Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/e26d9c-d851-4a69-95f9-1504ea53e255/1/cK01PMGg0W1ejhSjdXWm89YFY_g.mft
File: cK01PMGg0W1ejhSjdXWm89YFY_g.mft (raw, json)
Hash identifier: NRY6GzRX9GCchN2zyUR3cdPrCZVj+XK6uqvZfoEElw8=
Subject key identifier: EA:62:D6:94:CC:93:52:41:70:4F:63:BC:42:04:FF:EC:AF:1F:D0:C4
Authority key identifier: 70:AD:35:3C:C1:A0:D1:6D:5E:8E:14:A3:75:75:A6:F3:D6:05:63:F8
Certificate issuer: /CN=70ad353cc1a0d16d5e8e14a37575a6f3d60563f8
Certificate serial: 0198D5BBB6F2B88AA2801E65B1E3F1B4AC34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cK01PMGg0W1ejhSjdXWm89YFY_g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/e26d9c-d851-4a69-95f9-1504ea53e255/1/cK01PMGg0W1ejhSjdXWm89YFY_g.mft
Manifest number: 164A
Signing time: Sat 23 Aug 2025 07:01:45 +0000
Manifest this update: Sat 23 Aug 2025 07:01:45 +0000
Manifest next update: Sun 24 Aug 2025 07:01:45 +0000
Files and hashes: 1: 5O-Lg4XDVCjsXNfMtLLsnISMRVo.roa (hash: VmXDM+lE33fYX4GAlA3VUKdsqtXyObkMk9hssfXkX7Q=)
2: CY-tvdBWBt7wOg3GB0icUZ8MPCA.roa (hash: Ejbz7aRM11I5vJNNpK3p8qUEl2ngpQB+ME89yYTVcX4=)
3: cK01PMGg0W1ejhSjdXWm89YFY_g.crl (hash: ulfOp5exQ65aOnsP2RFhCvzOJGEd14ZzCcwtOPH8N/Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/e26d9c-d851-4a69-95f9-1504ea53e255/1/cK01PMGg0W1ejhSjdXWm89YFY_g.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/e26d9c-d851-4a69-95f9-1504ea53e255/1/cK01PMGg0W1ejhSjdXWm89YFY_g.mft
rsync://rpki.ripe.net/repository/DEFAULT/cK01PMGg0W1ejhSjdXWm89YFY_g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:b6:f2:b8:8a:a2:80:1e:65:b1:e3:f1:b4:ac:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70ad353cc1a0d16d5e8e14a37575a6f3d60563f8
Validity
Not Before: Aug 23 07:01:45 2025 GMT
Not After : Aug 24 07:01:45 2025 GMT
Subject: CN=ea62d694cc935241704f63bc4204ffecaf1fd0c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:6a:34:2f:5b:fe:ed:77:e9:0c:7f:8f:c5:48:
85:c2:36:9d:c7:7f:c0:dc:72:b6:c4:24:50:5e:15:
bb:e5:8d:6e:10:9f:37:bb:c3:88:52:94:64:37:3f:
2e:58:b7:7f:f6:a2:7d:04:3b:10:24:44:fe:18:c5:
85:f5:79:9f:37:d4:f5:d6:a5:b1:81:c4:58:ab:32:
88:04:a2:52:15:3a:01:5d:7a:4f:e4:ac:5e:8c:87:
23:4d:50:09:2c:6d:2d:d2:96:40:a6:04:51:a9:02:
26:7e:bc:0b:5e:11:29:9b:3a:96:9c:c8:d4:0a:b8:
ec:99:0d:6a:73:19:87:29:66:52:11:79:82:00:eb:
78:a5:8b:a5:9d:f5:0e:2c:0f:ca:80:54:99:6a:fa:
c4:d5:20:8f:21:8a:f5:90:97:8f:85:d9:87:30:68:
0e:60:59:ca:de:17:ec:ce:d6:f0:4b:e1:ea:67:e2:
fb:74:bc:8b:92:f6:f7:cd:ed:a0:6a:91:b4:78:f5:
0e:c6:0b:e6:28:30:cf:ac:3d:d8:8d:bd:5d:18:a0:
5b:a6:c9:99:8b:e4:80:45:39:1e:f8:25:00:a1:9d:
49:81:01:bb:c0:18:25:db:29:9e:61:d1:7a:ce:ff:
e0:ff:b2:0e:43:78:68:30:23:23:0e:8f:c3:9e:66:
94:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:62:D6:94:CC:93:52:41:70:4F:63:BC:42:04:FF:EC:AF:1F:D0:C4
X509v3 Authority Key Identifier:
keyid:70:AD:35:3C:C1:A0:D1:6D:5E:8E:14:A3:75:75:A6:F3:D6:05:63:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cK01PMGg0W1ejhSjdXWm89YFY_g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e26d9c-d851-4a69-95f9-1504ea53e255/1/cK01PMGg0W1ejhSjdXWm89YFY_g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e26d9c-d851-4a69-95f9-1504ea53e255/1/cK01PMGg0W1ejhSjdXWm89YFY_g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:6e:b8:26:da:ec:2b:fe:21:6b:95:e3:97:5b:bb:25:8e:17:
7f:d0:b9:d1:07:e6:c1:42:7e:9b:05:03:83:7f:af:d8:09:41:
f6:08:bb:62:36:a1:41:42:39:2c:b2:f5:15:a5:45:49:4c:a8:
5d:5d:3a:86:97:57:75:1e:7b:5d:3d:96:47:ed:ae:fa:ba:d6:
c3:6e:cb:a5:b6:55:ec:29:75:1e:fd:f2:0b:ac:51:63:a6:4b:
26:cd:cb:73:b7:64:17:b5:1b:e6:5f:9d:e4:79:a9:3e:df:40:
f0:f3:87:ad:a8:2c:1b:c2:ef:1b:f8:a0:30:81:b5:28:5d:d0:
c2:21:55:ba:9e:f4:a2:26:da:85:84:9b:d6:c2:8d:7d:cf:3b:
77:e7:7f:60:2c:0c:45:77:33:0e:db:d7:70:9a:0b:3d:35:f5:
dd:1a:94:12:05:41:6f:44:88:37:34:f8:2a:45:2e:a5:16:ff:
0d:69:9b:57:83:bb:63:80:35:2e:f7:d2:49:12:39:cf:fb:c7:
6b:55:2c:d3:0c:df:ab:94:9e:35:32:cc:86:e4:70:1b:5c:c4:
52:e0:f7:53:bb:64:c2:73:f9:5f:a9:6b:34:ba:6b:b8:64:ad:
40:e9:8b:7b:49:0f:f3:86:04:1e:63:c7:b7:25:0c:e2:7f:7f:
d6:1f:22:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:29:28 2025 by rpki-client