Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/92bbbf-9f93-4741-8682-f1e8bd74180c/1/cuE5FfobxXn1hW9Y7LJHhjeaXUg.mft
File: cuE5FfobxXn1hW9Y7LJHhjeaXUg.mft (raw, json)
Hash identifier: K3GK+UVOzu8a9+DGxPmQ+pXKlL5Xgoh6W2pCrt4Rckc=
Subject key identifier: D4:74:71:86:E9:5A:8E:D6:89:34:D0:B5:42:CB:88:65:DD:8A:4C:0B
Authority key identifier: 72:E1:39:15:FA:1B:C5:79:F5:85:6F:58:EC:B2:47:86:37:9A:5D:48
Certificate issuer: /CN=72e13915fa1bc579f5856f58ecb24786379a5d48
Certificate serial: 01984A77ED85AD5447A10BBBFB857FDB0A18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cuE5FfobxXn1hW9Y7LJHhjeaXUg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/92bbbf-9f93-4741-8682-f1e8bd74180c/1/cuE5FfobxXn1hW9Y7LJHhjeaXUg.mft
Manifest number: BA
Signing time: Sun 27 Jul 2025 06:00:30 +0000
Manifest this update: Sun 27 Jul 2025 06:00:30 +0000
Manifest next update: Mon 28 Jul 2025 06:00:30 +0000
Files and hashes: 1: cuE5FfobxXn1hW9Y7LJHhjeaXUg.crl (hash: KiV1JP72rL9+1Xtvz214w+lw1F7GDDBRslawi1iofuU=)
2: xhxuKJYrPBlCKVgSSZLbkArXr9M.roa (hash: eBW3Gn9+jBJu0tA7uYFfIKZTT8p/0XeRa4Z67cWs8N8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/92bbbf-9f93-4741-8682-f1e8bd74180c/1/cuE5FfobxXn1hW9Y7LJHhjeaXUg.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/92bbbf-9f93-4741-8682-f1e8bd74180c/1/cuE5FfobxXn1hW9Y7LJHhjeaXUg.mft
rsync://rpki.ripe.net/repository/DEFAULT/cuE5FfobxXn1hW9Y7LJHhjeaXUg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:77:ed:85:ad:54:47:a1:0b:bb:fb:85:7f:db:0a:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72e13915fa1bc579f5856f58ecb24786379a5d48
Validity
Not Before: Jul 27 06:00:30 2025 GMT
Not After : Jul 28 06:00:30 2025 GMT
Subject: CN=d4747186e95a8ed68934d0b542cb8865dd8a4c0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:dc:18:dd:e7:50:dd:fa:95:ab:28:2a:69:12:
09:12:bb:0f:36:b5:62:4f:28:31:42:50:18:af:6d:
fd:d0:a8:3d:4a:ce:9d:13:b1:08:70:f8:42:ba:06:
4a:ff:81:1d:35:e8:47:f6:86:32:45:03:11:f8:8f:
c8:ca:22:eb:56:10:61:9e:64:d7:c8:a0:88:ef:11:
9a:48:61:07:da:9a:e0:ff:32:67:85:ed:93:09:45:
88:f4:a7:3e:5f:fb:1b:b3:a4:73:99:cc:09:63:e1:
ad:2d:67:62:57:60:f3:52:61:cf:51:4c:32:65:a9:
9e:98:a2:a6:06:0c:bd:97:58:b8:56:85:5f:00:d5:
3e:32:12:c4:7d:0d:7e:36:d8:0b:cf:63:42:1b:95:
c4:8b:39:aa:5c:91:b5:43:1b:02:2c:3b:1f:e6:44:
7f:4d:bf:a7:22:f5:cd:29:e1:95:5a:b4:8f:29:9b:
c2:75:d3:d3:ac:bf:62:90:6f:4a:44:5b:d3:1f:01:
4d:76:40:55:de:92:65:cf:79:f8:0b:fb:62:d6:5a:
12:a3:a0:87:99:f3:23:07:c3:5e:5b:2d:98:db:54:
69:d4:3d:4b:dd:2f:44:38:32:57:bd:3e:a1:ab:dc:
49:ec:45:f6:91:a0:f1:cc:b8:a6:58:2f:1b:5b:76:
29:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:74:71:86:E9:5A:8E:D6:89:34:D0:B5:42:CB:88:65:DD:8A:4C:0B
X509v3 Authority Key Identifier:
keyid:72:E1:39:15:FA:1B:C5:79:F5:85:6F:58:EC:B2:47:86:37:9A:5D:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cuE5FfobxXn1hW9Y7LJHhjeaXUg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/92bbbf-9f93-4741-8682-f1e8bd74180c/1/cuE5FfobxXn1hW9Y7LJHhjeaXUg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/92bbbf-9f93-4741-8682-f1e8bd74180c/1/cuE5FfobxXn1hW9Y7LJHhjeaXUg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:db:4d:b6:cb:35:64:c3:09:a3:23:2d:35:f2:a9:6c:74:7a:
d9:49:28:8b:dc:d5:68:e8:a7:aa:c4:8a:17:bc:21:f2:9b:53:
ea:3f:fd:b1:26:5b:9b:66:6e:21:16:b6:72:f4:84:0d:58:f7:
65:dc:47:73:9d:c9:52:77:b8:69:aa:e9:54:bf:6e:1d:c2:b9:
a0:d9:73:55:20:b4:9c:66:e4:a5:61:19:ee:24:30:05:c6:41:
a5:70:88:58:49:82:b8:00:74:98:0c:96:13:19:15:55:f1:2b:
08:ea:72:78:d7:f9:f1:73:18:f9:73:7d:5a:d5:2c:66:b5:cf:
79:83:05:8b:cd:79:e2:c8:52:5c:ef:61:fd:c6:cb:68:da:8c:
6d:6a:a0:7b:17:a6:e5:4e:ef:7e:c8:15:4e:34:d0:cf:eb:bf:
e6:16:28:81:7b:cc:f0:85:bc:d3:b8:2c:fb:14:a9:2c:14:8a:
29:f1:12:aa:b8:48:07:51:ef:39:e0:4d:fc:aa:9a:d6:9e:4e:
22:3a:c8:24:c6:d9:2a:35:0f:66:64:a6:39:9b:4d:5e:0b:72:
0b:4b:f4:45:e1:ca:af:bc:e5:4e:65:9e:ed:aa:9e:49:f4:bf:
35:32:54:0b:fa:8b:f9:ce:9f:8a:5c:42:d1:38:31:d0:fc:89:
50:64:c4:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 10:44:12 2025 by rpki-client