Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/e485e1-a65f-43d4-b572-d3326c59bcd2/1/_CgqeUs_erTNb-tsX9az0lavxGE.mft
File: _CgqeUs_erTNb-tsX9az0lavxGE.mft (raw, json)
Hash identifier: 7hIGZdQKu1hwX6QICyoiwtQpcSFcIbDEZCeNxeANbgs=
Subject key identifier: EB:51:EB:13:C4:84:3C:81:D7:12:35:0C:29:78:20:C2:C3:19:9C:8C
Authority key identifier: FC:28:2A:79:4B:3F:7A:B4:CD:6F:EB:6C:5F:D6:B3:D2:56:AF:C4:61
Certificate issuer: /CN=fc282a794b3f7ab4cd6feb6c5fd6b3d256afc461
Certificate serial: 01984AE5E25D7792953E8F2250B18A95C93A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_CgqeUs_erTNb-tsX9az0lavxGE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/e485e1-a65f-43d4-b572-d3326c59bcd2/1/_CgqeUs_erTNb-tsX9az0lavxGE.mft
Manifest number: 1609
Signing time: Sun 27 Jul 2025 08:00:36 +0000
Manifest this update: Sun 27 Jul 2025 08:00:36 +0000
Manifest next update: Mon 28 Jul 2025 08:00:36 +0000
Files and hashes: 1: 1I8OPnDk25KUaKP9KE9gSOqXVLI.roa (hash: 0yrI/7HXUwwqDrYf/yalYH7CLKdk023DF4KCFCOKOCc=)
2: _CgqeUs_erTNb-tsX9az0lavxGE.crl (hash: 6zxJdp8Rbj9sGbv0/Gx6fasdSjN/A8uPz2qsmrSouUg=)
3: hwW7rl4dydXPDWLAf8zsSWJhDvg.roa (hash: OrollrL3LXZ0GIs6mD9MqV/PdNZ2gHOaykUK12v4KKs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/e485e1-a65f-43d4-b572-d3326c59bcd2/1/_CgqeUs_erTNb-tsX9az0lavxGE.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/e485e1-a65f-43d4-b572-d3326c59bcd2/1/_CgqeUs_erTNb-tsX9az0lavxGE.mft
rsync://rpki.ripe.net/repository/DEFAULT/_CgqeUs_erTNb-tsX9az0lavxGE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:e5:e2:5d:77:92:95:3e:8f:22:50:b1:8a:95:c9:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc282a794b3f7ab4cd6feb6c5fd6b3d256afc461
Validity
Not Before: Jul 27 08:00:36 2025 GMT
Not After : Jul 28 08:00:36 2025 GMT
Subject: CN=eb51eb13c4843c81d712350c297820c2c3199c8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:74:4f:cc:b8:5a:30:12:5d:98:fb:34:e5:91:
52:ed:ae:8e:0e:19:1f:0c:e1:4e:c1:a6:ce:49:e9:
93:f9:67:0a:ff:1b:98:e3:92:87:9f:93:a0:21:eb:
d5:11:79:8a:a3:f7:0e:fb:e7:ed:a0:45:78:91:a5:
cf:aa:52:be:b8:b3:ef:6e:bb:bd:70:52:7d:e3:a3:
48:8a:11:05:80:b0:3d:7a:a2:86:ec:a6:73:f5:9b:
4e:79:58:1b:5e:21:6c:33:21:5b:b7:63:25:01:3f:
7c:99:a0:8f:61:0b:a7:dd:06:e3:21:8f:b7:e5:f0:
09:cb:39:24:18:4f:1d:20:9d:71:64:6a:1c:db:2a:
c5:55:cb:cb:3e:b9:26:03:c7:ac:24:91:16:cb:65:
3a:46:60:78:dc:5e:18:60:81:ee:ca:33:d6:f0:7d:
6d:bf:6d:13:66:bb:f8:67:4e:4b:04:3f:a5:3b:13:
a1:7c:83:58:04:b6:62:2c:54:cb:07:17:80:6a:d6:
1c:0a:cc:52:8e:4f:ac:dc:cf:3a:6c:c4:a9:e5:16:
13:fc:29:ed:aa:17:ef:e4:da:a5:2e:85:03:d4:39:
5e:9d:bd:9a:a9:ae:af:75:d6:61:1f:70:f7:a1:0f:
b6:56:8c:be:8d:26:39:60:52:1a:d2:2f:61:45:19:
aa:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:51:EB:13:C4:84:3C:81:D7:12:35:0C:29:78:20:C2:C3:19:9C:8C
X509v3 Authority Key Identifier:
keyid:FC:28:2A:79:4B:3F:7A:B4:CD:6F:EB:6C:5F:D6:B3:D2:56:AF:C4:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_CgqeUs_erTNb-tsX9az0lavxGE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/e485e1-a65f-43d4-b572-d3326c59bcd2/1/_CgqeUs_erTNb-tsX9az0lavxGE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/e485e1-a65f-43d4-b572-d3326c59bcd2/1/_CgqeUs_erTNb-tsX9az0lavxGE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:ad:04:d6:81:36:b9:11:61:35:69:f2:8e:53:40:f7:25:34:
4b:2c:be:6b:1c:f4:57:51:43:72:ce:f4:4d:7d:2c:ae:0d:06:
86:42:57:26:15:e5:f6:3d:6e:ad:55:a3:71:10:92:4b:f2:f7:
6f:5e:ba:db:c6:a1:9a:be:ae:bd:2a:8f:f7:f0:a5:c1:2d:7c:
82:05:d4:02:9c:11:73:ca:c8:f3:a8:93:b9:a0:39:b0:00:34:
a0:9a:47:fa:ab:f6:93:6c:27:b8:c6:d4:42:9d:10:0a:55:e2:
28:3e:91:09:35:65:53:1f:33:23:25:06:8f:f2:9f:32:7e:76:
26:3f:4c:11:d9:07:a3:66:6b:af:b3:9a:76:23:1b:a4:58:fa:
b6:02:ea:b1:ba:8f:b9:b0:a8:e6:33:0d:85:71:a1:0e:f0:49:
9d:e1:d8:2a:46:0b:d6:6e:d6:fc:2f:e4:56:d6:45:14:a1:ae:
d4:9e:6d:3e:d9:3f:c0:56:5c:fb:75:cf:d0:86:bb:cb:ec:37:
5e:ed:1a:5d:37:8f:86:91:4c:c2:33:3d:cb:44:1d:54:4a:8c:
13:21:ad:ca:22:b1:4a:33:05:50:4b:f4:0d:cf:f5:47:3b:2c:
54:f9:0d:c4:3a:7f:97:8e:80:bc:23:2b:e0:63:68:7f:85:e0:
56:be:8d:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 10:23:10 2025 by rpki-client