Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/ac9481-6fca-4240-9ed1-c277d3716bd9/1/cGdfald5fFypbD-0XlMb0yeDAWw.mft
File: cGdfald5fFypbD-0XlMb0yeDAWw.mft (raw, json)
Hash identifier: 8CKD9nNvXMvmn2fPVAtPZxMSvQoTwx/n9FMKArtb0VE=
Subject key identifier: 22:13:1E:47:D3:C5:4F:D5:45:DA:68:87:36:85:D1:D8:AC:E0:7A:04
Authority key identifier: 70:67:5F:6A:57:79:7C:5C:A9:6C:3F:B4:5E:53:1B:D3:27:83:01:6C
Certificate issuer: /CN=70675f6a57797c5ca96c3fb45e531bd32783016c
Certificate serial: 01984A09D5969B270F924EE0253630C54495
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cGdfald5fFypbD-0XlMb0yeDAWw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/ac9481-6fca-4240-9ed1-c277d3716bd9/1/cGdfald5fFypbD-0XlMb0yeDAWw.mft
Manifest number: 1604
Signing time: Sun 27 Jul 2025 04:00:15 +0000
Manifest this update: Sun 27 Jul 2025 04:00:15 +0000
Manifest next update: Mon 28 Jul 2025 04:00:15 +0000
Files and hashes: 1: OlU6obIQjael3LSg0ssh_4uTiio.roa (hash: PEk/sjzeYnoi97rfsFTmYB012K4urx+cqdtXV/YTu3g=)
2: cGdfald5fFypbD-0XlMb0yeDAWw.crl (hash: 5sjGGRJx0q3Tc69IsZsdtjjFIFjsnMRDSuSpRN+X4nY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/ac9481-6fca-4240-9ed1-c277d3716bd9/1/cGdfald5fFypbD-0XlMb0yeDAWw.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/ac9481-6fca-4240-9ed1-c277d3716bd9/1/cGdfald5fFypbD-0XlMb0yeDAWw.mft
rsync://rpki.ripe.net/repository/DEFAULT/cGdfald5fFypbD-0XlMb0yeDAWw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 04:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:09:d5:96:9b:27:0f:92:4e:e0:25:36:30:c5:44:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70675f6a57797c5ca96c3fb45e531bd32783016c
Validity
Not Before: Jul 27 04:00:15 2025 GMT
Not After : Jul 28 04:00:15 2025 GMT
Subject: CN=22131e47d3c54fd545da68873685d1d8ace07a04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:4d:e5:e4:a8:d2:5b:ac:b5:69:c2:87:16:7a:
61:3e:3d:b9:4b:89:33:21:e9:9d:a2:6a:65:4f:33:
00:18:2c:27:b3:fd:4d:e1:3d:02:0c:3d:2c:d0:8b:
d9:ff:b5:cc:74:73:26:42:5d:0a:5e:b9:25:44:87:
72:c0:cb:c2:2f:6a:a9:ad:4b:94:29:2f:86:b4:8e:
ab:c9:4f:ec:eb:0b:44:17:fb:44:1e:c7:5f:a8:5f:
e5:34:20:ba:f5:04:dd:c5:bf:1a:30:b6:89:62:ee:
0e:7d:54:61:1b:d3:6e:18:26:66:c5:be:d5:1e:d2:
fa:63:f5:cd:e1:58:93:12:c8:c2:2c:06:d5:cb:cd:
b3:b4:f1:d7:7f:45:b0:c4:1c:f2:27:56:9d:6d:cc:
3c:31:c1:94:d6:e9:d0:ec:6b:a5:ac:b6:c4:1a:87:
e0:76:cc:40:2f:db:51:ce:cc:e7:03:cd:04:70:77:
ee:63:e4:c9:b0:59:bf:75:bd:b6:74:86:f8:d9:34:
0f:30:1d:2a:f1:e0:f2:fc:b5:24:3b:5f:69:7b:10:
b7:47:12:23:b9:2f:e0:28:93:84:66:5b:74:8d:e2:
5c:7b:90:8b:87:42:e6:a3:11:58:1f:d1:03:d2:56:
60:cd:5a:a0:26:ef:12:94:76:56:53:fd:d5:2b:01:
71:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:13:1E:47:D3:C5:4F:D5:45:DA:68:87:36:85:D1:D8:AC:E0:7A:04
X509v3 Authority Key Identifier:
keyid:70:67:5F:6A:57:79:7C:5C:A9:6C:3F:B4:5E:53:1B:D3:27:83:01:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cGdfald5fFypbD-0XlMb0yeDAWw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/ac9481-6fca-4240-9ed1-c277d3716bd9/1/cGdfald5fFypbD-0XlMb0yeDAWw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/ac9481-6fca-4240-9ed1-c277d3716bd9/1/cGdfald5fFypbD-0XlMb0yeDAWw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ce:38:03:62:27:57:b3:fb:31:90:70:3c:b7:a7:c7:0c:5e:b4:
26:c2:5c:fe:b6:d9:8c:6e:af:a4:93:20:e1:da:60:6a:cb:b0:
0a:f0:db:27:59:e4:b0:98:a6:18:05:f5:08:52:6c:e8:84:16:
cc:70:4e:d7:1b:e0:51:65:81:03:3b:ea:8a:ea:d0:1f:0d:51:
78:aa:4e:0c:db:13:c0:88:d1:81:2c:1d:de:92:56:c9:c3:59:
52:96:f4:a8:ea:3f:09:62:a4:76:46:6d:71:64:10:90:43:b3:
d1:08:36:94:e3:cd:a7:4f:19:9f:61:15:60:80:6b:ea:65:3c:
83:49:27:f5:0a:9e:d6:f5:3d:da:a3:2b:cd:ce:87:32:5a:1a:
c7:fc:77:54:b7:21:a4:70:47:6f:86:49:ab:9a:b4:b3:f7:b4:
0b:c2:09:f5:13:b8:ac:19:ea:f6:ba:4c:46:69:f3:b2:2c:b5:
5a:e6:67:c1:3d:7c:44:3c:6d:56:6e:06:76:15:4b:3d:0e:7b:
87:d8:5b:cc:55:8b:8a:50:61:71:1d:ab:f0:7f:75:39:2d:ad:
2f:60:2b:4d:81:54:d6:38:3e:20:26:7e:91:0e:de:ad:6a:ee:
f2:7c:6f:5e:ae:ab:d9:18:b8:33:6b:55:3a:ab:00:7e:4b:b2:
40:31:8a:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 10:38:08 2025 by rpki-client