Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/2bbd21-d147-4c78-8d2e-a209b90f27d9/1/ctdCYWpoBB9_D80HkvOOQQOnncI.mft
File: ctdCYWpoBB9_D80HkvOOQQOnncI.mft (raw, json)
Hash identifier: cGfZPiGHU6oPKJkWkhKTQHX5Ptr4FSFYgqYiBNaGpPI=
Subject key identifier: BB:48:AC:35:87:1D:A9:D7:6E:B9:BB:FE:86:16:6F:2B:9A:97:D4:F4
Authority key identifier: 72:D7:42:61:6A:68:04:1F:7F:0F:CD:07:92:F3:8E:41:03:A7:9D:C2
Certificate issuer: /CN=72d742616a68041f7f0fcd0792f38e4103a79dc2
Certificate serial: 019834958BF6D8860FCCDD6F75F71A7F52E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ctdCYWpoBB9_D80HkvOOQQOnncI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/2bbd21-d147-4c78-8d2e-a209b90f27d9/1/ctdCYWpoBB9_D80HkvOOQQOnncI.mft
Manifest number: 02C9
Signing time: Wed 23 Jul 2025 00:01:12 +0000
Manifest this update: Wed 23 Jul 2025 00:01:12 +0000
Manifest next update: Thu 24 Jul 2025 00:01:12 +0000
Files and hashes: 1: ctdCYWpoBB9_D80HkvOOQQOnncI.crl (hash: MXBlE/hyIL6D0Yau6CvVVs/EmA6Kt6L4LtfQmg0i75M=)
2: zto4NeQB1_I3QORAJXQ-oNO5db0.roa (hash: 4X/MAtxcgqfp8hiwe6Iai+qfAWiiXuU0LC7+GPHFtZ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/2bbd21-d147-4c78-8d2e-a209b90f27d9/1/ctdCYWpoBB9_D80HkvOOQQOnncI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/2bbd21-d147-4c78-8d2e-a209b90f27d9/1/ctdCYWpoBB9_D80HkvOOQQOnncI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ctdCYWpoBB9_D80HkvOOQQOnncI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Jul 2025 22:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:34:95:8b:f6:d8:86:0f:cc:dd:6f:75:f7:1a:7f:52:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72d742616a68041f7f0fcd0792f38e4103a79dc2
Validity
Not Before: Jul 23 00:01:12 2025 GMT
Not After : Jul 24 00:01:12 2025 GMT
Subject: CN=bb48ac35871da9d76eb9bbfe86166f2b9a97d4f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:a9:a5:09:93:6c:a6:30:3c:63:56:e7:f4:0a:
26:44:48:9a:e7:2b:0a:28:d4:7b:fd:eb:db:5d:78:
2f:dc:2c:76:d9:57:8e:61:b8:f6:93:8a:1d:ee:db:
d5:f5:3e:77:84:c6:82:43:07:e9:2b:a3:93:95:35:
96:97:23:a7:66:e6:51:ce:49:9d:db:e3:d2:bf:43:
b8:ab:06:34:b2:62:27:ea:a5:06:c7:01:45:a3:9c:
17:a9:59:a5:ac:28:7e:b6:0c:49:ad:57:28:e9:ff:
56:32:67:19:fd:c5:e1:19:f9:b9:c5:33:a8:b5:10:
a8:e0:a4:d3:15:18:d8:3d:d8:a2:f6:40:90:ac:51:
4c:ce:36:0e:d1:ea:b1:d6:ef:85:d2:a2:82:1f:8f:
8e:04:cb:96:f0:2f:5e:eb:76:dd:f6:58:14:9a:f6:
5d:be:aa:1d:26:db:75:b0:b9:83:b9:7c:8c:f8:e7:
de:66:d6:e4:6d:65:ba:2c:6a:8b:de:ba:9c:2c:ef:
4d:22:f4:c2:21:65:2a:30:12:ac:c0:3f:49:f3:d9:
17:c8:09:89:c1:08:16:4a:53:f5:2c:92:65:ae:bf:
ee:eb:c9:bf:bf:ce:b9:fe:79:f0:6c:86:ca:0a:cd:
73:cc:77:38:e0:83:2c:92:d2:e3:24:bd:3a:51:7b:
e8:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:48:AC:35:87:1D:A9:D7:6E:B9:BB:FE:86:16:6F:2B:9A:97:D4:F4
X509v3 Authority Key Identifier:
keyid:72:D7:42:61:6A:68:04:1F:7F:0F:CD:07:92:F3:8E:41:03:A7:9D:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ctdCYWpoBB9_D80HkvOOQQOnncI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/2bbd21-d147-4c78-8d2e-a209b90f27d9/1/ctdCYWpoBB9_D80HkvOOQQOnncI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/2bbd21-d147-4c78-8d2e-a209b90f27d9/1/ctdCYWpoBB9_D80HkvOOQQOnncI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:c5:a9:4b:7d:eb:b6:e3:31:51:e8:4d:5c:a8:45:3b:ff:5c:
27:c9:0e:bd:5e:71:b0:62:91:4f:53:42:83:df:28:e7:c5:d8:
7f:5b:0e:de:fb:1c:32:4f:64:14:ec:62:25:da:ba:57:09:ab:
f8:bf:01:a7:ad:a4:be:eb:41:eb:54:cc:03:cb:8d:d7:56:91:
70:db:56:4e:40:0b:a2:a0:eb:87:ad:fa:6e:99:3d:83:ba:01:
93:c5:15:b0:ec:73:77:d8:32:30:8b:11:46:04:93:53:50:87:
c6:6b:3d:fb:a9:76:19:4c:05:34:9b:f1:d8:0c:79:40:92:96:
f2:8c:af:a6:45:f6:67:7e:99:0a:5a:d0:03:32:6f:de:9e:49:
ca:35:83:7f:e8:49:ef:87:11:17:a8:41:09:c7:68:b8:58:ab:
8a:ea:f9:53:05:a8:49:38:87:2a:b2:0a:fb:14:ea:40:13:a4:
8f:da:83:72:1c:62:5e:67:2a:0a:c3:bc:1a:d8:63:22:e6:ba:
84:e0:9f:7d:a3:19:d1:ad:5a:51:0a:f2:9e:3e:44:98:b3:f9:
83:f8:f0:40:94:9f:8f:4b:27:b1:b2:8d:92:57:78:a9:cb:73:
f8:87:ef:4d:51:20:79:3b:8e:f7:5d:c5:f4:00:9b:eb:da:71:
29:75:18:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 06:03:06 2025 by rpki-client