Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/e18c2d-64ff-44e8-8eef-b9c89b9b1f65/1/CuGlto7Kdo8hGkjoVtf1g_kOdec.mft
File: CuGlto7Kdo8hGkjoVtf1g_kOdec.mft (raw, json)
Hash identifier: jPvoLjg9ntoVeky1U48/76PUeEcBP2qltPEvkVFHyEI=
Subject key identifier: 03:79:E2:36:FB:EE:07:79:21:10:CC:C1:C7:0B:EC:54:BD:86:A9:7A
Authority key identifier: 0A:E1:A5:B6:8E:CA:76:8F:21:1A:48:E8:56:D7:F5:83:F9:0E:75:E7
Certificate issuer: /CN=0ae1a5b68eca768f211a48e856d7f583f90e75e7
Certificate serial: 0199345BDD3A04B839C90E22D691E1C80F62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CuGlto7Kdo8hGkjoVtf1g_kOdec.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/e18c2d-64ff-44e8-8eef-b9c89b9b1f65/1/CuGlto7Kdo8hGkjoVtf1g_kOdec.mft
Manifest number: 1425
Signing time: Wed 10 Sep 2025 16:00:59 +0000
Manifest this update: Wed 10 Sep 2025 16:00:59 +0000
Manifest next update: Thu 11 Sep 2025 16:00:59 +0000
Files and hashes: 1: CuGlto7Kdo8hGkjoVtf1g_kOdec.crl (hash: 2TfqPPh7JRWOvZSZ6ZhsHwJjHTAUiEJDZr58DdDe+Us=)
2: fxLB2UJLDSaxPyWV2-cdEb8R5e8.roa (hash: qTbDhlkyoNs8mOWo2CnjkxjvNByWkkbKi24V6XgdMB8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/e18c2d-64ff-44e8-8eef-b9c89b9b1f65/1/CuGlto7Kdo8hGkjoVtf1g_kOdec.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/e18c2d-64ff-44e8-8eef-b9c89b9b1f65/1/CuGlto7Kdo8hGkjoVtf1g_kOdec.mft
rsync://rpki.ripe.net/repository/DEFAULT/CuGlto7Kdo8hGkjoVtf1g_kOdec.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 16:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:34:5b:dd:3a:04:b8:39:c9:0e:22:d6:91:e1:c8:0f:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ae1a5b68eca768f211a48e856d7f583f90e75e7
Validity
Not Before: Sep 10 16:00:59 2025 GMT
Not After : Sep 11 16:00:59 2025 GMT
Subject: CN=0379e236fbee07792110ccc1c70bec54bd86a97a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:21:21:bf:bd:d9:e8:76:a2:d8:9e:0e:1f:a0:
b8:e9:4f:6d:7c:1f:c3:af:ec:fd:87:0b:fc:88:84:
df:11:16:1b:c0:55:0d:35:99:e5:df:ff:6b:6c:36:
e9:2d:02:6e:d5:34:c6:73:e0:b0:60:b0:90:d2:4e:
06:88:d0:13:97:79:f5:e8:77:d4:a3:22:3f:0a:85:
81:2a:1f:11:96:60:41:f3:01:0a:3a:7e:d0:94:59:
68:8a:a0:59:91:f9:27:1c:b5:39:28:68:24:4f:8d:
6b:22:f6:e1:a9:1e:a5:75:58:43:ef:7b:b5:b0:54:
5f:0c:73:6b:10:e4:a4:52:78:83:88:fd:2a:3e:7b:
fd:04:59:d6:aa:73:45:3f:1f:6a:74:0d:c0:0f:18:
59:2a:2a:f2:a9:57:25:35:0d:27:b2:1a:fc:79:8e:
dd:45:1e:ec:ba:52:fb:77:2c:cc:0c:20:ac:22:87:
8e:86:52:22:d6:2d:09:36:b8:f6:68:d8:5a:21:a6:
6b:9b:67:f7:d0:54:48:5e:fe:49:0a:34:b5:7c:b0:
ed:7e:85:fa:00:4b:fa:ea:c6:15:8b:15:76:57:96:
6c:b0:8d:c8:5e:76:9b:8f:db:8f:59:be:89:51:01:
18:1b:f0:ae:03:95:8f:4c:87:c4:93:30:82:90:f3:
31:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:79:E2:36:FB:EE:07:79:21:10:CC:C1:C7:0B:EC:54:BD:86:A9:7A
X509v3 Authority Key Identifier:
keyid:0A:E1:A5:B6:8E:CA:76:8F:21:1A:48:E8:56:D7:F5:83:F9:0E:75:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CuGlto7Kdo8hGkjoVtf1g_kOdec.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/e18c2d-64ff-44e8-8eef-b9c89b9b1f65/1/CuGlto7Kdo8hGkjoVtf1g_kOdec.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/e18c2d-64ff-44e8-8eef-b9c89b9b1f65/1/CuGlto7Kdo8hGkjoVtf1g_kOdec.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c4:dd:0a:da:4e:b3:b9:35:68:6a:85:98:ea:de:2d:dc:ca:65:
57:c4:5c:e4:e7:31:49:a2:a1:5c:d1:83:cc:55:f7:f5:84:02:
08:b3:21:08:70:77:eb:c9:f7:4c:bb:8a:cc:49:37:d0:3b:25:
a5:26:35:5f:80:6d:f9:1f:b6:1e:47:ba:7d:84:b3:61:05:4f:
50:c9:c8:d5:1f:bc:e3:e9:73:7b:7a:5b:9a:09:88:9c:ab:04:
29:5a:25:73:c6:19:93:bd:5a:2a:d3:a2:86:c5:12:3a:18:b0:
04:29:32:5a:d2:9e:5e:65:30:1c:03:86:3f:51:93:7d:f9:22:
f3:d8:4f:fd:30:02:7f:a8:3c:6c:36:cd:bc:ad:14:a4:22:a1:
52:02:fd:1e:e3:3a:2d:0c:e2:66:94:16:e4:ca:a7:ad:68:86:
de:07:1d:4f:80:f3:50:95:83:25:1a:98:26:b6:8f:2e:01:97:
f1:10:00:ea:c4:bb:53:43:de:29:4f:22:e6:ee:46:77:6b:70:
51:82:e4:df:8f:c5:09:90:67:0b:87:8e:4a:ab:f1:92:59:9b:
95:45:d0:8b:cf:ef:4e:18:f7:b6:35:db:15:3b:8d:eb:3f:5a:
86:79:23:64:8b:14:3e:df:64:33:8b:b4:f4:67:ae:90:a4:31:
d7:b4:1a:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 23:33:14 2025 by rpki-client