Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/3c3154-7803-4ec6-bf70-ccdd06563a5f/1/cCjsnM1thh9fGv2tAEbzPJEDugY.mft
File: cCjsnM1thh9fGv2tAEbzPJEDugY.mft (raw, json)
Hash identifier: mettOjrVxB6gY7b51afS4LldhptZMS6wuFB9v8b3yjY=
Subject key identifier: AC:E4:DD:F5:C1:D1:67:8F:C2:6A:12:E2:09:2C:D0:09:17:6B:CC:79
Authority key identifier: 70:28:EC:9C:CD:6D:86:1F:5F:1A:FD:AD:00:46:F3:3C:91:03:BA:06
Certificate issuer: /CN=7028ec9ccd6d861f5f1afdad0046f33c9103ba06
Certificate serial: 0198D6297D8FD63CA685993B4084AD5C1CAF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cCjsnM1thh9fGv2tAEbzPJEDugY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/3c3154-7803-4ec6-bf70-ccdd06563a5f/1/cCjsnM1thh9fGv2tAEbzPJEDugY.mft
Manifest number: 07BC
Signing time: Sat 23 Aug 2025 09:01:39 +0000
Manifest this update: Sat 23 Aug 2025 09:01:39 +0000
Manifest next update: Sun 24 Aug 2025 09:01:39 +0000
Files and hashes: 1: IwZOTlalqEqW5_LsB_2xzUvcKwI.roa (hash: e+95vV5ztD2kfuNnsEBqK5C/RGyQsvvRym+jrlH4WK8=)
2: cCjsnM1thh9fGv2tAEbzPJEDugY.crl (hash: eZCovPZf7A9S5Ph3YxtJ1t2NLIUjal3bvgsPnHEU5bE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/3c3154-7803-4ec6-bf70-ccdd06563a5f/1/cCjsnM1thh9fGv2tAEbzPJEDugY.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/3c3154-7803-4ec6-bf70-ccdd06563a5f/1/cCjsnM1thh9fGv2tAEbzPJEDugY.mft
rsync://rpki.ripe.net/repository/DEFAULT/cCjsnM1thh9fGv2tAEbzPJEDugY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:29:7d:8f:d6:3c:a6:85:99:3b:40:84:ad:5c:1c:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7028ec9ccd6d861f5f1afdad0046f33c9103ba06
Validity
Not Before: Aug 23 09:01:39 2025 GMT
Not After : Aug 24 09:01:39 2025 GMT
Subject: CN=ace4ddf5c1d1678fc26a12e2092cd009176bcc79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:88:9f:f8:a0:53:1f:6a:31:9c:d3:8b:c8:6a:
92:39:5c:5c:2b:50:6c:1d:6b:1a:0e:ef:fb:86:d2:
dd:a2:04:8f:5c:e6:e3:4b:b5:5b:38:ae:f0:7a:c7:
ba:7d:43:bb:ee:16:bb:69:8b:27:89:80:7c:bf:b5:
4e:76:ac:a1:8d:6d:fd:cd:3e:d3:4f:fa:18:f2:3b:
e4:09:b0:57:3f:98:48:de:22:a3:21:82:7d:38:b7:
13:18:3a:e0:8b:51:c0:51:87:2b:21:ee:49:2c:c9:
bd:d9:6e:7d:ac:e8:21:7b:91:29:27:c0:cb:ad:4b:
0c:c0:fe:09:8b:1b:1a:85:84:a7:6b:85:78:45:ec:
dd:6e:65:63:ac:87:9c:4a:83:6d:50:a4:67:bb:73:
1e:e7:d7:a6:f0:e4:8f:4d:bb:06:b4:ff:a8:9b:64:
ca:3c:c1:57:46:e4:cb:f2:b5:7a:c9:a6:36:40:7d:
0d:1a:8a:71:9a:a1:5e:3d:7c:b8:12:99:50:ba:a6:
fc:0d:2d:89:05:3d:96:07:46:94:79:fb:a6:de:2a:
62:02:13:0f:a3:d0:d7:ea:dc:e7:65:30:ed:c7:43:
30:6e:e1:83:ec:f5:f0:e9:b2:d9:b4:5c:53:c9:00:
f3:e4:42:d3:1c:6b:bb:64:82:85:11:c5:a2:f6:10:
b7:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:E4:DD:F5:C1:D1:67:8F:C2:6A:12:E2:09:2C:D0:09:17:6B:CC:79
X509v3 Authority Key Identifier:
keyid:70:28:EC:9C:CD:6D:86:1F:5F:1A:FD:AD:00:46:F3:3C:91:03:BA:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cCjsnM1thh9fGv2tAEbzPJEDugY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/3c3154-7803-4ec6-bf70-ccdd06563a5f/1/cCjsnM1thh9fGv2tAEbzPJEDugY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/3c3154-7803-4ec6-bf70-ccdd06563a5f/1/cCjsnM1thh9fGv2tAEbzPJEDugY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:a0:61:23:4b:08:cc:76:55:2d:d5:a3:7a:8e:13:60:39:ef:
62:bc:19:82:85:03:3b:e5:e1:de:d6:74:8e:d8:47:b7:83:b6:
1d:b2:13:91:90:57:bc:ae:6b:af:e6:85:fe:6d:ab:54:28:78:
50:e0:eb:fe:7b:99:d7:a7:24:52:dd:6e:ac:4f:b8:e9:da:02:
9d:a3:ca:ab:33:fb:12:36:ab:29:95:46:8e:68:f3:7c:75:e1:
09:0a:03:55:70:e9:d4:68:b6:a5:ea:56:1b:52:d1:4a:54:8b:
b5:2b:b4:27:ad:5d:4c:7d:89:6a:54:1c:70:67:5d:cd:11:12:
31:ac:bc:b5:ac:00:b0:e0:2b:a0:7a:8d:fe:d5:8b:5d:69:39:
af:0a:20:5b:7c:ed:71:0d:68:1a:aa:19:85:28:23:e7:ff:6e:
08:cd:81:2e:89:d0:a0:6f:f0:18:fd:93:d2:ab:ba:87:90:76:
aa:6d:d5:01:34:03:90:34:6a:e5:10:5c:ce:cb:2c:37:ec:0a:
d2:9a:98:3a:bf:d0:24:2d:c5:01:58:4f:1f:9e:47:63:a4:1e:
d5:08:85:16:f7:db:5e:7e:5a:dc:e8:17:8d:e6:b9:fd:f7:0b:
8f:6b:93:fc:25:12:b9:6a:98:7b:96:d7:f0:c5:01:5e:6d:56:
e5:f3:66:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:37:09 2025 by rpki-client