Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/477c86-c7d6-4e37-bff6-a0072bac9f48/1/cms1Dp9PElni-cYJsi5l-9GGIGs.mft
File: cms1Dp9PElni-cYJsi5l-9GGIGs.mft (raw, json)
Hash identifier: od0eObTTYAQQ45zSjWcVclrti3VvddYc5WU0He7AxvU=
Subject key identifier: 03:BF:D1:56:74:91:48:61:56:76:BA:FF:D8:AE:1A:5F:4F:7F:AF:CF
Authority key identifier: 72:6B:35:0E:9F:4F:12:59:E2:F9:C6:09:B2:2E:65:FB:D1:86:20:6B
Certificate issuer: /CN=726b350e9f4f1259e2f9c609b22e65fbd186206b
Certificate serial: 0198D4E0E6705A0683E31550654B45FDEF14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cms1Dp9PElni-cYJsi5l-9GGIGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/477c86-c7d6-4e37-bff6-a0072bac9f48/1/cms1Dp9PElni-cYJsi5l-9GGIGs.mft
Manifest number: 0942
Signing time: Sat 23 Aug 2025 03:02:45 +0000
Manifest this update: Sat 23 Aug 2025 03:02:45 +0000
Manifest next update: Sun 24 Aug 2025 03:02:45 +0000
Files and hashes: 1: CgBNGq2vvpW1xEBq_J8TTjYOWu0.roa (hash: CfZUCA05oFbMMXS/ui8XIHr2JUyCob7FGarrcgeEvE0=)
2: _DE8jBpnVZ36FaQjKKqWbHiWbvo.roa (hash: nj3mkL3pbPWWGWLOVhi9o9i9dXTzVhaJgzjUgFTiKuo=)
3: cms1Dp9PElni-cYJsi5l-9GGIGs.crl (hash: fY2V6dLGFgVJeFNlTdanwPej0C88hwC/B97VFSjXaVQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/477c86-c7d6-4e37-bff6-a0072bac9f48/1/cms1Dp9PElni-cYJsi5l-9GGIGs.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/477c86-c7d6-4e37-bff6-a0072bac9f48/1/cms1Dp9PElni-cYJsi5l-9GGIGs.mft
rsync://rpki.ripe.net/repository/DEFAULT/cms1Dp9PElni-cYJsi5l-9GGIGs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:e6:70:5a:06:83:e3:15:50:65:4b:45:fd:ef:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=726b350e9f4f1259e2f9c609b22e65fbd186206b
Validity
Not Before: Aug 23 03:02:45 2025 GMT
Not After : Aug 24 03:02:45 2025 GMT
Subject: CN=03bfd156749148615676baffd8ae1a5f4f7fafcf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:4c:6b:47:a3:b7:59:b2:4c:a6:c1:80:f2:18:
7c:5c:7e:dc:56:13:cf:f2:d2:dc:b4:36:88:7b:3f:
0d:14:43:a2:d5:63:39:7b:f1:78:31:45:9c:cb:13:
e6:93:d7:35:fa:dd:3b:e2:bf:f9:5e:ff:e6:6d:6a:
1f:e9:f6:1a:e5:c1:df:d7:27:b7:73:f4:76:87:5f:
75:99:58:92:e6:dd:ae:a8:d3:d4:10:01:c4:59:30:
0b:a2:d9:3c:7c:39:df:6c:62:04:cd:2f:93:3f:8f:
94:4c:29:7e:2a:af:3e:9a:e5:a7:48:15:2a:76:35:
f1:2e:29:61:6a:dd:62:d1:6c:6a:07:0f:5a:35:33:
7b:ee:51:89:f7:d9:1d:18:f4:52:22:c0:bd:b9:6a:
b9:9c:70:4d:51:85:37:e3:cb:03:d3:ce:39:84:05:
97:1c:6c:d0:da:16:70:45:8e:0e:83:e3:e8:41:8c:
f7:c1:45:fe:69:12:be:4f:02:e9:8f:77:57:15:e1:
d5:67:83:cd:4f:21:59:09:3c:56:f6:46:b3:b8:5d:
25:e7:f4:c5:b5:4d:71:df:8f:16:9c:5e:9c:e6:80:
0c:9b:a7:57:d2:d0:79:c2:46:48:e8:e4:54:cf:10:
a5:bf:4c:fb:2e:22:15:20:a5:6d:d4:8f:f1:5d:d7:
b1:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:BF:D1:56:74:91:48:61:56:76:BA:FF:D8:AE:1A:5F:4F:7F:AF:CF
X509v3 Authority Key Identifier:
keyid:72:6B:35:0E:9F:4F:12:59:E2:F9:C6:09:B2:2E:65:FB:D1:86:20:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cms1Dp9PElni-cYJsi5l-9GGIGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/477c86-c7d6-4e37-bff6-a0072bac9f48/1/cms1Dp9PElni-cYJsi5l-9GGIGs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/477c86-c7d6-4e37-bff6-a0072bac9f48/1/cms1Dp9PElni-cYJsi5l-9GGIGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:c2:b8:a8:85:37:28:89:be:e0:72:6c:0a:8e:b8:0a:f8:1c:
5d:85:a5:ba:90:a4:65:17:b4:ee:1a:e2:45:80:ca:ba:b6:9e:
ff:8b:58:46:33:7d:7d:a0:34:71:38:a0:06:1b:00:ee:40:7a:
31:e0:9c:b0:3b:88:10:d5:4c:5b:f7:d0:e9:84:8b:5e:45:99:
06:c3:09:06:e1:da:16:15:b3:c8:ae:99:52:a8:e3:31:6f:1f:
fc:ed:f0:c1:a6:2d:37:9e:7d:cc:ae:cf:9f:e3:4d:5c:1e:57:
be:00:22:92:da:c9:6a:b6:a8:de:07:5b:af:cf:fb:0a:ef:bf:
f3:75:70:d3:1d:e8:d3:3f:81:0c:6b:e9:8f:87:ca:c3:b6:8e:
b7:8d:cb:8b:77:0a:ec:95:ec:76:99:48:16:6a:e2:ff:65:32:
63:a1:bf:4a:cc:bb:76:21:d3:49:e2:76:d7:d5:e0:a2:f4:a5:
ef:b6:94:8f:1d:cd:bf:4f:fe:db:0d:f7:3d:0b:59:4a:aa:d5:
58:3f:d5:26:1d:1f:ac:21:85:b2:67:67:57:73:ef:4c:b8:c8:
0c:dc:67:20:62:a9:42:81:51:6b:4f:22:9e:f1:a7:69:30:6a:
5c:07:5c:9a:e9:95:2e:2a:19:eb:52:f4:26:1b:94:4c:a1:39:
bf:b8:d7:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:13:34 2025 by rpki-client