Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/883fd6-c6b6-4ae1-a187-f3069ee590da/1/cLTaDxATrNthwveibRTE8N6CIuw.mft
File: cLTaDxATrNthwveibRTE8N6CIuw.mft (raw, json)
Hash identifier: DGa3SgH6AhV7Cukdsh4xd78d8wnq++AWsMhSSYr35Us=
Subject key identifier: 0A:95:01:B7:21:53:15:18:BA:5D:CC:E0:8A:EC:E6:D5:21:D7:BE:1C
Authority key identifier: 70:B4:DA:0F:10:13:AC:DB:61:C2:F7:A2:6D:14:C4:F0:DE:82:22:EC
Certificate issuer: /CN=70b4da0f1013acdb61c2f7a26d14c4f0de8222ec
Certificate serial: 019936EECD03020E0274AEFA9FD8037FB2FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cLTaDxATrNthwveibRTE8N6CIuw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/883fd6-c6b6-4ae1-a187-f3069ee590da/1/cLTaDxATrNthwveibRTE8N6CIuw.mft
Manifest number: 167D
Signing time: Thu 11 Sep 2025 04:00:43 +0000
Manifest this update: Thu 11 Sep 2025 04:00:43 +0000
Manifest next update: Fri 12 Sep 2025 04:00:43 +0000
Files and hashes: 1: F94-zZFEc6qh0jKnwFf7o1uXF7I.roa (hash: w7SpfiHOXF1SxdkUidpIylH68mEs/yNWYY/p77Td/KQ=)
2: cLTaDxATrNthwveibRTE8N6CIuw.crl (hash: Xif+gRkMHg5VvKsacY+OhfvHTUoK+X/aXWRh/SbbAwA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/883fd6-c6b6-4ae1-a187-f3069ee590da/1/cLTaDxATrNthwveibRTE8N6CIuw.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/883fd6-c6b6-4ae1-a187-f3069ee590da/1/cLTaDxATrNthwveibRTE8N6CIuw.mft
rsync://rpki.ripe.net/repository/DEFAULT/cLTaDxATrNthwveibRTE8N6CIuw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Sep 2025 04:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:36:ee:cd:03:02:0e:02:74:ae:fa:9f:d8:03:7f:b2:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70b4da0f1013acdb61c2f7a26d14c4f0de8222ec
Validity
Not Before: Sep 11 04:00:43 2025 GMT
Not After : Sep 12 04:00:43 2025 GMT
Subject: CN=0a9501b721531518ba5dcce08aece6d521d7be1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:91:58:1d:55:e3:97:ed:29:29:ad:49:0d:56:
5f:84:08:a5:6e:53:19:60:74:3f:6c:95:05:7c:a6:
2a:5f:63:ed:a0:43:91:a5:da:e5:63:e4:14:79:c5:
24:46:1e:4c:b3:34:e8:45:22:9d:8e:20:24:f7:9d:
99:9e:49:41:3e:bd:ff:88:3b:f7:a8:cd:b3:8e:1d:
2c:37:b3:97:fd:e9:24:e8:76:5c:5e:59:3f:b3:7c:
8a:90:83:ee:39:63:0c:4b:b5:27:8d:fb:d2:9f:95:
d9:f1:e1:6c:99:e7:cb:5c:16:b5:61:07:db:43:70:
cd:d9:88:58:fd:05:88:60:f6:33:ac:41:4d:f8:99:
0d:d3:7a:cb:83:c6:4d:da:63:72:0e:5d:25:7d:a0:
57:fa:60:93:a1:23:92:44:8c:56:37:e4:9f:bf:f7:
05:c5:c2:6f:6d:0f:8e:f4:35:d3:49:5a:7c:e0:ab:
b7:8e:20:a4:50:32:d8:57:61:89:2c:38:4a:36:02:
6b:34:99:b9:f4:4e:2f:7a:cb:53:85:4e:df:c4:67:
81:c9:8b:8f:93:73:f8:70:c6:50:56:0a:d9:49:27:
b5:e7:01:cc:17:b9:22:0b:52:dd:bb:7d:6e:0c:a9:
92:36:a8:4c:c1:b7:bf:e1:01:1f:53:b3:da:d7:c2:
f5:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:95:01:B7:21:53:15:18:BA:5D:CC:E0:8A:EC:E6:D5:21:D7:BE:1C
X509v3 Authority Key Identifier:
keyid:70:B4:DA:0F:10:13:AC:DB:61:C2:F7:A2:6D:14:C4:F0:DE:82:22:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cLTaDxATrNthwveibRTE8N6CIuw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/883fd6-c6b6-4ae1-a187-f3069ee590da/1/cLTaDxATrNthwveibRTE8N6CIuw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/883fd6-c6b6-4ae1-a187-f3069ee590da/1/cLTaDxATrNthwveibRTE8N6CIuw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:ed:d9:07:a2:d9:b7:0b:ae:2b:eb:41:b0:54:0c:8a:26:f7:
26:56:42:50:d4:d2:4b:73:57:6f:1e:03:6a:97:d5:83:f2:5e:
cb:43:95:9c:76:14:1d:64:6f:94:33:c5:f7:7e:51:a4:3a:cc:
92:45:02:3e:9c:0b:f7:7a:0a:8c:d0:10:82:b7:c6:83:aa:42:
52:09:69:83:9f:b7:59:af:57:59:2e:33:59:ba:4a:84:f1:17:
f4:39:0c:d0:0c:82:11:96:50:47:85:73:58:1f:dc:15:a5:d6:
37:fa:53:f5:ba:39:a4:77:31:5e:94:61:2c:59:32:c7:76:9a:
8d:14:d3:1f:0c:3e:fc:c9:96:61:1d:bd:be:81:4c:03:cf:48:
37:df:f0:95:57:8e:19:84:dd:ad:69:59:ab:94:57:d5:6c:0b:
90:ac:01:5b:38:12:62:f4:73:00:a3:52:ee:90:29:1b:04:20:
83:fa:ad:78:da:f2:5d:d0:50:6a:12:98:fd:6d:08:ee:5e:72:
76:ce:b0:b4:72:31:38:bf:88:22:d5:6f:ad:29:75:92:84:ea:
00:c5:b4:c1:9b:61:b6:63:69:a7:45:70:3a:01:1c:95:80:77:
d2:40:87:43:cb:49:09:3c:82:c3:c6:f8:90:1c:bd:1e:c2:03:
a1:8b:d6:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 11 09:01:39 2025 by rpki-client