Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/9c1b08-b5ac-4bbd-b8c3-0e0fd03b1104/1/CvEjgQA3CiwF-waACv3mkG2q8tg.mft
File: CvEjgQA3CiwF-waACv3mkG2q8tg.mft (raw, json)
Hash identifier: QZ+nFmmhP9LbJrAsg3veSurezIjFFP+SO9ViEh/7sYA=
Subject key identifier: A6:BC:6C:9A:8A:88:9F:97:DD:96:97:5E:DA:A4:73:14:87:E7:F0:00
Authority key identifier: 0A:F1:23:81:00:37:0A:2C:05:FB:06:80:0A:FD:E6:90:6D:AA:F2:D8
Certificate issuer: /CN=0af1238100370a2c05fb06800afde6906daaf2d8
Certificate serial: 0198560E8A34C4F0267927BE8AFEFBC22E60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CvEjgQA3CiwF-waACv3mkG2q8tg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/9c1b08-b5ac-4bbd-b8c3-0e0fd03b1104/1/CvEjgQA3CiwF-waACv3mkG2q8tg.mft
Manifest number: 1606
Signing time: Tue 29 Jul 2025 12:00:50 +0000
Manifest this update: Tue 29 Jul 2025 12:00:50 +0000
Manifest next update: Wed 30 Jul 2025 12:00:50 +0000
Files and hashes: 1: CvEjgQA3CiwF-waACv3mkG2q8tg.crl (hash: k0MD+lNoeU5V8gbnEclobQlgZYFYhG6f/G+RNY5OFgo=)
2: IXCtEaMNeIUhqXl8Lx3l8-Dir_Q.roa (hash: ZiR3KjxwRefwM+SxQhOx2wRJ2km2w6JI0EvTFa0nnZg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/9c1b08-b5ac-4bbd-b8c3-0e0fd03b1104/1/CvEjgQA3CiwF-waACv3mkG2q8tg.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/9c1b08-b5ac-4bbd-b8c3-0e0fd03b1104/1/CvEjgQA3CiwF-waACv3mkG2q8tg.mft
rsync://rpki.ripe.net/repository/DEFAULT/CvEjgQA3CiwF-waACv3mkG2q8tg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Jul 2025 12:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:56:0e:8a:34:c4:f0:26:79:27:be:8a:fe:fb:c2:2e:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0af1238100370a2c05fb06800afde6906daaf2d8
Validity
Not Before: Jul 29 12:00:50 2025 GMT
Not After : Jul 30 12:00:50 2025 GMT
Subject: CN=a6bc6c9a8a889f97dd96975edaa4731487e7f000
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:18:97:b9:bb:66:a1:ff:b7:ca:04:79:19:ab:
16:a1:96:2b:29:a1:f9:55:50:4e:13:5d:ac:51:1a:
b5:40:ac:35:c4:db:83:09:c4:33:79:a8:dc:24:34:
87:03:75:fc:53:35:0b:19:7a:e0:81:8e:15:26:52:
6d:ea:7b:b0:f4:b7:8c:8e:36:50:e9:2b:2c:71:f8:
79:6c:78:2d:c8:99:cc:f0:8b:13:bf:e6:3b:0a:f4:
47:60:5a:84:2b:87:98:11:5d:b2:64:4a:e2:6b:f3:
1d:43:c5:e4:bf:0c:c1:13:80:6b:62:00:e7:2a:1f:
53:5f:b9:6c:4f:23:d9:e9:61:d7:1f:f3:d8:61:ad:
a7:cd:df:0a:5a:a1:6d:a7:28:15:d7:0a:12:66:ac:
0e:a8:00:d5:b1:35:69:bd:85:66:69:fb:1b:09:85:
33:ea:2d:3e:bf:c1:bc:ac:c5:be:a8:87:b9:01:f3:
25:6f:6a:26:a6:0b:48:46:20:03:0e:e1:8b:ad:a7:
45:27:4a:00:f2:d3:e4:92:3a:76:3a:49:da:83:e0:
ec:38:b0:5b:3e:9a:7e:df:98:e2:c2:8d:eb:09:1a:
6e:8a:bb:db:13:33:b8:96:cd:97:78:2c:e8:41:29:
5c:f0:38:48:43:50:c5:b4:ad:3a:d9:22:63:05:9a:
1b:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:BC:6C:9A:8A:88:9F:97:DD:96:97:5E:DA:A4:73:14:87:E7:F0:00
X509v3 Authority Key Identifier:
keyid:0A:F1:23:81:00:37:0A:2C:05:FB:06:80:0A:FD:E6:90:6D:AA:F2:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CvEjgQA3CiwF-waACv3mkG2q8tg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/9c1b08-b5ac-4bbd-b8c3-0e0fd03b1104/1/CvEjgQA3CiwF-waACv3mkG2q8tg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/9c1b08-b5ac-4bbd-b8c3-0e0fd03b1104/1/CvEjgQA3CiwF-waACv3mkG2q8tg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:47:d2:33:b8:dc:27:0f:3f:c0:b1:82:d8:2f:df:73:94:5a:
01:1e:bb:79:75:e9:18:14:36:e6:86:0b:be:27:42:0f:68:3b:
ce:22:0c:e7:ab:a9:9d:96:91:07:43:2b:66:cb:27:5e:cd:a5:
ba:ba:29:64:60:57:ea:36:90:15:14:0c:79:9a:36:1e:75:cf:
61:ab:8a:a5:39:2a:5a:42:53:1b:29:7f:64:91:e9:55:8d:63:
c0:32:b3:40:ed:9a:46:48:70:ee:94:dd:a5:2f:e8:28:89:ef:
15:4f:ac:22:eb:cf:2b:e1:ae:42:91:15:3e:d1:b7:43:00:3d:
38:d7:b0:9d:59:63:63:4a:0a:f1:5f:72:a8:6a:93:1b:88:b5:
07:d0:97:80:17:4b:c5:34:b9:a3:24:bb:b1:63:9f:43:89:bf:
25:35:df:30:65:cc:fe:03:f9:db:39:7f:1b:d4:02:62:2f:c5:
a3:04:dc:75:46:b2:f1:ea:6b:86:64:2e:d9:af:80:51:51:97:
16:7c:11:86:a8:21:55:0c:97:fd:e4:51:53:db:fb:80:14:02:
cd:d3:c3:0c:5b:56:33:60:ea:96:2d:2f:39:51:48:5c:3c:a3:
ee:35:85:ce:d1:83:4f:e8:db:2a:6a:ac:0d:34:6f:5e:27:a3:
91:cc:79:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 18:55:13 2025 by rpki-client