:76:72:
ec:35:43:e9:b0:91:ba:5a:59:8a:cb:86:69:90:ff:98:81:20:
14:4f:4c:9e:39:94:74:9b:6a:c1:d3:2f:12:81:7c:63:36:2a:
78:31:0b:89:b6:a4:96:20:cd:e3:bc:03:48:d2:bc:8b:7a:7e:
c5:ac:eb:2e:1a:4d:71:79:7c:5b:24:90:fa:8a:d1:df:35:ae:
4b:6e:d2:33:8f:43:15:c7:a2:11:4e:77:6d:e8:d3:97:a2:4d:
33:69:0c:7c:32:2c:8a:db:29:02:ea:de:40:79:24:a5:16:b1:
b2:ba:63:ed:c3:4b:11:42:8b:98:55:db:4b:6b:d8:88:a2:56:
01:6e:6a:b5:a6:b7:49:7a:33:cd:3b:29:3d:fe:cc:1d:53:ff:
c1:2c:b5:a4:ab:31:70:38:be:8f:ec:98:14:6a:85:39:ca:b7:
6d:45:5e:54:1a:4a:67:50:eb:3c:dc:d9:97:6c:03:a2:a1:6c:
fb:0f:aa:8e:50:d0:f7:d6:1f:77:26:b3:94:07:05:1e:9c:e6:
d7:5f:2b:76:03:2d:0d:74:fb:0c:10:66:23:2b:2e:9a:1c:74:
64:0a:82:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 12:46:20 2025 by rpki-client