Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/cd883c-4d76-457e-a85c-dbaff81adca8/1/Cex03AtsLVudMOrzzSIpT3EZA58.mft
File: Cex03AtsLVudMOrzzSIpT3EZA58.mft (raw, json)
Hash identifier: ++QMa5qLaueJM2TR07uWLH66CpdjYH8h0peL3TxtZ/0=
Subject key identifier: 5D:D9:A8:B6:A8:56:A1:F5:CF:D0:5B:C0:94:F6:30:BF:CC:BE:96:BD
Authority key identifier: 09:EC:74:DC:0B:6C:2D:5B:9D:30:EA:F3:CD:22:29:4F:71:19:03:9F
Certificate issuer: /CN=09ec74dc0b6c2d5b9d30eaf3cd22294f7119039f
Certificate serial: 019923A023F49849E5D3CA5397CCDD173820
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cex03AtsLVudMOrzzSIpT3EZA58.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/cd883c-4d76-457e-a85c-dbaff81adca8/1/Cex03AtsLVudMOrzzSIpT3EZA58.mft
Manifest number: 080D
Signing time: Sun 07 Sep 2025 10:02:01 +0000
Manifest this update: Sun 07 Sep 2025 10:02:01 +0000
Manifest next update: Mon 08 Sep 2025 10:02:01 +0000
Files and hashes: 1: Cex03AtsLVudMOrzzSIpT3EZA58.crl (hash: 2VuZY/KlNhWYsaqg410MVoZm1A5CRpssrF4yYv1OXg8=)
2: vQYaMoR9txyndSYv7p8Vy1-ysWo.roa (hash: q7GID5FIOuixp8y5Io1pyufdLHt0l/VDVy3RytUEJPc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/cd883c-4d76-457e-a85c-dbaff81adca8/1/Cex03AtsLVudMOrzzSIpT3EZA58.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/cd883c-4d76-457e-a85c-dbaff81adca8/1/Cex03AtsLVudMOrzzSIpT3EZA58.mft
rsync://rpki.ripe.net/repository/DEFAULT/Cex03AtsLVudMOrzzSIpT3EZA58.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:a0:23:f4:98:49:e5:d3:ca:53:97:cc:dd:17:38:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09ec74dc0b6c2d5b9d30eaf3cd22294f7119039f
Validity
Not Before: Sep 7 10:02:01 2025 GMT
Not After : Sep 8 10:02:01 2025 GMT
Subject: CN=5dd9a8b6a856a1f5cfd05bc094f630bfccbe96bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:78:28:5c:09:7c:ea:59:9a:57:cd:d0:18:03:
71:73:b5:bf:5a:8e:e6:4a:28:63:4d:66:5e:3c:7d:
84:6a:72:87:b0:82:ed:5a:4f:ae:71:65:ce:7c:b7:
c6:af:d6:d3:99:05:c6:28:fa:53:9a:d9:dc:a9:5b:
53:c4:2c:44:f8:6b:85:6a:5a:44:25:48:ed:73:de:
d1:39:e4:20:97:ff:38:75:25:5f:d2:49:59:92:56:
ba:36:c5:fd:67:ac:12:c0:a7:0a:6a:73:af:d9:43:
94:f2:f3:8f:84:43:f5:eb:b0:36:62:77:94:ab:2e:
ab:73:7e:66:bc:89:82:e7:7f:d3:5c:df:7e:83:d8:
83:ab:d1:8e:83:1f:2a:0f:30:2f:d2:7f:d6:e3:a7:
ed:29:51:61:1b:d6:7e:13:c2:1b:01:46:2e:a6:1c:
21:98:8f:cb:58:1f:9d:02:2c:46:82:0b:3a:a7:ad:
a4:6a:f9:ec:e4:de:47:9d:a5:14:fa:c3:ab:90:81:
64:bf:c2:17:06:53:79:da:7a:ad:f2:bc:1b:03:80:
4a:46:aa:1d:98:1f:87:68:11:9a:25:d4:ae:d2:4f:
60:f8:40:ef:bd:7c:5f:f6:63:47:56:c3:df:2e:4e:
88:4c:8b:43:7c:b1:d7:6c:0e:9b:e6:dc:04:6a:61:
67:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:D9:A8:B6:A8:56:A1:F5:CF:D0:5B:C0:94:F6:30:BF:CC:BE:96:BD
X509v3 Authority Key Identifier:
keyid:09:EC:74:DC:0B:6C:2D:5B:9D:30:EA:F3:CD:22:29:4F:71:19:03:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cex03AtsLVudMOrzzSIpT3EZA58.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/cd883c-4d76-457e-a85c-dbaff81adca8/1/Cex03AtsLVudMOrzzSIpT3EZA58.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/cd883c-4d76-457e-a85c-dbaff81adca8/1/Cex03AtsLVudMOrzzSIpT3EZA58.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:3c:53:f0:cb:73:94:08:26:fb:8f:dd:51:2d:7e:43:56:ab:
80:cf:51:8d:67:35:98:3f:e5:e3:9a:e5:3a:90:47:18:ef:e1:
a4:3c:c9:d6:0e:5c:92:df:4d:2b:14:e5:aa:92:c3:2c:15:90:
fc:85:18:34:bd:47:d7:82:6f:36:42:e0:c1:a4:0c:01:e8:f6:
0b:0a:68:9a:76:c7:27:c1:89:c3:f4:8f:e8:f4:c6:fb:e7:1a:
52:6a:2a:08:0a:c5:75:01:e9:db:2b:61:96:23:15:88:c0:27:
a7:f6:a6:59:64:e5:54:42:11:92:c3:f6:d5:1d:53:b7:e7:39:
32:41:f5:18:6e:52:81:d0:6f:a7:67:66:b7:20:fd:d4:00:c0:
75:18:32:34:d1:09:ee:1d:41:86:63:ab:eb:d3:3f:cc:70:6a:
af:8e:b2:ad:fd:e9:53:95:3c:da:81:88:d9:bc:7a:b5:3c:26:
43:0e:35:c5:82:a1:7f:c1:52:d1:2b:19:c6:f2:a8:0e:90:46:
50:c9:ca:1f:67:c0:89:78:af:91:90:95:7e:c0:c2:c1:e7:dd:
18:3f:dd:89:5d:fe:0c:36:2b:ed:d1:0a:69:84:65:3a:75:ca:
30:e4:e9:07:fb:4a:3b:1d:e6:d9:32:48:93:05:84:58:b5:54:
76:64:a5:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 14:34:15 2025 by rpki-client