Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/77f4df-c3b9-4859-8bb2-08774b6c6bb3/1/CiA8bv-edCJgMJP4PmIR2pjHWCk.mft
File: CiA8bv-edCJgMJP4PmIR2pjHWCk.mft (raw, json)
Hash identifier: M1k2PYq4kUgbn6JN6hC0ZaUSRq9b0XxIA6sZXrriQJw=
Subject key identifier: 02:1F:8C:B0:A2:18:69:6E:8D:80:00:3B:56:75:EE:3E:5E:66:50:A2
Authority key identifier: 0A:20:3C:6E:FF:9E:74:22:60:30:93:F8:3E:62:11:DA:98:C7:58:29
Certificate issuer: /CN=0a203c6eff9e7422603093f83e6211da98c75829
Certificate serial: 01984A0A001814DD7907C651221806684E10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CiA8bv-edCJgMJP4PmIR2pjHWCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/77f4df-c3b9-4859-8bb2-08774b6c6bb3/1/CiA8bv-edCJgMJP4PmIR2pjHWCk.mft
Manifest number: 0995
Signing time: Sun 27 Jul 2025 04:00:25 +0000
Manifest this update: Sun 27 Jul 2025 04:00:25 +0000
Manifest next update: Mon 28 Jul 2025 04:00:25 +0000
Files and hashes: 1: 86UP9_zfWrm8I2wKVn4nqcw7tgQ.roa (hash: 3J5NqPkKkcPBxfbwq2fM/SjV37VEXbNMo9GruUt6NNo=)
2: CiA8bv-edCJgMJP4PmIR2pjHWCk.crl (hash: FiR7ipbSByl4v2pOOTtxQ+Y/sKxFv0uNn1FcngnWsew=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/77f4df-c3b9-4859-8bb2-08774b6c6bb3/1/CiA8bv-edCJgMJP4PmIR2pjHWCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/77f4df-c3b9-4859-8bb2-08774b6c6bb3/1/CiA8bv-edCJgMJP4PmIR2pjHWCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/CiA8bv-edCJgMJP4PmIR2pjHWCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:0a:00:18:14:dd:79:07:c6:51:22:18:06:68:4e:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a203c6eff9e7422603093f83e6211da98c75829
Validity
Not Before: Jul 27 04:00:25 2025 GMT
Not After : Jul 28 04:00:25 2025 GMT
Subject: CN=021f8cb0a218696e8d80003b5675ee3e5e6650a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:fb:65:87:d1:b3:10:96:ba:b9:52:a8:2a:62:
f2:7f:ca:23:3b:06:eb:f1:63:8d:e8:e3:bc:4a:b0:
30:0b:e6:a5:ee:47:5b:8c:fb:08:8b:11:38:d9:66:
7a:71:c2:cb:f1:ee:da:71:ae:c6:15:a8:24:dd:55:
f6:56:bb:4a:ca:e9:5a:bd:66:12:c8:a9:f8:23:90:
26:19:ee:b8:69:d8:cd:b9:c6:16:8c:4e:cf:20:6b:
02:b4:31:95:fb:ff:98:0b:0b:66:57:52:29:72:34:
0c:09:57:4d:ef:92:de:db:f0:ff:78:37:33:7b:0a:
48:f7:13:23:83:61:dc:00:f7:bd:04:e3:fc:bf:b3:
33:c6:39:60:34:11:c8:93:f4:23:69:6c:fd:90:67:
18:15:01:25:d5:14:00:b2:6b:04:a7:3b:8e:15:8c:
06:de:94:17:9d:8f:d0:15:22:b3:75:12:4c:b9:2a:
d3:d0:e7:9b:62:57:27:01:b3:92:b3:88:e3:81:cf:
f5:50:4a:9c:a2:28:ba:16:d4:76:4c:ee:b8:65:ab:
f9:10:77:b0:8a:3b:39:94:ee:fc:4b:d3:ec:76:26:
c3:6c:16:d5:87:46:75:4b:eb:6d:db:8c:6a:8e:a9:
72:68:6b:49:8b:dd:2e:77:74:0c:99:3d:e9:e1:38:
de:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:1F:8C:B0:A2:18:69:6E:8D:80:00:3B:56:75:EE:3E:5E:66:50:A2
X509v3 Authority Key Identifier:
keyid:0A:20:3C:6E:FF:9E:74:22:60:30:93:F8:3E:62:11:DA:98:C7:58:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CiA8bv-edCJgMJP4PmIR2pjHWCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/77f4df-c3b9-4859-8bb2-08774b6c6bb3/1/CiA8bv-edCJgMJP4PmIR2pjHWCk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/77f4df-c3b9-4859-8bb2-08774b6c6bb3/1/CiA8bv-edCJgMJP4PmIR2pjHWCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:70:5c:08:c0:47:46:3b:6f:d7:8f:65:21:82:87:10:71:ca:
0b:82:99:82:1e:de:ac:3c:32:d4:f0:77:3d:8b:80:0d:7d:85:
02:eb:bd:f4:e9:10:5e:80:e2:37:a8:7a:86:96:47:37:42:64:
8d:c3:db:10:c8:89:25:0a:8e:fd:0d:95:4e:85:3b:23:4f:d6:
88:d4:a8:c9:12:a3:de:de:5d:01:a1:cf:0e:87:c3:bd:4e:0d:
8b:03:45:2e:7f:a0:ea:fe:d0:f6:e6:8b:fd:7c:60:56:68:0c:
ef:16:19:c5:22:43:9b:7a:66:13:36:b6:97:7e:ba:82:00:45:
7d:f4:20:04:3a:a0:24:6b:39:a9:be:e2:fc:2b:63:93:26:a6:
9f:51:3e:b5:13:08:f7:46:38:70:37:58:7d:98:07:5c:36:e6:
e3:3c:df:27:75:ff:18:2b:cf:31:2a:c9:87:b2:b4:29:77:83:
84:b2:05:29:73:71:f3:35:24:4d:55:f5:55:48:3f:07:b5:b4:
9d:4e:b4:41:0c:77:18:0d:af:56:8c:8d:6b:31:a9:28:b8:91:
3d:b2:b5:94:1c:ec:fb:64:69:9e:46:c9:40:fe:ac:d5:8f:2a:
ef:41:56:c2:61:9c:14:12:55:da:b8:b6:06:73:d3:05:f8:12:
2e:aa:cd:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 09:27:33 2025 by rpki-client