Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/53d56a-096e-458a-9a94-08a68632a63a/1/cJ1plX0zNDKsysgQIx4ok4jjAuI.mft
File: cJ1plX0zNDKsysgQIx4ok4jjAuI.mft (raw, json)
Hash identifier: ggimKCxf7g1wEY25JJWm4j4UD8x7tHbkKbtWBz66Nmw=
Subject key identifier: 95:B3:AF:53:89:D2:10:C7:1D:79:D0:F6:CB:E2:83:B0:B3:56:75:C9
Authority key identifier: 70:9D:69:95:7D:33:34:32:AC:CA:C8:10:23:1E:28:93:88:E3:02:E2
Certificate issuer: /CN=709d69957d333432accac810231e289388e302e2
Certificate serial: 019839F2996E42C9A41352A24E48CAEFE862
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cJ1plX0zNDKsysgQIx4ok4jjAuI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/53d56a-096e-458a-9a94-08a68632a63a/1/cJ1plX0zNDKsysgQIx4ok4jjAuI.mft
Manifest number: 15FA
Signing time: Thu 24 Jul 2025 01:00:56 +0000
Manifest this update: Thu 24 Jul 2025 01:00:56 +0000
Manifest next update: Fri 25 Jul 2025 01:00:56 +0000
Files and hashes: 1: 9y87QXHvPreUOvjZ1Oe2QvXling.roa (hash: THAUh6ARfmUeBlEORlfxrZB6XW0KTPM4GpL4IBGKtq4=)
2: cJ1plX0zNDKsysgQIx4ok4jjAuI.crl (hash: v98FnAT8P68PDW4PnPHE1RcvKlLkMeb8j4anlu34B/U=)
3: dagjZoA2cgv7IOwssRcqkxBEGlA.roa (hash: MlQsKiZwSfxtbg0qv4PHAKQxosBgQWpaFiAz9StErlg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/53d56a-096e-458a-9a94-08a68632a63a/1/cJ1plX0zNDKsysgQIx4ok4jjAuI.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/53d56a-096e-458a-9a94-08a68632a63a/1/cJ1plX0zNDKsysgQIx4ok4jjAuI.mft
rsync://rpki.ripe.net/repository/DEFAULT/cJ1plX0zNDKsysgQIx4ok4jjAuI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Jul 2025 23:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:39:f2:99:6e:42:c9:a4:13:52:a2:4e:48:ca:ef:e8:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=709d69957d333432accac810231e289388e302e2
Validity
Not Before: Jul 24 01:00:56 2025 GMT
Not After : Jul 25 01:00:56 2025 GMT
Subject: CN=95b3af5389d210c71d79d0f6cbe283b0b35675c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:9d:a2:ff:84:ae:6d:ce:dd:f8:1e:47:a2:c4:
d2:8d:d7:85:55:c4:37:eb:a5:81:d1:14:a0:0a:87:
6d:43:dc:c3:0a:a5:c4:07:73:74:35:27:00:8d:6a:
ca:60:22:e6:6f:9e:4b:da:f0:3b:e4:14:b6:3b:e5:
21:39:86:08:46:b5:aa:73:af:27:56:f5:db:51:3f:
b3:f1:92:b0:9d:3f:6e:98:f6:ed:3a:32:a6:5b:da:
14:f4:1e:eb:28:12:c3:99:d3:20:46:45:7e:37:19:
a8:5a:8e:b7:1c:9d:ef:f7:b6:81:b0:f1:64:88:f6:
97:0a:6d:ac:b1:57:d4:23:57:2e:01:22:41:21:a5:
ff:85:b7:be:68:b1:a1:73:a6:17:7f:60:fe:11:b1:
88:b6:63:17:70:bb:05:25:06:76:28:14:ad:62:4c:
06:e1:a9:94:3c:f7:da:2b:51:e8:a5:a3:94:ba:0f:
73:ed:c7:04:fb:b1:77:6b:10:9b:cf:0d:9f:45:90:
ab:01:53:b7:a4:b1:a9:d5:6b:46:ea:b3:b1:95:52:
b5:ca:7b:e7:2b:08:71:00:2f:71:e5:f5:67:fb:a4:
80:3d:87:17:fd:46:dc:59:55:6b:f0:86:00:ba:62:
33:d9:85:38:d5:a1:2c:48:35:14:b1:2c:ae:08:54:
e7:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:B3:AF:53:89:D2:10:C7:1D:79:D0:F6:CB:E2:83:B0:B3:56:75:C9
X509v3 Authority Key Identifier:
keyid:70:9D:69:95:7D:33:34:32:AC:CA:C8:10:23:1E:28:93:88:E3:02:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cJ1plX0zNDKsysgQIx4ok4jjAuI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/53d56a-096e-458a-9a94-08a68632a63a/1/cJ1plX0zNDKsysgQIx4ok4jjAuI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/53d56a-096e-458a-9a94-08a68632a63a/1/cJ1plX0zNDKsysgQIx4ok4jjAuI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:7c:c9:f8:fa:a7:83:39:a9:27:fe:dc:50:12:3d:c9:26:76:
30:c1:44:c1:a9:33:45:a2:94:a9:6f:43:18:15:7e:53:85:cb:
e3:c1:2e:fa:19:09:df:2d:ff:c0:4c:13:75:37:98:7f:4a:8c:
13:86:47:27:73:18:b8:c3:6a:82:75:7d:54:17:3a:f6:5a:d1:
0a:60:4d:4f:a8:f4:fd:d1:a2:20:96:88:f0:24:fc:ce:6e:e5:
a9:1a:44:dc:54:c9:fb:78:58:a8:ed:7a:7f:2e:df:12:b1:86:
9b:0c:b0:bb:7d:5d:af:b6:84:92:da:ae:41:44:c6:84:20:fe:
ca:78:1c:a7:74:96:b6:7a:31:61:d0:be:1c:b3:b2:c9:bf:59:
0d:20:ff:ce:bd:76:81:df:4a:65:34:d7:91:46:13:34:a6:90:
d5:20:5d:f0:48:99:98:35:6e:83:d4:89:f9:75:60:9b:d4:2a:
1e:69:c6:8d:fe:32:95:da:02:c0:8d:cb:bf:c0:c1:2b:98:21:
b6:93:3c:49:da:1b:dc:aa:6e:16:90:a6:22:44:d1:9c:44:12:
dd:6b:0b:7d:89:46:51:a7:a1:9e:4f:71:75:7e:c1:46:5f:e5:
bc:cc:e3:3a:1e:f9:a2:70:a4:d7:0b:8c:b4:c0:4e:49:f9:c4:
7b:1d:e5:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 24 08:15:03 2025 by rpki-client