Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/4e1bc8-f810-4182-a6e3-721bb4fc8c16/1/CWbgXRUnUN-q3l-veRutOR3G0tQ.mft
File: CWbgXRUnUN-q3l-veRutOR3G0tQ.mft (raw, json)
Hash identifier: Z+0seB55vYEjTlE6cZUsSYqECJ25Tbee8wzyf9pA1U8=
Subject key identifier: B2:DF:25:0F:4A:3A:AA:86:0C:09:59:00:13:2B:C4:99:6D:59:CB:6C
Authority key identifier: 09:66:E0:5D:15:27:50:DF:AA:DE:5F:AF:79:1B:AD:39:1D:C6:D2:D4
Certificate issuer: /CN=0966e05d152750dfaade5faf791bad391dc6d2d4
Certificate serial: 0198C9B854FB7BC21843594961DE89F7BBF9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CWbgXRUnUN-q3l-veRutOR3G0tQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/4e1bc8-f810-4182-a6e3-721bb4fc8c16/1/CWbgXRUnUN-q3l-veRutOR3G0tQ.mft
Manifest number: 0E85
Signing time: Wed 20 Aug 2025 23:02:37 +0000
Manifest this update: Wed 20 Aug 2025 23:02:37 +0000
Manifest next update: Thu 21 Aug 2025 23:02:37 +0000
Files and hashes: 1: 5bzk29WC2HSF9C0WZb2ngqPQ56o.roa (hash: fHgyyYyWXqEUztNgt56ZVo1FPxKD7CyfYBjgqkUt9TI=)
2: CWbgXRUnUN-q3l-veRutOR3G0tQ.crl (hash: m4hPdjadqi/BjQ9kGU4ePUYPYmt7iWx4WAkf7StGsuY=)
3: VYOb-2PB3WKsCUYPT2j-nf80wMs.roa (hash: YpnMPKkA2P+LHKT+FLRfK5zKYPPPwWgoJKnxE9kTcx8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/4e1bc8-f810-4182-a6e3-721bb4fc8c16/1/CWbgXRUnUN-q3l-veRutOR3G0tQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/4e1bc8-f810-4182-a6e3-721bb4fc8c16/1/CWbgXRUnUN-q3l-veRutOR3G0tQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/CWbgXRUnUN-q3l-veRutOR3G0tQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 21 Aug 2025 23:01:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:c9:b8:54:fb:7b:c2:18:43:59:49:61:de:89:f7:bb:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0966e05d152750dfaade5faf791bad391dc6d2d4
Validity
Not Before: Aug 20 23:02:37 2025 GMT
Not After : Aug 21 23:02:37 2025 GMT
Subject: CN=b2df250f4a3aaa860c095900132bc4996d59cb6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:3f:44:71:e2:50:91:ab:0e:aa:b8:03:b6:b8:
43:b6:5f:11:b7:29:39:f1:2e:ec:82:57:20:e5:9d:
6b:ea:6f:23:25:08:59:28:c7:c0:f8:14:5b:3c:a5:
b8:0d:70:d1:90:61:80:7f:31:e6:98:67:25:8a:ed:
0a:40:b2:0d:af:b4:92:95:b0:96:f0:10:21:40:9e:
c9:10:db:65:d8:a6:2b:76:c2:68:47:bf:16:0b:f2:
0f:31:df:05:d6:f0:28:82:c2:b1:32:fd:13:d7:ad:
54:6d:6a:01:82:21:30:64:a0:f2:c5:69:22:1e:b1:
41:56:7d:06:c9:44:e6:b8:5b:cb:33:a9:7e:b7:61:
2a:f2:53:4f:78:0e:5a:a3:40:a2:31:fc:47:dc:59:
c1:8a:58:9a:64:66:9a:1f:91:ea:8c:ce:ea:3a:dc:
a1:ce:45:65:e6:25:e5:eb:6c:c6:e4:63:ea:3f:8c:
eb:c0:75:0b:83:99:42:49:f9:c4:71:31:84:a9:46:
7f:ca:d0:a7:70:10:da:ff:a6:33:8e:5b:59:72:cf:
b4:ec:63:db:56:96:d6:06:cf:66:59:68:05:af:e5:
ff:77:25:78:e8:c0:bc:56:f2:0a:2c:09:a3:36:f2:
b1:b9:93:02:60:e6:c2:34:49:6b:43:af:d3:ad:95:
8a:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:DF:25:0F:4A:3A:AA:86:0C:09:59:00:13:2B:C4:99:6D:59:CB:6C
X509v3 Authority Key Identifier:
keyid:09:66:E0:5D:15:27:50:DF:AA:DE:5F:AF:79:1B:AD:39:1D:C6:D2:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CWbgXRUnUN-q3l-veRutOR3G0tQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/4e1bc8-f810-4182-a6e3-721bb4fc8c16/1/CWbgXRUnUN-q3l-veRutOR3G0tQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/4e1bc8-f810-4182-a6e3-721bb4fc8c16/1/CWbgXRUnUN-q3l-veRutOR3G0tQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:79:f4:a7:27:b5:c0:44:24:18:d5:7a:e7:e2:6a:93:a7:c3:
2c:ac:cf:b9:75:d7:a5:32:38:8f:b2:52:90:90:3f:c8:dc:10:
db:4b:92:a4:16:18:d7:f2:77:77:c4:9f:10:60:bd:f6:d4:29:
bb:b3:89:8f:6f:25:58:4a:9b:90:db:80:99:db:b8:78:ab:db:
cb:ad:18:32:c7:fa:24:9e:b4:8f:f2:53:7d:e4:6a:36:58:de:
da:5c:52:29:c7:3d:fd:f9:c8:70:88:b4:71:d6:22:49:85:f9:
c8:52:24:cc:73:37:52:06:cb:0d:5c:80:2d:c7:b6:94:58:f5:
e6:4c:a8:bd:a1:74:75:84:88:75:8b:14:17:16:fa:c7:ab:91:
78:68:d7:f3:0f:ce:de:61:ea:29:63:16:df:98:26:a8:9e:81:
8e:4d:cc:94:ff:12:bc:23:b7:0b:ab:7f:06:ea:0d:d8:59:ef:
58:8c:de:be:c3:09:e2:b8:a7:33:e3:18:05:18:36:05:c9:84:
a0:ae:e6:8e:1e:5f:cd:f5:f2:96:3d:e7:7c:fc:23:03:cd:e9:
b3:78:94:ea:93:fa:79:b7:69:d3:0b:35:20:5b:c1:49:14:08:
35:34:ca:d6:d3:23:93:55:7d:22:7c:c8:86:58:a5:9c:fd:1d:
a5:a6:be:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 21 07:16:02 2025 by rpki-client