Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/c244b3-8fc1-4685-8fb2-46a8b191a374/1/cEq5aIQnBz_34XneWvAC4J8jYBM.mft
File: cEq5aIQnBz_34XneWvAC4J8jYBM.mft (raw, json)
Hash identifier: HtSMGQ1rHbayb7tb8AlKddlpKTU3uQPWYebCXdOXnmA=
Subject key identifier: 6A:DD:1E:CB:CD:A0:24:02:87:7F:01:9F:88:CF:6E:09:C6:92:C4:43
Authority key identifier: 70:4A:B9:68:84:27:07:3F:F7:E1:79:DE:5A:F0:02:E0:9F:23:60:13
Certificate issuer: /CN=704ab9688427073ff7e179de5af002e09f236013
Certificate serial: 0198548DE8167FE94D789981CB3A3D8ADF35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cEq5aIQnBz_34XneWvAC4J8jYBM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/c244b3-8fc1-4685-8fb2-46a8b191a374/1/cEq5aIQnBz_34XneWvAC4J8jYBM.mft
Manifest number: 160D
Signing time: Tue 29 Jul 2025 05:00:42 +0000
Manifest this update: Tue 29 Jul 2025 05:00:42 +0000
Manifest next update: Wed 30 Jul 2025 05:00:42 +0000
Files and hashes: 1: 6BOfeQqy9IUZ36DNxodiGS7wBoQ.roa (hash: 5gf++9dIYBR0GFOuInOOJProaUQbrotLcp46aQPmrD8=)
2: cEq5aIQnBz_34XneWvAC4J8jYBM.crl (hash: QXDKZGUvImMWp1ZifN12E3sb4h0+hm9I5EwDD66MMQE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/c244b3-8fc1-4685-8fb2-46a8b191a374/1/cEq5aIQnBz_34XneWvAC4J8jYBM.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/c244b3-8fc1-4685-8fb2-46a8b191a374/1/cEq5aIQnBz_34XneWvAC4J8jYBM.mft
rsync://rpki.ripe.net/repository/DEFAULT/cEq5aIQnBz_34XneWvAC4J8jYBM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 23:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:54:8d:e8:16:7f:e9:4d:78:99:81:cb:3a:3d:8a:df:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=704ab9688427073ff7e179de5af002e09f236013
Validity
Not Before: Jul 29 05:00:42 2025 GMT
Not After : Jul 30 05:00:42 2025 GMT
Subject: CN=6add1ecbcda02402877f019f88cf6e09c692c443
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:5d:40:b3:22:c0:be:9b:1c:51:78:33:84:b1:
01:76:0d:fb:b9:f1:9b:ee:0c:70:84:b7:29:a8:63:
07:db:7f:1b:24:75:dc:f6:cf:27:8c:d1:a9:fd:fc:
1e:5f:ba:98:4d:2c:b6:e6:d2:63:39:e3:41:dd:47:
16:9b:56:3b:d6:0c:98:d7:12:4b:f5:17:49:ff:35:
55:c6:98:2a:89:87:b6:bf:9e:a8:57:69:a3:2b:b5:
d1:dd:c6:bb:f8:ac:6a:86:f4:4c:f6:d6:a8:68:0e:
d2:dc:cf:2e:29:6b:60:af:7a:17:41:f7:04:7a:fd:
cd:fe:94:20:93:c8:f2:ca:a3:0d:10:cb:2c:7f:10:
0f:16:c3:7d:0f:26:6b:f4:c3:67:b6:49:fa:26:57:
57:a5:7d:58:a8:11:84:87:fb:09:cc:0e:54:df:e1:
a2:10:01:fc:d7:c7:1d:d2:b0:6d:11:6f:52:38:35:
20:f5:b7:4c:88:4f:59:62:c7:ac:40:08:d5:be:46:
12:b5:bb:22:3e:19:47:a4:d6:13:75:c9:e9:e4:f7:
b4:6c:5b:6e:3a:d7:bd:df:07:04:e9:57:9d:27:5c:
32:a2:9a:12:a8:98:3b:d7:ce:d2:64:a0:45:4d:8e:
99:a9:f0:61:2c:85:29:c5:82:53:93:10:cc:c7:cb:
da:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:DD:1E:CB:CD:A0:24:02:87:7F:01:9F:88:CF:6E:09:C6:92:C4:43
X509v3 Authority Key Identifier:
keyid:70:4A:B9:68:84:27:07:3F:F7:E1:79:DE:5A:F0:02:E0:9F:23:60:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cEq5aIQnBz_34XneWvAC4J8jYBM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/c244b3-8fc1-4685-8fb2-46a8b191a374/1/cEq5aIQnBz_34XneWvAC4J8jYBM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/c244b3-8fc1-4685-8fb2-46a8b191a374/1/cEq5aIQnBz_34XneWvAC4J8jYBM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:13:42:33:23:81:67:2c:ac:77:2f:51:97:84:22:6c:1a:9d:
bc:27:83:96:69:59:68:73:dc:fa:52:d0:aa:09:67:7f:1c:4d:
aa:3d:d5:49:c2:17:28:ab:9f:5f:ec:c9:a1:57:0b:bc:c4:cf:
b1:ac:ef:a8:53:91:89:11:d9:1d:e5:df:41:dd:55:ab:94:6e:
34:dc:b6:c2:e6:a3:df:ca:18:83:79:a1:3f:df:b2:4d:f6:44:
95:2e:23:e2:e8:82:f2:39:2e:00:bc:80:9c:57:b0:ae:a8:7b:
69:1f:65:e2:92:d7:3f:4b:00:e4:81:23:c2:05:8c:5a:00:40:
6b:a4:72:a2:e5:12:28:a0:8d:aa:e3:88:4a:0f:c2:73:46:8c:
4a:a7:21:00:a6:3b:4d:be:88:cc:4b:d4:1a:0c:82:ee:88:2e:
71:7b:ce:f8:fd:66:c9:4e:40:14:55:be:7f:7d:6e:68:54:6b:
a3:d0:b1:a4:bc:67:80:72:4b:60:9d:e6:6e:10:51:24:14:96:
ce:a8:c6:09:36:b0:9e:9b:2c:80:1c:90:61:56:b8:b2:8b:23:
41:52:5a:fa:28:5b:d0:0b:55:87:d5:b1:69:43:ad:75:7f:63:
a5:d1:5f:d6:63:8a:5e:bd:1a:d3:3f:93:c0:5b:da:33:ca:ca:
44:c8:f7:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 07:38:13 2025 by rpki-client