Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/d36409-8845-4fa3-9dbd-9834171eb7d6/1/cIPC79QTNUG2RbZheEzd1JxInFs.mft
File: cIPC79QTNUG2RbZheEzd1JxInFs.mft (raw, json)
Hash identifier: HIhcLWZc78RAdHCi6TyrpkN3QSgTsiRfmoOt2mCb6+I=
Subject key identifier: 25:BC:17:D3:F9:86:18:2F:23:F9:31:10:CC:A4:4E:35:0D:25:F3:9A
Authority key identifier: 70:83:C2:EF:D4:13:35:41:B6:45:B6:61:78:4C:DD:D4:9C:48:9C:5B
Certificate issuer: /CN=7083c2efd4133541b645b661784cddd49c489c5b
Certificate serial: 019921B14FC4620B27FF9AF2E244CDF0C5F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cIPC79QTNUG2RbZheEzd1JxInFs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/d36409-8845-4fa3-9dbd-9834171eb7d6/1/cIPC79QTNUG2RbZheEzd1JxInFs.mft
Manifest number: DE
Signing time: Sun 07 Sep 2025 01:01:32 +0000
Manifest this update: Sun 07 Sep 2025 01:01:32 +0000
Manifest next update: Mon 08 Sep 2025 01:01:32 +0000
Files and hashes: 1: WvOZemqg-ypHTTal2SMuUFTSuok.roa (hash: 2VHKeSfOF/+IIaH05goA5gK0Fp6ZUSiibX9gEoU9FvE=)
2: cIPC79QTNUG2RbZheEzd1JxInFs.crl (hash: YzNEefbF3Fn8cimzh1h93hBy3vIk9f7AE06LIVM56CI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/d36409-8845-4fa3-9dbd-9834171eb7d6/1/cIPC79QTNUG2RbZheEzd1JxInFs.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/d36409-8845-4fa3-9dbd-9834171eb7d6/1/cIPC79QTNUG2RbZheEzd1JxInFs.mft
rsync://rpki.ripe.net/repository/DEFAULT/cIPC79QTNUG2RbZheEzd1JxInFs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 01:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:b1:4f:c4:62:0b:27:ff:9a:f2:e2:44:cd:f0:c5:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7083c2efd4133541b645b661784cddd49c489c5b
Validity
Not Before: Sep 7 01:01:32 2025 GMT
Not After : Sep 8 01:01:32 2025 GMT
Subject: CN=25bc17d3f986182f23f93110cca44e350d25f39a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:01:2f:2e:e5:3f:f9:61:ec:e4:dc:ce:f2:ef:
c4:0e:46:cf:54:d4:68:8f:85:44:bd:07:1e:15:03:
b8:30:66:cb:2e:b3:15:49:ff:03:1a:66:fe:34:d2:
87:69:21:f6:5d:dc:ec:6a:d6:9a:0e:0c:7b:67:84:
87:53:1d:8a:fe:65:82:8f:02:0e:72:4a:a0:02:ef:
90:42:1b:59:e3:de:7b:83:5f:b6:90:50:95:30:31:
02:ca:67:bf:be:c5:df:55:5a:84:06:51:c2:cc:cb:
2f:bb:6d:36:4f:0f:ce:01:39:4b:8f:26:e6:1a:52:
cc:fa:3a:68:3c:0d:37:7c:5c:72:fb:c0:9a:9c:b7:
e7:15:2f:e4:1c:bd:17:82:27:74:59:a6:e5:33:87:
e2:80:df:3e:f9:ff:16:cc:f0:4f:ab:7d:b8:61:eb:
93:bc:f6:49:63:49:16:c1:95:a4:bc:70:53:a2:62:
2b:2a:4a:89:a4:9e:5e:f8:30:53:97:ba:41:16:56:
44:99:88:ba:bb:99:a6:3e:c0:83:2f:2f:30:1d:c5:
94:9d:4e:48:f6:56:3b:65:f7:c8:0c:4a:e1:c5:a0:
4c:47:d0:e5:18:d3:d9:4d:24:2d:8b:36:af:d2:b8:
e8:f5:cd:24:95:8a:45:e3:b0:b5:99:2e:65:db:ae:
d7:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:BC:17:D3:F9:86:18:2F:23:F9:31:10:CC:A4:4E:35:0D:25:F3:9A
X509v3 Authority Key Identifier:
keyid:70:83:C2:EF:D4:13:35:41:B6:45:B6:61:78:4C:DD:D4:9C:48:9C:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cIPC79QTNUG2RbZheEzd1JxInFs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/d36409-8845-4fa3-9dbd-9834171eb7d6/1/cIPC79QTNUG2RbZheEzd1JxInFs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/d36409-8845-4fa3-9dbd-9834171eb7d6/1/cIPC79QTNUG2RbZheEzd1JxInFs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:2a:b7:41:e0:93:b6:97:6c:be:d4:3e:95:b9:2c:3b:70:b5:
d7:87:a4:7a:42:a7:27:b2:f1:91:99:c9:85:78:b6:72:0f:01:
05:25:12:5b:47:87:31:cf:44:09:52:77:00:3a:58:ce:6e:b8:
ff:a9:74:76:72:ec:58:4e:a8:d1:9d:86:4a:a6:ea:6a:74:2f:
91:49:94:8a:6b:fb:69:e9:a8:20:f4:fe:66:10:97:30:4e:6b:
5e:fc:55:03:94:42:f2:b7:75:36:a9:ef:7a:60:4c:49:a4:19:
94:ea:03:49:46:f0:cf:7f:3e:5a:f7:f2:1e:3f:81:a4:e3:d4:
a1:bd:d7:2d:7e:7a:37:4d:12:12:9f:3c:0b:4d:a0:7d:bf:ec:
de:81:7a:b3:14:99:c4:01:3f:88:64:9b:0f:50:2d:20:db:be:
2a:9d:2c:49:91:db:fc:a5:33:32:3d:01:9a:b8:82:78:94:dc:
f1:b7:0b:34:98:c4:71:1c:a1:08:df:92:f2:7d:bb:3f:93:47:
90:bd:87:ce:60:62:a7:2e:98:10:1e:8e:42:39:ac:4d:59:8c:
f4:0b:37:14:b8:ed:97:74:85:fa:58:3c:b5:49:a0:ec:99:f0:
a5:40:a4:83:48:2c:82:ca:d5:cb:c6:47:82:7e:19:51:48:42:
13:33:23:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:25:42 2025 by rpki-client