Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/e26d9c-d851-4a69-95f9-1504ea53e255/1/cK01PMGg0W1ejhSjdXWm89YFY_g.mft
File: cK01PMGg0W1ejhSjdXWm89YFY_g.mft (raw, json)
Hash identifier: MiKXten6pNkFczuM89gpACSbQWsXe/OkpR7dx/ITPs8=
Subject key identifier: 59:96:75:83:FE:F0:B2:84:AB:14:98:CB:25:3B:66:A9:6F:12:D4:B9
Authority key identifier: 70:AD:35:3C:C1:A0:D1:6D:5E:8E:14:A3:75:75:A6:F3:D6:05:63:F8
Certificate issuer: /CN=70ad353cc1a0d16d5e8e14a37575a6f3d60563f8
Certificate serial: 01992E90909B827E58A811A8B68B849F774D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cK01PMGg0W1ejhSjdXWm89YFY_g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/e26d9c-d851-4a69-95f9-1504ea53e255/1/cK01PMGg0W1ejhSjdXWm89YFY_g.mft
Manifest number: 1678
Signing time: Tue 09 Sep 2025 13:00:50 +0000
Manifest this update: Tue 09 Sep 2025 13:00:50 +0000
Manifest next update: Wed 10 Sep 2025 13:00:50 +0000
Files and hashes: 1: 5O-Lg4XDVCjsXNfMtLLsnISMRVo.roa (hash: VmXDM+lE33fYX4GAlA3VUKdsqtXyObkMk9hssfXkX7Q=)
2: CY-tvdBWBt7wOg3GB0icUZ8MPCA.roa (hash: Ejbz7aRM11I5vJNNpK3p8qUEl2ngpQB+ME89yYTVcX4=)
3: cK01PMGg0W1ejhSjdXWm89YFY_g.crl (hash: RZxR6KWgvYpud9bVi7VFctA91KPdbjH/QpzEudnK6IE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/e26d9c-d851-4a69-95f9-1504ea53e255/1/cK01PMGg0W1ejhSjdXWm89YFY_g.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/e26d9c-d851-4a69-95f9-1504ea53e255/1/cK01PMGg0W1ejhSjdXWm89YFY_g.mft
rsync://rpki.ripe.net/repository/DEFAULT/cK01PMGg0W1ejhSjdXWm89YFY_g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 10 Sep 2025 13:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:2e:90:90:9b:82:7e:58:a8:11:a8:b6:8b:84:9f:77:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70ad353cc1a0d16d5e8e14a37575a6f3d60563f8
Validity
Not Before: Sep 9 13:00:50 2025 GMT
Not After : Sep 10 13:00:50 2025 GMT
Subject: CN=59967583fef0b284ab1498cb253b66a96f12d4b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:56:0f:dd:22:ed:b1:45:b3:f7:74:78:9a:b6:
cf:f5:25:d5:70:cf:7a:50:9b:cd:62:19:00:e5:dc:
81:2c:e3:74:26:ee:d0:ca:c6:c8:74:b3:fd:17:3c:
f6:4f:a5:cc:99:b3:78:f2:23:e9:37:11:18:be:d7:
55:d0:98:a3:81:3c:8e:be:38:44:bd:1d:93:b3:d5:
63:08:00:86:da:35:c5:27:91:7e:5e:af:c6:a7:1a:
ea:8a:df:75:d1:6e:1f:b8:0c:6e:22:9d:ce:76:2e:
49:4c:cc:49:b6:b6:30:e9:0e:bd:09:0d:a7:f7:36:
7b:3f:8c:37:2a:ac:1e:2a:50:ec:96:82:86:17:a8:
bf:a2:0d:55:7f:cf:7c:4f:3b:d8:f6:91:1a:d7:2e:
bf:54:1e:0b:68:39:41:6c:14:41:ff:c7:fc:b2:84:
3e:f7:c3:bb:4e:30:89:ca:4d:06:27:20:74:91:c7:
e3:90:74:6d:b1:82:b8:27:61:42:53:52:4e:b1:d4:
c5:49:ef:7b:b0:d1:f0:d3:83:e3:ce:13:a1:ca:c1:
1e:0b:e6:59:36:b8:2b:31:b2:b3:37:3a:74:a2:ad:
13:a1:dc:3a:2c:a9:6b:f4:76:9d:29:74:3c:e5:23:
c5:31:54:93:b9:31:97:f9:95:5d:81:b8:6d:26:d3:
a5:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:96:75:83:FE:F0:B2:84:AB:14:98:CB:25:3B:66:A9:6F:12:D4:B9
X509v3 Authority Key Identifier:
keyid:70:AD:35:3C:C1:A0:D1:6D:5E:8E:14:A3:75:75:A6:F3:D6:05:63:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cK01PMGg0W1ejhSjdXWm89YFY_g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e26d9c-d851-4a69-95f9-1504ea53e255/1/cK01PMGg0W1ejhSjdXWm89YFY_g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e26d9c-d851-4a69-95f9-1504ea53e255/1/cK01PMGg0W1ejhSjdXWm89YFY_g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:fe:eb:50:ba:07:ce:6d:10:d5:b6:4a:9d:81:1a:ca:be:5b:
b1:99:a3:e5:74:da:a0:ad:4b:60:14:e6:e4:a6:b7:7c:23:55:
56:e8:21:d4:7d:1e:69:6d:b4:ad:28:19:df:0e:18:fd:c0:55:
e9:e3:91:8f:9a:ec:47:da:1e:13:c9:f3:7b:e1:b5:82:12:72:
3b:b8:e4:05:a0:eb:a9:ba:13:64:98:bc:a3:1f:f0:fa:ea:be:
32:58:e7:df:09:b4:d0:7b:d4:82:2a:17:cd:d4:2a:78:76:10:
c4:fd:0c:19:c1:79:bc:43:24:05:d5:55:af:a8:09:23:d8:55:
bb:9f:8d:7c:2f:37:fd:51:ec:84:59:1c:26:c3:ee:83:ee:1e:
c9:fe:99:3a:e0:a7:86:54:97:0d:30:7a:af:dd:3c:02:bf:18:
23:22:e4:f2:b6:3c:a0:1e:73:79:d4:c2:b8:da:ba:f2:5c:ae:
ea:a9:4e:3b:bb:22:b4:38:44:51:3d:13:fe:b2:d2:63:55:29:
a1:5d:c8:b6:1e:52:29:9a:fe:b1:b3:5a:a2:2d:0e:be:9d:ee:
5b:0d:50:0f:24:a9:0c:90:0f:ad:49:da:a1:2d:fb:47:57:66:
0e:83:d3:18:8a:7d:36:a4:6b:4e:8b:e7:39:8e:d6:0d:e3:46:
9a:8d:17:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 18:57:43 2025 by rpki-client