Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/6ce0c0-937c-4a43-9e84-18e5c537d51d/1/cN5wfWwBAGsqymh-qrKctHNrdmg.mft
File: cN5wfWwBAGsqymh-qrKctHNrdmg.mft (raw, json)
Hash identifier: GhR8h0lf2qt4USayS+qY6XU7tCnilF4tWSaKrT9EWKs=
Subject key identifier: 9E:13:0F:ED:84:F5:88:D9:62:B7:96:FD:51:94:25:17:19:A5:F8:71
Authority key identifier: 70:DE:70:7D:6C:01:00:6B:2A:CA:68:7E:AA:B2:9C:B4:73:6B:76:68
Certificate issuer: /CN=70de707d6c01006b2aca687eaab29cb4736b7668
Certificate serial: 0198499C289A94AB6B941D43FB415C56B09A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cN5wfWwBAGsqymh-qrKctHNrdmg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/6ce0c0-937c-4a43-9e84-18e5c537d51d/1/cN5wfWwBAGsqymh-qrKctHNrdmg.mft
Manifest number: 1602
Signing time: Sun 27 Jul 2025 02:00:27 +0000
Manifest this update: Sun 27 Jul 2025 02:00:27 +0000
Manifest next update: Mon 28 Jul 2025 02:00:27 +0000
Files and hashes: 1: Jo8Y435n3Pd_3zXxNtedYgjItDk.roa (hash: s59FKEp30KDhXVkiZy91uysMmddt+n0/jacR5LsK5DU=)
2: cN5wfWwBAGsqymh-qrKctHNrdmg.crl (hash: BZNADxoYLZzjQSujkKbLz3K3+Ku9t/XjPxgZ1twRNqc=)
3: fvocZOR5mjQw63-hlnTV0AYJ-n0.roa (hash: EDtt1bNtketuScVPOmt7fRRKZDdXsTL+CjwO3mYdaKU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/6ce0c0-937c-4a43-9e84-18e5c537d51d/1/cN5wfWwBAGsqymh-qrKctHNrdmg.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/6ce0c0-937c-4a43-9e84-18e5c537d51d/1/cN5wfWwBAGsqymh-qrKctHNrdmg.mft
rsync://rpki.ripe.net/repository/DEFAULT/cN5wfWwBAGsqymh-qrKctHNrdmg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 02:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:9c:28:9a:94:ab:6b:94:1d:43:fb:41:5c:56:b0:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70de707d6c01006b2aca687eaab29cb4736b7668
Validity
Not Before: Jul 27 02:00:27 2025 GMT
Not After : Jul 28 02:00:27 2025 GMT
Subject: CN=9e130fed84f588d962b796fd5194251719a5f871
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:f2:3b:f6:ae:3e:f2:b3:1d:c0:f5:06:ed:a2:
63:4f:8c:21:ef:65:2c:a4:15:e1:59:f5:56:9a:d6:
00:ab:a4:d3:6f:ca:59:2e:97:1c:12:e3:a2:dd:9f:
c4:fd:11:b9:e2:ef:a6:f7:e2:32:3b:27:49:47:8d:
31:f8:66:cd:6c:15:07:e7:b2:51:76:eb:6a:6d:2d:
0b:8e:db:a6:9c:50:8e:93:25:e8:5a:ac:18:3f:6b:
80:78:6d:45:69:be:3f:a7:b4:95:33:2f:61:6f:1f:
a6:70:05:8f:52:fd:c4:bf:0d:61:cd:28:c6:7f:7b:
87:b8:87:8c:30:8e:f1:7a:fc:d5:05:0e:df:1d:fe:
15:f8:13:19:ef:0f:88:94:33:c2:7c:c7:6e:45:32:
f5:fd:ad:55:ee:05:41:0c:f6:a6:41:93:63:1b:85:
e7:e0:60:68:88:76:f3:56:05:28:9c:bb:cf:1d:ad:
d4:25:39:52:4b:76:47:cd:25:cc:ef:fb:27:18:b2:
94:15:a7:b1:5f:42:3d:e9:00:48:54:ad:72:17:f5:
62:df:55:03:2e:0c:ba:da:9c:c2:68:98:55:ee:1d:
5e:b9:84:94:03:3b:34:6e:de:e4:cc:ce:a6:37:b8:
15:c3:23:14:e8:74:7f:1f:28:a2:6d:fb:af:12:f0:
b0:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:13:0F:ED:84:F5:88:D9:62:B7:96:FD:51:94:25:17:19:A5:F8:71
X509v3 Authority Key Identifier:
keyid:70:DE:70:7D:6C:01:00:6B:2A:CA:68:7E:AA:B2:9C:B4:73:6B:76:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cN5wfWwBAGsqymh-qrKctHNrdmg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/6ce0c0-937c-4a43-9e84-18e5c537d51d/1/cN5wfWwBAGsqymh-qrKctHNrdmg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/6ce0c0-937c-4a43-9e84-18e5c537d51d/1/cN5wfWwBAGsqymh-qrKctHNrdmg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:9f:e8:69:d9:ff:d5:aa:d3:d4:54:5e:ba:d1:ae:87:0d:a0:
ea:e3:f0:a1:07:cb:5a:cd:29:d3:a8:ba:a3:01:88:8c:78:61:
f5:0c:00:91:3b:54:e2:d0:f0:8a:ee:db:c4:48:6f:2b:2a:af:
e1:b2:2d:f3:08:11:ce:e8:34:5f:08:f3:b7:ad:e3:9f:69:3f:
9d:94:39:bf:43:42:98:de:2b:c5:3c:9a:42:02:c6:0c:06:2d:
23:87:89:21:9c:12:12:00:ea:d5:01:ce:7c:f7:aa:56:76:8c:
30:12:f4:b8:96:8a:e2:78:0e:2f:72:f4:59:8f:8f:72:77:d7:
7f:46:7d:14:7d:df:28:d3:52:fb:4c:99:e2:91:02:c5:cb:e1:
66:29:82:b5:ec:39:36:40:59:e0:33:ec:68:80:e5:fc:37:a0:
1c:a3:8f:50:a9:20:8c:4b:d1:23:30:7c:b7:24:b4:5b:fe:87:
5a:4b:df:d9:cc:80:a8:a1:ee:0a:3d:3c:d0:c1:b5:94:9f:bb:
e3:5c:72:23:83:80:b1:e6:e5:81:23:df:f1:6f:08:bf:8f:a8:
ff:61:5b:fa:9e:71:40:86:74:a3:65:69:d7:84:77:39:ae:ff:
a7:8c:fa:55:fc:4f:2f:e0:46:68:8d:6a:5c:7a:d9:b3:ea:f7:
e9:c2:02:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 10:35:21 2025 by rpki-client