Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/8b43cb-f209-4f22-930d-758ca4d48bc2/1/cRGFk3fq1vRPlA640xw_O-zFOwU.mft
File: cRGFk3fq1vRPlA640xw_O-zFOwU.mft (raw, json)
Hash identifier: WYqUp7BqcXkkajgKCdQI6O1sWcLlCfF+NEgpJEleQpo=
Subject key identifier: 24:10:BD:6E:7E:DC:19:05:E0:99:48:02:9B:CF:EE:2A:64:B6:E3:B1
Authority key identifier: 71:11:85:93:77:EA:D6:F4:4F:94:0E:B8:D3:1C:3F:3B:EC:C5:3B:05
Certificate issuer: /CN=7111859377ead6f44f940eb8d31c3f3becc53b05
Certificate serial: 01984852FD45E23AB603CFB7553FBA9A1294
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cRGFk3fq1vRPlA640xw_O-zFOwU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/8b43cb-f209-4f22-930d-758ca4d48bc2/1/cRGFk3fq1vRPlA640xw_O-zFOwU.mft
Manifest number: 1154
Signing time: Sat 26 Jul 2025 20:00:54 +0000
Manifest this update: Sat 26 Jul 2025 20:00:54 +0000
Manifest next update: Sun 27 Jul 2025 20:00:54 +0000
Files and hashes: 1: cRGFk3fq1vRPlA640xw_O-zFOwU.crl (hash: +L39ufeBaktdSSff17mRWt21Wv0/a+hTeelS3tqgamM=)
2: omD35PZpVyqvkF4OdnFj08JxMFc.roa (hash: PjR4MlrZz5S4peGDKTF1jke6AAq8KkU6oiu9IFgbnOY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/8b43cb-f209-4f22-930d-758ca4d48bc2/1/cRGFk3fq1vRPlA640xw_O-zFOwU.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/8b43cb-f209-4f22-930d-758ca4d48bc2/1/cRGFk3fq1vRPlA640xw_O-zFOwU.mft
rsync://rpki.ripe.net/repository/DEFAULT/cRGFk3fq1vRPlA640xw_O-zFOwU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 15:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:52:fd:45:e2:3a:b6:03:cf:b7:55:3f:ba:9a:12:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7111859377ead6f44f940eb8d31c3f3becc53b05
Validity
Not Before: Jul 26 20:00:54 2025 GMT
Not After : Jul 27 20:00:54 2025 GMT
Subject: CN=2410bd6e7edc1905e09948029bcfee2a64b6e3b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:88:b6:01:77:f8:55:b3:97:72:d3:3b:56:95:
a1:68:8d:07:45:b6:f7:82:f5:af:f7:9c:4d:8d:77:
ab:63:64:6e:7a:3f:0d:fe:2f:2a:2c:31:85:ef:78:
03:40:26:12:54:16:55:24:40:44:66:e6:63:fa:f0:
37:e1:9a:a8:65:6c:bd:37:9c:79:e3:ba:62:8b:79:
c5:3c:90:5d:b2:c5:de:ff:fd:e9:ac:95:69:6b:e7:
47:65:cc:e3:93:ce:83:e2:1b:16:04:f4:90:2e:a9:
cb:ee:46:1c:e9:66:d3:35:fb:ff:e4:37:be:d7:89:
23:39:42:14:15:84:9e:29:cc:dd:da:91:a6:97:e7:
b9:dc:92:30:b2:d2:6c:b8:9e:67:c5:38:f5:4d:29:
eb:89:c5:37:cf:5a:f6:3a:3b:59:62:2d:8c:00:b7:
67:34:4a:5f:2e:63:f9:df:62:c3:88:a3:4b:e6:71:
5c:20:4d:9d:9c:37:8d:89:12:1f:e3:f7:d2:6f:b6:
44:e2:c2:8f:df:74:62:9b:f9:c9:cb:83:18:ad:17:
5a:dc:51:64:c9:4d:6c:8f:cf:7a:61:3a:28:05:f0:
a0:0e:03:e1:0f:03:ff:03:b4:8b:62:fc:07:70:53:
48:c2:6e:31:86:f2:75:e4:d4:56:25:ec:9c:cc:b1:
53:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:10:BD:6E:7E:DC:19:05:E0:99:48:02:9B:CF:EE:2A:64:B6:E3:B1
X509v3 Authority Key Identifier:
keyid:71:11:85:93:77:EA:D6:F4:4F:94:0E:B8:D3:1C:3F:3B:EC:C5:3B:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cRGFk3fq1vRPlA640xw_O-zFOwU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/8b43cb-f209-4f22-930d-758ca4d48bc2/1/cRGFk3fq1vRPlA640xw_O-zFOwU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/8b43cb-f209-4f22-930d-758ca4d48bc2/1/cRGFk3fq1vRPlA640xw_O-zFOwU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:21:65:c8:a5:3b:4f:0c:81:4b:ba:01:b4:8e:bc:1d:fc:43:
91:e0:c8:5d:4f:80:36:f7:97:cb:24:74:27:8d:f2:cb:1a:1f:
54:21:8e:cf:19:9f:72:d8:03:70:b2:b1:39:02:32:51:23:0c:
97:eb:40:4a:25:47:65:fe:02:6f:48:2a:31:60:8e:58:f9:65:
0c:bb:cf:81:fa:c3:fc:71:77:ed:0a:9f:e1:09:eb:f1:44:1d:
4c:31:4b:a9:44:38:5e:3f:ac:9c:39:12:a9:b3:f0:50:01:5b:
3a:db:40:b4:ed:e1:7e:e1:18:14:12:fe:d8:27:10:91:28:72:
0f:dd:29:93:e5:82:e2:79:86:71:09:94:2c:a7:88:67:e4:33:
f1:e1:6b:6e:40:61:7a:bc:06:13:cd:d9:e2:ff:24:e5:43:ae:
48:35:db:5f:d9:f3:ed:28:30:bf:1b:47:05:22:82:69:7c:c5:
c8:89:7a:78:89:92:73:ca:2e:32:d5:9b:93:48:74:0c:15:82:
6a:c4:2e:98:6d:24:9a:6f:b2:71:dc:ec:78:70:f1:cb:49:91:
24:bf:36:2e:82:d6:55:f8:46:cc:f3:4f:53:1c:1b:77:90:ab:
20:3d:56:aa:3b:60:a9:98:cb:a4:b4:fa:84:32:0b:b4:99:78:
d2:b3:ea:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 00:19:24 2025 by rpki-client