Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/149cf6-611d-4e03-a660-dce1127ab223/1/cMvrOI9ZAsFhYLvtCWLLYisruDI.mft
File: cMvrOI9ZAsFhYLvtCWLLYisruDI.mft (raw, json)
Hash identifier: 2pjmC13ay7vYDjqsOZCtcutGmx3flB2CPZprr4ukKFk=
Subject key identifier: 36:96:B2:75:58:F1:7C:E8:E6:F8:82:D6:BA:B1:2B:25:EE:DE:14:97
Authority key identifier: 70:CB:EB:38:8F:59:02:C1:61:60:BB:ED:09:62:CB:62:2B:2B:B8:32
Certificate issuer: /CN=70cbeb388f5902c16160bbed0962cb622b2bb832
Certificate serial: 01991EAFF40DBB0FC1FF131A1AD9D539E19D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cMvrOI9ZAsFhYLvtCWLLYisruDI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/149cf6-611d-4e03-a660-dce1127ab223/1/cMvrOI9ZAsFhYLvtCWLLYisruDI.mft
Manifest number: 0C84
Signing time: Sat 06 Sep 2025 11:01:11 +0000
Manifest this update: Sat 06 Sep 2025 11:01:11 +0000
Manifest next update: Sun 07 Sep 2025 11:01:11 +0000
Files and hashes: 1: Jx2nTRr5pEsEFWo_5nDYJEdIJkI.roa (hash: 5SCIBFwRcqmCVA4jK7ObW5hmOVN8QwAIditbrQHD6YU=)
2: cMvrOI9ZAsFhYLvtCWLLYisruDI.crl (hash: mQ/rg3iP8nFVeTY+M/Yj2Vv2A9ekSycLMVmwTp24biU=)
3: fVZny3FRspGg7D4Ss3AUbX0JyBI.roa (hash: SocyXocZHSo8f5zsAWiffJrBZyiPOdy55HQXZcolvh4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/149cf6-611d-4e03-a660-dce1127ab223/1/cMvrOI9ZAsFhYLvtCWLLYisruDI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/149cf6-611d-4e03-a660-dce1127ab223/1/cMvrOI9ZAsFhYLvtCWLLYisruDI.mft
rsync://rpki.ripe.net/repository/DEFAULT/cMvrOI9ZAsFhYLvtCWLLYisruDI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Sep 2025 11:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:1e:af:f4:0d:bb:0f:c1:ff:13:1a:1a:d9:d5:39:e1:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70cbeb388f5902c16160bbed0962cb622b2bb832
Validity
Not Before: Sep 6 11:01:11 2025 GMT
Not After : Sep 7 11:01:11 2025 GMT
Subject: CN=3696b27558f17ce8e6f882d6bab12b25eede1497
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:a3:7e:fd:98:73:16:53:9b:b3:83:82:26:5e:
74:bd:7e:0f:e7:31:a9:c2:a6:72:20:fa:c0:46:4a:
00:97:6d:92:9e:b9:43:67:05:63:ac:f6:35:ca:24:
ba:99:47:4a:99:1f:83:57:3c:34:b0:9f:33:24:4a:
5a:4d:92:1e:7f:03:6f:c9:b4:dc:03:9a:0d:6b:ef:
bc:97:d6:16:44:61:9c:f2:e8:85:a7:e6:9a:88:41:
28:bf:8b:8e:be:f9:32:da:50:80:fa:c3:75:15:29:
15:47:03:34:b6:70:0d:37:34:5b:70:88:5e:5b:c4:
e3:d5:d3:3c:53:59:26:cd:f4:0a:4f:5e:b5:58:e2:
58:36:67:8a:04:96:48:34:8c:98:31:b4:95:f6:b0:
73:c8:7a:a1:3c:91:d3:ea:72:94:7d:14:c0:06:1b:
a4:37:0d:28:87:6d:2f:95:3e:4c:bd:c9:0e:ae:81:
17:cf:c4:cd:ce:ad:23:30:e7:ea:d0:81:ea:b4:4c:
23:7e:cd:9b:cc:41:8e:d4:3c:db:2d:91:55:40:24:
8f:cc:be:ce:0e:fd:ee:76:b3:ce:2f:f5:6f:e5:db:
0d:d2:23:0c:0e:f6:1d:79:11:19:32:b7:56:37:99:
60:61:bf:1d:ae:79:ee:db:7f:f8:ee:9d:c7:2a:ac:
fc:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:96:B2:75:58:F1:7C:E8:E6:F8:82:D6:BA:B1:2B:25:EE:DE:14:97
X509v3 Authority Key Identifier:
keyid:70:CB:EB:38:8F:59:02:C1:61:60:BB:ED:09:62:CB:62:2B:2B:B8:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cMvrOI9ZAsFhYLvtCWLLYisruDI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/149cf6-611d-4e03-a660-dce1127ab223/1/cMvrOI9ZAsFhYLvtCWLLYisruDI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/149cf6-611d-4e03-a660-dce1127ab223/1/cMvrOI9ZAsFhYLvtCWLLYisruDI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:f5:fa:a8:c1:b8:cd:fa:60:f9:76:4e:19:4c:9f:a5:2a:20:
d1:79:c4:f3:46:6f:5e:2e:70:d8:01:44:21:06:d1:c7:3e:3d:
f6:38:1d:43:07:4f:81:9f:3b:d0:c3:49:8e:03:eb:7d:bc:1a:
84:09:78:6e:4d:50:68:17:1d:d5:76:11:8c:90:0f:80:86:3d:
eb:be:fc:7c:6f:9c:5b:b4:d6:5c:fb:ff:0a:ca:10:f6:80:90:
b9:62:82:eb:98:24:e9:02:3c:0f:24:a9:43:ca:16:84:d8:0c:
2e:9b:a1:19:71:6c:ae:ca:e3:0e:70:d4:8a:89:05:a7:d6:28:
a5:d9:2f:07:2b:90:c5:cc:d8:5b:25:b4:7c:22:58:ec:46:e9:
7c:4f:92:d9:d9:02:ff:8c:98:a0:60:cd:b9:61:ef:f6:8f:da:
3c:02:d8:35:fc:a5:6c:42:e4:bc:9f:5c:33:9d:d5:d8:31:d4:
ca:ae:b9:95:e2:a8:ec:02:f9:35:8f:92:32:54:41:aa:3c:40:
a4:dd:dc:f4:1d:6b:96:9e:92:dd:d6:70:24:e8:bc:9d:a8:35:
14:7a:79:80:f1:e9:44:ed:c2:d4:0e:f9:94:d4:ea:b4:20:3b:
f2:45:63:c7:9f:37:d6:a7:a2:97:fe:bf:b2:1a:0a:2b:69:67:
f7:10:24:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 6 16:58:56 2025 by rpki-client