Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/e18c2d-64ff-44e8-8eef-b9c89b9b1f65/1/CuGlto7Kdo8hGkjoVtf1g_kOdec.mft
File: CuGlto7Kdo8hGkjoVtf1g_kOdec.mft (raw, json)
Hash identifier: dl6IXErGq7dBqt18JxklXF35NrmH+vI6xnVLl4//MfA=
Subject key identifier: 86:D9:C8:85:9F:FD:1C:59:B3:38:D7:A3:73:49:C0:A9:E5:14:AF:DC
Authority key identifier: 0A:E1:A5:B6:8E:CA:76:8F:21:1A:48:E8:56:D7:F5:83:F9:0E:75:E7
Certificate issuer: /CN=0ae1a5b68eca768f211a48e856d7f583f90e75e7
Certificate serial: 01984AAF364F9FB1C08F6A4571568E19A334
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CuGlto7Kdo8hGkjoVtf1g_kOdec.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/e18c2d-64ff-44e8-8eef-b9c89b9b1f65/1/CuGlto7Kdo8hGkjoVtf1g_kOdec.mft
Manifest number: 13AC
Signing time: Sun 27 Jul 2025 07:00:53 +0000
Manifest this update: Sun 27 Jul 2025 07:00:53 +0000
Manifest next update: Mon 28 Jul 2025 07:00:53 +0000
Files and hashes: 1: CuGlto7Kdo8hGkjoVtf1g_kOdec.crl (hash: 9/4Kywr2BgumeC3W3VVIbXmHVXCsy2bMX4r2fXpjUgw=)
2: fxLB2UJLDSaxPyWV2-cdEb8R5e8.roa (hash: qTbDhlkyoNs8mOWo2CnjkxjvNByWkkbKi24V6XgdMB8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/e18c2d-64ff-44e8-8eef-b9c89b9b1f65/1/CuGlto7Kdo8hGkjoVtf1g_kOdec.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/e18c2d-64ff-44e8-8eef-b9c89b9b1f65/1/CuGlto7Kdo8hGkjoVtf1g_kOdec.mft
rsync://rpki.ripe.net/repository/DEFAULT/CuGlto7Kdo8hGkjoVtf1g_kOdec.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:af:36:4f:9f:b1:c0:8f:6a:45:71:56:8e:19:a3:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ae1a5b68eca768f211a48e856d7f583f90e75e7
Validity
Not Before: Jul 27 07:00:53 2025 GMT
Not After : Jul 28 07:00:53 2025 GMT
Subject: CN=86d9c8859ffd1c59b338d7a37349c0a9e514afdc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:14:f3:b5:f9:93:eb:00:4f:9d:38:cc:96:3e:
60:cf:ae:b8:e4:e5:15:f7:f3:03:37:15:11:cd:ba:
4f:bc:bd:4c:16:c8:dc:21:92:14:cb:93:d2:6e:8c:
d3:5f:84:5a:ce:06:47:7c:c0:31:10:08:d3:ee:66:
0a:32:61:5f:cc:aa:70:ec:38:50:a9:03:ac:df:8c:
7a:a5:0b:14:fb:20:f5:f2:e7:09:81:63:78:68:9a:
26:26:62:40:45:70:d5:09:87:7e:cc:b8:2a:64:4b:
3b:72:cc:90:d7:26:7c:b3:e3:71:0c:e6:f1:39:cc:
8b:8d:78:18:6f:a6:c1:f8:c9:eb:4e:6a:62:28:51:
3f:27:c0:bb:0e:3a:6c:4f:63:3b:ae:7b:61:48:4b:
1f:1e:db:96:d3:2d:85:e3:83:3e:bb:08:2f:cf:83:
fe:f2:60:0a:9e:a6:35:ce:98:2b:81:cc:8c:c2:95:
65:c7:0f:14:d4:65:47:41:21:e4:da:c9:a7:24:74:
da:9b:80:c3:50:6a:94:ab:db:bd:3c:90:24:89:b5:
b0:a1:a5:cf:ad:32:8e:a0:10:bc:61:13:e4:a7:b5:
c3:96:e5:97:73:72:80:d3:64:bd:6b:70:0e:08:d6:
3d:cc:38:e5:0e:11:41:1b:3e:8a:6f:ba:e2:e7:bc:
4c:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:D9:C8:85:9F:FD:1C:59:B3:38:D7:A3:73:49:C0:A9:E5:14:AF:DC
X509v3 Authority Key Identifier:
keyid:0A:E1:A5:B6:8E:CA:76:8F:21:1A:48:E8:56:D7:F5:83:F9:0E:75:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CuGlto7Kdo8hGkjoVtf1g_kOdec.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/e18c2d-64ff-44e8-8eef-b9c89b9b1f65/1/CuGlto7Kdo8hGkjoVtf1g_kOdec.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/e18c2d-64ff-44e8-8eef-b9c89b9b1f65/1/CuGlto7Kdo8hGkjoVtf1g_kOdec.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:bb:9f:c2:5f:f0:6b:79:1d:d2:57:92:01:1e:d0:e7:23:94:
6c:be:2a:b8:88:77:db:32:3b:9e:d4:11:4b:08:3d:72:95:8d:
1b:15:ba:bc:ec:65:eb:9b:4b:06:3b:0c:da:a5:22:7b:87:99:
1a:cc:1f:17:03:f8:5e:61:80:5d:23:90:fc:40:7f:8d:52:ee:
57:49:39:bd:13:9e:03:a6:99:f7:09:4b:4c:d0:97:b4:8a:a6:
e6:2b:e3:aa:d3:ac:8a:6b:2b:21:f5:92:df:35:2c:6c:3e:3d:
08:3a:99:07:0e:07:91:9b:eb:ac:b2:bf:2c:b3:1d:ef:94:32:
aa:32:ab:f9:2f:8d:0d:d6:80:59:d7:3b:ae:51:d8:65:71:77:
a1:a6:13:66:e4:f6:c1:22:71:d7:6f:ce:34:0d:06:fc:50:e6:
93:06:00:ec:73:7b:42:60:9a:4c:b7:8e:06:ad:bc:40:ec:1e:
2b:24:0e:41:6e:0a:9f:56:31:53:36:d6:53:c0:1e:35:55:05:
67:0c:75:7e:ea:ce:ff:3e:f0:15:91:09:b0:b6:ef:3c:b3:f2:
16:fb:c1:6d:e3:cf:be:5f:57:ab:82:c4:e0:fd:b3:04:11:e3:
db:0f:d6:50:ae:03:d3:24:9e:7d:f3:e4:ea:6d:c7:c9:22:9d:
dd:01:e4:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 11:57:10 2025 by rpki-client