Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/a50372-da39-482e-9ad4-30becfc1b311/1/CX4FUW_IeTQGhouBCePARLcCcWw.mft
File: CX4FUW_IeTQGhouBCePARLcCcWw.mft (raw, json)
Hash identifier: +sqGh0ZwlGFx6KvdqcjfTBvnHsMkVnEkhBaQtUC2iiQ=
Subject key identifier: B7:30:35:B5:1E:3A:5D:76:CD:02:36:65:CC:3D:09:F1:AB:8B:A2:9D
Authority key identifier: 09:7E:05:51:6F:C8:79:34:06:86:8B:81:09:E3:C0:44:B7:02:71:6C
Certificate issuer: /CN=097e05516fc8793406868b8109e3c044b702716c
Certificate serial: 019A668F2EEA8221CEBC8B6140AD83B41AF5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CX4FUW_IeTQGhouBCePARLcCcWw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/a50372-da39-482e-9ad4-30becfc1b311/1/CX4FUW_IeTQGhouBCePARLcCcWw.mft
Manifest number: 171A
Signing time: Sun 09 Nov 2025 03:00:50 +0000
Manifest this update: Sun 09 Nov 2025 03:00:50 +0000
Manifest next update: Mon 10 Nov 2025 03:00:50 +0000
Files and hashes: 1: CX4FUW_IeTQGhouBCePARLcCcWw.crl (hash: ADuCXNO14Y3+U0258ga/Ko5ZlAsbHWE3E9fRVKM+S04=)
2: LYov3s-RBNegs9sCI5mzwI0B-OM.roa (hash: Q5JNZZskubtUF3draKhRYhTL06FaQ8LhpyPNSVMlulo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/a50372-da39-482e-9ad4-30becfc1b311/1/CX4FUW_IeTQGhouBCePARLcCcWw.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/a50372-da39-482e-9ad4-30becfc1b311/1/CX4FUW_IeTQGhouBCePARLcCcWw.mft
rsync://rpki.ripe.net/repository/DEFAULT/CX4FUW_IeTQGhouBCePARLcCcWw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 10 Nov 2025 03:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:66:8f:2e:ea:82:21:ce:bc:8b:61:40:ad:83:b4:1a:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097e05516fc8793406868b8109e3c044b702716c
Validity
Not Before: Nov 9 03:00:50 2025 GMT
Not After : Nov 10 03:00:50 2025 GMT
Subject: CN=b73035b51e3a5d76cd023665cc3d09f1ab8ba29d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:cf:aa:44:76:c9:57:71:ca:5a:c0:21:17:08:
56:74:37:f5:6e:bc:4f:38:4e:13:43:4f:d1:1f:e3:
fe:a5:f6:25:12:f0:9c:a5:10:a6:a4:e0:c2:01:da:
ca:6d:00:43:dc:73:b7:c5:4e:ef:cf:4a:26:76:9a:
0d:ec:dd:cc:3f:23:52:4b:4a:11:e7:29:9e:ce:2b:
aa:5e:05:b7:15:b2:fb:80:33:e4:be:5d:c5:02:a9:
a5:93:93:99:3d:7a:2e:8a:e0:a2:12:8c:40:d5:9b:
42:83:53:a1:e2:47:f7:b8:61:fd:28:9f:03:54:92:
92:99:97:00:1e:22:96:5e:50:d2:14:ed:00:60:f2:
ef:22:66:7a:88:8d:b1:10:cc:c2:3a:9d:39:51:9c:
07:98:25:4d:04:6e:a8:9e:77:3c:bb:ba:81:19:05:
df:34:2a:2b:42:1c:41:53:e7:51:d1:3b:77:0b:0e:
17:b6:a9:f4:33:ab:4d:19:34:02:ba:5a:0d:da:c4:
87:ec:53:41:4e:23:13:39:38:0d:d6:d8:44:c2:6c:
65:c8:ca:e0:84:b8:42:e2:e1:47:b1:39:10:85:55:
91:49:14:1d:2d:4c:b1:28:65:78:b7:19:c9:b4:52:
6e:bd:90:5c:9e:ce:9a:58:83:2d:c8:6c:1f:be:c2:
fe:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:30:35:B5:1E:3A:5D:76:CD:02:36:65:CC:3D:09:F1:AB:8B:A2:9D
X509v3 Authority Key Identifier:
keyid:09:7E:05:51:6F:C8:79:34:06:86:8B:81:09:E3:C0:44:B7:02:71:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CX4FUW_IeTQGhouBCePARLcCcWw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/a50372-da39-482e-9ad4-30becfc1b311/1/CX4FUW_IeTQGhouBCePARLcCcWw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/a50372-da39-482e-9ad4-30becfc1b311/1/CX4FUW_IeTQGhouBCePARLcCcWw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:c8:74:8e:76:2c:7c:3d:c5:eb:34:15:d7:a7:2b:aa:62:25:
02:e9:7e:1c:5b:64:20:32:8b:da:d2:d9:17:83:13:46:b2:e1:
a8:71:d9:5a:28:e2:7c:d7:76:a9:87:d1:2e:70:ae:b4:84:62:
dc:8d:f6:f9:7b:f6:77:c7:4d:9e:6d:10:17:4d:ee:f7:95:fe:
6d:50:7c:c9:41:5e:49:fd:5d:54:3f:81:6a:27:f7:77:26:62:
a6:25:b8:a2:51:fc:cd:f4:55:a9:a7:d0:5b:cf:34:b3:9f:c8:
c7:ff:3c:18:5c:4f:6a:51:9b:1d:67:6f:ee:0f:14:bb:45:36:
c5:30:7d:c3:f1:3f:ec:00:7c:c9:ff:cc:44:3b:fd:43:c9:eb:
df:7f:81:8f:06:3d:59:c5:0f:22:15:89:d4:60:03:a7:43:7e:
50:75:40:12:18:2f:6c:8b:37:a9:29:b2:13:17:7e:8d:b0:b8:
b4:f5:a6:e4:5c:f3:6d:fb:25:c9:1f:7b:45:47:a2:e5:ed:92:
5d:40:60:80:91:bc:8e:20:37:15:3c:b6:ec:0c:f9:d2:70:2c:
8b:b1:85:0e:c8:b6:83:e0:30:30:95:ff:80:65:e5:0e:d7:d7:
9b:01:df:85:f6:17:5d:dc:16:01:45:ef:9d:ca:e6:59:95:1c:
7c:99:33:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 9 11:29:57 2025 by rpki-client