Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/c40875-061a-42df-9c6d-87a6845f66f9/1/cimwOc-KrxQdbm1hbnwWkInLyzI.mft
File: cimwOc-KrxQdbm1hbnwWkInLyzI.mft (raw, json)
Hash identifier: zYu49nnh/3dfR1bUVcFRiQdBijAydUDVdZxBD9Hy/iw=
Subject key identifier: 13:9D:D3:C5:58:09:75:A2:D0:C8:31:54:43:12:1A:34:E8:F0:A6:69
Authority key identifier: 72:29:B0:39:CF:8A:AF:14:1D:6E:6D:61:6E:7C:16:90:89:CB:CB:32
Certificate issuer: /CN=7229b039cf8aaf141d6e6d616e7c169089cbcb32
Certificate serial: 01984BF82886DAC8D5EBD3624864B0A0F850
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cimwOc-KrxQdbm1hbnwWkInLyzI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/c40875-061a-42df-9c6d-87a6845f66f9/1/cimwOc-KrxQdbm1hbnwWkInLyzI.mft
Manifest number: 0D3F
Signing time: Sun 27 Jul 2025 13:00:11 +0000
Manifest this update: Sun 27 Jul 2025 13:00:11 +0000
Manifest next update: Mon 28 Jul 2025 13:00:11 +0000
Files and hashes: 1: _11c4KnryngFBZ3LrSwCjXVWAnI.roa (hash: 4suX3JVW+dbra41XqoLSgaNnHC7+X6k6GS1R8JLgxL8=)
2: cimwOc-KrxQdbm1hbnwWkInLyzI.crl (hash: QwNMT7StIPyM78T1hiKmJtXRl8ihIVqHXMM6U8NsOwU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/c40875-061a-42df-9c6d-87a6845f66f9/1/cimwOc-KrxQdbm1hbnwWkInLyzI.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/c40875-061a-42df-9c6d-87a6845f66f9/1/cimwOc-KrxQdbm1hbnwWkInLyzI.mft
rsync://rpki.ripe.net/repository/DEFAULT/cimwOc-KrxQdbm1hbnwWkInLyzI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 09:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4b:f8:28:86:da:c8:d5:eb:d3:62:48:64:b0:a0:f8:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7229b039cf8aaf141d6e6d616e7c169089cbcb32
Validity
Not Before: Jul 27 13:00:11 2025 GMT
Not After : Jul 28 13:00:11 2025 GMT
Subject: CN=139dd3c5580975a2d0c8315443121a34e8f0a669
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:d3:63:a1:af:f4:7c:a4:4a:0d:a7:da:1f:76:
3f:c2:a5:e2:66:3d:89:37:0b:8c:4e:41:c5:1b:21:
34:37:85:f1:6c:bf:be:b7:b3:81:b6:76:e3:57:48:
cc:4a:38:50:98:43:73:f1:87:a2:e2:0a:62:cb:50:
3d:88:1f:61:d9:42:1f:8e:78:9f:32:e4:44:31:1a:
df:86:4e:b1:54:f5:8a:7e:06:f2:d5:b3:6b:e5:05:
78:25:44:17:8a:21:07:33:63:49:fb:53:c0:87:9b:
d7:85:43:12:c3:c5:da:fd:d7:d7:57:6c:6d:63:b3:
ff:3b:09:5a:fa:a2:5a:e8:d8:eb:7e:88:39:f0:ee:
22:05:60:30:9d:7f:5a:bd:eb:c7:63:fc:a2:95:7e:
ac:83:8c:03:77:0c:c8:fb:e3:67:90:cc:c2:19:da:
6a:c9:0a:02:d3:a2:f2:06:31:cf:78:ce:37:07:67:
36:73:64:40:9f:74:73:92:3b:1c:4a:88:75:7a:f3:
52:3d:59:36:64:3b:da:a3:d7:f4:09:cb:14:33:a0:
2f:54:df:48:40:a8:cb:22:fd:9d:52:b1:ef:12:76:
eb:b8:27:e4:c5:67:0e:2d:69:8e:0c:26:f9:19:3c:
63:9c:e5:91:c0:2e:73:e0:40:37:45:04:16:3c:a3:
f1:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:9D:D3:C5:58:09:75:A2:D0:C8:31:54:43:12:1A:34:E8:F0:A6:69
X509v3 Authority Key Identifier:
keyid:72:29:B0:39:CF:8A:AF:14:1D:6E:6D:61:6E:7C:16:90:89:CB:CB:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cimwOc-KrxQdbm1hbnwWkInLyzI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/c40875-061a-42df-9c6d-87a6845f66f9/1/cimwOc-KrxQdbm1hbnwWkInLyzI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/c40875-061a-42df-9c6d-87a6845f66f9/1/cimwOc-KrxQdbm1hbnwWkInLyzI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:1c:b1:70:c1:1b:ad:b8:52:36:f6:b7:9f:6e:a8:8e:1b:46:
2e:ff:ff:6d:d4:e4:59:24:68:93:30:d2:1e:38:65:51:db:b1:
a4:cc:05:79:a9:54:ad:7a:61:3b:c7:1b:bc:0e:2c:9e:cb:e3:
27:9e:e1:ea:72:d4:4d:1c:16:c1:a3:55:59:6d:72:78:7d:2b:
e8:75:0e:81:68:44:ab:a4:7f:d7:68:11:d8:df:36:96:34:e9:
ae:1e:0e:c6:0b:c4:b3:a0:be:a0:92:ab:ce:ca:aa:f1:a0:20:
c1:a5:ff:ce:46:e5:b5:44:c4:ec:0c:d7:01:f3:25:48:a2:94:
8e:c6:5f:48:f0:8c:30:0f:21:57:e5:ab:6d:93:a8:e0:06:23:
c1:59:6b:3e:93:f1:bb:13:b8:85:61:15:8b:57:63:a9:4c:1c:
3b:d9:86:a6:a2:ac:50:6c:3b:9a:42:bb:aa:22:3d:97:e5:e9:
13:0b:8b:36:62:95:63:22:07:8e:ea:a5:4f:bb:10:fd:6c:77:
8c:46:c1:c2:97:25:5d:ef:e7:dc:ac:98:1a:0c:79:6d:c4:b4:
d3:71:02:82:df:a7:3c:eb:0e:33:9a:e2:d3:0c:6b:6b:6a:4b:
1a:a7:4a:1e:05:f8:0b:38:08:e7:6d:67:9a:b5:3d:d9:ec:6a:
4b:12:4c:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 17:03:44 2025 by rpki-client