Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/852cfb-4471-4290-91f4-6bc4905c42d4/1/ClMYxYv1unQySyXQN0BN2N2p_yQ.mft
File: ClMYxYv1unQySyXQN0BN2N2p_yQ.mft (raw, json)
Hash identifier: 2KRPKvjERXXZYMX7QBAm8QCjAwpmbiXFG7t0PQmNIJU=
Subject key identifier: D7:13:29:BA:11:92:9E:4A:90:FB:00:70:E3:91:F6:89:DC:6C:67:FA
Authority key identifier: 0A:53:18:C5:8B:F5:BA:74:32:4B:25:D0:37:40:4D:D8:DD:A9:FF:24
Certificate issuer: /CN=0a5318c58bf5ba74324b25d037404dd8dda9ff24
Certificate serial: 01984889853E533E79C1126C25AA651CAD27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ClMYxYv1unQySyXQN0BN2N2p_yQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/852cfb-4471-4290-91f4-6bc4905c42d4/1/ClMYxYv1unQySyXQN0BN2N2p_yQ.mft
Manifest number: 1600
Signing time: Sat 26 Jul 2025 21:00:28 +0000
Manifest this update: Sat 26 Jul 2025 21:00:28 +0000
Manifest next update: Sun 27 Jul 2025 21:00:28 +0000
Files and hashes: 1: ClMYxYv1unQySyXQN0BN2N2p_yQ.crl (hash: MM6i3wbJ8pHXyVKk27qj1BNZ2HO6UzHA7O1OJlbn5Lk=)
2: DLTd3WJjxjvYe7s9RQaXW0-asFQ.roa (hash: CEzU0MiwDAlXifXvS9Fry7MUXXUL96cqYeU54NDS/g8=)
3: MzKwgAtz12wzIsjgwju5LaHLtH8.roa (hash: DsGzfZzJWXHpJi5oY7AKelnpp/ss483xMhTBHOGogIk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/852cfb-4471-4290-91f4-6bc4905c42d4/1/ClMYxYv1unQySyXQN0BN2N2p_yQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/852cfb-4471-4290-91f4-6bc4905c42d4/1/ClMYxYv1unQySyXQN0BN2N2p_yQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/ClMYxYv1unQySyXQN0BN2N2p_yQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 21:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:89:85:3e:53:3e:79:c1:12:6c:25:aa:65:1c:ad:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a5318c58bf5ba74324b25d037404dd8dda9ff24
Validity
Not Before: Jul 26 21:00:28 2025 GMT
Not After : Jul 27 21:00:28 2025 GMT
Subject: CN=d71329ba11929e4a90fb0070e391f689dc6c67fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:d7:e4:13:4e:1f:e4:fb:ee:35:2d:3c:2b:42:
76:a6:bd:ba:8a:8f:ab:d9:f1:b4:e4:35:90:60:71:
b6:ac:1f:70:c0:46:97:6b:99:16:a2:19:40:87:ae:
21:51:e8:59:52:a2:ad:da:e9:af:33:3c:67:84:f1:
64:10:77:cd:cf:31:78:2a:ae:23:58:01:68:6d:e2:
09:cb:22:e6:4e:11:25:15:0c:87:a7:19:50:4a:3a:
e0:e0:c4:08:b4:31:99:f3:59:0a:a5:75:51:d0:c2:
76:4c:62:41:a0:cf:ae:f8:b9:6a:14:7d:54:c1:b9:
b5:e1:5d:3a:12:39:ed:02:b6:0f:b5:c8:d1:d9:74:
81:1a:57:4b:31:81:95:e2:57:e9:f7:42:f5:b0:cd:
a0:6b:12:0c:dc:bd:9e:42:ec:7c:31:81:92:28:33:
18:03:08:9d:af:dd:3c:0b:25:a7:5c:80:2f:ae:7a:
9f:fc:32:89:a6:43:2c:e9:43:04:38:5a:e7:10:a2:
89:18:7a:4f:fe:f8:3d:5d:7b:c2:2a:a6:c7:a5:16:
16:74:f6:42:41:0f:2d:0e:d9:df:d2:21:2e:e3:89:
53:b1:83:de:90:d9:03:a1:91:bf:d4:9d:d5:e2:39:
d7:5e:0e:ae:db:a3:a8:31:40:97:74:16:90:b9:47:
4c:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:13:29:BA:11:92:9E:4A:90:FB:00:70:E3:91:F6:89:DC:6C:67:FA
X509v3 Authority Key Identifier:
keyid:0A:53:18:C5:8B:F5:BA:74:32:4B:25:D0:37:40:4D:D8:DD:A9:FF:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ClMYxYv1unQySyXQN0BN2N2p_yQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/852cfb-4471-4290-91f4-6bc4905c42d4/1/ClMYxYv1unQySyXQN0BN2N2p_yQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/852cfb-4471-4290-91f4-6bc4905c42d4/1/ClMYxYv1unQySyXQN0BN2N2p_yQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:c7:21:53:6c:49:c3:90:44:e0:47:db:90:f3:f3:20:d3:59:
27:c7:e0:dd:30:c5:cf:4a:bb:38:25:bd:bc:55:16:30:63:11:
4c:e9:57:64:16:4a:7b:a3:81:05:81:e9:ad:dc:02:59:00:6a:
9a:38:1e:7c:fa:79:ce:ef:fd:6f:82:0b:2c:af:ce:fd:c1:47:
bc:58:61:23:38:40:e3:c7:05:75:3b:77:53:d9:01:b6:f9:11:
2d:c4:19:ba:5d:da:9a:aa:b0:42:d8:7d:0d:a6:57:19:d4:a4:
82:1a:7e:3f:b2:24:a9:42:b8:4b:e5:b2:bb:fd:75:c1:ab:70:
15:39:f9:6a:bc:74:70:d5:56:5c:58:94:87:1b:96:18:92:f0:
85:d7:f0:43:1c:16:c0:14:56:74:a8:bd:f0:f8:97:8c:04:99:
d8:21:0a:42:af:bd:33:10:b3:b9:0c:c2:50:a8:44:1a:5c:da:
af:e1:12:dc:c4:e6:5b:fc:21:ee:d9:ed:ed:8b:9c:b7:2c:40:
fb:ac:99:51:8f:6e:2d:10:2d:dc:3e:be:85:e8:e6:3f:85:85:
6f:05:6d:30:df:90:f3:26:24:9a:34:c8:9f:42:07:72:1b:f6:
26:44:20:0a:b4:0c:48:a3:18:72:bf:e9:5e:db:28:3a:7b:fb:
4e:2d:41:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 06:19:48 2025 by rpki-client