Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/4e1bc8-f810-4182-a6e3-721bb4fc8c16/1/CWbgXRUnUN-q3l-veRutOR3G0tQ.mft
File: CWbgXRUnUN-q3l-veRutOR3G0tQ.mft (raw, json)
Hash identifier: mC4Qc42OLgKlOEHX8mECowmkQJQPKfz0UqyY1ig9nss=
Subject key identifier: 06:9E:29:E3:26:CA:02:97:42:E4:4E:2F:B0:8C:DF:2F:73:B7:45:7C
Authority key identifier: 09:66:E0:5D:15:27:50:DF:AA:DE:5F:AF:79:1B:AD:39:1D:C6:D2:D4
Certificate issuer: /CN=0966e05d152750dfaade5faf791bad391dc6d2d4
Certificate serial: 0198D54DF0BA781DFFCFF50FB40312EE7205
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CWbgXRUnUN-q3l-veRutOR3G0tQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/4e1bc8-f810-4182-a6e3-721bb4fc8c16/1/CWbgXRUnUN-q3l-veRutOR3G0tQ.mft
Manifest number: 0E8B
Signing time: Sat 23 Aug 2025 05:01:51 +0000
Manifest this update: Sat 23 Aug 2025 05:01:51 +0000
Manifest next update: Sun 24 Aug 2025 05:01:51 +0000
Files and hashes: 1: 5bzk29WC2HSF9C0WZb2ngqPQ56o.roa (hash: fHgyyYyWXqEUztNgt56ZVo1FPxKD7CyfYBjgqkUt9TI=)
2: CWbgXRUnUN-q3l-veRutOR3G0tQ.crl (hash: 0CVOtoLU5gH4A26maxX9xPYkI7OwH8QwBO/GN4tjYIo=)
3: VYOb-2PB3WKsCUYPT2j-nf80wMs.roa (hash: YpnMPKkA2P+LHKT+FLRfK5zKYPPPwWgoJKnxE9kTcx8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/4e1bc8-f810-4182-a6e3-721bb4fc8c16/1/CWbgXRUnUN-q3l-veRutOR3G0tQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/4e1bc8-f810-4182-a6e3-721bb4fc8c16/1/CWbgXRUnUN-q3l-veRutOR3G0tQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/CWbgXRUnUN-q3l-veRutOR3G0tQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4d:f0:ba:78:1d:ff:cf:f5:0f:b4:03:12:ee:72:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0966e05d152750dfaade5faf791bad391dc6d2d4
Validity
Not Before: Aug 23 05:01:51 2025 GMT
Not After : Aug 24 05:01:51 2025 GMT
Subject: CN=069e29e326ca029742e44e2fb08cdf2f73b7457c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:71:5f:c7:d1:95:41:db:28:f9:71:36:21:8e:
ee:09:01:0b:4e:01:4a:5b:cc:da:88:1f:8d:21:ca:
fe:d7:db:06:64:37:9a:6e:7b:93:09:8a:1b:27:33:
0e:93:6f:57:57:c0:15:dc:d6:ac:88:da:dc:72:16:
df:f8:26:21:16:f5:63:1e:d6:4a:a0:43:67:d6:e7:
3d:b7:f8:2a:b6:af:13:f0:8c:20:fd:99:10:73:9a:
f4:bd:41:53:65:98:56:d0:54:54:7f:51:2b:c6:cf:
0a:a5:a0:2d:29:5a:57:f4:50:cd:84:41:b7:dc:01:
e2:50:ef:0f:38:d0:0f:01:cc:54:40:e9:31:fc:f3:
8b:e6:95:47:96:9f:ee:22:6e:8e:97:4d:19:f3:40:
a4:b8:f7:8f:f2:64:d4:23:10:ab:f1:3b:ce:62:81:
cf:63:ee:e8:5d:a9:f3:88:a0:c5:22:dd:7c:82:bf:
f5:13:7e:6e:c5:be:58:5b:e8:47:93:0c:34:29:72:
29:58:f7:5d:de:77:c5:ab:4e:79:37:0b:12:65:a1:
57:79:92:99:bf:43:db:8f:36:e0:29:f1:e4:36:32:
fe:f9:8d:ec:63:66:0f:21:9a:46:ec:ad:43:f0:b9:
2d:3a:9a:d4:66:ef:4e:4f:68:45:2b:3a:8b:cf:b4:
86:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:9E:29:E3:26:CA:02:97:42:E4:4E:2F:B0:8C:DF:2F:73:B7:45:7C
X509v3 Authority Key Identifier:
keyid:09:66:E0:5D:15:27:50:DF:AA:DE:5F:AF:79:1B:AD:39:1D:C6:D2:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CWbgXRUnUN-q3l-veRutOR3G0tQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/4e1bc8-f810-4182-a6e3-721bb4fc8c16/1/CWbgXRUnUN-q3l-veRutOR3G0tQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/4e1bc8-f810-4182-a6e3-721bb4fc8c16/1/CWbgXRUnUN-q3l-veRutOR3G0tQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:70:88:a5:9d:84:3f:7f:18:77:11:eb:c6:35:eb:19:80:0c:
48:27:60:c9:6c:54:43:9a:5a:ea:25:e8:bd:8a:cb:0d:06:42:
23:70:7c:a4:42:5f:0e:70:ba:86:a5:cf:b7:0c:2d:51:fa:0b:
c2:4b:bc:c1:7f:5e:79:17:a8:13:19:be:79:83:3c:d5:de:ca:
72:f7:65:3b:e8:b5:62:82:9d:fd:43:51:ff:86:62:bf:73:2f:
08:50:9a:79:36:f5:74:61:35:a2:52:9d:7a:3c:cd:b9:af:1b:
e3:ad:6e:1a:bb:f1:b5:cd:aa:07:87:3e:c2:f9:c8:e2:3b:36:
44:cd:34:b2:20:12:7f:12:61:24:13:57:2a:aa:dd:e1:7b:4b:
d0:4c:45:ed:7c:d8:02:ab:89:a2:45:b0:f6:73:5f:ae:79:c1:
57:67:b9:01:7e:d4:1c:8e:16:50:7c:79:9c:6c:97:b2:55:0e:
3d:c9:9a:96:f7:b7:13:fc:f7:95:1e:c3:3d:bf:70:27:c3:3f:
c5:92:be:50:c4:61:bb:f0:80:b5:61:7a:8e:92:0c:9e:6c:13:
56:fa:a5:d1:e4:f3:f6:ea:9e:6c:b9:ba:4d:2c:11:1a:4e:cc:
bc:92:9c:c5:d0:63:64:56:79:03:8a:9b:02:6e:c3:a9:6c:28:
99:77:28:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:11:54 2025 by rpki-client