Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/cd5824-2dde-403e-b2c4-d225032d1858/1/cnFQa_q5Ese4FxuWuFoJmxQObNg.mft
File: cnFQa_q5Ese4FxuWuFoJmxQObNg.mft (raw, json)
Hash identifier: th+L9qa9YMGWr3D8E4VsUWtkTDDeO0yrtWo6RGj5lZc=
Subject key identifier: A4:ED:A3:C5:A3:3E:CD:1D:D6:E1:99:55:66:AC:CC:AB:E8:79:72:C4
Authority key identifier: 72:71:50:6B:FA:B9:12:C7:B8:17:1B:96:B8:5A:09:9B:14:0E:6C:D8
Certificate issuer: /CN=7271506bfab912c7b8171b96b85a099b140e6cd8
Certificate serial: 0198413DBB23C2C2F224C0CE982B6477606D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cnFQa_q5Ese4FxuWuFoJmxQObNg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/cd5824-2dde-403e-b2c4-d225032d1858/1/cnFQa_q5Ese4FxuWuFoJmxQObNg.mft
Manifest number: 0420
Signing time: Fri 25 Jul 2025 11:00:21 +0000
Manifest this update: Fri 25 Jul 2025 11:00:21 +0000
Manifest next update: Sat 26 Jul 2025 11:00:21 +0000
Files and hashes: 1: 1-t2gcnq_wGKj6Cw9yBTlPkMhqpA.roa (hash: biNGhGH5AKAvuvZqlWI6oNS4u1EhxLRFN8pAccYPS0U=)
2: cnFQa_q5Ese4FxuWuFoJmxQObNg.crl (hash: A2n6HYMmV0ZPOiEGlzLhhuESJx3Ncs3pCGIw8ZTzPGI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/cd5824-2dde-403e-b2c4-d225032d1858/1/cnFQa_q5Ese4FxuWuFoJmxQObNg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/cd5824-2dde-403e-b2c4-d225032d1858/1/cnFQa_q5Ese4FxuWuFoJmxQObNg.mft
rsync://rpki.ripe.net/repository/DEFAULT/cnFQa_q5Ese4FxuWuFoJmxQObNg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Jul 2025 08:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:41:3d:bb:23:c2:c2:f2:24:c0:ce:98:2b:64:77:60:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7271506bfab912c7b8171b96b85a099b140e6cd8
Validity
Not Before: Jul 25 11:00:21 2025 GMT
Not After : Jul 26 11:00:21 2025 GMT
Subject: CN=a4eda3c5a33ecd1dd6e1995566acccabe87972c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:b2:ac:9d:b4:47:25:be:81:22:29:02:de:be:
61:7f:5e:5e:0b:98:ac:48:b2:3c:bc:98:d4:3f:98:
95:5d:2b:d5:e1:95:c5:d4:4b:10:2a:04:7d:f9:47:
b0:61:2d:d4:f7:5f:b9:20:e8:1d:15:9d:2e:b3:d3:
b2:17:51:8b:04:80:d2:18:5f:42:7a:19:20:1e:09:
3c:7b:69:7a:82:a2:00:3f:9d:ce:d0:8e:0f:bf:f9:
b0:46:a9:c4:2d:43:d6:92:a5:fe:62:76:b6:8b:a9:
a3:e8:ca:d5:76:eb:ad:aa:0d:e1:8a:8c:3c:03:71:
ba:32:2b:a1:62:4b:27:65:bc:dc:e8:96:cf:ff:75:
e3:01:78:2a:24:c6:66:cc:12:ae:98:32:13:ec:2f:
48:57:94:98:35:ca:7c:31:25:86:2d:75:6f:f8:01:
77:cd:1b:f3:8b:23:32:7b:05:aa:5a:1f:59:d7:fc:
ac:7b:2e:71:5c:b7:06:49:7d:3c:3e:9b:1a:dc:de:
cd:47:19:0b:98:9d:3e:b4:fa:5c:6e:a5:d4:07:a2:
af:6d:9f:75:9a:87:e6:66:f1:e8:93:69:75:5d:f9:
23:c1:e0:16:d8:46:1a:a2:e4:fd:d1:9e:52:87:47:
cf:35:b7:e5:55:05:7a:0a:14:b2:20:4e:a7:3f:e5:
d6:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:ED:A3:C5:A3:3E:CD:1D:D6:E1:99:55:66:AC:CC:AB:E8:79:72:C4
X509v3 Authority Key Identifier:
keyid:72:71:50:6B:FA:B9:12:C7:B8:17:1B:96:B8:5A:09:9B:14:0E:6C:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cnFQa_q5Ese4FxuWuFoJmxQObNg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/cd5824-2dde-403e-b2c4-d225032d1858/1/cnFQa_q5Ese4FxuWuFoJmxQObNg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/cd5824-2dde-403e-b2c4-d225032d1858/1/cnFQa_q5Ese4FxuWuFoJmxQObNg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:95:9c:ea:2d:fa:e2:fb:0d:ee:43:e7:0d:7b:1c:a2:dd:ce:
fe:65:41:7a:b8:28:09:d6:ce:55:71:da:f1:29:ca:52:4c:31:
1c:ef:82:22:81:2d:f2:a8:78:b1:10:7b:cf:5b:11:e9:ef:2a:
21:7b:7d:e7:2d:f9:76:81:ff:a7:b8:86:48:9e:3f:de:02:b4:
58:45:9e:d6:c1:50:03:c4:a4:18:7c:2b:16:f7:0f:86:57:a3:
fb:e8:50:c8:57:70:95:6a:21:52:c3:5c:e5:ee:61:f1:a3:0c:
b8:79:f1:04:3e:13:5e:82:bb:6e:79:c9:fb:21:76:db:d5:25:
66:d5:06:8d:11:39:bd:64:7f:79:67:c6:90:49:b9:82:d9:e5:
b4:d0:05:a7:81:b5:fb:cf:83:50:b9:65:f4:18:7c:db:14:1f:
84:18:b4:ee:a6:74:55:ad:75:91:ab:98:b5:4e:58:43:1c:10:
da:da:9c:b9:01:c0:fc:da:4d:5d:6b:7a:d0:0b:cd:4e:f4:b5:
34:78:81:2d:7c:94:9e:67:82:ca:c7:db:c6:32:a1:04:cf:37:
7c:1e:2b:24:c3:b9:35:d7:03:be:31:ff:34:a2:19:2c:e5:7a:
63:29:29:be:4c:a1:e6:c0:2c:df:1a:05:44:05:e1:90:8a:b3:
8f:b4:a1:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 15:51:29 2025 by rpki-client