Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/b9a1a0-6ada-4dde-965b-46ff7ce2c140/1/cHdwf2aXiCaodeuNLrMzvthWlmc.mft
File: cHdwf2aXiCaodeuNLrMzvthWlmc.mft (raw, json)
Hash identifier: xQPYfPLdIurR/J2L8Xnsn2CbOeTSWq1t6Nad9XOO9rs=
Subject key identifier: 21:C7:05:3B:40:20:AF:38:36:25:FE:D9:AE:0A:97:25:E1:93:DB:58
Authority key identifier: 70:77:70:7F:66:97:88:26:A8:75:EB:8D:2E:B3:33:BE:D8:56:96:67
Certificate issuer: /CN=7077707f66978826a875eb8d2eb333bed8569667
Certificate serial: 01984B550CE410798DB10BD52955E804852F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cHdwf2aXiCaodeuNLrMzvthWlmc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/b9a1a0-6ada-4dde-965b-46ff7ce2c140/1/cHdwf2aXiCaodeuNLrMzvthWlmc.mft
Manifest number: 07E8
Signing time: Sun 27 Jul 2025 10:02:01 +0000
Manifest this update: Sun 27 Jul 2025 10:02:01 +0000
Manifest next update: Mon 28 Jul 2025 10:02:01 +0000
Files and hashes: 1: ZBqGiL5Lwt5_4rzPo7SO0cTda9c.roa (hash: KELG75sz8Tw2WawKyeiPVA4v+ezxNcK7f4e9XzFuUUw=)
2: cHdwf2aXiCaodeuNLrMzvthWlmc.crl (hash: T0iu+EpdUtvBO2vA4bymfpicfMGxksVsGp7S72Ncpkc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/b9a1a0-6ada-4dde-965b-46ff7ce2c140/1/cHdwf2aXiCaodeuNLrMzvthWlmc.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/b9a1a0-6ada-4dde-965b-46ff7ce2c140/1/cHdwf2aXiCaodeuNLrMzvthWlmc.mft
rsync://rpki.ripe.net/repository/DEFAULT/cHdwf2aXiCaodeuNLrMzvthWlmc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4b:55:0c:e4:10:79:8d:b1:0b:d5:29:55:e8:04:85:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7077707f66978826a875eb8d2eb333bed8569667
Validity
Not Before: Jul 27 10:02:01 2025 GMT
Not After : Jul 28 10:02:01 2025 GMT
Subject: CN=21c7053b4020af383625fed9ae0a9725e193db58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:aa:4c:8d:16:83:1e:54:70:f7:70:9f:f8:e0:
3a:65:bb:5d:b3:e7:ff:f5:d6:0e:ae:17:30:c9:d3:
94:30:f0:cb:d7:ad:e2:6b:45:8a:19:b0:2d:e7:d8:
cd:13:48:ef:e1:70:ef:f4:65:79:b7:b1:78:2e:70:
41:02:85:1c:b3:06:6a:69:42:51:aa:18:72:21:7a:
f6:5f:f7:fe:8c:ec:41:6e:f9:f8:26:84:dc:ac:84:
95:c4:28:0d:4c:94:3e:e1:3a:29:7e:cc:61:27:e6:
ea:46:ae:51:d7:a5:6d:c5:e3:ac:e2:34:39:7a:ed:
17:72:a2:6b:8f:b9:43:57:02:38:0c:92:52:9e:94:
e9:56:b9:1d:be:1f:c9:7e:0b:cb:c7:98:3e:62:eb:
5d:28:74:64:28:e2:63:79:ef:ce:38:3a:85:56:e9:
ad:d7:06:c8:2e:b6:c3:17:88:bb:74:fb:1c:60:90:
7c:08:36:36:24:8a:69:09:31:9c:c4:b7:5f:58:06:
28:cb:e2:90:ba:da:8e:35:a4:9c:d2:27:97:b5:04:
56:dd:bd:dd:95:6c:1c:81:b0:7a:a5:a5:b9:8b:3a:
34:ae:db:e8:21:bf:12:40:b9:8b:84:ed:d2:c5:23:
c5:27:7d:ca:cd:53:f9:32:09:ef:f6:ed:39:d0:10:
5b:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:C7:05:3B:40:20:AF:38:36:25:FE:D9:AE:0A:97:25:E1:93:DB:58
X509v3 Authority Key Identifier:
keyid:70:77:70:7F:66:97:88:26:A8:75:EB:8D:2E:B3:33:BE:D8:56:96:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cHdwf2aXiCaodeuNLrMzvthWlmc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/b9a1a0-6ada-4dde-965b-46ff7ce2c140/1/cHdwf2aXiCaodeuNLrMzvthWlmc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/b9a1a0-6ada-4dde-965b-46ff7ce2c140/1/cHdwf2aXiCaodeuNLrMzvthWlmc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:f7:3a:72:37:73:bf:d9:99:2a:4a:c8:0d:30:96:0f:f9:4f:
28:80:6c:30:18:45:7e:03:cd:7a:a1:c4:1f:aa:2b:d1:ff:e4:
bb:28:4b:1a:3b:e2:1f:4a:ca:7d:11:82:06:8e:d6:9f:5f:60:
e9:8e:ae:ac:b6:a0:65:4c:ab:9c:65:f2:5c:17:5b:b1:5a:50:
0d:e8:3c:d6:c9:1f:03:0b:47:36:dd:9e:e7:7b:16:b5:82:52:
4a:52:e0:2b:9c:f1:f4:ee:79:91:1d:3e:dd:41:70:9a:a5:a1:
47:7d:0e:37:9e:89:86:82:6c:f6:71:a2:5a:04:a5:bb:2f:f2:
d8:d2:97:7d:b6:b9:a2:16:f3:39:7e:d5:01:4e:fe:24:88:68:
b0:9d:d0:ac:80:55:27:e0:87:66:d0:61:91:e7:7a:d6:74:54:
b9:be:8c:ad:69:d7:a2:ce:b6:df:3b:90:e6:5b:24:04:74:b8:
3a:97:36:e5:ed:e3:d9:5f:38:45:4c:59:0a:e2:89:ac:fd:36:
30:7c:1d:20:d1:da:6a:cb:08:a2:c9:14:92:2f:73:63:37:07:
71:23:e8:c9:ea:13:3b:a7:73:e7:de:1a:ec:7f:f3:b4:d5:1f:
57:8e:f3:3e:2c:15:3a:48:16:e3:bc:c3:8d:47:8e:eb:89:bf:
29:18:6c:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 13:03:44 2025 by rpki-client