Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/4b4df7-d72b-474f-963f-59e6a6d4d576/1/CxsxjlBXocEDQWB83d2ttG1xq_U.mft
File: CxsxjlBXocEDQWB83d2ttG1xq_U.mft (raw, json)
Hash identifier: xNevrGSRH/k0MXaIW6bw742meC5ih6GFPj/g9wF0Wmw=
Subject key identifier: 48:4A:6D:25:73:B8:EC:4C:68:07:A7:E2:7F:5D:EF:4B:8A:5B:E3:9A
Authority key identifier: 0B:1B:31:8E:50:57:A1:C1:03:41:60:7C:DD:DD:AD:B4:6D:71:AB:F5
Certificate issuer: /CN=0b1b318e5057a1c10341607cddddadb46d71abf5
Certificate serial: 019931FF1AA3C66E246FFE3EA8A4AD4BDEE1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CxsxjlBXocEDQWB83d2ttG1xq_U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/4b4df7-d72b-474f-963f-59e6a6d4d576/1/CxsxjlBXocEDQWB83d2ttG1xq_U.mft
Manifest number: 167B
Signing time: Wed 10 Sep 2025 05:00:26 +0000
Manifest this update: Wed 10 Sep 2025 05:00:26 +0000
Manifest next update: Thu 11 Sep 2025 05:00:26 +0000
Files and hashes: 1: CxsxjlBXocEDQWB83d2ttG1xq_U.crl (hash: 59ZiyRkV60Zd0abKiv7+D7RN7cfHbjgntNGKco2gW9g=)
2: bQ7_HzmWbxe1bpqsnmG8t2z9J54.roa (hash: uTKgZb6MWbd79qCA3p5te2MUGcoD6xRmcaj1CluWZYI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/4b4df7-d72b-474f-963f-59e6a6d4d576/1/CxsxjlBXocEDQWB83d2ttG1xq_U.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/4b4df7-d72b-474f-963f-59e6a6d4d576/1/CxsxjlBXocEDQWB83d2ttG1xq_U.mft
rsync://rpki.ripe.net/repository/DEFAULT/CxsxjlBXocEDQWB83d2ttG1xq_U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 02:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:31:ff:1a:a3:c6:6e:24:6f:fe:3e:a8:a4:ad:4b:de:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b1b318e5057a1c10341607cddddadb46d71abf5
Validity
Not Before: Sep 10 05:00:26 2025 GMT
Not After : Sep 11 05:00:26 2025 GMT
Subject: CN=484a6d2573b8ec4c6807a7e27f5def4b8a5be39a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:87:42:38:9d:53:2a:81:f7:73:03:bc:3d:e8:
7b:f6:f8:18:0d:1e:61:b2:74:59:18:59:b2:ee:20:
fe:a6:76:18:42:f4:fa:59:eb:82:da:0b:46:c2:3c:
20:63:34:c3:6a:b2:22:62:c5:90:48:11:6f:fc:23:
8a:f1:f9:e0:29:3a:e7:68:75:6b:9e:73:8e:10:16:
5d:42:3b:fe:a7:8b:f2:ed:79:7d:bf:18:02:39:75:
22:7a:66:d5:a0:ec:9e:3b:bb:27:24:de:5d:fd:e1:
84:d3:a1:fd:a6:de:89:67:bd:40:c0:47:75:72:1a:
e9:6f:b8:6c:ef:83:be:d5:94:c7:f3:64:ca:8c:f2:
d7:42:89:68:4e:ee:0a:59:6a:b8:10:5f:bf:bb:d7:
b1:98:32:ea:55:69:be:11:80:3e:25:21:00:0e:16:
9a:00:ec:53:3c:7e:74:7b:f0:95:99:b6:8b:92:9c:
b7:7b:3f:4b:d8:f9:63:52:01:77:00:cf:64:ac:09:
ff:26:02:0e:40:79:90:89:5d:e6:85:42:af:92:45:
7d:6c:a2:13:4f:e9:87:fb:06:9f:6f:47:14:88:dc:
6a:1b:cc:e3:25:85:3f:e0:f6:29:09:67:e7:15:ce:
e9:b0:94:1b:54:d4:f6:8f:bc:e9:56:87:78:e2:07:
66:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:4A:6D:25:73:B8:EC:4C:68:07:A7:E2:7F:5D:EF:4B:8A:5B:E3:9A
X509v3 Authority Key Identifier:
keyid:0B:1B:31:8E:50:57:A1:C1:03:41:60:7C:DD:DD:AD:B4:6D:71:AB:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CxsxjlBXocEDQWB83d2ttG1xq_U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/4b4df7-d72b-474f-963f-59e6a6d4d576/1/CxsxjlBXocEDQWB83d2ttG1xq_U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/4b4df7-d72b-474f-963f-59e6a6d4d576/1/CxsxjlBXocEDQWB83d2ttG1xq_U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:80:5e:6a:a3:42:16:da:28:22:31:f8:4b:ff:f8:dc:a3:bb:
3e:60:3c:4e:62:15:fb:0c:d4:a1:9e:ad:2f:09:ce:64:de:ca:
d4:10:c3:71:06:3b:72:72:4f:66:db:e8:9b:8b:4c:9a:7a:2e:
01:f9:4a:cd:f3:5d:5f:1c:5c:19:68:da:41:c2:c4:73:f6:1e:
73:27:e8:1e:eb:3a:9e:fd:b9:1e:19:91:e9:0b:0d:34:44:1b:
d5:8f:9c:b5:25:82:ef:14:dd:13:5c:98:5b:a4:78:5d:1f:2a:
91:02:35:d2:a1:21:6f:86:73:ad:0a:a7:f7:ca:d2:26:8d:e0:
f9:bb:59:ad:f3:d2:9b:4d:3e:a2:13:7c:df:5c:82:8b:4f:fb:
5c:c5:ba:b0:c3:2c:48:60:13:d2:16:61:8e:34:e7:0a:1a:fa:
74:af:78:37:43:bd:b5:c3:1b:49:b3:3d:12:82:04:c3:20:8d:
25:3a:97:1e:c3:ba:5b:bf:ca:b1:c1:2c:9c:d1:b3:43:99:5c:
ac:71:a8:9b:da:0d:fc:45:51:c3:17:8c:25:c9:45:bb:97:08:
3d:75:ae:70:6c:b2:82:30:e8:0d:78:ce:54:95:53:bc:4f:41:
fc:4d:cb:c7:d3:76:66:70:88:0a:97:2e:00:36:aa:7a:60:a5:
2b:24:f2:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 10:15:22 2025 by rpki-client