Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/349b83-6f74-49ec-a4fc-57462c283294/1/CM1ntfl7p5Wmv4aQa3ccHdLLHck.mft
File: CM1ntfl7p5Wmv4aQa3ccHdLLHck.mft (raw, json)
Hash identifier: eKO82mQxsjuporEaxG16dbANxwbK+MZ7XD/9MeuI93c=
Subject key identifier: AF:93:6F:2D:E8:21:D2:4C:C9:6E:22:2D:CE:63:AF:64:42:78:EE:20
Authority key identifier: 08:CD:67:B5:F9:7B:A7:95:A6:BF:86:90:6B:77:1C:1D:D2:CB:1D:C9
Certificate issuer: /CN=08cd67b5f97ba795a6bf86906b771c1dd2cb1dc9
Certificate serial: 0198D65F4026D6C2569263CCB4A5D37B4550
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CM1ntfl7p5Wmv4aQa3ccHdLLHck.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/349b83-6f74-49ec-a4fc-57462c283294/1/CM1ntfl7p5Wmv4aQa3ccHdLLHck.mft
Manifest number: 0574
Signing time: Sat 23 Aug 2025 10:00:23 +0000
Manifest this update: Sat 23 Aug 2025 10:00:23 +0000
Manifest next update: Sun 24 Aug 2025 10:00:23 +0000
Files and hashes: 1: CM1ntfl7p5Wmv4aQa3ccHdLLHck.crl (hash: qnu7vl2iS7xY1BT/D2VCiQtXnh633q981CHrPkAMuaI=)
2: R2V69ZkOUTYrzFoNRRlCyipVFJY.roa (hash: 1fYxoQiQnyI9X886nVPbCzerEk6YCs6KXxGjMqHwwf0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/349b83-6f74-49ec-a4fc-57462c283294/1/CM1ntfl7p5Wmv4aQa3ccHdLLHck.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/349b83-6f74-49ec-a4fc-57462c283294/1/CM1ntfl7p5Wmv4aQa3ccHdLLHck.mft
rsync://rpki.ripe.net/repository/DEFAULT/CM1ntfl7p5Wmv4aQa3ccHdLLHck.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:40:26:d6:c2:56:92:63:cc:b4:a5:d3:7b:45:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08cd67b5f97ba795a6bf86906b771c1dd2cb1dc9
Validity
Not Before: Aug 23 10:00:23 2025 GMT
Not After : Aug 24 10:00:23 2025 GMT
Subject: CN=af936f2de821d24cc96e222dce63af644278ee20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:44:85:7c:99:75:4c:6a:8e:1e:3a:51:6e:0e:
73:6d:7c:f4:c9:44:74:49:2b:c2:74:cc:fb:f7:b3:
c8:86:24:57:f5:e6:5a:e0:4a:05:cc:15:3f:5b:d0:
1b:be:ff:6a:00:bf:94:cd:6d:b6:a4:66:7a:01:b8:
43:f3:fa:82:64:61:4d:a5:0e:81:69:d6:c7:d3:58:
b2:57:4d:63:19:0f:28:08:a0:2e:cb:d1:25:65:58:
2c:7d:50:c1:75:e1:bf:d6:28:a4:20:a8:ed:73:5d:
d5:52:d3:c4:25:22:2b:5d:08:91:95:e3:fe:79:d7:
ff:33:a9:c5:71:cc:21:1a:50:ca:44:15:2b:a8:10:
16:78:eb:4d:64:b8:34:a6:93:ab:2d:f9:1e:39:0c:
6c:61:0c:3f:cc:3b:ea:28:2c:f0:e1:85:6f:49:b3:
79:e8:13:d2:88:45:3e:0e:2a:32:2c:c4:61:53:98:
ea:ff:d8:eb:03:ab:d6:6b:41:5b:76:f3:a1:ac:02:
f0:59:16:a9:1f:d0:5e:7c:78:63:96:53:21:d1:c8:
e8:65:fd:cc:c8:2a:57:70:96:17:9e:e0:38:52:43:
2d:ac:65:b4:cf:4e:64:12:95:fa:f6:bc:33:1c:cc:
68:8f:ae:0b:39:66:8d:32:8d:20:d4:c4:27:36:f6:
57:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:93:6F:2D:E8:21:D2:4C:C9:6E:22:2D:CE:63:AF:64:42:78:EE:20
X509v3 Authority Key Identifier:
keyid:08:CD:67:B5:F9:7B:A7:95:A6:BF:86:90:6B:77:1C:1D:D2:CB:1D:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CM1ntfl7p5Wmv4aQa3ccHdLLHck.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/349b83-6f74-49ec-a4fc-57462c283294/1/CM1ntfl7p5Wmv4aQa3ccHdLLHck.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/349b83-6f74-49ec-a4fc-57462c283294/1/CM1ntfl7p5Wmv4aQa3ccHdLLHck.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:bd:2d:3c:a5:1e:c0:4d:af:64:af:f4:b2:60:2f:8a:5a:73:
2f:f7:14:1a:81:83:56:91:1f:07:d3:39:4f:da:eb:07:a4:6f:
34:d3:e4:2e:a5:27:58:01:b7:0f:04:d6:dd:3e:d1:a6:d1:84:
4e:77:44:c8:7f:c0:7e:23:52:a7:82:87:85:69:7c:bc:ef:92:
35:3b:be:92:7f:cc:78:1c:4c:dc:80:e2:19:03:17:1e:6e:5c:
ab:49:2f:e3:83:3c:66:0f:cd:72:73:aa:8d:4c:7d:86:04:e2:
bc:18:6d:02:47:6c:3e:1a:20:2d:42:23:db:23:48:be:1b:73:
7d:b4:54:eb:f7:8d:a2:cb:8a:76:3f:03:57:d0:9d:c6:f8:a5:
eb:6d:84:9f:c3:02:cf:2b:92:b3:a0:f4:2a:7a:b6:c9:fd:3f:
55:52:04:82:1c:df:ff:ea:be:8d:93:2c:cb:60:03:9f:e9:0c:
7d:ce:ec:b0:1a:ed:86:0e:b7:d0:1d:8e:ac:e8:b9:f0:2b:29:
32:f5:35:13:e9:bb:7b:02:db:7c:c1:a6:40:a7:c1:13:eb:8d:
fb:23:78:55:9c:f7:89:90:e7:95:32:08:2b:4a:b8:ad:f2:54:
42:90:36:04:93:cf:a9:8a:b6:3b:c4:5e:aa:42:76:30:05:28:
b8:c1:93:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:44:55 2025 by rpki-client