Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/a50372-da39-482e-9ad4-30becfc1b311/1/CX4FUW_IeTQGhouBCePARLcCcWw.mft
File: CX4FUW_IeTQGhouBCePARLcCcWw.mft (raw, json)
Hash identifier: dre7DEPEDqBgks1gUKJ1glM2zsexG0fJ5RoMG+95Y5E=
Subject key identifier: 9A:87:93:10:B8:88:98:6C:77:9F:0A:40:3B:4A:BB:64:B0:ED:87:98
Authority key identifier: 09:7E:05:51:6F:C8:79:34:06:86:8B:81:09:E3:C0:44:B7:02:71:6C
Certificate issuer: /CN=097e05516fc8793406868b8109e3c044b702716c
Certificate serial: 0199526669F30C81BFC8D56185CA41E5F568
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CX4FUW_IeTQGhouBCePARLcCcWw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/a50372-da39-482e-9ad4-30becfc1b311/1/CX4FUW_IeTQGhouBCePARLcCcWw.mft
Manifest number: 168B
Signing time: Tue 16 Sep 2025 12:01:07 +0000
Manifest this update: Tue 16 Sep 2025 12:01:07 +0000
Manifest next update: Wed 17 Sep 2025 12:01:07 +0000
Files and hashes: 1: CX4FUW_IeTQGhouBCePARLcCcWw.crl (hash: 3UG6aYIn+Uc6HNNJZA1qAmOFXqvbUZICkSbb9xZvQ7A=)
2: LYov3s-RBNegs9sCI5mzwI0B-OM.roa (hash: Q5JNZZskubtUF3draKhRYhTL06FaQ8LhpyPNSVMlulo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/a50372-da39-482e-9ad4-30becfc1b311/1/CX4FUW_IeTQGhouBCePARLcCcWw.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/a50372-da39-482e-9ad4-30becfc1b311/1/CX4FUW_IeTQGhouBCePARLcCcWw.mft
rsync://rpki.ripe.net/repository/DEFAULT/CX4FUW_IeTQGhouBCePARLcCcWw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 17 Sep 2025 12:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:52:66:69:f3:0c:81:bf:c8:d5:61:85:ca:41:e5:f5:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097e05516fc8793406868b8109e3c044b702716c
Validity
Not Before: Sep 16 12:01:07 2025 GMT
Not After : Sep 17 12:01:07 2025 GMT
Subject: CN=9a879310b888986c779f0a403b4abb64b0ed8798
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:aa:8f:16:dc:99:cf:2c:12:82:4c:c1:bd:7e:
49:03:ff:56:70:48:84:07:3a:77:51:6c:3e:ab:f3:
65:28:a0:3d:18:84:3b:2d:43:73:fa:d3:21:1c:fd:
d6:15:69:b9:af:37:41:ff:b7:17:57:bd:14:e6:ec:
8d:02:d1:1a:c8:a6:e8:8e:34:85:92:0e:9d:76:91:
d5:7b:97:3d:da:3e:91:83:1a:d2:08:31:5f:1e:10:
c2:7a:88:78:b7:0d:fd:7f:4a:2b:f3:50:dd:d8:64:
25:38:5b:92:04:37:61:2b:0d:1c:23:8f:5a:9f:54:
db:f9:7e:62:ce:bd:f0:45:29:b0:76:b8:cf:14:75:
8d:e6:16:c1:24:6e:48:fd:f8:15:92:b0:05:5b:24:
06:c0:66:4d:58:eb:a9:67:ad:d9:38:3a:2e:3c:52:
7f:79:f2:e5:51:c7:e2:62:31:b5:26:e7:34:e8:de:
5e:fc:bc:9f:b7:28:2f:a2:98:b2:9f:6b:27:5c:8d:
2f:cd:54:44:9b:ea:d1:2f:08:20:a1:30:19:6d:72:
75:62:0b:06:5a:bc:8a:01:78:f3:66:43:e9:12:79:
84:bb:44:92:14:4d:99:fd:e1:f1:3b:9a:db:86:0b:
bb:56:73:ec:ec:57:2e:b4:fe:30:d4:39:94:ef:53:
db:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:87:93:10:B8:88:98:6C:77:9F:0A:40:3B:4A:BB:64:B0:ED:87:98
X509v3 Authority Key Identifier:
keyid:09:7E:05:51:6F:C8:79:34:06:86:8B:81:09:E3:C0:44:B7:02:71:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CX4FUW_IeTQGhouBCePARLcCcWw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/a50372-da39-482e-9ad4-30becfc1b311/1/CX4FUW_IeTQGhouBCePARLcCcWw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/a50372-da39-482e-9ad4-30becfc1b311/1/CX4FUW_IeTQGhouBCePARLcCcWw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:e0:2d:21:c9:43:d7:6e:e1:43:47:d3:c5:e2:ff:bf:6e:2f:
24:a5:86:c9:ca:e2:ba:87:ee:e0:f2:06:a8:60:26:79:90:e6:
3c:ec:07:ca:82:f1:2f:c7:47:80:00:b6:34:93:15:5a:b9:d4:
04:bc:be:ee:05:6b:45:bf:96:1c:a5:5f:fe:88:b9:7e:8c:9d:
81:cf:09:c7:d8:16:c8:2d:22:1d:d2:8a:51:89:c4:0b:cd:f1:
14:db:e7:07:72:26:af:8e:4a:e5:4d:cb:b6:b1:db:83:06:a6:
92:17:09:da:cb:2e:dc:8e:df:89:7b:43:f0:39:53:86:e6:03:
79:c8:af:37:c2:7f:a1:18:88:ed:19:d1:a3:80:0d:df:3b:90:
66:3e:19:5b:79:cf:55:cb:bd:19:3c:b4:c0:17:95:ea:35:a1:
7c:0a:b2:86:d3:b8:75:ff:f7:24:c1:f5:ae:63:79:ed:b4:49:
67:19:e8:8d:27:5b:25:c7:a2:09:a0:cd:55:00:63:14:73:32:
c6:d5:5e:11:e4:4a:ef:4b:41:e9:3a:e9:c7:54:d0:98:4b:d7:
49:ef:b6:5e:2a:d2:12:da:6b:78:7e:ef:14:8e:cb:0b:34:f7:
d6:ad:b1:44:1d:94:be:03:1d:37:3e:22:ae:7f:03:95:4a:65:
39:5f:38:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 16 21:48:33 2025 by rpki-client