Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/1202e2-0b54-42ee-933a-2b1dc992eca2/1/p-cKBbmGOc165X_rGkCzZ-ycQ60.mft
File: p-cKBbmGOc165X_rGkCzZ-ycQ60.mft (raw, json)
Hash identifier: +YKTM1scJLwhx8ObWvb25e7zgYkjtlw0L9sC6tyJfB8=
Subject key identifier: E0:95:5A:CE:D5:E8:28:DE:8A:90:F0:3B:4C:24:1D:9A:60:2A:72:7E
Authority key identifier: A7:E7:0A:05:B9:86:39:CD:7A:E5:7F:EB:1A:40:B3:67:EC:9C:43:AD
Certificate issuer: /CN=a7e70a05b98639cd7ae57feb1a40b367ec9c43ad
Certificate serial: 0198402B76728AEE0A8A185EA36EE483307A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p-cKBbmGOc165X_rGkCzZ-ycQ60.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/1202e2-0b54-42ee-933a-2b1dc992eca2/1/p-cKBbmGOc165X_rGkCzZ-ycQ60.mft
Manifest number: 0A40
Signing time: Fri 25 Jul 2025 06:00:46 +0000
Manifest this update: Fri 25 Jul 2025 06:00:46 +0000
Manifest next update: Sat 26 Jul 2025 06:00:46 +0000
Files and hashes: 1: fbHkL-NwzOez_gqY2PAh-dqPCjE.roa (hash: Q4MsLL7SIokgLjLmWwHX1Dj+xIpsxjtJ9IG++E0gJUc=)
2: p-cKBbmGOc165X_rGkCzZ-ycQ60.crl (hash: KBmSPg6TQ0z6++/7/2D9W+QvnXRmYZuJQhUfO+N6Pkw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/1202e2-0b54-42ee-933a-2b1dc992eca2/1/p-cKBbmGOc165X_rGkCzZ-ycQ60.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/1202e2-0b54-42ee-933a-2b1dc992eca2/1/p-cKBbmGOc165X_rGkCzZ-ycQ60.mft
rsync://rpki.ripe.net/repository/DEFAULT/p-cKBbmGOc165X_rGkCzZ-ycQ60.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Jul 2025 06:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:40:2b:76:72:8a:ee:0a:8a:18:5e:a3:6e:e4:83:30:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7e70a05b98639cd7ae57feb1a40b367ec9c43ad
Validity
Not Before: Jul 25 06:00:46 2025 GMT
Not After : Jul 26 06:00:46 2025 GMT
Subject: CN=e0955aced5e828de8a90f03b4c241d9a602a727e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:85:e3:dc:b9:6e:99:ab:03:ad:ea:1f:76:2e:
2d:e9:c4:8f:85:81:1a:84:c5:17:f0:c5:41:e6:26:
82:7b:8d:44:d5:f2:aa:8e:97:84:a5:3f:5d:b9:a3:
90:95:0b:ea:b6:11:12:d7:d8:fb:09:1b:19:4d:28:
ef:f6:02:80:6a:19:14:7b:1c:43:ac:e1:ff:de:49:
89:31:97:df:ff:cb:e5:41:8c:18:2f:95:30:17:16:
7a:29:db:49:d9:4b:34:54:a7:32:c3:3a:95:a1:1b:
9e:1d:19:b4:7e:8c:2b:03:ea:2b:2b:1d:64:7b:d9:
0b:cf:5c:89:e1:1f:f3:47:49:25:65:ea:1b:8c:58:
2b:c2:04:be:2b:a5:4a:00:ec:6b:1c:10:06:33:b6:
1d:5e:dc:9b:fc:40:ed:12:ff:1a:d7:aa:9a:43:60:
31:2c:68:c1:bb:8b:a5:8d:2e:3b:06:94:82:a5:3b:
f3:3f:4c:2b:fb:b6:aa:b5:43:af:58:39:01:2d:56:
9e:7e:1d:c0:c9:16:4b:08:00:30:93:62:99:fe:84:
62:4f:dc:13:e2:53:19:af:ad:84:59:76:45:5d:ab:
d4:92:a2:32:89:74:07:ce:22:c3:2a:d3:11:e2:22:
ae:29:07:5b:a9:a6:6d:be:38:b3:fe:4e:a9:6e:c2:
df:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:95:5A:CE:D5:E8:28:DE:8A:90:F0:3B:4C:24:1D:9A:60:2A:72:7E
X509v3 Authority Key Identifier:
keyid:A7:E7:0A:05:B9:86:39:CD:7A:E5:7F:EB:1A:40:B3:67:EC:9C:43:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p-cKBbmGOc165X_rGkCzZ-ycQ60.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/1202e2-0b54-42ee-933a-2b1dc992eca2/1/p-cKBbmGOc165X_rGkCzZ-ycQ60.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/1202e2-0b54-42ee-933a-2b1dc992eca2/1/p-cKBbmGOc165X_rGkCzZ-ycQ60.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:03:d7:7c:f2:56:57:e2:5a:5d:e5:d0:a8:e8:1e:67:05:2c:
07:80:97:33:11:c5:71:76:df:79:e5:33:48:c8:bf:4e:2c:97:
4d:11:40:a3:93:eb:c7:e7:9e:0c:e5:d4:95:13:7d:d3:84:f0:
c5:61:66:ed:d8:26:64:83:49:2a:be:66:48:cb:94:c1:38:98:
02:2a:65:64:95:47:19:74:3a:fa:80:eb:ee:a4:df:82:a3:40:
1e:5a:14:bf:4f:31:b8:1b:45:05:85:46:8f:4a:f8:1b:67:bc:
46:99:3d:3e:1d:77:ef:68:f2:6e:78:49:59:f0:e7:d8:4c:c6:
ad:4a:65:50:e2:b9:07:1b:8b:f4:fb:16:1b:cf:72:45:04:11:
a7:45:e9:6c:c5:4a:9a:6e:e6:99:c6:5c:dc:6a:8f:41:28:9d:
59:dd:8c:d6:01:a2:a4:ca:14:40:b6:0d:8a:7e:fd:7b:d9:1c:
52:f8:3c:f7:0e:a9:d0:19:d1:1e:df:f5:8a:3d:f6:b4:98:34:
29:d1:e3:ff:dd:33:71:da:02:51:39:7a:2a:dd:e6:c1:22:12:
bb:67:39:98:04:c1:88:f5:60:eb:b5:d3:6e:a7:ee:72:65:b1:
cd:6d:0a:7d:3b:e9:c1:72:7a:74:5b:5a:83:33:d3:2b:26:25:
c5:17:b1:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 12:41:49 2025 by rpki-client