Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/4e8d57-53ca-49c5-97ef-1c876db44fe2/1/cxZ3LvzioTP7f4cgkp0FYM7x20Y.mft
File: cxZ3LvzioTP7f4cgkp0FYM7x20Y.mft (raw, json)
Hash identifier: g31Fr9f4HyTULc8qwDR5h2Wbu/sNEbBiLXeVnXqZWic=
Subject key identifier: CD:41:23:2D:BF:43:D3:C5:F0:3F:AF:BD:5E:7A:30:7A:5C:E2:AC:29
Authority key identifier: 73:16:77:2E:FC:E2:A1:33:FB:7F:87:20:92:9D:05:60:CE:F1:DB:46
Certificate issuer: /CN=7316772efce2a133fb7f8720929d0560cef1db46
Certificate serial: 0198C9ED16183743FDCEE9D3D76B1DC127D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cxZ3LvzioTP7f4cgkp0FYM7x20Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/4e8d57-53ca-49c5-97ef-1c876db44fe2/1/cxZ3LvzioTP7f4cgkp0FYM7x20Y.mft
Manifest number: 044D
Signing time: Thu 21 Aug 2025 00:00:14 +0000
Manifest this update: Thu 21 Aug 2025 00:00:14 +0000
Manifest next update: Fri 22 Aug 2025 00:00:14 +0000
Files and hashes: 1: OFaqwNs5Dyg1d88HTW2H4gncFRI.roa (hash: wFSS58IXWFEAJ1x0fwOpm9Nk9TzQ4SMDP5LPnSI+dzw=)
2: cxZ3LvzioTP7f4cgkp0FYM7x20Y.crl (hash: 3D95cuivJKWuZ5EQXyIrXdJCuuJVghk0QGxgCoKKfIk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/4e8d57-53ca-49c5-97ef-1c876db44fe2/1/cxZ3LvzioTP7f4cgkp0FYM7x20Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/4e8d57-53ca-49c5-97ef-1c876db44fe2/1/cxZ3LvzioTP7f4cgkp0FYM7x20Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/cxZ3LvzioTP7f4cgkp0FYM7x20Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 21 Aug 2025 23:01:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:c9:ed:16:18:37:43:fd:ce:e9:d3:d7:6b:1d:c1:27:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7316772efce2a133fb7f8720929d0560cef1db46
Validity
Not Before: Aug 21 00:00:14 2025 GMT
Not After : Aug 22 00:00:14 2025 GMT
Subject: CN=cd41232dbf43d3c5f03fafbd5e7a307a5ce2ac29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:67:14:c5:a4:ac:04:58:c5:42:cb:a7:c7:86:
b8:cb:f8:2f:7a:14:f6:ee:29:47:4c:32:5a:53:bc:
1d:a3:b4:35:ac:06:a5:0c:93:62:52:8a:c9:29:1f:
3e:47:6a:1a:e4:54:b7:ab:b5:c0:12:67:39:a9:03:
5f:7e:5c:b0:0e:f8:6b:85:9f:c7:f2:8f:8d:59:76:
67:23:cf:3d:dc:e1:e5:6a:43:13:c6:ee:7f:3d:82:
d6:3b:f2:4f:43:a8:fe:2a:e8:cb:c2:1b:66:bc:7e:
d7:4c:7e:be:8f:b0:57:d6:80:b5:29:b2:44:fe:02:
04:6b:e4:bc:a5:7a:59:e1:22:69:9d:f8:c8:59:8f:
9a:df:b4:a1:1d:09:81:5a:d6:19:36:1d:03:2a:dd:
a1:5a:23:d8:20:5a:c8:c9:dc:9b:a5:1a:d0:32:5e:
d7:ee:c5:b1:d6:c3:35:71:f1:d2:16:fe:ea:86:a3:
84:a0:f2:17:b6:f0:af:be:9d:4b:06:93:5d:d7:75:
ff:20:23:d5:03:25:04:e4:af:aa:a2:97:64:12:ad:
77:27:a6:b2:7f:47:5b:f0:ad:a9:0f:9c:e7:a3:52:
2f:eb:21:90:b8:1a:31:8d:7f:93:32:3f:e8:e8:95:
96:94:a1:c8:e9:9e:7f:5d:e8:a6:07:3f:cd:99:f1:
c9:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:41:23:2D:BF:43:D3:C5:F0:3F:AF:BD:5E:7A:30:7A:5C:E2:AC:29
X509v3 Authority Key Identifier:
keyid:73:16:77:2E:FC:E2:A1:33:FB:7F:87:20:92:9D:05:60:CE:F1:DB:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cxZ3LvzioTP7f4cgkp0FYM7x20Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/4e8d57-53ca-49c5-97ef-1c876db44fe2/1/cxZ3LvzioTP7f4cgkp0FYM7x20Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/4e8d57-53ca-49c5-97ef-1c876db44fe2/1/cxZ3LvzioTP7f4cgkp0FYM7x20Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:c5:9d:67:c4:e3:10:6b:80:ba:a8:79:61:0a:f0:8c:18:23:
6a:84:86:fe:46:03:6a:d7:73:6a:77:48:e2:a4:d8:68:5a:fa:
00:b4:fa:de:36:39:5d:d3:1d:e8:5c:ce:00:d3:d9:f7:88:5d:
fe:0b:56:42:1e:d9:a1:b0:c2:8c:51:92:21:23:cc:87:68:07:
1f:be:4f:a8:be:cd:a7:61:46:bf:64:44:42:a7:ea:3e:cb:dd:
77:a3:44:76:03:bb:17:f3:61:7c:ef:08:b1:b0:82:f2:38:79:
96:74:62:51:00:e9:d2:af:9a:62:61:8f:9c:47:a5:e4:ac:d5:
f9:69:28:a2:a0:f4:4c:eb:31:61:bc:28:e3:b5:43:e4:b4:0e:
c5:ae:88:b6:b0:d0:36:cb:7b:9c:ae:b3:2f:c1:ef:78:92:d0:
fe:de:14:3a:e3:8a:4d:22:8b:e9:ae:24:b5:38:c5:20:07:8e:
02:3a:b6:af:01:c4:1d:ba:ae:e5:83:7f:1f:e9:f9:39:15:da:
e8:77:50:37:d3:59:6e:6b:01:e3:92:e1:8d:de:0b:0c:b6:a2:
a3:52:f5:a0:29:a7:e0:8d:e8:20:fc:99:18:89:95:89:6f:e5:
5b:1c:78:47:25:66:28:a9:81:f9:1a:8c:dd:69:ea:9f:cb:e9:
c8:7b:a9:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 21 07:19:04 2025 by rpki-client