Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/172e0b-8cbb-402e-8f2c-8595b4500884/1/cxwTgoWLDclamtvqRyizH54iwNg.mft
File: cxwTgoWLDclamtvqRyizH54iwNg.mft (raw, json)
Hash identifier: mCFvGKwqgEV9hq+1Fiyxrx9lWF+fiE/YvPYt8ARIfqw=
Subject key identifier: 43:D0:60:6B:86:B2:FD:4E:C1:F8:42:A2:18:3F:7B:FB:82:3A:25:27
Authority key identifier: 73:1C:13:82:85:8B:0D:C9:5A:9A:DB:EA:47:28:B3:1F:9E:22:C0:D8
Certificate issuer: /CN=731c1382858b0dc95a9adbea4728b31f9e22c0d8
Certificate serial: 0197523490D1E0BCF64D58E322E4B0F61DC6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cxwTgoWLDclamtvqRyizH54iwNg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/172e0b-8cbb-402e-8f2c-8595b4500884/1/cxwTgoWLDclamtvqRyizH54iwNg.mft
Manifest number: 06DE
Signing time: Mon 09 Jun 2025 01:01:05 +0000
Manifest this update: Mon 09 Jun 2025 01:01:05 +0000
Manifest next update: Tue 10 Jun 2025 01:01:05 +0000
Files and hashes: 1: cxwTgoWLDclamtvqRyizH54iwNg.crl (hash: Yx4VNpNFl+FBauCuOvOPHiF6Epgi/QMRTKKAGKbtChQ=)
2: xsLt5XL-OWIaNdR6BZ8HbsppEGM.roa (hash: fVuO1qpyondG1qElrhxFzaCfBXaBgOTcL+nbs40PcY0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/172e0b-8cbb-402e-8f2c-8595b4500884/1/cxwTgoWLDclamtvqRyizH54iwNg.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/172e0b-8cbb-402e-8f2c-8595b4500884/1/cxwTgoWLDclamtvqRyizH54iwNg.mft
rsync://rpki.ripe.net/repository/DEFAULT/cxwTgoWLDclamtvqRyizH54iwNg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 21:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:52:34:90:d1:e0:bc:f6:4d:58:e3:22:e4:b0:f6:1d:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=731c1382858b0dc95a9adbea4728b31f9e22c0d8
Validity
Not Before: Jun 9 01:01:05 2025 GMT
Not After : Jun 10 01:01:05 2025 GMT
Subject: CN=43d0606b86b2fd4ec1f842a2183f7bfb823a2527
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:7f:82:8e:c6:cc:67:5d:88:a2:3d:8b:d0:bf:
9c:d5:89:5d:37:a6:c6:c6:8f:34:90:de:6f:ae:c5:
bc:26:a8:ac:83:cc:57:31:68:e8:8a:fd:11:d1:1c:
60:95:27:21:17:bb:5b:d3:93:11:db:80:20:de:f9:
ea:cb:22:59:c7:33:fe:f2:3d:8b:e3:32:b6:6e:78:
d5:7e:63:b1:25:03:80:19:a6:8e:4d:a2:cd:cd:d4:
82:d9:7a:4a:e9:ce:3d:ae:16:ed:0a:37:ad:30:89:
98:fb:45:7c:51:35:8f:7e:14:28:70:6c:cb:ba:1d:
30:7e:0b:22:2d:cc:fd:0b:2c:89:6a:f2:57:9d:9e:
61:5d:a1:55:ac:7a:90:e4:b5:e2:6c:12:b9:10:98:
18:b8:25:45:f5:10:7f:a0:82:d4:bc:87:7f:dd:fa:
d8:a4:75:a4:40:f0:08:7a:94:68:35:9e:86:19:a8:
30:1a:ad:4f:eb:ee:26:6d:f4:c0:1f:a7:b6:59:66:
32:23:50:2f:4e:93:47:18:ad:c8:04:e6:fe:b1:30:
a6:fb:59:e4:85:c4:9a:0f:12:03:8b:b4:26:9f:6f:
0c:6e:dc:9b:7a:3f:c1:eb:82:a7:da:c0:a3:8d:9d:
c5:7d:28:cd:c2:69:2c:3f:4d:f9:e0:3c:1b:ec:13:
4b:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:D0:60:6B:86:B2:FD:4E:C1:F8:42:A2:18:3F:7B:FB:82:3A:25:27
X509v3 Authority Key Identifier:
keyid:73:1C:13:82:85:8B:0D:C9:5A:9A:DB:EA:47:28:B3:1F:9E:22:C0:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cxwTgoWLDclamtvqRyizH54iwNg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/172e0b-8cbb-402e-8f2c-8595b4500884/1/cxwTgoWLDclamtvqRyizH54iwNg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/172e0b-8cbb-402e-8f2c-8595b4500884/1/cxwTgoWLDclamtvqRyizH54iwNg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:61:fe:91:92:c1:73:80:0c:3b:8b:79:a1:7e:3c:ed:87:14:
08:67:69:e8:8c:88:50:4a:3d:e0:69:6b:71:a4:bc:07:dd:97:
61:a0:1c:17:42:31:fd:d5:65:3f:94:b3:51:d5:ba:de:ae:ea:
d4:d4:ad:d5:10:bf:52:6b:54:19:ce:a7:8b:21:b8:d0:ef:b4:
fa:e1:a6:a6:58:a6:0c:67:ae:68:a3:46:87:ef:84:cc:d2:10:
67:ca:e6:a7:95:a5:35:a0:a0:12:95:ab:8e:9e:b6:5e:dd:a1:
bc:a5:47:ad:ab:41:38:07:8f:a5:31:9e:77:58:2b:70:f1:a7:
b0:cc:5b:df:65:95:b4:65:1e:b6:98:2f:09:f9:5a:b5:73:f5:
99:ce:8a:4f:cf:fa:5e:13:93:95:e2:f0:1a:a3:93:8d:c4:4e:
94:e1:db:1c:ff:fd:37:65:67:04:da:6a:71:5a:e8:c5:3b:48:
9c:43:bb:59:61:3f:f1:1e:2b:07:2a:6c:1c:51:6a:ce:d5:35:
4f:01:41:c5:fa:8b:7b:86:b4:05:cd:f2:a4:ed:f6:87:fe:20:
92:a7:8e:e8:f1:c4:2d:31:93:76:48:bc:4c:a2:4b:f2:49:aa:
0a:08:cf:95:a2:0f:bc:f9:a8:3c:c5:3d:ab:40:22:52:fa:ad:
51:9a:10:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 06:14:14 2025 by rpki-client