Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/477c86-c7d6-4e37-bff6-a0072bac9f48/1/cms1Dp9PElni-cYJsi5l-9GGIGs.mft
File: cms1Dp9PElni-cYJsi5l-9GGIGs.mft (raw, json)
Hash identifier: T5WJfuwAuoMyKpYmkvMmpvYRjvCMF14gB+m7XGlwbjc=
Subject key identifier: 82:AF:7F:6A:88:C2:03:B9:6B:B6:53:D0:25:F7:15:A8:0A:44:4E:0C
Authority key identifier: 72:6B:35:0E:9F:4F:12:59:E2:F9:C6:09:B2:2E:65:FB:D1:86:20:6B
Certificate issuer: /CN=726b350e9f4f1259e2f9c609b22e65fbd186206b
Certificate serial: 019849D2F6E07852D40FC9ADB25685B5BBBD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cms1Dp9PElni-cYJsi5l-9GGIGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/477c86-c7d6-4e37-bff6-a0072bac9f48/1/cms1Dp9PElni-cYJsi5l-9GGIGs.mft
Manifest number: 08FA
Signing time: Sun 27 Jul 2025 03:00:19 +0000
Manifest this update: Sun 27 Jul 2025 03:00:19 +0000
Manifest next update: Mon 28 Jul 2025 03:00:19 +0000
Files and hashes: 1: CgBNGq2vvpW1xEBq_J8TTjYOWu0.roa (hash: CfZUCA05oFbMMXS/ui8XIHr2JUyCob7FGarrcgeEvE0=)
2: _DE8jBpnVZ36FaQjKKqWbHiWbvo.roa (hash: nj3mkL3pbPWWGWLOVhi9o9i9dXTzVhaJgzjUgFTiKuo=)
3: cms1Dp9PElni-cYJsi5l-9GGIGs.crl (hash: hqksDdbEDMRQwAqBDRs6VUCvRcbKstLR69kbNIu6VP8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/477c86-c7d6-4e37-bff6-a0072bac9f48/1/cms1Dp9PElni-cYJsi5l-9GGIGs.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/477c86-c7d6-4e37-bff6-a0072bac9f48/1/cms1Dp9PElni-cYJsi5l-9GGIGs.mft
rsync://rpki.ripe.net/repository/DEFAULT/cms1Dp9PElni-cYJsi5l-9GGIGs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:d2:f6:e0:78:52:d4:0f:c9:ad:b2:56:85:b5:bb:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=726b350e9f4f1259e2f9c609b22e65fbd186206b
Validity
Not Before: Jul 27 03:00:19 2025 GMT
Not After : Jul 28 03:00:19 2025 GMT
Subject: CN=82af7f6a88c203b96bb653d025f715a80a444e0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:7e:87:68:13:1b:61:28:44:92:81:a4:50:eb:
51:bc:cf:88:a1:a7:a1:66:b7:97:7b:a0:e2:3b:2c:
83:b9:32:9a:3b:01:fa:d3:30:07:74:15:84:f3:79:
70:aa:84:33:45:f9:fd:88:fc:ef:10:ee:ae:96:17:
db:fb:86:c9:65:ca:84:9b:35:ea:94:c7:5b:b4:71:
7e:aa:bc:df:cf:e4:79:3c:1e:bd:75:f4:6a:c5:3c:
60:e3:01:c5:5f:94:42:3d:73:7a:06:ba:b9:f6:b2:
c6:de:a9:80:06:e2:e7:5e:3b:8e:c0:d9:75:51:45:
b6:75:c9:70:55:4e:0d:37:a5:44:00:23:0c:9a:0f:
bd:c3:72:ef:b5:68:f3:3b:65:52:98:6d:01:8d:40:
0b:82:eb:56:10:ef:94:16:3f:cd:43:a9:ec:07:48:
2e:45:02:03:95:b2:9b:d6:2c:78:95:05:e8:e6:c4:
17:3d:68:05:76:7f:94:93:f6:bd:e8:a2:61:76:49:
e2:aa:71:f4:00:7f:c5:2d:1b:e7:e2:c3:d6:dd:99:
1f:85:69:89:1e:5b:a9:0a:10:5e:a2:35:5c:e6:56:
20:6f:a6:1c:9d:4d:ed:7a:31:df:8a:76:4b:cc:6f:
4d:0e:c5:30:3e:0c:d1:4d:b4:0e:30:57:4f:7e:fd:
d7:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:AF:7F:6A:88:C2:03:B9:6B:B6:53:D0:25:F7:15:A8:0A:44:4E:0C
X509v3 Authority Key Identifier:
keyid:72:6B:35:0E:9F:4F:12:59:E2:F9:C6:09:B2:2E:65:FB:D1:86:20:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cms1Dp9PElni-cYJsi5l-9GGIGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/477c86-c7d6-4e37-bff6-a0072bac9f48/1/cms1Dp9PElni-cYJsi5l-9GGIGs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/477c86-c7d6-4e37-bff6-a0072bac9f48/1/cms1Dp9PElni-cYJsi5l-9GGIGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:4e:99:0f:3a:9e:9f:71:7e:bc:e0:9d:59:1c:be:98:43:09:
90:fd:ce:d8:fc:79:0c:6e:e9:35:a7:30:1d:83:55:bc:ea:08:
17:5f:f9:d3:8d:a2:54:b0:e8:93:49:e0:01:b4:5e:d2:a9:e6:
d2:b2:f1:c6:3c:db:37:e9:f0:bc:32:e5:bd:fe:aa:32:36:9b:
a0:74:53:f9:09:96:e2:bc:7d:95:21:b8:96:8f:49:02:6d:61:
75:3a:62:99:17:c0:ee:36:06:30:83:0d:ee:c6:37:88:25:df:
e4:79:21:5e:e0:56:58:02:7b:45:9e:2f:16:76:49:33:a2:c8:
66:0a:46:cb:51:07:81:29:0e:23:38:72:62:93:19:3f:6a:3f:
18:f2:e9:90:3d:da:28:fc:87:b9:6b:4f:08:80:47:17:3d:c8:
78:0d:06:81:61:38:35:95:c9:06:08:c7:91:bd:de:40:85:1e:
c8:de:cf:89:47:f2:33:8a:10:3c:5c:8f:21:b1:25:9b:26:4b:
4a:e8:b3:30:01:28:a0:91:30:4a:6b:cb:cb:5c:0a:90:58:da:
a6:e4:6b:f5:e2:e2:0f:19:d1:81:6b:03:b2:80:18:ab:8e:dc:
7b:b2:d1:0b:d6:26:a1:c1:d7:40:85:20:74:e0:f5:e1:b4:47:
d3:c2:d6:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 05:13:21 2025 by rpki-client