Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/305475-b224-4ea8-91ae-6e4cd836c7cb/1/CwqUDP0u7-gvVw-vxP3FvQeUGgY.mft
File: CwqUDP0u7-gvVw-vxP3FvQeUGgY.mft (raw, json)
Hash identifier: MxxPDXgtMXqWuEh3uVQKhA2IsnVm5/OsAcjB3KcAcHg=
Subject key identifier: 2D:F0:AA:24:08:0D:4D:CC:29:26:25:57:DB:26:6B:85:C6:A7:67:DA
Authority key identifier: 0B:0A:94:0C:FD:2E:EF:E8:2F:57:0F:AF:C4:FD:C5:BD:07:94:1A:06
Certificate issuer: /CN=0b0a940cfd2eefe82f570fafc4fdc5bd07941a06
Certificate serial: 0198E29BCFC4D46130B9E84C723D9E3E8D9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CwqUDP0u7-gvVw-vxP3FvQeUGgY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/305475-b224-4ea8-91ae-6e4cd836c7cb/1/CwqUDP0u7-gvVw-vxP3FvQeUGgY.mft
Manifest number: 08DD
Signing time: Mon 25 Aug 2025 19:01:58 +0000
Manifest this update: Mon 25 Aug 2025 19:01:58 +0000
Manifest next update: Tue 26 Aug 2025 19:01:58 +0000
Files and hashes: 1: CwqUDP0u7-gvVw-vxP3FvQeUGgY.crl (hash: 2sy6b/L5SRcC98OsrfaJqE8w/t0lxbv9bcMWYAGQI5U=)
2: Lh4J1VP02-oTK-HxM-W2DuWref8.roa (hash: W28vw4gwp9YROhgcttiVHyEse6JN5PCY1Q1d5LlTtlY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/305475-b224-4ea8-91ae-6e4cd836c7cb/1/CwqUDP0u7-gvVw-vxP3FvQeUGgY.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/305475-b224-4ea8-91ae-6e4cd836c7cb/1/CwqUDP0u7-gvVw-vxP3FvQeUGgY.mft
rsync://rpki.ripe.net/repository/DEFAULT/CwqUDP0u7-gvVw-vxP3FvQeUGgY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Aug 2025 14:16:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:e2:9b:cf:c4:d4:61:30:b9:e8:4c:72:3d:9e:3e:8d:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b0a940cfd2eefe82f570fafc4fdc5bd07941a06
Validity
Not Before: Aug 25 19:01:58 2025 GMT
Not After : Aug 26 19:01:58 2025 GMT
Subject: CN=2df0aa24080d4dcc29262557db266b85c6a767da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:e6:0b:3f:f3:6a:66:74:59:38:d5:34:ce:26:
76:13:36:78:35:02:91:eb:07:d6:24:5b:a0:4e:d7:
89:04:1c:7a:0d:77:27:22:de:6e:71:8f:5d:70:42:
0d:0c:59:bb:aa:0f:80:0a:a5:3a:2f:96:7b:5d:cf:
29:15:55:5f:5d:10:ef:55:9b:95:c4:1d:3e:88:7a:
2b:4f:db:7b:1c:21:fb:2c:14:77:48:c1:fb:e0:16:
58:bc:be:8f:04:61:6e:ca:d2:f5:fd:cd:c2:6e:77:
9f:f9:1c:45:c0:8f:e0:b5:dc:fa:3c:8e:2e:05:f0:
70:4c:03:33:92:c5:8a:7b:34:23:f2:ca:09:3c:d6:
e9:7a:7a:32:21:ac:7c:42:67:e2:78:7e:0c:42:45:
0c:05:da:9f:40:7a:24:7f:e2:8d:18:b8:5f:33:56:
a1:7d:93:10:d3:c7:ba:0d:b6:45:b5:60:7b:4d:5c:
a0:97:e1:09:29:82:1e:9b:ad:27:e9:5c:22:9d:21:
9d:66:f3:24:5d:2e:ab:18:fc:c7:31:82:52:97:57:
29:37:fe:6b:12:9d:d6:2f:fb:49:26:12:9b:6f:68:
a7:d8:21:6a:6f:f4:46:e1:b3:30:f7:12:51:96:7b:
81:6e:cd:c8:92:dc:52:23:fe:2d:bf:55:81:af:51:
5b:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:F0:AA:24:08:0D:4D:CC:29:26:25:57:DB:26:6B:85:C6:A7:67:DA
X509v3 Authority Key Identifier:
keyid:0B:0A:94:0C:FD:2E:EF:E8:2F:57:0F:AF:C4:FD:C5:BD:07:94:1A:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CwqUDP0u7-gvVw-vxP3FvQeUGgY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/305475-b224-4ea8-91ae-6e4cd836c7cb/1/CwqUDP0u7-gvVw-vxP3FvQeUGgY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/305475-b224-4ea8-91ae-6e4cd836c7cb/1/CwqUDP0u7-gvVw-vxP3FvQeUGgY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:62:97:f5:3f:ca:c1:da:82:4d:93:03:68:92:80:30:ca:05:
cf:f4:90:1d:03:45:cd:c6:f5:58:75:dd:10:4e:5e:81:6f:a9:
6a:a7:9a:e3:a4:94:8e:a8:b6:f1:fb:45:6c:9d:e1:dc:0a:77:
97:65:79:58:8a:54:63:ab:96:74:a7:cd:3f:61:6e:97:a5:1f:
95:82:3c:0b:65:74:64:2d:da:42:a7:76:63:37:14:3d:46:50:
56:af:d5:15:27:ce:4a:ed:1d:8c:3f:87:46:68:8e:da:0d:b4:
6a:c3:d1:5f:c8:7e:ec:90:28:57:2b:ad:31:67:37:d9:d0:ea:
c1:e8:de:b5:0a:bb:f8:ea:93:ee:f9:38:8c:a2:03:cd:2a:f8:
12:0a:d9:de:00:ac:66:d5:e3:2e:4c:fd:ef:82:96:d1:3e:c0:
56:bc:98:07:f6:a2:df:34:f2:0c:01:73:5d:94:0b:b0:eb:0e:
25:de:08:97:fd:74:30:d8:36:79:01:a9:32:43:6a:3d:08:fa:
a2:b4:2e:d6:d9:61:cb:8f:09:34:8a:c9:7e:79:12:c9:bd:ad:
1c:e9:85:b0:e9:79:bd:a8:22:b3:6d:74:38:ef:43:e9:45:b0:
6a:10:5d:f0:0c:44:40:7f:c5:14:8b:c5:1d:72:a0:6d:8c:bc:
26:0b:ad:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 25 23:24:48 2025 by rpki-client