Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/da1c43-1916-46ae-8491-35883af9a323/1/cDxI7UbLeUkOFmLbAcMdAtAu_-I.mft
File: cDxI7UbLeUkOFmLbAcMdAtAu_-I.mft (raw, json)
Hash identifier: dHO7RdIqbO5iAYkW3CfnflUwWGZ3OZwQl9faxlIpgfM=
Subject key identifier: 28:F6:10:39:02:80:E4:23:33:73:59:BE:0C:E3:9B:F0:56:41:6E:A4
Authority key identifier: 70:3C:48:ED:46:CB:79:49:0E:16:62:DB:01:C3:1D:02:D0:2E:FF:E2
Certificate issuer: /CN=703c48ed46cb79490e1662db01c31d02d02effe2
Certificate serial: 01984D43A334BED2625E69A5900485376B86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cDxI7UbLeUkOFmLbAcMdAtAu_-I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/da1c43-1916-46ae-8491-35883af9a323/1/cDxI7UbLeUkOFmLbAcMdAtAu_-I.mft
Manifest number: 1147
Signing time: Sun 27 Jul 2025 19:02:14 +0000
Manifest this update: Sun 27 Jul 2025 19:02:14 +0000
Manifest next update: Mon 28 Jul 2025 19:02:14 +0000
Files and hashes: 1: PpEWGz-OwlSLlk0QHrICVTcwUWc.roa (hash: WptBbhD5BCS6QBVvLotY3hLMhEGQcn9whh44ucm6M50=)
2: cDxI7UbLeUkOFmLbAcMdAtAu_-I.crl (hash: Q4OQ8DLxXEStq5v1e1HW3g3LA+DGjajdM/miIrrozJA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/da1c43-1916-46ae-8491-35883af9a323/1/cDxI7UbLeUkOFmLbAcMdAtAu_-I.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/da1c43-1916-46ae-8491-35883af9a323/1/cDxI7UbLeUkOFmLbAcMdAtAu_-I.mft
rsync://rpki.ripe.net/repository/DEFAULT/cDxI7UbLeUkOFmLbAcMdAtAu_-I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 18:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4d:43:a3:34:be:d2:62:5e:69:a5:90:04:85:37:6b:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=703c48ed46cb79490e1662db01c31d02d02effe2
Validity
Not Before: Jul 27 19:02:14 2025 GMT
Not After : Jul 28 19:02:14 2025 GMT
Subject: CN=28f610390280e423337359be0ce39bf056416ea4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:60:ac:e8:6a:f2:bc:71:be:b8:d4:e8:89:ea:
e6:08:a0:f7:90:6b:21:80:d6:fd:d3:43:ec:07:4c:
22:2a:df:6a:62:38:83:07:ac:60:4c:74:c8:3f:fb:
cd:e3:1a:9f:0b:ad:70:b1:ad:a0:cd:31:44:39:4a:
a1:ec:25:fe:f8:f3:68:10:61:27:06:e2:e2:94:cc:
fa:2b:93:13:36:c4:f0:7d:6f:75:8c:3b:a5:4d:62:
b3:9c:e5:a5:1e:be:7d:76:9f:34:c8:2e:03:c4:d1:
ed:c2:ce:8f:9e:8e:75:50:0b:53:8e:f5:0d:6e:cb:
d4:c4:0c:48:f3:40:c3:29:e8:fe:41:c4:c4:88:50:
9c:8e:c8:75:b5:41:a7:ea:d3:0e:9e:63:84:2e:86:
2a:1e:15:ac:8b:2a:5b:f1:e5:19:85:45:8a:d4:81:
e9:fe:85:6a:d8:1e:30:1e:7f:7b:be:8e:ec:e6:6c:
84:22:48:7d:eb:94:5f:62:b6:6b:95:57:02:00:38:
06:a6:54:86:82:da:37:e4:bb:b0:f4:44:b5:b8:aa:
b1:55:30:b7:5b:97:af:41:8a:4d:56:f5:de:51:de:
e5:cf:ee:86:34:9b:f2:33:4e:af:a9:21:e7:69:5e:
8e:a0:a4:ea:5e:54:b2:49:01:51:42:72:04:cb:06:
07:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:F6:10:39:02:80:E4:23:33:73:59:BE:0C:E3:9B:F0:56:41:6E:A4
X509v3 Authority Key Identifier:
keyid:70:3C:48:ED:46:CB:79:49:0E:16:62:DB:01:C3:1D:02:D0:2E:FF:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cDxI7UbLeUkOFmLbAcMdAtAu_-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/da1c43-1916-46ae-8491-35883af9a323/1/cDxI7UbLeUkOFmLbAcMdAtAu_-I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/da1c43-1916-46ae-8491-35883af9a323/1/cDxI7UbLeUkOFmLbAcMdAtAu_-I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:bb:e5:34:ea:2d:5b:bd:26:46:4d:f5:20:cd:19:c7:d3:01:
b2:5c:1c:78:6d:7e:96:f0:38:59:ba:d4:63:f6:36:89:9b:cf:
8e:5f:16:5f:6c:44:5d:47:14:7c:27:01:88:0d:78:61:e9:17:
9c:7c:ef:d8:58:d1:a6:a6:64:81:2b:df:31:ba:3a:8c:39:6b:
50:5f:bc:43:67:0a:29:9c:18:6e:13:a2:43:0c:5c:96:ff:4a:
7d:3f:d2:b5:b8:ed:01:11:1a:3e:a1:11:d7:1e:75:ce:ca:86:
66:45:46:aa:5b:a5:b1:74:96:98:a9:bb:2d:5a:c1:d9:6c:cc:
66:7a:ca:49:dc:45:e8:63:b2:1b:0c:0f:1d:f6:31:7f:c0:ed:
f7:74:bc:c4:25:85:ca:a4:30:1e:be:a8:60:cd:cd:57:49:6c:
0b:7a:a0:71:69:17:60:24:3f:de:59:81:aa:93:1f:d7:b2:8e:
19:c7:3b:13:e2:f4:8f:79:31:1f:74:f7:83:f1:73:a7:bd:0e:
e7:05:b6:70:0f:fd:a9:20:08:a7:58:9c:d0:7a:72:e1:e5:73:
cf:13:c8:44:32:9c:de:58:1a:d7:81:47:3e:98:a4:55:71:21:
55:4c:e9:d8:5f:8e:65:60:2f:c6:98:8d:ca:4d:aa:18:56:f4:
e5:d0:c4:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 28 02:05:36 2025 by rpki-client