Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/cd231b-ff1e-4b93-a5b7-85d634c5bd50/1/0cFfCuwOM2Zi3p9jcVIc4l6N4Q8.mft
File: 0cFfCuwOM2Zi3p9jcVIc4l6N4Q8.mft (raw, json)
Hash identifier: oVSqDFzhGy9ExP3SJIblq+JWuoDqRnJ9UsOU5tVwLD4=
Subject key identifier: 70:B2:D5:23:14:94:7F:45:13:EF:62:C8:92:B2:02:07:AF:83:D0:B6
Authority key identifier: D1:C1:5F:0A:EC:0E:33:66:62:DE:9F:63:71:52:1C:E2:5E:8D:E1:0F
Certificate issuer: /CN=d1c15f0aec0e336662de9f6371521ce25e8de10f
Certificate serial: 019845F60DE6F66885308F4B5CFAFFF47E2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0cFfCuwOM2Zi3p9jcVIc4l6N4Q8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/cd231b-ff1e-4b93-a5b7-85d634c5bd50/1/0cFfCuwOM2Zi3p9jcVIc4l6N4Q8.mft
Manifest number: 1601
Signing time: Sat 26 Jul 2025 09:00:09 +0000
Manifest this update: Sat 26 Jul 2025 09:00:09 +0000
Manifest next update: Sun 27 Jul 2025 09:00:09 +0000
Files and hashes: 1: 0cFfCuwOM2Zi3p9jcVIc4l6N4Q8.crl (hash: 1gHzuUPArtCUvWv6gjm9TpHf+VEdu+ux5W7lZltpZ8Y=)
2: TWeGvhRSmnN9ba3aLN_PX9mER2s.roa (hash: 6BkkLF5ZMW9w4BTie7IiuTOLhKMimv1AW7aDs2REbaI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/cd231b-ff1e-4b93-a5b7-85d634c5bd50/1/0cFfCuwOM2Zi3p9jcVIc4l6N4Q8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/cd231b-ff1e-4b93-a5b7-85d634c5bd50/1/0cFfCuwOM2Zi3p9jcVIc4l6N4Q8.mft
rsync://rpki.ripe.net/repository/DEFAULT/0cFfCuwOM2Zi3p9jcVIc4l6N4Q8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 02:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:45:f6:0d:e6:f6:68:85:30:8f:4b:5c:fa:ff:f4:7e:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1c15f0aec0e336662de9f6371521ce25e8de10f
Validity
Not Before: Jul 26 09:00:09 2025 GMT
Not After : Jul 27 09:00:09 2025 GMT
Subject: CN=70b2d52314947f4513ef62c892b20207af83d0b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:e3:99:e0:cc:63:04:ed:b3:b2:62:14:99:96:
04:0a:4a:8b:f1:5f:cd:1a:29:43:f8:c7:fc:2a:e2:
5c:06:bf:cb:81:e4:d4:04:a4:ee:c7:35:d2:72:33:
58:5c:65:78:8a:4b:5a:9d:54:a4:a4:b8:60:7a:18:
ee:49:c4:d8:95:8b:9b:c8:f7:d8:37:10:00:f0:92:
d1:60:8f:dd:b9:9d:28:ed:aa:05:dc:d4:8b:02:50:
be:ed:98:04:e4:fa:1b:e3:3f:9f:da:2a:fd:16:ac:
32:db:20:47:5c:df:0c:68:2a:63:d4:cd:c3:5b:17:
1a:b9:0e:2a:2f:b3:ae:2c:d3:18:28:fd:d8:b8:7e:
7f:1f:1c:6a:4b:1e:6e:69:a0:67:5a:1c:ba:6c:58:
04:73:71:19:67:54:ff:91:6d:4e:fc:c6:5b:a5:95:
b2:9f:a5:5c:d4:b1:ce:68:69:dc:79:97:ab:d2:5f:
87:9b:08:05:ea:e0:48:da:60:d1:41:2c:7a:77:2c:
f5:ff:3c:cd:3c:b2:20:c7:70:ff:03:06:c0:1e:df:
2f:b1:97:af:3b:64:6d:0f:a0:59:07:b2:16:c8:d2:
50:3c:94:9f:1b:60:53:1d:f6:16:a0:e5:ed:6f:91:
59:9c:12:d4:61:f1:87:48:f7:98:1d:cf:c7:36:1a:
be:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:B2:D5:23:14:94:7F:45:13:EF:62:C8:92:B2:02:07:AF:83:D0:B6
X509v3 Authority Key Identifier:
keyid:D1:C1:5F:0A:EC:0E:33:66:62:DE:9F:63:71:52:1C:E2:5E:8D:E1:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0cFfCuwOM2Zi3p9jcVIc4l6N4Q8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/cd231b-ff1e-4b93-a5b7-85d634c5bd50/1/0cFfCuwOM2Zi3p9jcVIc4l6N4Q8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/cd231b-ff1e-4b93-a5b7-85d634c5bd50/1/0cFfCuwOM2Zi3p9jcVIc4l6N4Q8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:ac:45:67:a6:78:0d:5e:38:8a:ee:59:c6:81:ae:f7:2b:1f:
5f:d7:e8:28:8f:fb:d0:0d:6a:78:23:6c:38:60:6e:33:74:a6:
58:b1:36:53:d3:4a:90:ba:a3:f0:ef:b7:b0:19:cf:9c:71:f1:
00:e5:d9:8b:5d:b7:20:0c:e2:06:3a:66:64:13:bd:a9:14:a9:
4a:06:45:9c:f0:97:9e:b1:de:d2:29:1b:94:bf:e3:ca:a8:b6:
91:a0:66:5a:bd:cc:62:50:6e:42:dd:7d:ad:75:18:7f:f7:6d:
9e:d3:f6:97:fa:9f:fe:7f:9f:34:f2:fb:a1:cf:fc:d5:ba:87:
48:94:b6:8b:8d:31:92:cd:07:9a:d5:e0:f2:63:f6:78:69:cd:
67:50:78:54:cb:26:21:88:53:89:5c:f5:bf:62:3e:d3:ee:f0:
b2:c8:4a:65:ca:ac:69:32:72:13:0e:f8:a0:eb:93:e5:9d:2c:
8b:4a:45:85:76:f6:31:7a:e0:3f:22:1b:a7:a0:14:06:11:56:
6e:86:9f:1c:ae:e7:20:3a:28:ac:51:ea:51:82:8f:5b:ac:37:
30:b9:47:6e:6a:fb:2b:43:ee:5f:7f:f6:75:a9:5d:19:12:72:
92:91:83:84:78:bb:b7:a6:4a:2c:58:c7:86:86:ba:16:91:5b:
c7:42:ef:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 11:55:20 2025 by rpki-client