Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/fe71b6-6aaa-4bd4-8661-6998ab7edf7a/1/cFUm-asN0naCP8Hw66od5jt9ZWw.mft
File: cFUm-asN0naCP8Hw66od5jt9ZWw.mft (raw, json)
Hash identifier: b+BLjoPbo9R/x1o6lUIEDs+1vbIaOqmyBZQPTPqjozs=
Subject key identifier: 12:54:7E:FC:95:28:57:27:4E:B7:24:21:E7:43:54:F0:62:7E:DD:C5
Authority key identifier: 70:55:26:F9:AB:0D:D2:76:82:3F:C1:F0:EB:AA:1D:E6:3B:7D:65:6C
Certificate issuer: /CN=705526f9ab0dd276823fc1f0ebaa1de63b7d656c
Certificate serial: 019851FA9C330354D990F392A011AF5B396E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cFUm-asN0naCP8Hw66od5jt9ZWw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/fe71b6-6aaa-4bd4-8661-6998ab7edf7a/1/cFUm-asN0naCP8Hw66od5jt9ZWw.mft
Manifest number: 046E
Signing time: Mon 28 Jul 2025 17:00:34 +0000
Manifest this update: Mon 28 Jul 2025 17:00:34 +0000
Manifest next update: Tue 29 Jul 2025 17:00:34 +0000
Files and hashes: 1: cFUm-asN0naCP8Hw66od5jt9ZWw.crl (hash: 1woqa7PhjXpfeBXEc58W78pG/nReGt3TNqrbzq7qNfs=)
2: yETJRCulpX8WNZcfOAFqy72Srf8.roa (hash: mwiJGcKb2MAwWuqaRGZUo2KeH/efjz418z+bxhMih0M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/fe71b6-6aaa-4bd4-8661-6998ab7edf7a/1/cFUm-asN0naCP8Hw66od5jt9ZWw.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/fe71b6-6aaa-4bd4-8661-6998ab7edf7a/1/cFUm-asN0naCP8Hw66od5jt9ZWw.mft
rsync://rpki.ripe.net/repository/DEFAULT/cFUm-asN0naCP8Hw66od5jt9ZWw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 17:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:51:fa:9c:33:03:54:d9:90:f3:92:a0:11:af:5b:39:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=705526f9ab0dd276823fc1f0ebaa1de63b7d656c
Validity
Not Before: Jul 28 17:00:34 2025 GMT
Not After : Jul 29 17:00:34 2025 GMT
Subject: CN=12547efc952857274eb72421e74354f0627eddc5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:65:fe:ea:c2:08:6f:f0:dc:37:03:4b:6a:2a:
cc:5d:82:1d:7a:46:22:7b:99:58:04:cc:d9:65:af:
20:d5:d8:8f:4b:39:32:e2:a2:7b:e1:41:87:4a:36:
ed:50:bf:3e:46:69:bf:ef:21:22:4b:af:42:c7:79:
07:54:fc:1c:71:b7:0d:01:ca:d6:4a:6b:ac:2c:f5:
50:d1:89:4e:fe:34:a6:e9:e6:26:3e:0e:57:3e:19:
6d:84:05:d5:38:c8:6f:a2:13:29:03:fe:0a:48:29:
03:2c:df:38:b1:0e:6a:4c:b3:57:bd:aa:7c:e4:ed:
de:4f:b5:af:9f:8d:ee:b7:aa:ee:ef:1f:91:66:df:
18:3e:69:f9:62:5d:b8:62:9d:c9:4c:d4:3f:c6:50:
1d:8a:48:77:a2:4a:28:74:65:49:e9:12:b5:4e:fd:
77:46:44:ce:ba:82:62:a2:6a:f2:ae:87:5e:78:05:
72:d6:62:64:84:2d:11:3d:02:30:18:6d:06:92:51:
0b:0c:d1:72:b5:8d:fd:eb:34:14:49:1b:e4:4d:67:
5d:4a:cf:04:50:9c:79:8c:35:3b:da:74:bd:ef:1c:
cd:f3:42:98:6e:de:32:b4:c0:65:10:8f:35:e8:76:
6f:aa:78:9a:50:f1:b9:b6:78:3d:ee:69:02:de:07:
b3:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:54:7E:FC:95:28:57:27:4E:B7:24:21:E7:43:54:F0:62:7E:DD:C5
X509v3 Authority Key Identifier:
keyid:70:55:26:F9:AB:0D:D2:76:82:3F:C1:F0:EB:AA:1D:E6:3B:7D:65:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cFUm-asN0naCP8Hw66od5jt9ZWw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/fe71b6-6aaa-4bd4-8661-6998ab7edf7a/1/cFUm-asN0naCP8Hw66od5jt9ZWw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/fe71b6-6aaa-4bd4-8661-6998ab7edf7a/1/cFUm-asN0naCP8Hw66od5jt9ZWw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:05:5d:3c:6d:6d:9a:82:79:18:fc:e1:7c:57:59:3f:6e:20:
7f:f7:63:84:33:b8:c0:ba:63:c1:3a:17:bf:62:9c:67:1c:72:
db:cd:19:00:fc:84:f8:2b:74:1e:bd:a0:c0:d5:ab:c5:53:38:
32:db:d7:6f:e0:39:16:61:5a:e7:bd:55:31:e6:5b:e2:21:ff:
dc:11:8b:7c:08:6e:b8:cb:d6:08:f6:c4:77:24:d0:c3:86:8a:
cc:4c:8c:f9:90:0a:39:7a:22:a4:08:d1:da:6b:c2:84:86:24:
7a:fc:9f:c6:ca:17:b9:2b:46:35:fa:d0:8f:7d:53:8a:1e:0c:
df:59:b4:c6:e7:eb:31:a4:83:0d:e1:25:34:3e:c8:81:01:53:
8a:5f:99:d6:51:1e:97:ed:82:65:a3:b9:c4:e5:92:5a:3b:5a:
47:c5:f6:41:c4:4d:61:80:1b:c9:f1:7e:10:2b:17:40:79:9d:
db:8b:f1:81:92:b5:f5:cc:d4:08:f8:e7:e1:3f:93:b5:85:0f:
73:ad:c7:b9:fd:9a:d3:3c:3e:c6:97:59:63:ad:4e:48:7d:84:
48:ed:d7:da:78:58:56:00:3a:e8:42:ab:5e:4e:ec:ad:b7:80:
a6:f2:4f:76:35:79:63:c1:0e:db:66:57:ed:3c:86:a7:dd:48:
8a:87:79:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 01:57:36 2025 by rpki-client