Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/cc843e-60c7-47ac-823b-f8d6bd30cc19/1/Ctz2LGtUEROaXRMJ3Z7ZJvQxQyA.mft
File: Ctz2LGtUEROaXRMJ3Z7ZJvQxQyA.mft (raw, json)
Hash identifier: GHFFybCGUDSSXSJKKu8m4o0FoSF4OFtwCOI9ZEMMWlA=
Subject key identifier: 01:36:F4:01:90:63:56:59:9E:23:F3:68:74:94:79:3A:54:BD:33:91
Authority key identifier: 0A:DC:F6:2C:6B:54:11:13:9A:5D:13:09:DD:9E:D9:26:F4:31:43:20
Certificate issuer: /CN=0adcf62c6b5411139a5d1309dd9ed926f4314320
Certificate serial: 01984AAF3FD3C2015EA13BDB8B7B330063A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ctz2LGtUEROaXRMJ3Z7ZJvQxQyA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/cc843e-60c7-47ac-823b-f8d6bd30cc19/1/Ctz2LGtUEROaXRMJ3Z7ZJvQxQyA.mft
Manifest number: 12EF
Signing time: Sun 27 Jul 2025 07:00:55 +0000
Manifest this update: Sun 27 Jul 2025 07:00:55 +0000
Manifest next update: Mon 28 Jul 2025 07:00:55 +0000
Files and hashes: 1: Ctz2LGtUEROaXRMJ3Z7ZJvQxQyA.crl (hash: P9W4qR0oTBEoS51yLH+sefuHr3iVcePQ0roN0BP9gm0=)
2: GpM90An4j0aWnAQVOPwoRVNatnk.roa (hash: MKIleZe0XP5Hk0DTuIZD6iDzaTxtrUWEQu34eF8ZBrE=)
3: QRwZwj-EtgWsWtGLyP94z8eYhbY.roa (hash: XsWkHritSLVCWhTRPolIJOQ4NjLpOalWZgwmSQSOCg4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/cc843e-60c7-47ac-823b-f8d6bd30cc19/1/Ctz2LGtUEROaXRMJ3Z7ZJvQxQyA.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/cc843e-60c7-47ac-823b-f8d6bd30cc19/1/Ctz2LGtUEROaXRMJ3Z7ZJvQxQyA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ctz2LGtUEROaXRMJ3Z7ZJvQxQyA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:af:3f:d3:c2:01:5e:a1:3b:db:8b:7b:33:00:63:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0adcf62c6b5411139a5d1309dd9ed926f4314320
Validity
Not Before: Jul 27 07:00:55 2025 GMT
Not After : Jul 28 07:00:55 2025 GMT
Subject: CN=0136f401906356599e23f3687494793a54bd3391
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:4b:79:a0:b5:d5:98:e0:f1:5b:f7:a1:d6:ff:
fa:ce:44:58:54:21:b5:5d:dc:90:5a:48:ad:5b:9b:
e3:01:a5:ca:36:68:f9:47:12:98:24:c6:d4:9b:52:
a8:72:14:6e:a6:d1:ae:c2:6a:ad:4b:60:2d:e5:63:
34:70:ed:e4:3d:0f:8b:9b:24:30:a3:70:82:d0:e4:
d0:6c:10:ee:21:e4:83:2a:e5:c8:1d:36:42:a0:1a:
b8:f4:d9:27:db:9f:95:d2:85:15:9a:ed:86:9a:cb:
2d:17:de:bb:e3:10:3e:4d:43:d0:7f:dc:20:63:7a:
1b:54:7b:22:9d:50:eb:7f:1a:70:04:98:13:48:db:
d3:e5:9f:97:c8:42:96:53:b0:21:b6:87:c3:65:24:
72:d3:a5:25:8d:98:25:de:c7:7b:f1:25:93:70:b5:
ab:67:bd:af:cc:c0:73:91:d5:cc:3f:fd:0c:44:be:
6a:43:70:11:d3:71:15:a0:1d:52:2d:3c:3f:af:cb:
46:ff:5f:e2:0c:1f:d8:97:f0:ed:a8:9d:1e:d4:c5:
2b:83:17:0f:0e:b6:9f:08:fe:b6:ff:d1:82:ed:4f:
10:6a:01:46:92:04:c0:25:85:eb:4e:80:b1:ee:81:
65:9e:0a:cc:78:94:99:96:c5:93:de:9e:26:26:bb:
f4:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:36:F4:01:90:63:56:59:9E:23:F3:68:74:94:79:3A:54:BD:33:91
X509v3 Authority Key Identifier:
keyid:0A:DC:F6:2C:6B:54:11:13:9A:5D:13:09:DD:9E:D9:26:F4:31:43:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ctz2LGtUEROaXRMJ3Z7ZJvQxQyA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cc843e-60c7-47ac-823b-f8d6bd30cc19/1/Ctz2LGtUEROaXRMJ3Z7ZJvQxQyA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cc843e-60c7-47ac-823b-f8d6bd30cc19/1/Ctz2LGtUEROaXRMJ3Z7ZJvQxQyA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:c4:e8:08:35:ce:28:77:1e:51:f3:5b:61:b7:63:f7:64:88:
ca:84:8b:72:2f:57:f9:46:52:d0:bb:d5:ba:2c:2a:e4:b5:74:
14:5a:da:ef:c1:e1:b0:b6:b1:de:4b:40:84:46:f8:0d:47:09:
9c:83:03:65:9a:51:8a:c4:6f:56:e5:06:a4:39:80:5f:0d:c3:
75:4c:ce:60:08:7f:73:73:77:b1:c5:43:a2:84:ee:58:42:45:
2f:ee:37:b3:ef:db:04:62:6f:98:f5:32:15:7d:d4:99:37:11:
51:41:88:77:7c:5a:2a:6c:69:32:0c:fb:4a:d7:56:5a:6d:06:
42:8d:30:98:d4:0f:04:dd:fd:e8:98:21:0d:a8:85:9a:d7:0f:
f8:31:bf:9d:53:c2:24:75:a1:09:f8:fb:bf:bb:00:5b:65:d0:
44:bf:ea:83:1b:97:eb:af:c1:59:a0:1b:cc:6f:1a:28:ef:0c:
b2:ed:ee:26:78:01:5f:37:3f:c4:32:e6:76:66:a5:7b:6f:59:
58:34:71:34:57:6c:e8:5d:f6:d7:b2:53:9b:5f:4d:a2:7b:22:
56:2f:a1:cc:23:a1:9a:46:0f:2f:52:b7:e7:74:87:9b:2c:a7:
1e:45:04:ad:10:c2:3d:11:40:1a:2e:02:e2:a4:6c:6d:96:74:
b7:98:70:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 13:42:37 2025 by rpki-client