Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/23dc61-7e9d-40b3-91b6-46bd7d794fb6/1/cLGQ1viaQ0zOXLjA1LOKFmne-1k.mft
File: cLGQ1viaQ0zOXLjA1LOKFmne-1k.mft (raw, json)
Hash identifier: u0G0SZ9Ukc146jGPxjTqPyk/+uRB6X2aDdHYCANobmA=
Subject key identifier: 81:6A:89:CC:F2:A6:13:B0:4F:C4:9A:E1:8C:78:93:39:23:DB:4D:0D
Authority key identifier: 70:B1:90:D6:F8:9A:43:4C:CE:5C:B8:C0:D4:B3:8A:16:69:DE:FB:59
Certificate issuer: /CN=70b190d6f89a434cce5cb8c0d4b38a1669defb59
Certificate serial: 0199F9FD2876BE483046C96221572727BAA0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cLGQ1viaQ0zOXLjA1LOKFmne-1k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/23dc61-7e9d-40b3-91b6-46bd7d794fb6/1/cLGQ1viaQ0zOXLjA1LOKFmne-1k.mft
Manifest number: 132A
Signing time: Sun 19 Oct 2025 01:02:21 +0000
Manifest this update: Sun 19 Oct 2025 01:02:21 +0000
Manifest next update: Mon 20 Oct 2025 01:02:21 +0000
Files and hashes: 1: Pmv8pM8XqssRTrBIwYfMIrBu2co.roa (hash: v4JQsWfqUQF/aizb6/kkH5lzSW7tzkWIy4FJVzppxAI=)
2: RQjHthweEF9-820WAQ_PQzmnlEM.roa (hash: nBMPnR4O6VvmGYLIOUpQxt7mk0o9gXGO9uw/qf7b94A=)
3: Wwvcf_CdHRy8gkrOQZUQURuseiI.roa (hash: xkPyebxyoo94+1+QeBv80ewSsDDTwjJTGd/zo7NXJ5g=)
4: cLGQ1viaQ0zOXLjA1LOKFmne-1k.crl (hash: xQOv5SGr01Xmw0/cfEn/yGTWykJ/zn6ujcth+CEIrAs=)
5: lVsIvIm2siK76Iwlc1JEpwaFSPI.roa (hash: TUnieu9UOgS3hw0oaMGHMZ2FiYRQqrhlAMNc6BYERoE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/23dc61-7e9d-40b3-91b6-46bd7d794fb6/1/cLGQ1viaQ0zOXLjA1LOKFmne-1k.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/23dc61-7e9d-40b3-91b6-46bd7d794fb6/1/cLGQ1viaQ0zOXLjA1LOKFmne-1k.mft
rsync://rpki.ripe.net/repository/DEFAULT/cLGQ1viaQ0zOXLjA1LOKFmne-1k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 01:02:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:f9:fd:28:76:be:48:30:46:c9:62:21:57:27:27:ba:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70b190d6f89a434cce5cb8c0d4b38a1669defb59
Validity
Not Before: Oct 19 01:02:21 2025 GMT
Not After : Oct 20 01:02:21 2025 GMT
Subject: CN=816a89ccf2a613b04fc49ae18c78933923db4d0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:10:35:4b:23:cb:51:dd:86:3a:4c:c0:6c:b5:
2d:f0:26:ca:06:36:74:23:97:24:29:8d:b8:45:1d:
cb:a0:8a:a1:3e:f2:ce:cd:26:ca:c4:93:ef:2c:49:
a1:d3:c6:e9:b3:0f:4e:39:1d:4b:37:be:7a:c0:69:
c5:e5:6c:5f:a9:61:50:0f:43:43:64:ec:6c:da:8d:
9f:cc:dc:a3:2d:b7:a3:f9:31:de:b9:28:37:66:a0:
c6:56:10:80:e4:51:8b:24:55:b7:d7:9d:78:ac:6a:
81:f3:b1:fb:42:ab:05:8f:ee:82:5a:7e:c8:e8:b4:
e4:10:e3:d5:af:ba:98:40:27:1e:5e:65:30:b4:46:
74:9e:79:22:c3:38:64:5a:15:2b:e6:c4:7e:c7:21:
b0:d1:03:57:d3:9d:ab:f8:e6:c5:d6:c9:e9:7c:b3:
90:95:d2:a0:fb:bb:23:e8:0a:ae:e5:63:ec:8e:9d:
19:fb:f7:57:ae:04:68:e3:e1:0c:11:b8:fc:70:7d:
68:39:1d:58:d2:e7:37:a9:bc:96:ac:c0:4d:9e:df:
8e:83:9c:5b:b6:a8:46:c6:88:a5:7f:97:f1:1a:1d:
69:26:cc:59:1c:17:eb:13:79:53:2b:b2:e0:da:d0:
4f:d7:d0:6a:9a:e5:05:8d:e2:d0:fa:be:ac:95:23:
ac:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:6A:89:CC:F2:A6:13:B0:4F:C4:9A:E1:8C:78:93:39:23:DB:4D:0D
X509v3 Authority Key Identifier:
keyid:70:B1:90:D6:F8:9A:43:4C:CE:5C:B8:C0:D4:B3:8A:16:69:DE:FB:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cLGQ1viaQ0zOXLjA1LOKFmne-1k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/23dc61-7e9d-40b3-91b6-46bd7d794fb6/1/cLGQ1viaQ0zOXLjA1LOKFmne-1k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/23dc61-7e9d-40b3-91b6-46bd7d794fb6/1/cLGQ1viaQ0zOXLjA1LOKFmne-1k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:51:e1:7b:36:da:48:71:18:1b:e0:af:1c:44:2d:73:ab:a3:
3c:bb:19:9e:3c:7d:95:86:8a:f3:45:0c:a6:cb:48:c9:8e:13:
2f:c3:28:df:84:c8:cf:b3:1b:e3:8d:b3:57:a9:a8:33:e8:82:
8b:3a:8c:7e:18:9c:89:18:3d:94:19:58:96:aa:d8:e1:47:3b:
cf:be:ea:26:cc:c9:6b:5d:9b:8c:6b:e6:8a:20:5f:8a:d4:68:
b0:33:25:45:c2:5d:69:83:32:a8:b1:e0:1b:4f:47:a3:9f:31:
0f:eb:6c:84:0b:b0:14:c5:25:7b:5d:1c:93:ca:db:87:79:10:
20:63:92:4c:1e:b4:85:d7:7c:36:1e:66:94:b7:26:c2:71:a7:
cc:32:65:73:22:33:e5:83:a3:f5:0c:3a:56:30:86:37:14:82:
7e:76:ba:57:de:75:da:94:55:09:37:5a:31:d9:56:c6:9c:7c:
bf:1a:2e:b5:cf:af:ae:6d:57:b4:72:e5:a8:24:31:41:9d:aa:
cf:8d:cf:6d:9b:79:27:30:de:88:ee:ed:d1:c0:d7:6b:ce:c6:
15:a8:64:6d:81:63:f2:87:9e:5b:07:a0:b1:05:39:6e:e0:e6:
bb:b7:19:2e:bc:c6:48:6b:6a:e9:bb:d1:77:6f:22:e5:bb:c2:
1b:9a:68:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 11:03:50 2025 by rpki-client