Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/c09c64-0baf-4b07-8d29-473851709c58/1/curcen7OR31fTXdyQ7YPK7u3VgM.mft
File: curcen7OR31fTXdyQ7YPK7u3VgM.mft (raw, json)
Hash identifier: iLOXSwJ1d01TZFcs4UbR9ruADUSMVJf2laDaklHoEiQ=
Subject key identifier: 25:96:A1:8B:01:23:C5:1A:D1:78:96:FC:8C:1A:CC:55:20:4A:01:F6
Authority key identifier: 72:EA:DC:7A:7E:CE:47:7D:5F:4D:77:72:43:B6:0F:2B:BB:B7:56:03
Certificate issuer: /CN=72eadc7a7ece477d5f4d777243b60f2bbbb75603
Certificate serial: 019849D2C06F6FB4456E93F409B143B12F7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/curcen7OR31fTXdyQ7YPK7u3VgM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/c09c64-0baf-4b07-8d29-473851709c58/1/curcen7OR31fTXdyQ7YPK7u3VgM.mft
Manifest number: 086B
Signing time: Sun 27 Jul 2025 03:00:05 +0000
Manifest this update: Sun 27 Jul 2025 03:00:05 +0000
Manifest next update: Mon 28 Jul 2025 03:00:05 +0000
Files and hashes: 1: curcen7OR31fTXdyQ7YPK7u3VgM.crl (hash: qtZd6z1JjWQvJp9gYendTgDCb9XdL31BrxvkBDIwTMs=)
2: mFFNgz0LoOIjeTT2_r0-wBPyYQM.roa (hash: 8oKdatfS4ydJsathXE08ETrnAsR4fEoI1qYHumOim1w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/c09c64-0baf-4b07-8d29-473851709c58/1/curcen7OR31fTXdyQ7YPK7u3VgM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/c09c64-0baf-4b07-8d29-473851709c58/1/curcen7OR31fTXdyQ7YPK7u3VgM.mft
rsync://rpki.ripe.net/repository/DEFAULT/curcen7OR31fTXdyQ7YPK7u3VgM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 03:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:d2:c0:6f:6f:b4:45:6e:93:f4:09:b1:43:b1:2f:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72eadc7a7ece477d5f4d777243b60f2bbbb75603
Validity
Not Before: Jul 27 03:00:05 2025 GMT
Not After : Jul 28 03:00:05 2025 GMT
Subject: CN=2596a18b0123c51ad17896fc8c1acc55204a01f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:f1:10:7e:db:b7:27:db:92:7b:c2:61:3f:d1:
2f:29:d9:73:35:d3:b6:74:86:40:ee:69:16:b7:e1:
c8:f2:4e:3c:d4:ba:be:49:c9:c5:ef:2a:d3:ce:96:
d2:62:fa:92:e8:85:20:a3:b3:66:63:e4:85:6c:0f:
4d:4a:39:7b:6f:17:18:3b:cf:f3:b7:f0:1d:76:5f:
cc:dd:34:e2:f8:cb:f4:22:79:d8:e7:74:ab:ee:a4:
e8:4f:0e:82:f5:1c:a9:34:fe:17:8b:3f:4d:c0:95:
b8:8e:8b:55:07:df:83:97:52:8d:88:fa:79:d1:0e:
11:fa:ec:2f:49:38:c1:19:87:dc:65:ea:34:ee:48:
87:09:aa:88:f5:b2:ff:94:80:17:d5:42:6f:59:52:
5d:f5:d5:0e:f6:e3:04:a9:24:12:71:1f:ff:34:6b:
34:ab:68:a9:e0:0c:27:e5:8f:d0:4f:86:06:82:e2:
49:8f:f1:a2:b2:6c:6a:9c:21:9b:0e:42:fe:f4:b9:
90:e1:81:62:23:f0:3e:70:42:de:88:d8:da:9b:14:
49:a8:4b:60:56:b2:18:53:38:83:8f:76:72:95:62:
92:ab:ef:6a:70:51:9f:e2:95:68:89:56:e4:8a:47:
08:77:e6:2e:af:ce:ab:e2:f8:33:b3:0b:a7:f9:b0:
c0:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:96:A1:8B:01:23:C5:1A:D1:78:96:FC:8C:1A:CC:55:20:4A:01:F6
X509v3 Authority Key Identifier:
keyid:72:EA:DC:7A:7E:CE:47:7D:5F:4D:77:72:43:B6:0F:2B:BB:B7:56:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/curcen7OR31fTXdyQ7YPK7u3VgM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/c09c64-0baf-4b07-8d29-473851709c58/1/curcen7OR31fTXdyQ7YPK7u3VgM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/c09c64-0baf-4b07-8d29-473851709c58/1/curcen7OR31fTXdyQ7YPK7u3VgM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:d0:27:ac:ce:31:ac:9c:97:2b:20:17:68:f1:c1:62:a9:59:
f6:8d:68:34:4d:cf:6f:2f:c9:85:05:73:43:8b:9d:d6:40:48:
74:7e:88:be:30:73:c9:2c:e1:cb:e5:f4:e3:1b:64:93:69:c4:
fe:e1:d3:05:76:9c:9f:35:b2:69:9e:4e:ca:83:62:46:b6:37:
2d:9f:5d:d7:8b:c5:4b:43:21:14:36:b6:76:96:b4:9d:51:db:
6e:a3:1d:79:ae:83:69:b8:7a:09:ce:66:74:d4:e1:f6:2d:3c:
df:bc:c1:66:1e:88:24:12:5c:32:74:c9:f1:75:f7:61:44:5b:
53:02:f7:f2:f6:9a:aa:d5:70:a4:4f:23:da:0a:48:6f:e5:c4:
dd:36:21:39:c8:b1:2f:8a:9f:9a:3a:59:cb:a4:e0:8b:9a:82:
f9:76:8e:cb:66:1d:02:f2:c4:12:3f:1d:da:88:c8:1c:67:a0:
a8:4b:e5:8d:01:4e:d6:37:18:03:a5:bb:b3:58:3d:5c:bc:da:
8f:76:85:60:f9:fa:26:73:44:2a:43:3f:ba:eb:2f:ca:47:e9:
b3:83:a3:d8:ed:35:c0:f8:10:b3:b1:95:30:11:64:9c:c1:5a:
a9:71:0d:96:db:e5:1d:a8:42:4f:70:78:4a:16:ea:ed:71:d5:
67:a4:fb:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 11:58:18 2025 by rpki-client