Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/851d45-1422-4b31-bd8f-7993b9e03b0f/1/CiebQDjgAue9ZOUHbRo56-lvI8Q.mft
File: CiebQDjgAue9ZOUHbRo56-lvI8Q.mft (raw, json)
Hash identifier: dyo9mitkOxYRDV/efvKd9xjErGFeeyeupHS9JtxHaOI=
Subject key identifier: 1A:D4:D9:B7:7D:BE:92:83:BD:0B:4E:FD:20:6D:89:F2:9D:F6:48:F3
Authority key identifier: 0A:27:9B:40:38:E0:02:E7:BD:64:E5:07:6D:1A:39:EB:E9:6F:23:C4
Certificate issuer: /CN=0a279b4038e002e7bd64e5076d1a39ebe96f23c4
Certificate serial: 0199312540EDC22B7F9739C78752B2C27C23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CiebQDjgAue9ZOUHbRo56-lvI8Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/851d45-1422-4b31-bd8f-7993b9e03b0f/1/CiebQDjgAue9ZOUHbRo56-lvI8Q.mft
Manifest number: 0728
Signing time: Wed 10 Sep 2025 01:02:28 +0000
Manifest this update: Wed 10 Sep 2025 01:02:28 +0000
Manifest next update: Thu 11 Sep 2025 01:02:28 +0000
Files and hashes: 1: CiebQDjgAue9ZOUHbRo56-lvI8Q.crl (hash: TRph7kHgoHYzYbMNZrRpoyq1WUC6YReg7bGy+BDbtAw=)
2: XgZiHyWgL10sySKObf_Bjn8Hh_Q.roa (hash: 2Dl4jp91F4zOnOBtmwjhJgpK+aRbbY/cT57xX5iOAng=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/851d45-1422-4b31-bd8f-7993b9e03b0f/1/CiebQDjgAue9ZOUHbRo56-lvI8Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/851d45-1422-4b31-bd8f-7993b9e03b0f/1/CiebQDjgAue9ZOUHbRo56-lvI8Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/CiebQDjgAue9ZOUHbRo56-lvI8Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 10 Sep 2025 21:45:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:31:25:40:ed:c2:2b:7f:97:39:c7:87:52:b2:c2:7c:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a279b4038e002e7bd64e5076d1a39ebe96f23c4
Validity
Not Before: Sep 10 01:02:28 2025 GMT
Not After : Sep 11 01:02:28 2025 GMT
Subject: CN=1ad4d9b77dbe9283bd0b4efd206d89f29df648f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:b4:bc:fb:ac:81:03:6b:4d:c5:42:b9:fe:8b:
a3:dc:22:a0:7b:8d:87:6e:c2:7d:41:01:61:ff:28:
14:eb:6b:81:f9:8b:4a:db:84:8d:15:3b:0c:ad:bb:
7b:00:f2:bb:5b:76:a6:37:33:34:de:5a:a1:49:8f:
3a:f4:d7:4a:5c:66:a5:ff:85:61:e5:33:30:a5:7b:
66:a2:5f:a7:c1:a5:24:81:f7:71:2e:8a:3e:99:b6:
2a:3d:4c:f2:d4:0a:94:f6:cc:55:1a:1a:8b:3f:16:
0e:c0:52:90:aa:8b:5c:60:94:b3:68:ef:ba:2c:54:
29:f7:6f:9e:17:a1:57:2d:c0:44:58:ac:bc:fa:73:
93:07:26:30:b5:42:58:ce:2c:5a:d1:a6:43:77:cf:
cf:97:de:11:4f:d6:62:5f:ad:2f:eb:56:fd:ae:b0:
9f:13:e6:c3:4a:fd:14:e0:f1:d7:e1:00:c3:13:54:
0f:7b:25:a2:ec:a7:91:b0:77:54:7e:fe:7b:99:b9:
a4:b1:04:8c:ba:a0:43:7c:ca:51:d1:6f:e4:02:f8:
04:12:26:1a:c5:f5:17:30:06:e6:b9:c4:76:96:65:
93:dc:e7:01:43:33:46:47:55:e3:da:10:43:c1:2e:
60:52:7b:a3:6b:75:1a:73:d1:86:c4:31:d0:48:c5:
59:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:D4:D9:B7:7D:BE:92:83:BD:0B:4E:FD:20:6D:89:F2:9D:F6:48:F3
X509v3 Authority Key Identifier:
keyid:0A:27:9B:40:38:E0:02:E7:BD:64:E5:07:6D:1A:39:EB:E9:6F:23:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CiebQDjgAue9ZOUHbRo56-lvI8Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/851d45-1422-4b31-bd8f-7993b9e03b0f/1/CiebQDjgAue9ZOUHbRo56-lvI8Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/851d45-1422-4b31-bd8f-7993b9e03b0f/1/CiebQDjgAue9ZOUHbRo56-lvI8Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:d9:5f:07:65:de:c5:9e:d9:4a:ca:9f:35:74:62:fe:54:e2:
af:00:2c:2f:2a:85:a9:5e:02:16:15:61:75:53:8c:d5:fa:96:
99:67:22:5c:5b:dd:e4:22:f8:42:4d:f4:38:ff:f7:b8:68:1a:
de:d9:72:2a:5b:7d:34:69:f9:c0:ab:c6:5b:f2:89:2d:dd:79:
b9:a1:4f:9e:26:75:3f:5e:7c:96:92:c4:3b:91:3b:6b:2b:0e:
d7:f1:76:77:e7:57:fb:76:1a:da:46:f9:68:0a:ca:8b:1f:33:
83:d8:92:85:16:19:72:bc:26:79:22:e3:72:f3:05:05:86:be:
bb:fd:12:90:0c:57:5a:e3:70:69:e6:a4:44:86:c8:e4:08:87:
66:25:4d:4d:1f:94:f2:10:ab:0a:db:5b:9f:21:69:b3:bd:30:
21:09:5f:23:20:f0:8b:53:fc:1b:2c:46:cc:f6:2e:17:16:f3:
2a:5e:f0:ef:a6:d6:89:f7:a5:d6:3d:29:fe:d6:10:50:f9:26:
c9:4b:16:cf:ef:11:b0:0d:f3:11:9d:98:8c:a1:c6:a1:b6:90:
bd:b0:b4:84:7c:67:2d:fa:91:c1:c1:ec:34:65:ee:11:26:1a:
37:ed:ce:5d:40:d7:5a:0f:31:e7:e6:ee:6e:f3:a5:00:ed:32:
ab:ff:d5:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 03:54:53 2025 by rpki-client