Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/5776a3-06dd-4980-8f6f-d3e3c78e7c44/1/Cl7G4GYNtvYluXi-DV7nHC3NRlo.mft
File: Cl7G4GYNtvYluXi-DV7nHC3NRlo.mft (raw, json)
Hash identifier: Jq8gHBbDOs+vADva4GJnx4KwDtGMIpaLXkmtZ9Wy0Fc=
Subject key identifier: B9:22:0F:16:E4:5B:7D:ED:45:8B:F4:84:BB:9B:1A:96:F5:4C:D7:21
Authority key identifier: 0A:5E:C6:E0:66:0D:B6:F6:25:B9:78:BE:0D:5E:E7:1C:2D:CD:46:5A
Certificate issuer: /CN=0a5ec6e0660db6f625b978be0d5ee71c2dcd465a
Certificate serial: 019923312B126A33C6E07CEEF8E0F63A93BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cl7G4GYNtvYluXi-DV7nHC3NRlo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/5776a3-06dd-4980-8f6f-d3e3c78e7c44/1/Cl7G4GYNtvYluXi-DV7nHC3NRlo.mft
Manifest number: 1672
Signing time: Sun 07 Sep 2025 08:00:48 +0000
Manifest this update: Sun 07 Sep 2025 08:00:48 +0000
Manifest next update: Mon 08 Sep 2025 08:00:48 +0000
Files and hashes: 1: Cl7G4GYNtvYluXi-DV7nHC3NRlo.crl (hash: Aqgdv2oppjnh0NMsUeIgnlTtAqH2aJEsdfGDoVktP5I=)
2: oMIi1pEOv1jeJYH_D8-bsx7eN14.roa (hash: L6yUeA60s1oezRJ3/Hwo53eHZ4mzV9eSXG/AVf/FB4E=)
3: ylHfNJxivzSDEST10fWDem7vKnQ.roa (hash: A5nWEbRO5hkEAdJU6Q2r7yPo+a47nvfcEeJhbXc7xME=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/5776a3-06dd-4980-8f6f-d3e3c78e7c44/1/Cl7G4GYNtvYluXi-DV7nHC3NRlo.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/5776a3-06dd-4980-8f6f-d3e3c78e7c44/1/Cl7G4GYNtvYluXi-DV7nHC3NRlo.mft
rsync://rpki.ripe.net/repository/DEFAULT/Cl7G4GYNtvYluXi-DV7nHC3NRlo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:31:2b:12:6a:33:c6:e0:7c:ee:f8:e0:f6:3a:93:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a5ec6e0660db6f625b978be0d5ee71c2dcd465a
Validity
Not Before: Sep 7 08:00:48 2025 GMT
Not After : Sep 8 08:00:48 2025 GMT
Subject: CN=b9220f16e45b7ded458bf484bb9b1a96f54cd721
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:f8:39:53:24:ba:1f:fa:e9:3c:f7:60:6e:53:
8b:88:17:6b:d9:00:4d:89:ad:f9:e6:ff:e8:28:f8:
a9:47:2b:74:8a:cf:96:e7:53:06:fd:04:cc:c8:13:
6a:18:67:f7:b4:a2:f6:ec:2d:1f:0d:e2:77:a8:14:
ab:82:6d:60:88:e0:68:26:9c:d9:4a:47:bf:e3:d8:
b4:77:cd:d2:f2:41:9d:c9:b0:3b:f9:aa:79:97:96:
cd:dd:70:c4:81:f5:7b:e1:70:1e:73:5b:02:fa:d5:
e8:5c:ee:f7:68:c0:53:40:0f:66:98:fc:d2:b8:e0:
4b:6b:82:36:03:1b:e2:03:1a:32:30:01:57:6a:00:
72:9a:84:ea:da:3a:1b:22:ed:a3:67:8f:35:c7:89:
51:89:c0:ef:54:75:b9:bb:04:85:1f:99:3f:07:45:
28:f1:b7:f9:2d:55:30:25:ef:55:b6:17:a4:00:d0:
20:cb:e8:4f:d6:2c:ef:bf:a4:f3:16:2b:cb:34:7f:
83:02:55:f4:d5:f4:5f:0c:0e:32:39:b9:62:c9:d0:
6b:8e:79:ad:ae:9c:6a:90:60:d3:c7:31:c8:29:9e:
e5:3f:d9:d7:26:0f:28:92:4a:f5:0f:75:01:7b:70:
7f:e0:33:3b:c6:19:3e:f2:63:0f:73:0c:24:68:2b:
e2:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:22:0F:16:E4:5B:7D:ED:45:8B:F4:84:BB:9B:1A:96:F5:4C:D7:21
X509v3 Authority Key Identifier:
keyid:0A:5E:C6:E0:66:0D:B6:F6:25:B9:78:BE:0D:5E:E7:1C:2D:CD:46:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cl7G4GYNtvYluXi-DV7nHC3NRlo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/5776a3-06dd-4980-8f6f-d3e3c78e7c44/1/Cl7G4GYNtvYluXi-DV7nHC3NRlo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/5776a3-06dd-4980-8f6f-d3e3c78e7c44/1/Cl7G4GYNtvYluXi-DV7nHC3NRlo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:1e:6c:63:f6:3b:f5:1f:a4:89:21:20:42:4f:81:41:b3:26:
e4:7d:fd:95:2e:a6:33:97:27:28:7a:47:bd:33:40:f6:78:bc:
99:ca:0f:37:84:13:67:7f:10:b2:8b:49:c4:40:38:15:97:0a:
5b:7b:48:8e:19:63:a2:b8:0e:69:7e:c9:e0:d2:c0:3f:bc:85:
5d:e2:96:a3:9f:88:e1:82:b8:09:65:02:2f:f8:37:55:80:72:
b2:0d:3f:64:22:3f:31:54:28:0b:b9:e5:8a:ea:6a:80:bc:ef:
67:44:42:3c:ee:d8:71:1a:18:56:9f:cc:94:cf:a6:71:e7:04:
80:bf:ec:9c:85:bc:7d:44:71:eb:00:2e:a6:5f:6a:b1:2c:09:
59:18:fe:61:37:e7:5e:8f:27:3e:b0:f5:60:d5:5d:f8:45:75:
c8:f9:d3:c9:61:ae:07:b5:d4:e4:17:84:16:44:3d:48:a6:e7:
bd:fc:6c:2e:bd:ce:a1:f3:e1:36:4d:a6:d8:31:4d:e7:3b:1d:
f7:57:5c:76:2f:ab:9d:75:c6:58:4f:5c:60:c2:1a:a5:58:2b:
66:f0:db:f1:13:79:29:fa:e0:51:65:fc:41:69:fd:0b:2d:18:
0b:af:2a:01:27:e8:d0:3e:1f:c1:de:18:37:bf:27:a5:2b:bf:
04:eb:40:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:39:31 2025 by rpki-client