Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/883fd6-c6b6-4ae1-a187-f3069ee590da/1/cLTaDxATrNthwveibRTE8N6CIuw.mft
File: cLTaDxATrNthwveibRTE8N6CIuw.mft (raw, json)
Hash identifier: nRT3LJEgyq6gGN+i4/WEcmJK2S041RjZys3A+0kVtbY=
Subject key identifier: A8:40:75:50:5D:9B:2E:65:39:65:5F:82:B0:29:12:CD:2C:E8:B0:94
Authority key identifier: 70:B4:DA:0F:10:13:AC:DB:61:C2:F7:A2:6D:14:C4:F0:DE:82:22:EC
Certificate issuer: /CN=70b4da0f1013acdb61c2f7a26d14c4f0de8222ec
Certificate serial: 01984965310AAC0D5D51DCA98C0448EF71E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cLTaDxATrNthwveibRTE8N6CIuw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/883fd6-c6b6-4ae1-a187-f3069ee590da/1/cLTaDxATrNthwveibRTE8N6CIuw.mft
Manifest number: 1602
Signing time: Sun 27 Jul 2025 01:00:25 +0000
Manifest this update: Sun 27 Jul 2025 01:00:25 +0000
Manifest next update: Mon 28 Jul 2025 01:00:25 +0000
Files and hashes: 1: F94-zZFEc6qh0jKnwFf7o1uXF7I.roa (hash: w7SpfiHOXF1SxdkUidpIylH68mEs/yNWYY/p77Td/KQ=)
2: cLTaDxATrNthwveibRTE8N6CIuw.crl (hash: y46mGDkhy1xt0oQaRhEEL5DNqA+RoodPYamSVTUsmx8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/883fd6-c6b6-4ae1-a187-f3069ee590da/1/cLTaDxATrNthwveibRTE8N6CIuw.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/883fd6-c6b6-4ae1-a187-f3069ee590da/1/cLTaDxATrNthwveibRTE8N6CIuw.mft
rsync://rpki.ripe.net/repository/DEFAULT/cLTaDxATrNthwveibRTE8N6CIuw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:65:31:0a:ac:0d:5d:51:dc:a9:8c:04:48:ef:71:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70b4da0f1013acdb61c2f7a26d14c4f0de8222ec
Validity
Not Before: Jul 27 01:00:25 2025 GMT
Not After : Jul 28 01:00:25 2025 GMT
Subject: CN=a84075505d9b2e6539655f82b02912cd2ce8b094
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:a9:8f:7e:7e:23:df:bb:49:d3:2e:84:09:78:
a9:7d:64:95:96:bc:bd:5b:80:05:62:c8:22:83:28:
6d:3a:d9:b5:fd:fd:d9:3f:4b:a0:8e:1e:74:a5:2e:
8a:8c:79:86:9d:97:93:c3:7d:08:b6:36:a7:b7:6c:
6d:b7:37:b5:86:f5:b3:c8:60:96:d3:59:11:50:b4:
9a:e4:d2:50:5b:c7:21:3f:69:17:ab:2b:25:50:3a:
d3:ef:eb:8f:21:22:2d:81:98:71:ee:42:1e:21:5a:
69:f8:d8:66:a4:04:73:3a:42:63:85:13:5f:1e:95:
3a:6d:c5:ff:fc:be:97:ab:6e:6f:91:c4:2c:c0:38:
af:de:63:08:e9:c0:b8:30:c3:a4:87:b4:7f:e9:45:
41:ab:cd:a3:e7:71:26:91:33:83:c1:2b:2f:5e:be:
ca:4c:94:51:d2:c8:c5:91:cc:82:0a:61:72:42:fb:
3e:2b:68:05:ce:91:50:5f:19:1c:a5:d7:8d:f1:0d:
2d:e0:1d:ff:35:ab:33:db:db:16:24:66:cb:17:ad:
72:14:2f:67:1b:03:d3:26:a1:e4:42:e7:d3:ce:e0:
e1:26:35:2d:5d:45:b2:5b:00:e5:72:02:69:7b:f3:
73:7d:8f:1e:13:b4:6f:42:72:95:51:72:08:6d:06:
24:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:40:75:50:5D:9B:2E:65:39:65:5F:82:B0:29:12:CD:2C:E8:B0:94
X509v3 Authority Key Identifier:
keyid:70:B4:DA:0F:10:13:AC:DB:61:C2:F7:A2:6D:14:C4:F0:DE:82:22:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cLTaDxATrNthwveibRTE8N6CIuw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/883fd6-c6b6-4ae1-a187-f3069ee590da/1/cLTaDxATrNthwveibRTE8N6CIuw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/883fd6-c6b6-4ae1-a187-f3069ee590da/1/cLTaDxATrNthwveibRTE8N6CIuw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:e8:f0:37:0a:0a:b7:34:1e:fa:a8:68:f0:52:90:a9:97:6f:
a0:17:bc:1e:bd:e9:28:41:72:4d:6d:1a:20:74:64:d2:18:6f:
a8:ff:89:d4:af:7c:5c:44:ae:01:33:0b:47:a0:c1:16:2f:19:
4f:5d:30:20:09:7f:ab:2b:45:29:c6:85:f0:50:3b:61:16:40:
97:55:dd:2d:1e:27:1f:a1:18:78:8f:1b:37:22:79:82:68:b7:
05:e4:db:37:b7:75:4d:28:6c:96:c0:d5:2b:d8:a5:af:c2:60:
69:88:e9:01:82:a1:42:ab:ef:20:df:a7:1b:bb:78:e6:70:5f:
b8:57:43:a9:38:c8:ba:1f:81:cb:e5:bd:2b:06:a1:23:56:60:
11:6e:8a:b9:73:66:26:65:a4:dc:93:5c:98:51:94:f6:66:2d:
8d:47:3c:62:a5:9b:6e:dc:cd:5c:c7:dd:66:50:f5:8b:9d:28:
60:e8:fd:7a:24:76:b0:26:64:af:99:8e:e2:6d:a1:a0:18:52:
3a:79:72:2a:4c:b8:9c:cb:90:8c:c9:36:51:e9:d8:0a:06:97:
83:39:8a:26:85:ea:01:02:3c:c2:48:f3:9e:cd:bc:76:05:57:
b1:97:fa:ed:1e:41:2e:85:e2:8f:f3:11:43:cb:16:e8:93:07:
1e:0f:4e:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 05:21:46 2025 by rpki-client