Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/065dba-eef9-480d-a880-9175c8408e5e/1/cFngOgjhdBb2ZUYweYg0mZG4Si4.mft
File: cFngOgjhdBb2ZUYweYg0mZG4Si4.mft (raw, json)
Hash identifier: cXK1EZto3pxjWg9trFasKFQpe3acYgUZEK8AGGbiXqI=
Subject key identifier: 87:A5:1B:0A:5B:EC:1E:B0:5E:B1:B3:9D:BA:12:A0:A3:0F:94:B5:FC
Authority key identifier: 70:59:E0:3A:08:E1:74:16:F6:65:46:30:79:88:34:99:91:B8:4A:2E
Certificate issuer: /CN=7059e03a08e17416f66546307988349991b84a2e
Certificate serial: 0198D54DD69BBA2068DB84B32E684C3CEBD6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cFngOgjhdBb2ZUYweYg0mZG4Si4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/065dba-eef9-480d-a880-9175c8408e5e/1/cFngOgjhdBb2ZUYweYg0mZG4Si4.mft
Manifest number: 1649
Signing time: Sat 23 Aug 2025 05:01:44 +0000
Manifest this update: Sat 23 Aug 2025 05:01:44 +0000
Manifest next update: Sun 24 Aug 2025 05:01:44 +0000
Files and hashes: 1: _he88goyBeeMgMEtYhNW51-yKRw.roa (hash: bVhU/YoxDPNh8/p9ZgLTw8sJFTf7HVdMt0ALSYqAQ2c=)
2: cFngOgjhdBb2ZUYweYg0mZG4Si4.crl (hash: qRfdvuuY7UaAL/1aKjvXlAUNueg6g6Crk9AqLGnl0pM=)
3: sUWqfK8lQ00leYnkVH10Ne2J_pg.roa (hash: /8L8fVSDnCy6dVHFrdbjnwTMBA89vKnVyPdJKfPn3Kk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/065dba-eef9-480d-a880-9175c8408e5e/1/cFngOgjhdBb2ZUYweYg0mZG4Si4.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/065dba-eef9-480d-a880-9175c8408e5e/1/cFngOgjhdBb2ZUYweYg0mZG4Si4.mft
rsync://rpki.ripe.net/repository/DEFAULT/cFngOgjhdBb2ZUYweYg0mZG4Si4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4d:d6:9b:ba:20:68:db:84:b3:2e:68:4c:3c:eb:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7059e03a08e17416f66546307988349991b84a2e
Validity
Not Before: Aug 23 05:01:44 2025 GMT
Not After : Aug 24 05:01:44 2025 GMT
Subject: CN=87a51b0a5bec1eb05eb1b39dba12a0a30f94b5fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:02:b8:6f:c6:da:3d:c8:11:f8:d6:a3:4c:1c:
81:f0:ef:81:92:65:fa:5a:fc:21:ba:6b:70:d6:91:
ba:f1:bc:4d:c6:fa:56:92:3d:18:d9:c8:a5:de:61:
c4:30:9e:a2:45:dd:c0:57:31:b6:30:67:28:8b:a6:
56:64:77:cf:04:88:33:d0:8e:18:8a:b8:45:97:c4:
39:c3:10:9b:0f:50:dc:e3:35:c0:63:5e:c1:06:a6:
f8:af:a3:5d:da:c1:4a:16:2a:66:da:04:22:62:f9:
e9:9e:f2:34:2e:55:6f:61:db:bf:2e:e8:08:c1:e1:
44:1d:91:e6:f3:f6:52:1f:3f:5a:ee:89:85:19:76:
cb:dc:02:02:6d:2c:d9:12:da:cd:83:3b:7d:2c:92:
98:bf:5a:a8:63:8b:49:57:3a:2a:94:fa:62:fb:0a:
53:b1:f7:e1:0d:6d:14:b2:ad:8c:4c:65:d3:88:ab:
07:dd:d8:2b:84:90:00:93:48:90:bb:f5:9c:40:a4:
b5:be:fb:88:35:80:2d:a0:69:c8:13:14:45:f1:3f:
22:35:bf:bd:e7:98:e2:c3:ee:18:47:51:fe:c2:a2:
8b:29:3a:8c:7b:a5:94:c1:46:74:24:e4:e5:9f:44:
c7:16:f9:ce:19:cc:49:c1:75:5b:6b:30:ae:f8:98:
23:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:A5:1B:0A:5B:EC:1E:B0:5E:B1:B3:9D:BA:12:A0:A3:0F:94:B5:FC
X509v3 Authority Key Identifier:
keyid:70:59:E0:3A:08:E1:74:16:F6:65:46:30:79:88:34:99:91:B8:4A:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cFngOgjhdBb2ZUYweYg0mZG4Si4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/065dba-eef9-480d-a880-9175c8408e5e/1/cFngOgjhdBb2ZUYweYg0mZG4Si4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/065dba-eef9-480d-a880-9175c8408e5e/1/cFngOgjhdBb2ZUYweYg0mZG4Si4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:9c:15:5b:2c:a5:59:f7:e8:8f:8e:1c:fe:98:ea:6b:92:73:
0e:1a:98:bd:94:f6:8e:6f:e5:dc:6f:27:06:88:9f:07:bc:3b:
dd:9f:88:d2:f0:e1:4c:dd:a3:93:53:84:0d:72:cf:57:32:eb:
2f:56:9e:da:6c:0b:07:49:17:f1:5e:eb:c8:bc:d8:12:6d:d2:
30:fd:95:20:c5:70:ee:87:56:e2:96:c1:bc:31:4f:1e:5a:88:
4a:0a:1f:ec:5c:c0:bf:9d:22:c2:08:79:9f:b2:e6:a1:f8:ae:
a6:5f:84:8c:f3:41:c6:04:4c:ae:d9:2f:e0:fd:04:88:c9:56:
31:47:ac:e7:be:ec:13:e2:7f:27:2c:f9:b7:d3:2c:c5:19:eb:
f0:03:90:b7:a1:cb:4b:c9:b7:26:1f:f4:80:f8:5e:b8:37:bc:
85:a2:cc:e4:1a:1b:9d:2d:88:c5:f0:9f:cf:c6:24:95:cd:60:
81:c9:cb:79:cf:25:35:95:9a:b7:e8:46:ba:6b:93:1e:17:21:
0c:fd:0a:95:82:40:30:48:95:dd:61:ae:a8:84:2f:e6:20:f8:
68:8c:ef:29:6c:c9:f0:f3:2f:34:7d:81:5a:3e:b7:b6:29:f2:
11:cd:7f:9a:bb:79:91:69:01:8e:a4:8f:21:06:39:cf:de:9f:
d6:16:60:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:50:48 2025 by rpki-client