Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/da1c43-1916-46ae-8491-35883af9a323/1/cDxI7UbLeUkOFmLbAcMdAtAu_-I.mft
File: cDxI7UbLeUkOFmLbAcMdAtAu_-I.mft (raw, json)
Hash identifier: Czcea2SWiq42w0r7Xwladmpm1afJw448W5mEB9F0+vY=
Subject key identifier: 9B:4A:BF:BD:52:35:B2:31:11:4E:6B:31:11:EC:F3:91:2B:91:AE:E0
Authority key identifier: 70:3C:48:ED:46:CB:79:49:0E:16:62:DB:01:C3:1D:02:D0:2E:FF:E2
Certificate issuer: /CN=703c48ed46cb79490e1662db01c31d02d02effe2
Certificate serial: 0198D66158756D03CB2B00381A9F6000B265
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cDxI7UbLeUkOFmLbAcMdAtAu_-I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/da1c43-1916-46ae-8491-35883af9a323/1/cDxI7UbLeUkOFmLbAcMdAtAu_-I.mft
Manifest number: 118E
Signing time: Sat 23 Aug 2025 10:02:40 +0000
Manifest this update: Sat 23 Aug 2025 10:02:40 +0000
Manifest next update: Sun 24 Aug 2025 10:02:40 +0000
Files and hashes: 1: PpEWGz-OwlSLlk0QHrICVTcwUWc.roa (hash: WptBbhD5BCS6QBVvLotY3hLMhEGQcn9whh44ucm6M50=)
2: cDxI7UbLeUkOFmLbAcMdAtAu_-I.crl (hash: kGCcyg1ZiUS7Lpu56OlhGckk85iR3UJvofU/2mFU4SA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/da1c43-1916-46ae-8491-35883af9a323/1/cDxI7UbLeUkOFmLbAcMdAtAu_-I.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/da1c43-1916-46ae-8491-35883af9a323/1/cDxI7UbLeUkOFmLbAcMdAtAu_-I.mft
rsync://rpki.ripe.net/repository/DEFAULT/cDxI7UbLeUkOFmLbAcMdAtAu_-I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:61:58:75:6d:03:cb:2b:00:38:1a:9f:60:00:b2:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=703c48ed46cb79490e1662db01c31d02d02effe2
Validity
Not Before: Aug 23 10:02:40 2025 GMT
Not After : Aug 24 10:02:40 2025 GMT
Subject: CN=9b4abfbd5235b231114e6b3111ecf3912b91aee0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:9e:fc:5f:9e:d1:ef:60:79:49:e7:bc:03:05:
6e:c0:22:a3:f7:1c:06:ba:b1:c6:48:91:dc:9d:a8:
b6:be:4f:03:e3:71:b2:a6:95:10:88:5d:8a:94:9b:
89:ed:4a:3f:7a:fd:90:1c:65:9c:80:73:60:20:dc:
d5:31:a6:93:5e:a5:24:33:f3:dc:50:a6:f5:9c:96:
9f:f9:77:a3:be:91:49:91:c3:7f:85:f0:40:58:0f:
60:a1:69:d1:09:f6:59:07:ef:f4:30:ed:3c:28:95:
bc:37:ab:3e:99:7a:40:55:22:40:9b:01:27:26:8d:
8c:1a:1f:2e:e3:0c:10:e5:d7:85:de:b1:1f:2e:ba:
5b:cc:00:64:74:13:46:5d:55:35:4f:f7:fd:c5:33:
f3:6d:99:06:ff:ff:a0:40:87:6e:4f:ff:86:92:06:
7f:51:02:91:2e:19:c5:d0:84:b4:09:69:14:e9:e6:
21:4c:ea:6b:43:8d:a6:2b:a4:08:e9:c2:20:92:84:
b8:5f:82:bd:ca:89:c9:2c:23:fd:a3:b9:85:09:a3:
81:eb:ce:46:47:66:43:8c:ea:00:53:3d:8e:c9:29:
f3:5f:9f:18:88:79:2b:5c:c6:61:40:31:cd:16:46:
bf:f0:7c:6d:fb:7b:51:ca:e0:8f:32:93:50:69:11:
c4:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:4A:BF:BD:52:35:B2:31:11:4E:6B:31:11:EC:F3:91:2B:91:AE:E0
X509v3 Authority Key Identifier:
keyid:70:3C:48:ED:46:CB:79:49:0E:16:62:DB:01:C3:1D:02:D0:2E:FF:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cDxI7UbLeUkOFmLbAcMdAtAu_-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/da1c43-1916-46ae-8491-35883af9a323/1/cDxI7UbLeUkOFmLbAcMdAtAu_-I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/da1c43-1916-46ae-8491-35883af9a323/1/cDxI7UbLeUkOFmLbAcMdAtAu_-I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:99:a5:9d:d3:84:96:18:88:7b:e8:6b:52:2a:0f:4d:f0:56:
fb:12:61:3e:83:9d:15:86:53:5a:47:46:d9:48:58:49:9b:24:
aa:ae:26:05:d9:d0:ed:1a:96:dd:78:08:ed:d7:6f:17:4f:e9:
b5:e4:7e:35:e8:42:28:f4:a0:ae:e1:11:4c:cb:ce:86:17:f4:
14:af:38:e5:db:82:c6:42:22:37:6d:62:25:71:5f:f2:1c:a8:
5d:be:0b:cc:64:6d:e2:f6:ed:d5:0c:9d:d4:59:8d:8c:95:79:
ca:57:b9:fd:36:03:c0:3f:a5:66:7d:e4:44:6f:b1:0d:d6:d6:
b6:4c:12:ca:07:2c:b9:9b:85:4f:95:5a:fd:cb:fe:aa:1b:e0:
b6:bf:b9:93:46:9f:7e:76:7c:80:38:f4:e8:a3:3b:ea:45:38:
dc:8a:65:32:4b:c6:41:3e:f1:6a:c8:61:ac:a5:53:d9:2f:e7:
82:84:fe:ca:47:0a:0f:88:20:15:83:91:ad:a2:6d:c3:f6:82:
dc:fe:cb:35:42:9b:be:3a:7c:1a:84:86:df:8b:db:b3:6f:1e:
4d:1f:0f:c0:5c:0e:44:c8:f9:a0:96:4d:00:b8:bd:0d:76:db:
55:3b:7a:05:cc:4f:8b:74:b3:30:c3:e8:c5:e3:2e:ec:c8:a5:
b9:a0:70:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:23:04 2025 by rpki-client