Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/793805-e4e9-42e2-8386-9f303ea67e65/1/cRc4aXP7-IqGfIKohnsFD8pgsBE.mft
File: cRc4aXP7-IqGfIKohnsFD8pgsBE.mft (raw, json)
Hash identifier: gFIgUjcxy9ExLr0/jBrmBPPG905So9Iwb9uwSN+jZYQ=
Subject key identifier: AD:02:C4:C0:66:2E:82:4B:7C:EC:A1:A3:03:46:EC:16:24:89:E6:79
Authority key identifier: 71:17:38:69:73:FB:F8:8A:86:7C:82:A8:86:7B:05:0F:CA:60:B0:11
Certificate issuer: /CN=7117386973fbf88a867c82a8867b050fca60b011
Certificate serial: 0198477713365FBB4916242CA55ED439B7C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cRc4aXP7-IqGfIKohnsFD8pgsBE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/793805-e4e9-42e2-8386-9f303ea67e65/1/cRc4aXP7-IqGfIKohnsFD8pgsBE.mft
Manifest number: 1600
Signing time: Sat 26 Jul 2025 16:00:42 +0000
Manifest this update: Sat 26 Jul 2025 16:00:42 +0000
Manifest next update: Sun 27 Jul 2025 16:00:42 +0000
Files and hashes: 1: __J8knmzK0D7LeHPBcfH9mDXmDA.roa (hash: KGCws32qTez6CiaSk45QNDqYkcqePM9SEByg+MzKHwo=)
2: cRc4aXP7-IqGfIKohnsFD8pgsBE.crl (hash: v+DZQj53Nv6LIaDFztdO/oYYjEPBnfQZe6VusvPMjuo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/793805-e4e9-42e2-8386-9f303ea67e65/1/cRc4aXP7-IqGfIKohnsFD8pgsBE.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/793805-e4e9-42e2-8386-9f303ea67e65/1/cRc4aXP7-IqGfIKohnsFD8pgsBE.mft
rsync://rpki.ripe.net/repository/DEFAULT/cRc4aXP7-IqGfIKohnsFD8pgsBE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:47:77:13:36:5f:bb:49:16:24:2c:a5:5e:d4:39:b7:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7117386973fbf88a867c82a8867b050fca60b011
Validity
Not Before: Jul 26 16:00:42 2025 GMT
Not After : Jul 27 16:00:42 2025 GMT
Subject: CN=ad02c4c0662e824b7ceca1a30346ec162489e679
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:9f:cb:39:f1:9b:39:23:36:57:54:68:8f:93:
3c:17:57:6a:f7:68:8a:e8:3e:bc:bb:54:bd:75:4a:
66:fd:29:66:f9:df:4c:fb:df:3a:9e:95:fc:f0:50:
2f:94:a9:9e:8d:05:52:1f:a6:35:f2:49:bd:f1:1b:
c3:ca:39:be:ea:92:7c:14:1e:9f:46:bd:a3:d0:45:
18:31:68:7d:78:8f:f7:cb:ab:e0:3a:81:b0:a9:8b:
1e:ce:1b:22:cc:05:f0:76:00:c7:4f:26:71:0d:e5:
1b:15:69:ec:0a:56:da:7d:73:f7:00:62:3a:d8:75:
9b:31:d0:ad:d2:66:d1:06:2e:12:26:67:0d:b9:24:
7d:e6:7b:4c:4c:f2:d9:ee:64:4d:68:d3:c4:3d:0a:
0d:0c:86:61:b8:9c:03:0a:63:80:2e:7e:dc:8b:1d:
5f:b6:ab:27:3a:23:ac:ce:43:98:07:15:16:2a:d0:
f6:3b:5c:b2:e4:8f:76:28:42:45:05:1f:fa:de:f1:
ea:45:f2:b0:78:5c:0e:31:ff:6b:69:a4:92:b8:49:
ec:42:96:ce:f4:7d:a3:45:76:03:44:8c:58:f8:e8:
66:9d:e8:5d:ee:14:dc:03:4f:22:4d:e1:c7:28:49:
7b:d0:15:0a:79:35:5f:23:85:9c:8a:2c:ad:a5:0f:
e8:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:02:C4:C0:66:2E:82:4B:7C:EC:A1:A3:03:46:EC:16:24:89:E6:79
X509v3 Authority Key Identifier:
keyid:71:17:38:69:73:FB:F8:8A:86:7C:82:A8:86:7B:05:0F:CA:60:B0:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cRc4aXP7-IqGfIKohnsFD8pgsBE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/793805-e4e9-42e2-8386-9f303ea67e65/1/cRc4aXP7-IqGfIKohnsFD8pgsBE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/793805-e4e9-42e2-8386-9f303ea67e65/1/cRc4aXP7-IqGfIKohnsFD8pgsBE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:70:00:32:c2:7f:ac:6b:a6:53:d3:12:4a:2f:e7:a4:82:94:
7d:83:ea:0b:67:f5:24:14:f7:92:cf:32:59:0a:88:73:05:39:
c1:1c:46:b3:22:3c:14:96:e6:ad:99:bb:f4:42:1f:d1:84:ea:
e0:e1:eb:8c:cf:93:95:6e:aa:2a:4e:5a:a1:c5:63:e6:8a:ad:
c1:f0:97:d9:9e:71:a3:ec:e8:27:54:c6:08:e4:db:d0:e6:6a:
78:60:96:e3:03:e9:35:27:73:c3:8a:74:47:f3:b8:6e:e4:bc:
c0:fe:e9:33:21:57:b1:53:b4:bf:39:57:e9:a4:da:16:ac:e4:
69:4b:35:2a:83:ea:70:b5:80:a7:f3:1a:d2:f2:4a:87:a6:3f:
31:27:f0:47:dd:e6:ba:57:97:46:83:2b:d4:30:e0:91:27:de:
23:60:83:02:a0:db:6f:94:10:7f:ec:c2:1c:d3:22:49:17:7d:
2a:7a:8c:e2:94:4b:57:52:49:64:a5:fb:71:9f:61:9b:20:ac:
66:8d:76:09:1b:02:d0:2d:fd:71:e4:7c:15:e9:45:7a:d0:25:
cd:56:12:08:95:04:a9:0c:c1:e5:5b:57:77:e1:48:88:53:4d:
dd:d6:7a:d8:6d:2c:87:27:51:1c:1f:ee:a0:42:7d:16:e6:b6:
b7:a4:a8:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 20:48:20 2025 by rpki-client