Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/b172b7-6ae5-46e1-b0c0-0065e4a890b4/1/rcpuVKzQJs76NitCJ7iQgcClAEk.mft
File: rcpuVKzQJs76NitCJ7iQgcClAEk.mft (raw, json)
Hash identifier: cwt5xth5fapShedRl5q1xAC2TDhgcWQlibL+wW/Z01Q=
Subject key identifier: 8C:03:39:45:B8:0A:3A:F6:2D:64:38:60:8D:55:85:CF:29:9F:37:DA
Authority key identifier: AD:CA:6E:54:AC:D0:26:CE:FA:36:2B:42:27:B8:90:81:C0:A5:00:49
Certificate issuer: /CN=adca6e54acd026cefa362b4227b89081c0a50049
Certificate serial: 019921B04CCB52F6C07A5C7EA0886ABDEDB2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rcpuVKzQJs76NitCJ7iQgcClAEk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/b172b7-6ae5-46e1-b0c0-0065e4a890b4/1/rcpuVKzQJs76NitCJ7iQgcClAEk.mft
Manifest number: 03D0
Signing time: Sun 07 Sep 2025 01:00:26 +0000
Manifest this update: Sun 07 Sep 2025 01:00:26 +0000
Manifest next update: Mon 08 Sep 2025 01:00:26 +0000
Files and hashes: 1: Il8CSveHvqeNn_p3vs8bpbLd6io.roa (hash: uiHORBlA13Y/5lqKteAG7JddRpbP5NcKY0DSl6kuJ/A=)
2: rcpuVKzQJs76NitCJ7iQgcClAEk.crl (hash: TOydBYhc80QkGKoeRX1R7+7f+UhNDV06du+yH16HznU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/b172b7-6ae5-46e1-b0c0-0065e4a890b4/1/rcpuVKzQJs76NitCJ7iQgcClAEk.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/b172b7-6ae5-46e1-b0c0-0065e4a890b4/1/rcpuVKzQJs76NitCJ7iQgcClAEk.mft
rsync://rpki.ripe.net/repository/DEFAULT/rcpuVKzQJs76NitCJ7iQgcClAEk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 01:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:b0:4c:cb:52:f6:c0:7a:5c:7e:a0:88:6a:bd:ed:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=adca6e54acd026cefa362b4227b89081c0a50049
Validity
Not Before: Sep 7 01:00:26 2025 GMT
Not After : Sep 8 01:00:26 2025 GMT
Subject: CN=8c033945b80a3af62d6438608d5585cf299f37da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:12:44:82:59:92:0b:d8:e0:86:d8:a8:23:75:
7c:6e:39:71:c9:6b:be:bc:a0:d7:e2:cf:38:2d:45:
a5:0e:3c:49:99:cc:90:05:e9:ad:51:b7:fc:b3:8e:
3f:a0:17:bb:fc:76:c7:58:92:e0:30:41:2f:88:b2:
ac:df:ec:a9:bf:bb:19:c2:15:3c:c1:ad:d7:08:bb:
63:22:3f:5c:df:38:3a:c5:7b:0c:24:09:c6:7b:9f:
5a:dc:89:56:44:2e:83:69:cc:a9:8d:6e:a5:0a:54:
dc:68:60:bc:f1:4e:a9:5e:d8:5c:0a:81:87:9b:ac:
45:2f:4a:14:d9:c4:86:4d:9a:83:e5:7c:0f:66:39:
35:83:4c:be:a6:fa:b4:29:6e:87:3e:69:07:b1:8c:
d5:80:e5:43:1e:95:f4:77:68:a6:6c:e4:91:87:53:
0f:d1:b7:eb:cb:35:6b:36:72:b1:77:9f:5d:b2:f0:
25:ca:e5:26:41:eb:e8:8b:d0:9d:d7:80:18:29:78:
97:93:87:62:f8:48:e3:47:5d:f0:fc:28:49:86:a1:
9d:b0:6d:33:83:da:e5:e7:6d:2c:66:43:a3:53:25:
10:1d:e1:f8:c7:ff:19:06:c6:72:b5:02:e3:a8:ee:
cf:a6:79:c7:65:41:5e:09:c5:ff:14:6e:0d:d3:53:
31:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:03:39:45:B8:0A:3A:F6:2D:64:38:60:8D:55:85:CF:29:9F:37:DA
X509v3 Authority Key Identifier:
keyid:AD:CA:6E:54:AC:D0:26:CE:FA:36:2B:42:27:B8:90:81:C0:A5:00:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rcpuVKzQJs76NitCJ7iQgcClAEk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/b172b7-6ae5-46e1-b0c0-0065e4a890b4/1/rcpuVKzQJs76NitCJ7iQgcClAEk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/b172b7-6ae5-46e1-b0c0-0065e4a890b4/1/rcpuVKzQJs76NitCJ7iQgcClAEk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:4e:6b:57:b5:f0:a6:55:aa:92:35:74:92:1a:45:2c:e0:86:
e1:f3:d0:ac:93:b3:b6:97:6d:90:43:35:51:03:a3:5a:da:eb:
62:a9:ab:2b:44:1c:3f:6e:b3:0b:b7:7c:85:48:e6:53:68:cc:
00:66:fa:b4:88:07:29:b0:c6:d9:fd:aa:7b:b4:4a:d0:f8:a9:
3c:3d:bc:2b:9b:ef:5e:c7:4b:a4:76:24:4c:e5:27:49:67:a9:
84:92:b3:ac:56:8b:02:c2:2d:9d:88:b7:be:ba:1e:31:71:01:
92:2a:83:5b:b0:44:b4:a5:a0:f9:53:b5:51:df:e5:43:80:ca:
a5:74:50:80:6a:46:5b:64:af:68:ee:ad:42:e9:10:7b:65:d8:
6c:18:76:75:f7:66:75:96:2c:d7:7a:c7:65:9c:9e:b9:99:af:
27:c7:91:2a:ea:b7:86:bf:3a:77:f5:b3:ee:65:b6:cb:f2:66:
06:e3:34:76:71:1d:73:43:fb:42:1e:de:d3:be:a7:63:fd:32:
a1:32:6c:ac:7d:89:53:8a:0a:11:61:82:4a:c9:ff:56:86:ff:
b7:6f:43:cb:82:8e:72:c9:f3:fa:9f:88:56:f8:ed:28:dd:4f:
0c:c2:a6:69:42:e2:bc:c7:e3:43:12:38:7e:ed:ad:89:27:0c:
4c:31:37:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 09:50:51 2025 by rpki-client