Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/2640df-b5d1-4c00-b2f2-5e5b8b28059a/1/CdGmNLu3rvrYfRIaX-VFZIc4yMU.mft
File: CdGmNLu3rvrYfRIaX-VFZIc4yMU.mft (raw, json)
Hash identifier: 75wTcHEEm0rhtPlnq8sg+79wpitdCGOa53xl+s+1U98=
Subject key identifier: A7:B4:B3:F2:9D:8E:EC:78:7A:40:99:4E:A1:02:07:9F:A1:9D:35:6E
Authority key identifier: 09:D1:A6:34:BB:B7:AE:FA:D8:7D:12:1A:5F:E5:45:64:87:38:C8:C5
Certificate issuer: /CN=09d1a634bbb7aefad87d121a5fe545648738c8c5
Certificate serial: 01992FA2F0C71461B6B5FDDEBCF6C3B6E6DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CdGmNLu3rvrYfRIaX-VFZIc4yMU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/2640df-b5d1-4c00-b2f2-5e5b8b28059a/1/CdGmNLu3rvrYfRIaX-VFZIc4yMU.mft
Manifest number: 0BDB
Signing time: Tue 09 Sep 2025 18:00:31 +0000
Manifest this update: Tue 09 Sep 2025 18:00:31 +0000
Manifest next update: Wed 10 Sep 2025 18:00:31 +0000
Files and hashes: 1: 5vM6DWCDq0zAAIqdgdL6q-vEnCg.roa (hash: ZbcmhEUHiVvPP/q8OPaFsh6YhizZSJj69o+H0dDocGY=)
2: CNx16XPAZx-QHVANkd2qjppUy-M.roa (hash: tg4m4urbGkAxgg6JgxNQ4p4V5XeLVLobwIMo7jTTB2U=)
3: CdGmNLu3rvrYfRIaX-VFZIc4yMU.crl (hash: 1oUU5fPzT4O8bgL6VckCrEffNjwU45BQiAiE5IuEpPA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/2640df-b5d1-4c00-b2f2-5e5b8b28059a/1/CdGmNLu3rvrYfRIaX-VFZIc4yMU.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/2640df-b5d1-4c00-b2f2-5e5b8b28059a/1/CdGmNLu3rvrYfRIaX-VFZIc4yMU.mft
rsync://rpki.ripe.net/repository/DEFAULT/CdGmNLu3rvrYfRIaX-VFZIc4yMU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 10 Sep 2025 17:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:2f:a2:f0:c7:14:61:b6:b5:fd:de:bc:f6:c3:b6:e6:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09d1a634bbb7aefad87d121a5fe545648738c8c5
Validity
Not Before: Sep 9 18:00:31 2025 GMT
Not After : Sep 10 18:00:31 2025 GMT
Subject: CN=a7b4b3f29d8eec787a40994ea102079fa19d356e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:f6:fd:fc:90:6d:da:e4:78:96:89:03:fe:bc:
ed:07:a5:a0:bf:c6:e1:2d:b2:96:79:c8:f5:3c:2f:
a0:46:ad:dd:dd:50:c6:c5:fd:d8:d3:9e:4f:9c:75:
43:6f:9a:e0:4e:a7:19:3a:25:98:ad:04:45:35:a9:
c9:c6:20:8b:09:90:af:88:13:c1:55:d2:0e:b1:cd:
97:87:bc:82:d6:41:d0:10:9d:aa:c7:f7:1a:6b:29:
1b:b9:d2:de:8a:42:db:d9:79:70:51:e0:7a:b2:39:
f9:6d:bf:d6:72:e4:03:7a:73:18:82:30:ab:3a:94:
cf:cd:0d:d9:7b:99:2f:0d:82:c4:cd:20:97:e4:9c:
8a:a1:29:6e:ef:e1:ac:7e:e8:08:d3:aa:d6:38:86:
e3:e2:a4:49:c3:78:f8:a0:dc:5f:d2:79:76:45:d4:
bf:9a:e1:39:6b:58:37:31:9b:77:ca:bb:54:88:cf:
fd:10:04:30:9e:17:ea:51:4d:8b:c2:7b:2c:e1:ae:
94:11:4e:52:f5:c1:ee:9b:84:dc:7e:99:97:bd:22:
a7:e5:28:57:92:7a:2f:b9:d3:46:3e:c9:56:07:03:
61:22:11:8c:13:2d:8c:c0:aa:5a:ac:30:cb:08:f9:
d0:3f:f7:e8:8c:97:f7:31:0e:10:bd:68:28:e9:99:
b7:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:B4:B3:F2:9D:8E:EC:78:7A:40:99:4E:A1:02:07:9F:A1:9D:35:6E
X509v3 Authority Key Identifier:
keyid:09:D1:A6:34:BB:B7:AE:FA:D8:7D:12:1A:5F:E5:45:64:87:38:C8:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CdGmNLu3rvrYfRIaX-VFZIc4yMU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/2640df-b5d1-4c00-b2f2-5e5b8b28059a/1/CdGmNLu3rvrYfRIaX-VFZIc4yMU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/2640df-b5d1-4c00-b2f2-5e5b8b28059a/1/CdGmNLu3rvrYfRIaX-VFZIc4yMU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:11:73:f9:54:fc:dc:ee:e6:49:68:2e:a8:67:8d:1d:e3:ed:
81:b9:ee:49:17:bb:c6:18:e5:11:3b:80:79:9b:cc:06:8e:87:
05:21:f6:9b:cc:f4:46:3c:c1:2c:02:ba:fe:d7:86:65:e7:58:
28:01:d2:56:7d:ab:71:15:74:04:43:ae:51:58:a7:f0:7d:de:
b1:5a:b9:a3:fa:71:17:76:00:1e:76:ef:46:91:09:17:b1:8b:
2d:9c:be:ed:15:a9:11:21:5b:1a:75:b3:01:a0:39:14:0f:38:
b9:95:5b:70:a1:47:29:9d:8e:c2:b4:42:2f:50:c6:7b:39:20:
9f:91:e7:7a:77:30:0c:8c:17:35:84:55:1a:72:b2:85:6a:89:
19:fa:3c:b6:82:c4:9d:46:ef:fe:37:c3:5d:a9:5a:42:72:72:
98:29:a1:e3:6b:47:42:92:ee:0c:54:5e:15:de:81:b5:3a:da:
6e:86:90:5a:f5:99:17:22:ea:11:e8:2c:a9:76:b2:e1:26:15:
43:93:b3:80:4b:93:50:d5:26:71:dd:53:62:9f:61:6a:d9:8c:
85:cb:5c:ab:71:a0:a8:47:d4:cc:04:81:0b:c8:e5:e1:7e:f7:
e7:e6:66:be:1a:10:08:c6:39:30:25:8d:a6:7f:69:f5:4a:2a:
77:0b:05:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 03:22:38 2025 by rpki-client