Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/766e12-9a09-4553-8f62-2294cdda6a40/1/cVOwKU08jbFTBqsQnVBtp0rnCXk.mft
File: cVOwKU08jbFTBqsQnVBtp0rnCXk.mft (raw, json)
Hash identifier: sZWN+PJ59SJsFZoeDmx/5x5tHzE0AQDsaJg6Es841P0=
Subject key identifier: 7F:EA:2F:9E:13:7C:4B:F0:92:13:72:D9:A7:54:43:13:36:BB:72:C2
Authority key identifier: 71:53:B0:29:4D:3C:8D:B1:53:06:AB:10:9D:50:6D:A7:4A:E7:09:79
Certificate issuer: /CN=7153b0294d3c8db15306ab109d506da74ae70979
Certificate serial: 019849D2EA6283E4375E1B9E3D1310542664
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cVOwKU08jbFTBqsQnVBtp0rnCXk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/766e12-9a09-4553-8f62-2294cdda6a40/1/cVOwKU08jbFTBqsQnVBtp0rnCXk.mft
Manifest number: 1601
Signing time: Sun 27 Jul 2025 03:00:15 +0000
Manifest this update: Sun 27 Jul 2025 03:00:15 +0000
Manifest next update: Mon 28 Jul 2025 03:00:15 +0000
Files and hashes: 1: 5IXXShSjVO7kS96xQpiSIMcLu-s.roa (hash: E67HmQuHQzZNq0YpnE5MfAwnl2TJ0rHXn4iIRjzaf4g=)
2: cVOwKU08jbFTBqsQnVBtp0rnCXk.crl (hash: wqVzN9eFPcL+OEbDA94EOgsV8usB1c4W36y/XMP2BNs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/766e12-9a09-4553-8f62-2294cdda6a40/1/cVOwKU08jbFTBqsQnVBtp0rnCXk.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/766e12-9a09-4553-8f62-2294cdda6a40/1/cVOwKU08jbFTBqsQnVBtp0rnCXk.mft
rsync://rpki.ripe.net/repository/DEFAULT/cVOwKU08jbFTBqsQnVBtp0rnCXk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 03:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:d2:ea:62:83:e4:37:5e:1b:9e:3d:13:10:54:26:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7153b0294d3c8db15306ab109d506da74ae70979
Validity
Not Before: Jul 27 03:00:15 2025 GMT
Not After : Jul 28 03:00:15 2025 GMT
Subject: CN=7fea2f9e137c4bf0921372d9a754431336bb72c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:04:67:d2:82:f6:c2:26:e2:48:39:4f:57:a2:
2b:a6:47:79:4d:d0:4b:50:98:0f:a7:3e:fc:3e:94:
f4:3e:52:17:3e:66:cd:9b:6b:33:29:d5:8f:8d:16:
fe:68:93:98:9c:f8:eb:5b:e3:9f:af:05:93:13:4a:
39:3f:0f:62:03:9c:dd:7b:aa:4d:58:cf:45:d8:70:
1c:0e:a0:32:c8:2b:e4:4f:84:a1:25:bc:26:0c:51:
96:0e:73:88:55:c2:0f:33:64:1f:ca:11:f0:d1:d5:
ae:4e:f9:0b:36:53:bb:00:89:09:29:0a:6a:77:bc:
fd:d3:1d:3b:ae:23:f0:38:b6:c7:70:09:c6:2b:e4:
35:67:03:ee:db:57:f8:ee:14:8a:59:9a:8f:1c:a6:
2c:2c:e6:ec:a5:c0:42:7b:f0:32:8b:a3:a6:1e:98:
2e:d9:ac:46:0c:98:f2:4c:10:69:32:f2:e3:72:42:
bb:67:04:2a:81:66:6a:bf:70:11:e9:06:e0:a9:dd:
7a:3b:2a:40:64:a9:d1:8e:17:07:9b:8f:7e:20:0a:
27:61:24:6f:a4:4c:81:d4:82:f2:d3:e1:90:de:c1:
bf:06:3b:20:c2:11:b0:c7:b6:09:36:4e:87:2e:e5:
41:b3:e6:74:48:7d:43:77:ee:5e:85:9f:be:fa:bf:
22:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:EA:2F:9E:13:7C:4B:F0:92:13:72:D9:A7:54:43:13:36:BB:72:C2
X509v3 Authority Key Identifier:
keyid:71:53:B0:29:4D:3C:8D:B1:53:06:AB:10:9D:50:6D:A7:4A:E7:09:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cVOwKU08jbFTBqsQnVBtp0rnCXk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/766e12-9a09-4553-8f62-2294cdda6a40/1/cVOwKU08jbFTBqsQnVBtp0rnCXk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/766e12-9a09-4553-8f62-2294cdda6a40/1/cVOwKU08jbFTBqsQnVBtp0rnCXk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:e1:90:34:07:94:c7:bd:3f:77:94:60:97:08:e2:b5:0c:9b:
ab:c8:ec:17:c5:88:7f:8a:ef:ce:f4:56:12:f5:42:c8:b2:90:
82:21:6c:54:40:c0:af:4b:87:4f:e1:83:63:9f:c2:74:90:a0:
8d:1e:43:98:45:59:f3:35:ef:14:16:ec:f1:73:03:e8:d1:96:
28:51:ee:bb:6d:56:f9:de:ab:b1:9a:4f:2c:b7:a5:a0:39:67:
43:c4:b8:c0:a5:9e:05:9f:5b:32:29:ae:4e:5c:ac:7c:c7:1d:
19:b6:76:56:d4:2a:71:7d:8d:cc:b8:7a:dd:78:7a:a7:0c:45:
e8:b1:0c:21:e4:df:c9:2d:63:78:e5:68:ef:3e:0c:0f:d9:47:
f2:ad:41:0a:26:01:87:50:45:c2:6e:a9:68:b1:6b:2f:b3:18:
06:13:7d:16:d6:32:46:5b:d6:75:a7:34:b1:bf:49:3f:27:2d:
dc:2a:a4:f9:49:35:05:46:8d:4a:30:7e:25:86:0b:67:99:a7:
6c:1e:51:f4:bc:9e:c7:6e:21:87:f9:d5:3a:5c:6c:c5:0f:84:
7f:70:88:50:3f:1a:b5:6f:2f:43:34:62:75:15:48:e1:cb:6b:
ba:f7:4d:46:65:bd:9e:67:b1:df:30:ce:c0:1b:40:a1:1b:f6:
7d:c5:c9:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 10:26:19 2025 by rpki-client