Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/db75db-25b2-43dc-aa12-ed001a2889ad/1/CtBt0nvZOjgNpMddGovwdoKP1ko.mft
File: CtBt0nvZOjgNpMddGovwdoKP1ko.mft (raw, json)
Hash identifier: iIqU7rsO4+Q/QTJWEFvZqftCzEwfuHsmdOLvbv38JYU=
Subject key identifier: EE:A2:07:62:3B:3D:C8:7A:8F:C3:D9:8F:5E:EB:D0:A1:00:DF:9A:19
Authority key identifier: 0A:D0:6D:D2:7B:D9:3A:38:0D:A4:C7:5D:1A:8B:F0:76:82:8F:D6:4A
Certificate issuer: /CN=0ad06dd27bd93a380da4c75d1a8bf076828fd64a
Certificate serial: 0198D5BBC0DEFA9108D90A89677ADD613D9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CtBt0nvZOjgNpMddGovwdoKP1ko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/db75db-25b2-43dc-aa12-ed001a2889ad/1/CtBt0nvZOjgNpMddGovwdoKP1ko.mft
Manifest number: 0942
Signing time: Sat 23 Aug 2025 07:01:48 +0000
Manifest this update: Sat 23 Aug 2025 07:01:48 +0000
Manifest next update: Sun 24 Aug 2025 07:01:48 +0000
Files and hashes: 1: 24PmMpD-bHbUV8mxF_RlzuSRjLU.roa (hash: ohLVMvfqoqKO1xPsU0QfK7dKJZtv+ZBmQ14II/YiXms=)
2: CtBt0nvZOjgNpMddGovwdoKP1ko.crl (hash: PdhPkxoehV0KvZtza3D1AKu9eOuwhKUbUmABewR/+/Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/db75db-25b2-43dc-aa12-ed001a2889ad/1/CtBt0nvZOjgNpMddGovwdoKP1ko.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/db75db-25b2-43dc-aa12-ed001a2889ad/1/CtBt0nvZOjgNpMddGovwdoKP1ko.mft
rsync://rpki.ripe.net/repository/DEFAULT/CtBt0nvZOjgNpMddGovwdoKP1ko.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:c0:de:fa:91:08:d9:0a:89:67:7a:dd:61:3d:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ad06dd27bd93a380da4c75d1a8bf076828fd64a
Validity
Not Before: Aug 23 07:01:48 2025 GMT
Not After : Aug 24 07:01:48 2025 GMT
Subject: CN=eea207623b3dc87a8fc3d98f5eebd0a100df9a19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:13:c1:46:02:61:e3:ba:30:4b:15:68:37:23:
f1:10:9d:02:53:ce:3c:5d:ff:c2:d4:cf:56:28:e2:
ca:eb:ec:00:36:a7:4e:85:e9:19:22:fe:de:79:43:
12:0d:5a:e5:a1:43:66:ba:46:ed:2b:0e:8a:8c:f2:
d0:6e:ac:65:71:43:2e:31:42:92:44:43:d8:4f:e9:
ee:42:50:7c:3d:b9:d2:ab:51:61:24:86:72:52:6a:
42:8b:a7:c7:4f:0d:fd:5d:8c:3b:35:08:68:87:f3:
88:05:f3:51:8e:7a:26:5e:0e:29:e8:c5:0b:71:06:
08:86:7e:35:80:f6:d6:4a:42:1b:33:73:18:d7:a6:
5a:1d:d2:d6:74:17:20:0c:a4:09:65:7a:a4:14:ed:
d0:6a:cb:0a:c7:58:11:5d:cc:16:7e:e5:8d:3a:a3:
8b:10:1a:24:1d:df:b8:8d:27:86:23:0a:74:f6:2a:
f6:69:2f:53:03:6c:6a:23:41:fe:b1:e6:eb:11:7b:
b5:74:4d:f8:8b:60:f7:6a:97:8f:a6:51:c8:2a:d8:
b6:e3:70:dc:d4:72:10:4e:0a:cb:55:9d:d5:23:72:
3e:40:0e:66:04:1a:94:ea:2b:d2:d0:85:ea:85:13:
32:78:98:e4:32:13:96:d0:ef:0c:13:91:bd:f7:03:
9d:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:A2:07:62:3B:3D:C8:7A:8F:C3:D9:8F:5E:EB:D0:A1:00:DF:9A:19
X509v3 Authority Key Identifier:
keyid:0A:D0:6D:D2:7B:D9:3A:38:0D:A4:C7:5D:1A:8B:F0:76:82:8F:D6:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CtBt0nvZOjgNpMddGovwdoKP1ko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/db75db-25b2-43dc-aa12-ed001a2889ad/1/CtBt0nvZOjgNpMddGovwdoKP1ko.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/db75db-25b2-43dc-aa12-ed001a2889ad/1/CtBt0nvZOjgNpMddGovwdoKP1ko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:1e:f7:9c:30:bd:e4:99:b2:bb:1f:43:2e:b8:bc:13:1b:66:
0d:12:06:c7:10:32:ca:15:f4:29:16:c3:ea:91:3b:f8:90:1f:
bf:91:b8:53:42:31:46:53:cf:8c:c3:4a:eb:df:c6:60:55:c7:
09:7d:43:09:14:f6:0d:9c:25:6f:ab:51:6c:d2:70:58:86:eb:
70:85:ad:7f:8b:f2:2c:1c:ee:3c:87:b6:ef:7e:04:39:51:10:
8b:0c:3a:a1:4c:12:e6:67:9a:91:23:1e:39:1f:01:a9:76:1c:
f4:ea:c8:51:b5:4b:c2:1d:d9:e6:80:b0:ca:8d:74:8a:30:fe:
79:f8:d0:9d:5d:ba:f5:cf:07:68:90:0e:ee:32:a8:ec:89:2a:
f2:10:56:18:17:2f:20:b9:e1:b1:28:c7:be:12:e1:3a:dc:db:
36:a3:24:95:49:85:82:73:77:67:d5:d3:3a:d1:b0:ea:38:2b:
48:67:6e:42:5d:1d:cf:9e:08:ae:2e:99:71:22:1c:4d:ea:8a:
ba:a3:0d:00:70:35:ee:fa:a0:8b:ed:9d:88:a3:59:1e:56:00:
1a:87:49:d3:6f:ab:07:7d:3e:24:ad:ec:3b:d4:6f:09:2d:87:
03:a9:fe:c0:04:af:f8:6c:84:f6:7f:de:b2:b1:8e:64:3f:cd:
ef:b4:44:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:03:39 2025 by rpki-client