Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/b6a233-6f80-4f4e-9312-e3f49ac49560/1/cW9tEfDOYyMBgac_haZmFw9zib0.mft
File: cW9tEfDOYyMBgac_haZmFw9zib0.mft (raw, json)
Hash identifier: NzZ8LRheLbdvFqJrFKr5maIvsOU8ze6ePuFw664dTO4=
Subject key identifier: 21:0F:13:26:B7:ED:BB:FF:E3:36:3C:E4:82:34:1D:27:E2:F6:BF:80
Authority key identifier: 71:6F:6D:11:F0:CE:63:23:01:81:A7:3F:85:A6:66:17:0F:73:89:BD
Certificate issuer: /CN=716f6d11f0ce63230181a73f85a666170f7389bd
Certificate serial: 0198537B25C59287477C2354D9A11DD13947
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cW9tEfDOYyMBgac_haZmFw9zib0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/b6a233-6f80-4f4e-9312-e3f49ac49560/1/cW9tEfDOYyMBgac_haZmFw9zib0.mft
Manifest number: 0B28
Signing time: Tue 29 Jul 2025 00:00:35 +0000
Manifest this update: Tue 29 Jul 2025 00:00:35 +0000
Manifest next update: Wed 30 Jul 2025 00:00:35 +0000
Files and hashes: 1: cW9tEfDOYyMBgac_haZmFw9zib0.crl (hash: kLTbpI8O4CwHxgE0C7bMNGmEzughvM7BkJyB9Ds12c8=)
2: fS7Vtpenx3ISocQLcsKDmT4cdAc.roa (hash: lsacutCDcdT1KWfBtvedBOBvauWcszwNt+V8+YsxMyc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/b6a233-6f80-4f4e-9312-e3f49ac49560/1/cW9tEfDOYyMBgac_haZmFw9zib0.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/b6a233-6f80-4f4e-9312-e3f49ac49560/1/cW9tEfDOYyMBgac_haZmFw9zib0.mft
rsync://rpki.ripe.net/repository/DEFAULT/cW9tEfDOYyMBgac_haZmFw9zib0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 23:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:53:7b:25:c5:92:87:47:7c:23:54:d9:a1:1d:d1:39:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=716f6d11f0ce63230181a73f85a666170f7389bd
Validity
Not Before: Jul 29 00:00:35 2025 GMT
Not After : Jul 30 00:00:35 2025 GMT
Subject: CN=210f1326b7edbbffe3363ce482341d27e2f6bf80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:2d:7c:1b:19:02:b2:76:01:ff:28:81:b0:50:
f8:88:c4:3d:73:91:03:7b:ae:75:db:82:2c:68:ce:
5f:6e:d7:c7:0b:c3:f0:e3:96:b4:f2:2a:bc:ff:b5:
98:c1:47:6f:ce:11:7d:c6:a1:87:ea:ef:dd:3b:a2:
c1:f5:70:20:df:8f:47:b1:89:e6:92:b8:11:9f:88:
6b:d4:91:b9:1c:13:3c:66:82:7a:15:d7:26:7c:04:
68:52:2d:85:f0:a1:d1:90:e4:74:be:2a:b3:ca:26:
47:2c:f9:ed:48:aa:34:a1:30:8a:a9:67:3e:8f:21:
97:9b:20:b1:91:10:be:02:eb:0f:72:19:22:12:ac:
ce:1e:54:a6:b2:5c:5a:46:bf:a7:78:e0:2f:42:a7:
24:ef:94:f5:36:b1:39:7e:8d:38:6b:21:93:e5:ca:
83:83:b9:14:b8:cf:cd:6f:48:97:78:0f:82:f8:40:
f3:1d:d0:e3:48:56:4c:a1:a2:1b:8f:1e:dc:b8:a4:
3d:03:7b:cb:98:b0:e6:70:3b:a2:46:37:74:c1:1d:
7d:be:a1:71:72:88:8f:85:50:10:10:47:49:db:b3:
70:00:ef:8b:cc:3c:76:9f:37:0a:d0:62:8e:0f:73:
89:0c:e2:65:77:b8:fb:b3:64:09:2f:4d:e8:0f:a1:
47:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:0F:13:26:B7:ED:BB:FF:E3:36:3C:E4:82:34:1D:27:E2:F6:BF:80
X509v3 Authority Key Identifier:
keyid:71:6F:6D:11:F0:CE:63:23:01:81:A7:3F:85:A6:66:17:0F:73:89:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cW9tEfDOYyMBgac_haZmFw9zib0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/b6a233-6f80-4f4e-9312-e3f49ac49560/1/cW9tEfDOYyMBgac_haZmFw9zib0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/b6a233-6f80-4f4e-9312-e3f49ac49560/1/cW9tEfDOYyMBgac_haZmFw9zib0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:e7:61:5b:89:02:39:c8:bf:d3:bc:dc:13:12:a2:34:2b:8a:
9b:14:48:58:74:26:d7:1c:3a:7e:01:a0:84:f1:b0:37:dc:5c:
be:1f:a3:41:9e:1f:55:14:b9:dc:95:51:2f:76:2c:c3:57:79:
57:76:c5:3c:55:4a:55:6d:12:78:4a:f1:b3:f6:09:17:38:97:
6f:7b:8f:8c:80:cd:3c:9b:73:1d:31:f4:f1:0d:6b:85:9e:4c:
cf:f6:14:a8:7c:35:64:20:0d:4f:7c:4b:b6:9b:6e:57:54:87:
29:79:62:0e:56:4c:1f:ec:23:b9:26:f0:9b:9e:c6:13:b8:fb:
8a:90:fc:ea:b0:64:74:df:8e:35:3f:51:20:c7:ae:ad:ee:2c:
ea:cf:19:83:36:20:c8:c1:6d:0f:f4:f7:c2:a8:bb:77:d3:29:
8a:0e:f8:d9:8a:fd:6a:93:89:1b:dc:f1:eb:a2:4d:c4:7c:de:
66:39:45:1e:8c:fb:a6:21:64:b9:87:ff:1a:53:38:98:20:fe:
bd:aa:a9:75:f7:a7:b3:ee:00:77:81:7e:98:c3:07:67:13:0e:
5f:82:12:9e:d8:fd:7a:30:c5:41:5d:ea:b6:84:20:a9:aa:83:
61:0f:c1:e8:ef:34:b7:6d:71:81:b6:1a:72:87:a2:11:58:ee:
9c:4a:ee:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 04:04:40 2025 by rpki-client