Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/1e1a97-f276-4a51-b1b5-8c10909a485c/1/C52GCWpJEQz5v2cCQLUZMVtmq8s.mft
File: C52GCWpJEQz5v2cCQLUZMVtmq8s.mft (raw, json)
Hash identifier: 1iYqJwX6mdQbBt2l7rZs4PojG0EZbF7MQQpoWYlg+B8=
Subject key identifier: B7:55:51:2A:1C:6F:46:79:E5:91:F7:52:73:64:71:98:8F:A6:7D:39
Authority key identifier: 0B:9D:86:09:6A:49:11:0C:F9:BF:67:02:40:B5:19:31:5B:66:AB:CB
Certificate issuer: /CN=0b9d86096a49110cf9bf670240b519315b66abcb
Certificate serial: 01984AE5E4FF58E6C888A815F8811CF5F3A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C52GCWpJEQz5v2cCQLUZMVtmq8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/1e1a97-f276-4a51-b1b5-8c10909a485c/1/C52GCWpJEQz5v2cCQLUZMVtmq8s.mft
Manifest number: 1612
Signing time: Sun 27 Jul 2025 08:00:37 +0000
Manifest this update: Sun 27 Jul 2025 08:00:37 +0000
Manifest next update: Mon 28 Jul 2025 08:00:37 +0000
Files and hashes: 1: BnZ18m27JG41iStc-0bf7RUhMqc.roa (hash: 506prusX3qMZHHvl16GjdziNik+Zaiptx5uE6D2elAc=)
2: C52GCWpJEQz5v2cCQLUZMVtmq8s.crl (hash: QmdicLgudsxPW4nW51g88XQQUV0ZDQ43zUJvQrzeR5I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/1e1a97-f276-4a51-b1b5-8c10909a485c/1/C52GCWpJEQz5v2cCQLUZMVtmq8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/1e1a97-f276-4a51-b1b5-8c10909a485c/1/C52GCWpJEQz5v2cCQLUZMVtmq8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/C52GCWpJEQz5v2cCQLUZMVtmq8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:e5:e4:ff:58:e6:c8:88:a8:15:f8:81:1c:f5:f3:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b9d86096a49110cf9bf670240b519315b66abcb
Validity
Not Before: Jul 27 08:00:37 2025 GMT
Not After : Jul 28 08:00:37 2025 GMT
Subject: CN=b755512a1c6f4679e591f752736471988fa67d39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:ea:f7:6c:b8:4c:fe:04:26:da:5f:61:ec:f9:
7d:36:d9:bb:5e:e1:17:9b:f4:00:2e:0a:d9:60:f0:
53:6c:10:71:62:22:85:4b:5b:08:f4:06:c8:b9:0d:
a0:b0:41:d4:28:df:06:30:ae:f6:bf:49:da:f5:7e:
fd:cf:f2:b1:74:00:cd:51:9f:32:45:c7:f0:8d:36:
41:e1:79:91:5b:c4:2e:4f:80:a2:b7:83:3e:58:10:
90:93:a5:a6:1f:70:37:aa:f6:7c:8a:76:90:fd:0b:
dd:ab:e9:db:1e:62:8a:6a:b5:1e:34:f8:50:68:cf:
83:fc:a5:08:09:2c:ee:b1:fa:f9:86:64:e3:f9:b2:
3b:f5:22:b1:27:a5:59:55:ac:04:70:af:86:4d:4c:
98:61:d3:58:7f:a8:dd:ae:f6:a0:7a:c6:6b:45:da:
2c:e9:b9:69:22:e9:65:10:d1:04:c0:52:57:77:4f:
07:a5:d9:9a:3f:53:7a:4c:2f:f5:47:80:dc:2b:73:
0e:47:1f:a0:01:66:5c:47:4d:7d:2a:07:93:72:11:
d8:cc:45:a5:c5:15:b0:fb:5c:3f:3d:e7:72:92:7c:
e5:23:94:31:45:5a:99:29:ec:6f:1e:88:5d:61:bc:
7d:3d:95:83:29:24:38:21:2d:c4:3a:32:fd:10:d2:
1c:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:55:51:2A:1C:6F:46:79:E5:91:F7:52:73:64:71:98:8F:A6:7D:39
X509v3 Authority Key Identifier:
keyid:0B:9D:86:09:6A:49:11:0C:F9:BF:67:02:40:B5:19:31:5B:66:AB:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C52GCWpJEQz5v2cCQLUZMVtmq8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/1e1a97-f276-4a51-b1b5-8c10909a485c/1/C52GCWpJEQz5v2cCQLUZMVtmq8s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/1e1a97-f276-4a51-b1b5-8c10909a485c/1/C52GCWpJEQz5v2cCQLUZMVtmq8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:75:1f:b5:f7:42:a1:6f:e7:c1:3f:34:6f:97:33:7a:a2:19:
ca:66:db:66:61:a0:44:e2:35:3c:da:1f:fe:79:4e:d8:0a:3c:
49:ef:fc:f9:c0:2b:f1:27:92:1d:10:e1:93:01:50:fb:f7:73:
e4:9a:54:28:6f:13:1c:16:be:1f:aa:95:ce:b2:b4:41:97:2a:
be:ed:d1:2e:5d:d2:ec:f6:68:e0:b8:ba:a3:b4:83:a1:5f:b7:
58:22:d3:ae:24:72:68:85:ad:6f:f1:58:32:07:a0:82:04:b9:
6c:4f:00:8d:d0:b9:4e:7b:40:3b:a0:1a:7d:06:fe:f0:30:1b:
be:37:61:b0:26:42:24:96:1e:91:5c:12:75:5e:60:04:f6:2f:
ba:f6:e2:f4:3e:83:f3:6e:55:86:a0:b5:05:1a:a3:eb:55:36:
b2:d9:89:93:19:b0:8d:2e:ae:a8:9c:48:a1:1f:db:9f:85:08:
11:38:bb:04:64:d9:7b:55:65:56:d2:f0:a6:ad:95:65:f1:aa:
63:86:6b:73:da:79:0b:7a:58:70:3b:2d:cf:6a:c4:d0:0c:24:
be:73:b3:f3:c8:17:91:e8:d6:80:f8:43:a0:b6:0d:b9:97:d3:
33:61:78:fd:36:4d:88:3b:b9:64:53:e8:f3:51:f5:f0:94:cb:
2a:ff:4c:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 12:01:51 2025 by rpki-client