Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/503603-1a5d-4900-9829-48dea1021a69/1/CLDxLxFa1A8sK0qtRU0uQ2EcmgY.mft
File: CLDxLxFa1A8sK0qtRU0uQ2EcmgY.mft (raw, json)
Hash identifier: DAH9GyPOaD1sobwEtNPqtsl8JXifO7m100yt9idQ+1c=
Subject key identifier: 82:72:C7:8F:42:51:BC:69:34:1A:8E:0D:93:55:AD:0A:41:38:DF:49
Authority key identifier: 08:B0:F1:2F:11:5A:D4:0F:2C:2B:4A:AD:45:4D:2E:43:61:1C:9A:06
Certificate issuer: /CN=08b0f12f115ad40f2c2b4aad454d2e43611c9a06
Certificate serial: 0198D54E5CF64DE17799975F9643135F37BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CLDxLxFa1A8sK0qtRU0uQ2EcmgY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/503603-1a5d-4900-9829-48dea1021a69/1/CLDxLxFa1A8sK0qtRU0uQ2EcmgY.mft
Manifest number: 12E3
Signing time: Sat 23 Aug 2025 05:02:19 +0000
Manifest this update: Sat 23 Aug 2025 05:02:19 +0000
Manifest next update: Sun 24 Aug 2025 05:02:19 +0000
Files and hashes: 1: CLDxLxFa1A8sK0qtRU0uQ2EcmgY.crl (hash: O2vJYcyFRYqC15qTRPycDP+Q4+4zhwF2p0lzUn6ZHfQ=)
2: tFsxYNJ-pvk9ebf-ewoCu0vCFeI.roa (hash: fEyaOVZRLIFifs+RWkNXOgYvzq9xsl1Jvqnurm5BNu8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/503603-1a5d-4900-9829-48dea1021a69/1/CLDxLxFa1A8sK0qtRU0uQ2EcmgY.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/503603-1a5d-4900-9829-48dea1021a69/1/CLDxLxFa1A8sK0qtRU0uQ2EcmgY.mft
rsync://rpki.ripe.net/repository/DEFAULT/CLDxLxFa1A8sK0qtRU0uQ2EcmgY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:5c:f6:4d:e1:77:99:97:5f:96:43:13:5f:37:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08b0f12f115ad40f2c2b4aad454d2e43611c9a06
Validity
Not Before: Aug 23 05:02:19 2025 GMT
Not After : Aug 24 05:02:19 2025 GMT
Subject: CN=8272c78f4251bc69341a8e0d9355ad0a4138df49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:f2:2b:99:cc:c5:5d:79:37:bb:cc:28:ce:9b:
ca:0a:52:c4:0f:32:19:4e:ab:dd:89:d2:62:ca:65:
d4:7c:ca:39:4e:ff:ae:c2:f7:e2:0b:47:fe:e3:db:
70:a4:16:ee:7e:80:16:b6:b7:28:7a:45:de:0b:19:
e4:36:7b:9c:9f:6c:89:a1:3b:5c:d4:2f:b3:53:0e:
17:14:85:a1:d6:80:49:a8:c6:05:f1:c7:a9:a6:eb:
ff:01:9a:e9:86:00:f3:26:bd:17:f3:f6:67:07:ed:
64:62:80:bf:f2:50:43:13:06:29:02:6c:eb:a3:33:
4a:f5:5d:4c:1a:e1:d2:24:8b:7c:b8:ef:e2:b1:13:
eb:e9:97:70:1e:b9:9d:f5:27:9a:c8:cb:ad:2b:ea:
78:0b:4f:43:8d:37:b5:cb:c3:b5:47:cc:cb:56:55:
f3:3c:4c:48:49:88:fd:c5:09:4d:5d:a9:5c:29:6f:
77:e5:a7:95:ab:27:09:dd:bb:ef:c4:96:70:34:47:
9d:7a:db:95:67:a7:04:db:c4:14:a4:28:61:71:14:
de:ea:3b:94:d7:7c:b0:0f:20:56:80:73:b9:60:5c:
c2:5d:e5:7e:36:97:c0:81:92:47:38:30:b7:b8:ec:
bb:fb:03:34:ce:d3:6d:57:28:c5:b8:1e:42:5e:bd:
73:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:72:C7:8F:42:51:BC:69:34:1A:8E:0D:93:55:AD:0A:41:38:DF:49
X509v3 Authority Key Identifier:
keyid:08:B0:F1:2F:11:5A:D4:0F:2C:2B:4A:AD:45:4D:2E:43:61:1C:9A:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CLDxLxFa1A8sK0qtRU0uQ2EcmgY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/503603-1a5d-4900-9829-48dea1021a69/1/CLDxLxFa1A8sK0qtRU0uQ2EcmgY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/503603-1a5d-4900-9829-48dea1021a69/1/CLDxLxFa1A8sK0qtRU0uQ2EcmgY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:13:2e:de:53:74:de:2d:2f:8b:85:7f:ce:db:b4:43:0d:ba:
b3:1c:05:3f:9c:1c:c3:fe:9a:77:ec:9a:38:91:d8:a7:e5:eb:
b7:4f:56:35:c7:c1:80:90:44:28:94:58:96:ba:67:4c:31:61:
c2:5c:7d:83:bb:95:1e:7c:66:a6:1a:1b:78:7d:d6:b9:72:22:
d1:62:ca:2b:8f:e2:57:17:8b:48:ef:d7:14:50:58:9e:49:f9:
1d:4d:5a:89:81:21:84:fc:5f:b0:05:3b:5f:21:10:d9:94:92:
40:ae:3d:ff:71:fb:7e:01:b1:18:1e:9a:72:5b:9d:15:2a:a5:
68:da:b0:d1:4c:ef:99:45:d5:23:85:53:82:2c:1a:3f:13:76:
c1:06:20:61:67:88:59:fa:1e:52:f6:69:d2:96:c5:15:37:23:
ea:77:c5:d5:03:71:1a:72:e4:82:ff:19:43:8c:f1:be:ee:36:
76:48:94:55:d1:d1:f6:a7:f4:a5:e1:68:32:0c:a1:b6:21:5c:
9e:30:b5:98:e6:67:a5:13:10:fa:30:19:ca:f1:99:63:c1:cb:
7d:f9:8d:eb:af:25:57:d7:41:ab:84:79:63:a8:1c:5d:67:72:
74:b1:06:cd:36:75:cc:f6:0c:49:f5:f9:40:9f:4a:98:64:53:
53:8f:3e:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:52:58 2025 by rpki-client