Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/7766bb-bb48-49be-b21f-0a35b7ed63c7/1/cPK0H9NmFINeM_wIgdskY4s6eHs.mft
File: cPK0H9NmFINeM_wIgdskY4s6eHs.mft (raw, json)
Hash identifier: +8T8BHQSjaOtBQfBpsU5mWctEueyHkkCFJVP8K6eYmM=
Subject key identifier: EE:05:AF:97:1F:CE:B8:43:47:A5:23:B1:03:4C:A4:FD:64:88:CA:43
Authority key identifier: 70:F2:B4:1F:D3:66:14:83:5E:33:FC:08:81:DB:24:63:8B:3A:78:7B
Certificate issuer: /CN=70f2b41fd36614835e33fc0881db24638b3a787b
Certificate serial: 01985456920C172D910210A84900BB0C8E3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cPK0H9NmFINeM_wIgdskY4s6eHs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/7766bb-bb48-49be-b21f-0a35b7ed63c7/1/cPK0H9NmFINeM_wIgdskY4s6eHs.mft
Manifest number: 12F6
Signing time: Tue 29 Jul 2025 04:00:16 +0000
Manifest this update: Tue 29 Jul 2025 04:00:16 +0000
Manifest next update: Wed 30 Jul 2025 04:00:16 +0000
Files and hashes: 1: cPK0H9NmFINeM_wIgdskY4s6eHs.crl (hash: s6E/wJCDF5XCkeEBxbM+bLVM9zhdK6qiaifO2dw5I60=)
2: iViHONOdVrtJaKvFtb1zW5ZiFfE.roa (hash: y//sfFe0FaBOPBIT3c460VOfTsEZyJ671nHpKb/hUio=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/7766bb-bb48-49be-b21f-0a35b7ed63c7/1/cPK0H9NmFINeM_wIgdskY4s6eHs.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/7766bb-bb48-49be-b21f-0a35b7ed63c7/1/cPK0H9NmFINeM_wIgdskY4s6eHs.mft
rsync://rpki.ripe.net/repository/DEFAULT/cPK0H9NmFINeM_wIgdskY4s6eHs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 23:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:54:56:92:0c:17:2d:91:02:10:a8:49:00:bb:0c:8e:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70f2b41fd36614835e33fc0881db24638b3a787b
Validity
Not Before: Jul 29 04:00:16 2025 GMT
Not After : Jul 30 04:00:16 2025 GMT
Subject: CN=ee05af971fceb84347a523b1034ca4fd6488ca43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:5d:bc:68:a3:fc:aa:82:35:e3:dc:35:12:8e:
a6:1a:23:29:e9:d0:b0:cb:7b:35:bd:7a:3d:43:1a:
a5:15:9b:5e:73:2c:ec:a3:bc:ca:19:09:22:8f:e9:
d7:f7:aa:3f:56:90:b0:ee:62:7a:e3:fc:ec:2c:9a:
15:df:e0:76:12:6e:73:5d:6c:7a:6e:9a:01:f0:a0:
9d:f5:68:07:55:f4:5c:a2:14:78:cf:72:c6:20:d6:
69:36:39:22:c2:0b:a1:cb:77:af:bd:f1:01:3e:2f:
07:97:6a:99:dd:18:ec:47:dc:07:2c:a5:29:5c:4c:
18:51:28:03:f5:e1:de:c5:71:91:62:37:d2:f4:42:
9e:7a:54:27:21:8c:19:6c:bf:9d:b3:5b:e1:06:a5:
06:80:70:ac:1f:be:4f:b1:13:3f:b8:e1:3d:16:dd:
65:de:a5:10:05:52:ee:d1:5a:fc:a5:2c:cf:06:e4:
24:70:b7:09:06:16:17:30:e3:36:b8:17:3f:f9:18:
d3:8b:b9:c1:81:8d:79:8c:56:2c:3c:da:02:d8:f4:
ee:dc:e0:39:0e:c9:cf:d2:27:d0:f1:4e:00:d5:ee:
fa:15:ef:76:46:97:f0:f1:a0:2f:85:07:0a:ae:f6:
2f:13:65:69:3b:52:21:e4:8b:b3:55:f8:0b:ef:f0:
7b:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:05:AF:97:1F:CE:B8:43:47:A5:23:B1:03:4C:A4:FD:64:88:CA:43
X509v3 Authority Key Identifier:
keyid:70:F2:B4:1F:D3:66:14:83:5E:33:FC:08:81:DB:24:63:8B:3A:78:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cPK0H9NmFINeM_wIgdskY4s6eHs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/7766bb-bb48-49be-b21f-0a35b7ed63c7/1/cPK0H9NmFINeM_wIgdskY4s6eHs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/7766bb-bb48-49be-b21f-0a35b7ed63c7/1/cPK0H9NmFINeM_wIgdskY4s6eHs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:45:d1:c1:2b:38:db:4c:62:36:be:f0:ae:02:a7:5d:98:3d:
b2:8e:17:ec:56:b2:80:7a:f3:33:3a:66:db:b7:71:bb:57:09:
19:97:48:ab:33:9e:ae:68:3a:14:4a:49:23:3f:2b:a5:ef:35:
df:2d:e0:60:ee:90:f4:ee:40:69:26:35:76:7a:2f:29:d8:ce:
d4:b0:cb:81:af:c4:c3:a5:11:33:60:9d:f2:f8:b9:a7:8c:62:
98:fa:91:73:c5:1e:44:54:78:89:26:eb:6d:5d:84:7e:8f:62:
52:18:ce:94:08:23:7b:4a:1a:de:29:cb:fa:2f:45:2a:4a:3d:
d7:2b:0b:79:cf:cd:37:16:28:ff:58:f6:87:01:af:00:fd:39:
61:65:4e:bb:9d:4c:ad:3b:30:94:cd:38:0a:25:28:c9:11:76:
8e:14:c5:56:1c:30:e2:9f:a9:43:09:0c:74:71:86:f0:64:5b:
bd:58:23:65:28:4f:19:57:91:1d:e7:8c:81:e2:ac:4f:40:0c:
e5:f8:e3:a6:5f:31:ec:af:2b:03:cc:7e:b8:f7:e8:ae:a9:e8:
68:51:19:c7:45:92:fb:81:6e:b0:ba:66:0f:34:45:85:bc:83:
7c:1c:bb:37:c0:37:2d:7f:87:3e:8c:8b:2b:9a:c4:47:0a:2d:
dc:50:73:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 07:43:33 2025 by rpki-client