Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/d56c11-25e1-49c8-8863-7f37b778c011/1/cJgLYODTDkmN4bqmRaG-V6lSBJ0.mft
File: cJgLYODTDkmN4bqmRaG-V6lSBJ0.mft (raw, json)
Hash identifier: VAms9i51aGjw0IRfT8KuN305UIqdQbZvwSep0A7NWVY=
Subject key identifier: 62:1C:0E:36:B5:E4:91:44:5B:91:D3:31:35:16:4A:87:20:3A:77:EC
Authority key identifier: 70:98:0B:60:E0:D3:0E:49:8D:E1:BA:A6:45:A1:BE:57:A9:52:04:9D
Certificate issuer: /CN=70980b60e0d30e498de1baa645a1be57a952049d
Certificate serial: 019923A071807645562670522811AF75B29B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cJgLYODTDkmN4bqmRaG-V6lSBJ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/d56c11-25e1-49c8-8863-7f37b778c011/1/cJgLYODTDkmN4bqmRaG-V6lSBJ0.mft
Manifest number: 09B5
Signing time: Sun 07 Sep 2025 10:02:21 +0000
Manifest this update: Sun 07 Sep 2025 10:02:21 +0000
Manifest next update: Mon 08 Sep 2025 10:02:21 +0000
Files and hashes: 1: NOXjVjJhFkrwhntmdhaI015mrJA.roa (hash: 0zhl6bNJIqtyw3r+CngdcF4zpHGL2Q4MHDezzg25GbA=)
2: T3NYMawRHngwhI3EFd9dMZQSV1E.roa (hash: f99KOEwXdj6H3ZJRNRBeTA3dMK19zszZZ6xzWHN3tPk=)
3: cJgLYODTDkmN4bqmRaG-V6lSBJ0.crl (hash: lxSsMrBuTYj2NmQPpHxApwIk4viGdvFKkVv1IfjgW3o=)
4: o1Invfm5a-IuNysIWHt4ChcWwgI.roa (hash: gMX4tPW+RL6Xt4ksxgpRLp72pxNXeej67eQtVQ5iB/g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/d56c11-25e1-49c8-8863-7f37b778c011/1/cJgLYODTDkmN4bqmRaG-V6lSBJ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/d56c11-25e1-49c8-8863-7f37b778c011/1/cJgLYODTDkmN4bqmRaG-V6lSBJ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/cJgLYODTDkmN4bqmRaG-V6lSBJ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:a0:71:80:76:45:56:26:70:52:28:11:af:75:b2:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70980b60e0d30e498de1baa645a1be57a952049d
Validity
Not Before: Sep 7 10:02:21 2025 GMT
Not After : Sep 8 10:02:21 2025 GMT
Subject: CN=621c0e36b5e491445b91d33135164a87203a77ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:d5:1a:c7:af:33:e0:17:a6:93:1b:3a:04:ba:
b7:32:fb:98:26:29:04:7e:a1:ba:53:23:f8:5d:71:
d6:44:f9:f3:12:81:3a:a9:2a:00:5a:c8:13:d6:23:
db:c9:fa:fc:ad:6f:63:29:47:bd:18:9a:13:0e:72:
b4:bd:90:2b:0d:8f:de:84:6e:da:f0:65:18:9d:b9:
62:ce:7f:2d:99:75:48:22:d7:a7:12:1c:73:2f:55:
50:66:43:9f:4e:73:72:3d:4f:63:02:74:59:c9:8a:
07:44:12:21:02:c2:69:83:9f:42:9f:37:de:d6:88:
88:8a:c5:bd:95:1c:83:7b:7d:8c:29:9e:cc:97:4f:
ad:c8:24:e5:9d:12:28:a2:d5:f6:15:db:13:c4:c0:
64:56:3c:02:a4:de:f8:be:10:cd:65:89:60:12:64:
e0:9b:4d:02:0b:fc:8a:50:8c:0d:a1:ac:a1:61:27:
fb:65:e4:0f:77:7f:53:8c:ea:c8:88:66:b5:de:05:
e7:13:a6:4b:a4:96:9f:79:7f:42:e5:49:91:aa:b9:
d9:40:a7:a9:03:b9:51:6c:ec:92:a6:01:b7:9b:a4:
3e:c8:dc:fe:8d:3f:c6:71:ea:ce:c4:9f:c8:45:4e:
82:86:b6:4b:03:bc:23:4b:1d:e2:4d:7a:0f:fe:d2:
13:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:1C:0E:36:B5:E4:91:44:5B:91:D3:31:35:16:4A:87:20:3A:77:EC
X509v3 Authority Key Identifier:
keyid:70:98:0B:60:E0:D3:0E:49:8D:E1:BA:A6:45:A1:BE:57:A9:52:04:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cJgLYODTDkmN4bqmRaG-V6lSBJ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/d56c11-25e1-49c8-8863-7f37b778c011/1/cJgLYODTDkmN4bqmRaG-V6lSBJ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/d56c11-25e1-49c8-8863-7f37b778c011/1/cJgLYODTDkmN4bqmRaG-V6lSBJ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:e3:bb:f2:6e:a3:4c:c1:19:75:d0:69:17:44:1a:c6:dd:f0:
b5:33:89:39:ec:53:f0:79:e3:dd:5e:39:9a:2a:95:7f:eb:01:
68:2f:e2:01:5d:8b:89:ff:26:78:20:dd:6c:07:b8:4c:5c:8f:
ae:cd:eb:8f:3f:46:1d:d9:60:68:c2:6c:ec:d7:3a:94:b7:e8:
6c:de:78:8e:2d:47:77:46:2b:a9:41:fb:dc:6e:29:e3:2d:8b:
00:50:4d:01:3d:88:9d:64:1a:b8:e0:f4:9b:ed:d4:52:b9:bd:
44:dd:66:0a:72:6c:81:8f:b3:64:f0:42:c0:42:be:0c:9c:92:
ea:59:24:f1:94:cb:36:52:51:6a:64:6b:01:d0:29:fc:34:f3:
d5:bd:05:09:0d:7a:7d:b8:45:20:4e:71:1c:c7:75:b4:2f:a5:
a1:fc:99:48:6e:09:72:4a:7d:66:b2:12:31:f7:44:bb:09:c6:
34:ae:17:d6:29:eb:e6:81:4f:96:7c:2f:29:d8:b5:a1:9e:ad:
0b:8c:d3:29:7c:ca:4a:98:1b:13:ca:19:2e:de:bf:ea:2d:2c:
85:86:ee:9a:22:7f:50:97:07:b6:49:0c:dd:52:b8:df:fa:71:
01:ae:03:8c:1e:99:95:a7:ec:83:f9:d2:c3:64:5e:c7:69:2c:
4a:20:b9:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:31:21 2025 by rpki-client