Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/08d44c-f102-4b70-8db0-72abeefeda4a/1/cIAppnQXfv2ZJSJ1CUYYwMnPvR0.mft
File: cIAppnQXfv2ZJSJ1CUYYwMnPvR0.mft (raw, json)
Hash identifier: ggbs0xiDn/JMGfAiJl8ts/wdaK7e/miXgWLCmYWpZyc=
Subject key identifier: 20:5E:FE:59:EA:C6:16:DA:24:DF:9C:B2:E7:EF:19:2C:99:BB:17:BB
Authority key identifier: 70:80:29:A6:74:17:7E:FD:99:25:22:75:09:46:18:C0:C9:CF:BD:1D
Certificate issuer: /CN=708029a674177efd99252275094618c0c9cfbd1d
Certificate serial: 0198345E1E65E7BD5787022782FF01C6C697
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cIAppnQXfv2ZJSJ1CUYYwMnPvR0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/08d44c-f102-4b70-8db0-72abeefeda4a/1/cIAppnQXfv2ZJSJ1CUYYwMnPvR0.mft
Manifest number: 05C1
Signing time: Tue 22 Jul 2025 23:00:40 +0000
Manifest this update: Tue 22 Jul 2025 23:00:40 +0000
Manifest next update: Wed 23 Jul 2025 23:00:40 +0000
Files and hashes: 1: cIAppnQXfv2ZJSJ1CUYYwMnPvR0.crl (hash: eqYWmS5p6dO4tRvxUFwHXsT28hkh2KRCnhnazZlv0wo=)
2: gf0Xy6qbBLzQzsLjIlFfh_7JZjk.roa (hash: Ah/uhPrNkgzcI+es99gluPPaRScN93x4JTQmt+pb9V0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/08d44c-f102-4b70-8db0-72abeefeda4a/1/cIAppnQXfv2ZJSJ1CUYYwMnPvR0.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/08d44c-f102-4b70-8db0-72abeefeda4a/1/cIAppnQXfv2ZJSJ1CUYYwMnPvR0.mft
rsync://rpki.ripe.net/repository/DEFAULT/cIAppnQXfv2ZJSJ1CUYYwMnPvR0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Jul 2025 22:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:34:5e:1e:65:e7:bd:57:87:02:27:82:ff:01:c6:c6:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=708029a674177efd99252275094618c0c9cfbd1d
Validity
Not Before: Jul 22 23:00:40 2025 GMT
Not After : Jul 23 23:00:40 2025 GMT
Subject: CN=205efe59eac616da24df9cb2e7ef192c99bb17bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:3f:f5:08:97:2a:b6:ae:b3:24:c9:03:13:41:
eb:99:55:10:06:d6:2e:90:4c:b1:03:6d:e2:db:d7:
e4:e5:d5:cc:83:32:a2:cb:12:98:6e:de:92:c3:d5:
7d:cd:5b:ed:e7:59:91:d5:30:9c:b5:bb:5b:56:33:
68:3f:b9:09:e3:5d:7e:c5:93:bc:02:f9:cb:ad:1a:
9c:f2:13:63:24:e3:22:83:a8:56:af:a3:70:46:fb:
db:41:12:09:e6:f8:54:80:31:fe:9c:e0:bb:68:5c:
df:30:c8:72:8d:ee:d5:47:96:24:e9:20:7a:8d:d5:
c2:e6:33:8b:e2:e3:ca:2d:85:45:f7:34:ea:17:9c:
02:f2:6a:80:ff:a3:04:69:e3:94:f7:8d:e5:63:50:
05:e7:9f:b1:e8:c5:04:dc:3d:c0:67:57:0e:6e:79:
bd:e8:e9:9e:fb:31:99:1e:bb:db:02:09:6d:fa:aa:
8b:87:2d:91:7c:b5:7b:66:fe:eb:9f:75:78:3c:8c:
40:c7:25:11:82:15:1f:44:44:2f:58:d1:58:16:76:
86:e0:86:73:12:75:2c:df:65:ff:0b:af:0a:7a:88:
36:f5:4e:5d:ce:51:2a:48:1b:79:23:b9:8c:7f:d6:
f5:d5:9b:c5:07:54:a2:9e:0d:82:88:95:5f:c2:17:
85:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:5E:FE:59:EA:C6:16:DA:24:DF:9C:B2:E7:EF:19:2C:99:BB:17:BB
X509v3 Authority Key Identifier:
keyid:70:80:29:A6:74:17:7E:FD:99:25:22:75:09:46:18:C0:C9:CF:BD:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cIAppnQXfv2ZJSJ1CUYYwMnPvR0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/08d44c-f102-4b70-8db0-72abeefeda4a/1/cIAppnQXfv2ZJSJ1CUYYwMnPvR0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/08d44c-f102-4b70-8db0-72abeefeda4a/1/cIAppnQXfv2ZJSJ1CUYYwMnPvR0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:7b:eb:03:da:32:c6:59:ef:21:23:9f:43:83:6a:eb:5c:ab:
bf:8d:ef:0a:19:24:c7:e0:0b:6b:fd:ff:f1:f5:be:fa:cc:53:
29:52:b1:5e:4d:32:5c:35:1c:c3:01:fa:16:00:7a:b5:37:a3:
3c:ac:fb:04:dc:3a:e7:57:d6:e2:ca:40:56:86:9f:79:32:66:
18:25:49:c6:45:04:3c:fa:1f:3f:a6:c7:20:5c:d7:d5:04:fd:
bf:c2:56:71:11:6c:ab:2c:9c:f1:c0:4d:16:3e:ca:a7:83:a5:
2b:cb:4b:b1:e4:8a:6c:03:cc:57:cd:fd:4f:55:0e:56:17:37:
b9:4f:3b:d9:a9:47:c2:89:15:09:f9:a2:22:cd:fe:b1:9e:5a:
2d:21:5e:15:e7:95:db:ff:6d:91:42:f0:ff:1d:ab:99:30:4b:
40:e1:31:86:4b:79:be:f9:32:d7:bc:10:af:da:60:65:88:97:
52:e8:6e:85:e8:17:87:ce:fe:cf:2b:74:f3:3b:f0:67:34:69:
52:d7:23:c8:b5:86:3d:ae:8c:98:ad:4f:1f:0f:db:29:ae:91:
51:f9:7e:09:02:00:24:ff:bc:82:7f:ff:c1:0f:ac:48:9e:e9:
dd:e0:90:8d:f0:e1:7b:f6:27:a6:12:2e:e7:64:a4:94:53:aa:
93:d4:2d:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 06:00:49 2025 by rpki-client