Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/172e0b-8cbb-402e-8f2c-8595b4500884/1/cxwTgoWLDclamtvqRyizH54iwNg.mft
File: cxwTgoWLDclamtvqRyizH54iwNg.mft (raw, json)
Hash identifier: HaPXJwTrvGNx8MBEzldx4lGJ9T0YlVNxlNz5/nc+GjI=
Subject key identifier: A7:FD:29:52:CE:B4:02:9E:99:A5:80:60:43:02:3D:BC:07:09:B6:E9
Authority key identifier: 73:1C:13:82:85:8B:0D:C9:5A:9A:DB:EA:47:28:B3:1F:9E:22:C0:D8
Certificate issuer: /CN=731c1382858b0dc95a9adbea4728b31f9e22c0d8
Certificate serial: 019A71B7E90E80B1D9F30FDE48BCEA33AD42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cxwTgoWLDclamtvqRyizH54iwNg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/172e0b-8cbb-402e-8f2c-8595b4500884/1/cxwTgoWLDclamtvqRyizH54iwNg.mft
Manifest number: 087C
Signing time: Tue 11 Nov 2025 07:01:09 +0000
Manifest this update: Tue 11 Nov 2025 07:01:09 +0000
Manifest next update: Wed 12 Nov 2025 07:01:09 +0000
Files and hashes: 1: cxwTgoWLDclamtvqRyizH54iwNg.crl (hash: //mwzwuamueBGzb0NiglqTz4WFbPnQ8tS4eZ3dBKMDc=)
2: xsLt5XL-OWIaNdR6BZ8HbsppEGM.roa (hash: fVuO1qpyondG1qElrhxFzaCfBXaBgOTcL+nbs40PcY0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/172e0b-8cbb-402e-8f2c-8595b4500884/1/cxwTgoWLDclamtvqRyizH54iwNg.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/172e0b-8cbb-402e-8f2c-8595b4500884/1/cxwTgoWLDclamtvqRyizH54iwNg.mft
rsync://rpki.ripe.net/repository/DEFAULT/cxwTgoWLDclamtvqRyizH54iwNg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:e9:0e:80:b1:d9:f3:0f:de:48:bc:ea:33:ad:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=731c1382858b0dc95a9adbea4728b31f9e22c0d8
Validity
Not Before: Nov 11 07:01:09 2025 GMT
Not After : Nov 12 07:01:09 2025 GMT
Subject: CN=a7fd2952ceb4029e99a5806043023dbc0709b6e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:19:6a:16:d0:99:43:48:c4:2b:9a:a7:71:32:
55:a9:f9:17:b2:1e:d5:d7:4f:0f:2f:50:69:74:e2:
16:f6:37:1a:d0:68:09:4e:d8:c8:dc:41:48:4b:88:
2d:36:93:18:a2:02:0d:21:6b:fd:9e:21:78:f1:4c:
3a:8f:6d:40:a3:01:3d:58:0d:fc:29:27:33:f9:20:
48:cc:21:23:3e:b6:e4:9d:73:d1:bf:7d:f3:03:79:
3f:bd:df:f0:a0:69:67:bc:b4:8d:3b:f8:21:8e:af:
d0:82:b7:3b:d8:50:db:f7:af:ba:16:18:fe:04:0b:
3c:ff:ae:30:5a:61:40:d4:c9:81:ea:79:a5:8e:f0:
96:44:97:74:53:ec:f2:5a:01:ba:f8:c3:04:80:a7:
75:c4:b5:33:d9:33:89:c5:7c:09:3c:91:be:d1:94:
6d:f4:76:1f:59:39:73:ad:42:49:a0:78:ba:cc:66:
78:c7:b2:a9:e4:8e:3a:6a:8e:b6:86:12:49:c5:6c:
2c:2d:95:0d:0f:bc:62:6d:f6:47:51:a1:ca:0e:bc:
99:4f:b7:98:de:06:79:dc:29:88:69:f2:7c:0f:49:
3c:1a:a7:37:84:eb:83:49:f7:bf:cd:d8:d2:dd:53:
2d:83:7e:22:91:07:88:8e:d1:9b:a0:04:d3:0a:b8:
ff:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:FD:29:52:CE:B4:02:9E:99:A5:80:60:43:02:3D:BC:07:09:B6:E9
X509v3 Authority Key Identifier:
keyid:73:1C:13:82:85:8B:0D:C9:5A:9A:DB:EA:47:28:B3:1F:9E:22:C0:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cxwTgoWLDclamtvqRyizH54iwNg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/172e0b-8cbb-402e-8f2c-8595b4500884/1/cxwTgoWLDclamtvqRyizH54iwNg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/172e0b-8cbb-402e-8f2c-8595b4500884/1/cxwTgoWLDclamtvqRyizH54iwNg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:4c:17:0d:a0:01:56:78:89:9d:d4:ec:24:71:f0:9d:d9:f4:
85:46:2f:f7:f6:9c:0c:a2:22:86:19:a0:c0:47:36:6f:ce:e7:
ab:55:37:dd:1c:08:5f:0e:d6:b9:bb:66:a4:a9:cf:6e:af:fd:
1a:fa:92:74:0b:1e:1c:f4:b7:66:aa:70:37:29:cc:4d:1d:0d:
7f:be:f9:ff:ba:2a:5b:da:fa:61:1f:ce:e5:c5:5e:eb:f1:f6:
fd:0e:72:72:c5:51:09:21:16:a8:8c:85:fa:1b:6a:d1:82:90:
c9:e4:fe:70:03:2c:9a:91:71:b2:80:3f:c5:d8:7d:ce:bd:1b:
52:5f:7c:7f:27:93:52:e4:82:1c:06:d9:b2:52:3f:56:31:ab:
5f:60:38:17:9f:35:26:c8:e1:87:bc:ca:80:2d:8c:34:05:ab:
8f:93:ba:fc:91:b8:b9:0d:80:ff:ea:02:09:8a:5f:6e:26:9b:
eb:0f:8e:30:5f:f8:27:d2:ce:5c:91:27:ca:da:5b:e6:46:1b:
78:cd:87:a9:65:6d:92:6b:8f:53:18:2b:fc:89:eb:47:9a:92:
21:52:92:e1:9f:88:76:d0:ef:40:f8:51:4c:8b:89:14:89:c8:
32:50:19:99:8f:79:e9:6c:35:aa:2d:00:34:94:e2:4e:da:5f:
84:4e:1c:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:54:06 2025 by rpki-client