Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/dc3246-c85a-46df-8c30-48cee26c55bb/1/cLteVPJ0jstdhpjTeTOcwV8yuJM.mft
File: cLteVPJ0jstdhpjTeTOcwV8yuJM.mft (raw, json)
Hash identifier: Y+l83Rja8QZm1h9UBiVpCwfIkBR2IDvY1YGBsd+1CK8=
Subject key identifier: C5:85:40:21:76:BA:F2:03:BB:66:52:76:59:64:CF:5E:74:DE:52:85
Authority key identifier: 70:BB:5E:54:F2:74:8E:CB:5D:86:98:D3:79:33:9C:C1:5F:32:B8:93
Certificate issuer: /CN=70bb5e54f2748ecb5d8698d379339cc15f32b893
Certificate serial: 0199233130350EEC765C182302035B775DF2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cLteVPJ0jstdhpjTeTOcwV8yuJM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/dc3246-c85a-46df-8c30-48cee26c55bb/1/cLteVPJ0jstdhpjTeTOcwV8yuJM.mft
Manifest number: 1275
Signing time: Sun 07 Sep 2025 08:00:50 +0000
Manifest this update: Sun 07 Sep 2025 08:00:50 +0000
Manifest next update: Mon 08 Sep 2025 08:00:50 +0000
Files and hashes: 1: VABLE3iBHalb6Jl_c3u-oyHeiS8.roa (hash: s1CBILyJSh7gNgL+QAYvHKZM5KaEqmZAwVEcKOw0A0E=)
2: cLteVPJ0jstdhpjTeTOcwV8yuJM.crl (hash: MLoFyz0N1CKgWYTOixF4jE6hfzvRwlfbJuWJaKZZu0M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/dc3246-c85a-46df-8c30-48cee26c55bb/1/cLteVPJ0jstdhpjTeTOcwV8yuJM.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/dc3246-c85a-46df-8c30-48cee26c55bb/1/cLteVPJ0jstdhpjTeTOcwV8yuJM.mft
rsync://rpki.ripe.net/repository/DEFAULT/cLteVPJ0jstdhpjTeTOcwV8yuJM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:31:30:35:0e:ec:76:5c:18:23:02:03:5b:77:5d:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70bb5e54f2748ecb5d8698d379339cc15f32b893
Validity
Not Before: Sep 7 08:00:50 2025 GMT
Not After : Sep 8 08:00:50 2025 GMT
Subject: CN=c585402176baf203bb6652765964cf5e74de5285
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:57:33:0d:a3:93:ac:71:29:dd:72:70:77:58:
53:67:e1:7e:75:d7:a7:33:f8:3b:ba:d1:88:80:57:
a5:17:d8:53:8d:9e:cc:87:57:c2:f0:9e:27:c5:48:
79:26:3a:4d:6a:fb:42:c6:67:9f:16:6f:94:d4:be:
f9:12:1f:75:d5:7e:6c:be:17:70:5d:dc:ab:91:83:
4b:80:99:41:a2:08:65:7c:29:cc:73:75:f0:56:b1:
7d:19:84:d3:ed:4b:4b:cb:d4:b2:91:36:87:93:f8:
e7:78:9e:20:ce:5e:35:56:3f:dc:40:ce:e3:59:fc:
b0:16:3b:33:16:49:7c:b6:4d:66:61:70:6d:45:d2:
28:da:27:14:f9:1a:22:91:0c:2d:01:43:6c:cd:4e:
14:78:03:54:81:b1:8f:09:da:65:14:86:e6:83:8f:
4d:6b:b1:c9:b2:bf:63:d8:87:6c:c3:ab:de:10:0c:
34:cd:12:68:f9:9b:35:03:2d:aa:d4:27:0b:b4:19:
8c:d5:27:d7:bf:64:6e:5d:68:cc:23:73:9a:28:72:
e1:69:3c:14:59:dd:e0:1b:66:1c:a0:3a:48:03:4f:
b5:0c:f1:85:9e:f6:ee:1a:58:a5:43:b7:f6:ef:cb:
35:f5:d4:63:f0:d4:7b:fd:96:ef:33:a8:43:6b:0f:
07:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:85:40:21:76:BA:F2:03:BB:66:52:76:59:64:CF:5E:74:DE:52:85
X509v3 Authority Key Identifier:
keyid:70:BB:5E:54:F2:74:8E:CB:5D:86:98:D3:79:33:9C:C1:5F:32:B8:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cLteVPJ0jstdhpjTeTOcwV8yuJM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/dc3246-c85a-46df-8c30-48cee26c55bb/1/cLteVPJ0jstdhpjTeTOcwV8yuJM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/dc3246-c85a-46df-8c30-48cee26c55bb/1/cLteVPJ0jstdhpjTeTOcwV8yuJM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:f7:bd:be:83:94:69:5b:20:4d:cc:01:0f:a9:60:0e:a8:6d:
4a:3a:b7:3b:9f:a8:67:da:a6:6d:ed:fe:c0:84:0d:50:2b:d5:
5d:68:33:62:13:c7:a8:65:c1:22:a0:6b:80:ed:fd:5d:ff:95:
3e:29:b1:27:8a:00:9e:a7:5f:67:fb:00:d0:6c:92:6b:19:b3:
a6:0e:c6:5b:1e:b5:81:1e:ef:af:71:77:ee:7a:c1:a5:b5:57:
42:21:22:4e:1b:48:8b:33:dc:21:73:42:8f:40:81:49:3c:ea:
24:0b:5a:2b:0d:dd:c9:5c:06:aa:c2:8f:78:12:9a:79:5d:4b:
8a:e4:2b:fb:75:a7:d2:62:28:37:de:12:85:6b:9f:ea:26:f6:
ca:39:5d:bb:43:cd:85:01:3b:f8:1a:aa:f4:9b:13:ed:8c:56:
00:6b:98:42:48:37:68:97:58:c5:83:3c:03:1b:49:9b:f8:3d:
a4:25:dc:aa:9d:d9:55:ed:c6:35:1a:ae:ac:4c:14:86:cc:d8:
b4:5c:16:3a:71:dd:6f:36:f1:cd:78:00:57:26:8e:95:1f:ba:
4d:6f:00:80:5e:74:14:5b:fc:ba:4f:97:8c:89:18:e1:db:c6:
ee:79:b8:b4:28:87:d4:ee:1e:15:35:f0:f3:b8:c9:8c:18:01:
6b:12:16:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:04:45 2025 by rpki-client