Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/ca17f7-c593-474d-8cf0-538b47709956/1/cHjnVjWgncwD9iWoC_pVKyLjZiw.mft
File: cHjnVjWgncwD9iWoC_pVKyLjZiw.mft (raw, json)
Hash identifier: mPdnMAH8sjYd4qMLKmyKwiwCfH4xyA/mbE8xtlGSIp8=
Subject key identifier: 23:10:A6:EF:82:57:37:3C:0F:32:9F:31:19:4D:10:2E:B4:0A:7F:05
Authority key identifier: 70:78:E7:56:35:A0:9D:CC:03:F6:25:A8:0B:FA:55:2B:22:E3:66:2C
Certificate issuer: /CN=7078e75635a09dcc03f625a80bfa552b22e3662c
Certificate serial: 019922FAED488CCE0F28F94C22CCD754DF89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cHjnVjWgncwD9iWoC_pVKyLjZiw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/ca17f7-c593-474d-8cf0-538b47709956/1/cHjnVjWgncwD9iWoC_pVKyLjZiw.mft
Manifest number: 0AB0
Signing time: Sun 07 Sep 2025 07:01:33 +0000
Manifest this update: Sun 07 Sep 2025 07:01:33 +0000
Manifest next update: Mon 08 Sep 2025 07:01:33 +0000
Files and hashes: 1: cHjnVjWgncwD9iWoC_pVKyLjZiw.crl (hash: s556DhzVYcgXihec2TZr22eWPLqgj3OZ6AupFttEjss=)
2: iTTW-6mQkAe_ptbEUsV9bdJZhbM.roa (hash: IaZjtmRfbfeEiXlxoZz2N565FeKeU2Yttq1mO64u+IM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/ca17f7-c593-474d-8cf0-538b47709956/1/cHjnVjWgncwD9iWoC_pVKyLjZiw.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/ca17f7-c593-474d-8cf0-538b47709956/1/cHjnVjWgncwD9iWoC_pVKyLjZiw.mft
rsync://rpki.ripe.net/repository/DEFAULT/cHjnVjWgncwD9iWoC_pVKyLjZiw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:fa:ed:48:8c:ce:0f:28:f9:4c:22:cc:d7:54:df:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7078e75635a09dcc03f625a80bfa552b22e3662c
Validity
Not Before: Sep 7 07:01:33 2025 GMT
Not After : Sep 8 07:01:33 2025 GMT
Subject: CN=2310a6ef8257373c0f329f31194d102eb40a7f05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:56:6e:ae:ee:c9:55:53:b0:4c:da:73:92:64:
5a:15:57:f8:80:37:be:5c:b7:3a:d7:c6:51:95:02:
ab:ee:f6:c0:3d:7b:18:44:e9:b9:9b:3b:52:15:58:
52:82:24:39:f5:15:e1:f6:03:89:c3:b9:b4:98:41:
ec:ee:03:17:87:f5:e8:54:30:78:76:44:7e:23:fa:
ca:d7:46:aa:37:4b:a1:fe:29:3f:e0:1b:76:95:82:
74:e3:6b:f6:ec:1d:5d:76:f2:71:f9:39:f2:4b:98:
5e:57:ea:c3:81:83:64:34:d0:7c:0a:dc:57:94:18:
1f:cc:45:aa:a6:9b:72:7e:88:24:35:54:e7:93:56:
c7:4c:f7:70:c2:7e:07:ac:eb:f6:a3:28:e0:14:d2:
67:e4:55:ca:5d:03:da:20:d8:31:9d:11:d2:fb:0d:
96:85:d7:0e:2c:e4:0e:7c:7c:71:07:cb:24:2d:45:
a6:d9:07:6f:7a:94:77:1c:16:e4:e8:65:32:ea:51:
04:3c:d7:2c:47:9b:4a:30:4d:a7:63:66:cd:f4:4f:
82:f7:3c:f5:f2:35:3d:be:b9:ec:f8:97:7c:bb:d9:
6e:f7:38:c1:29:40:59:56:b5:e1:f5:bc:5b:6f:d0:
42:3b:df:04:28:bd:6a:9d:c6:05:e2:7c:94:e8:86:
06:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:10:A6:EF:82:57:37:3C:0F:32:9F:31:19:4D:10:2E:B4:0A:7F:05
X509v3 Authority Key Identifier:
keyid:70:78:E7:56:35:A0:9D:CC:03:F6:25:A8:0B:FA:55:2B:22:E3:66:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cHjnVjWgncwD9iWoC_pVKyLjZiw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/ca17f7-c593-474d-8cf0-538b47709956/1/cHjnVjWgncwD9iWoC_pVKyLjZiw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/ca17f7-c593-474d-8cf0-538b47709956/1/cHjnVjWgncwD9iWoC_pVKyLjZiw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:fb:6f:bd:66:c6:1e:52:72:30:09:7f:90:13:0f:87:8f:30:
78:a5:59:af:47:19:5e:a0:5a:6e:dc:8e:2b:d8:16:c6:41:85:
80:b5:7d:14:44:62:90:8f:69:90:eb:d9:79:11:2c:b4:43:fc:
3b:fd:45:36:43:6c:df:74:e3:f3:fa:79:97:78:86:fa:0e:ed:
86:5b:c9:11:ee:30:27:4c:29:aa:5e:4a:41:69:29:0b:8b:71:
06:6b:8f:9e:ed:c9:99:ba:ff:07:66:c9:ab:68:85:cd:cb:3e:
93:93:95:16:12:ba:70:42:a4:38:2f:b2:fb:61:34:06:8e:68:
42:c7:e2:ff:65:f0:ca:43:7c:1d:68:4a:ca:61:04:af:b6:60:
20:1a:4d:d1:d9:3d:75:8b:67:2a:bb:e2:0a:d6:1f:68:3e:44:
ae:8b:2f:09:85:b8:5e:34:1c:56:ec:d2:37:ff:77:bd:4e:0e:
c3:f5:6f:7f:74:81:4a:c7:ad:8a:c3:75:28:78:78:42:fd:41:
e8:e6:09:fb:e6:d4:cb:30:aa:67:d6:c6:76:df:14:c5:3b:9f:
c4:f4:02:8a:d4:00:a5:09:d1:cb:ab:af:3b:19:e0:28:51:ac:
f0:cb:c4:ae:08:c4:07:77:0b:24:cd:e1:fb:30:38:82:98:0e:
93:36:ab:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 09:52:13 2025 by rpki-client