Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/3cac6b-2c2a-4b66-adee-d52325de6b08/1/01Cgds5KjOb7afH9pKGUYUqUGvo.mft
File: 01Cgds5KjOb7afH9pKGUYUqUGvo.mft (raw, json)
Hash identifier: WnaN/kJFJpSKpRYs//kNTglkWSIEw9W1nT2UxiWKZXk=
Subject key identifier: 03:5B:F1:0E:6C:1E:8C:19:ED:1D:28:5D:1A:E7:7C:34:AF:6D:DF:D7
Authority key identifier: D3:50:A0:76:CE:4A:8C:E6:FB:69:F1:FD:A4:A1:94:61:4A:94:1A:FA
Certificate issuer: /CN=d350a076ce4a8ce6fb69f1fda4a194614a941afa
Certificate serial: 0198D4DFF0E4584674A5EC272007B1A1BA68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/01Cgds5KjOb7afH9pKGUYUqUGvo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/3cac6b-2c2a-4b66-adee-d52325de6b08/1/01Cgds5KjOb7afH9pKGUYUqUGvo.mft
Manifest number: 164A
Signing time: Sat 23 Aug 2025 03:01:42 +0000
Manifest this update: Sat 23 Aug 2025 03:01:42 +0000
Manifest next update: Sun 24 Aug 2025 03:01:42 +0000
Files and hashes: 1: 01Cgds5KjOb7afH9pKGUYUqUGvo.crl (hash: 3jAXvT4h6KgetTdF3woEIJJfec+OipxR+mi5Ximpy5w=)
2: OHSnHISpUOg0a2IaET-7LST2nHw.roa (hash: oeWDTr24DHxY0Ln8Ar9TYuW/yYnaSQVcRJXJMi+oDck=)
3: qpaxXHw6CdsxQ2wzd3NCOLPGlGs.roa (hash: hJxFH9vZ+FKOP/6zKZOcfuqIjzXEfzETnfkGtTZDPOo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/3cac6b-2c2a-4b66-adee-d52325de6b08/1/01Cgds5KjOb7afH9pKGUYUqUGvo.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/3cac6b-2c2a-4b66-adee-d52325de6b08/1/01Cgds5KjOb7afH9pKGUYUqUGvo.mft
rsync://rpki.ripe.net/repository/DEFAULT/01Cgds5KjOb7afH9pKGUYUqUGvo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:df:f0:e4:58:46:74:a5:ec:27:20:07:b1:a1:ba:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d350a076ce4a8ce6fb69f1fda4a194614a941afa
Validity
Not Before: Aug 23 03:01:42 2025 GMT
Not After : Aug 24 03:01:42 2025 GMT
Subject: CN=035bf10e6c1e8c19ed1d285d1ae77c34af6ddfd7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:5e:2f:5e:19:3e:0b:0f:a2:f7:90:07:96:26:
e7:54:57:54:95:57:bd:90:41:82:4c:1b:52:90:36:
ea:60:a4:15:01:35:cf:36:fe:51:10:45:ad:97:0f:
0f:a5:ad:21:fd:c1:04:ff:8d:bd:6c:ea:0e:41:f1:
11:78:67:23:77:3d:8c:1d:b5:08:56:47:aa:9d:29:
e7:da:24:56:53:de:38:15:7d:d9:74:9f:f1:d8:71:
e2:9a:6d:f6:bd:f5:8d:67:84:56:9b:b7:b5:9b:72:
73:31:55:f1:3d:10:2e:5a:37:f8:a0:36:e9:4a:c5:
0f:e9:82:4c:b2:60:6d:e2:b6:c7:d8:72:03:78:08:
92:82:06:3b:72:13:ba:56:23:e7:ee:bd:0e:f0:e4:
d8:3c:2c:f3:95:52:12:55:63:de:34:d8:a8:20:18:
e5:5c:8a:21:05:45:b4:b8:d6:92:ef:f8:a1:3f:6c:
65:89:75:57:c3:ec:37:0f:c4:a1:23:22:4f:aa:fb:
af:98:b5:55:ae:d1:12:f1:a7:5a:51:ce:22:42:0d:
28:63:82:7a:d4:29:ec:80:c1:6c:94:ac:02:42:b3:
5b:76:ed:47:6d:88:f1:d8:8d:c2:d3:fc:2b:2a:58:
33:99:90:b8:89:fe:b5:ad:12:d2:a5:e4:76:b4:80:
45:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:5B:F1:0E:6C:1E:8C:19:ED:1D:28:5D:1A:E7:7C:34:AF:6D:DF:D7
X509v3 Authority Key Identifier:
keyid:D3:50:A0:76:CE:4A:8C:E6:FB:69:F1:FD:A4:A1:94:61:4A:94:1A:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/01Cgds5KjOb7afH9pKGUYUqUGvo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/3cac6b-2c2a-4b66-adee-d52325de6b08/1/01Cgds5KjOb7afH9pKGUYUqUGvo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/3cac6b-2c2a-4b66-adee-d52325de6b08/1/01Cgds5KjOb7afH9pKGUYUqUGvo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:ff:a8:51:d2:ab:a1:3a:33:6f:00:ca:9c:c7:c0:00:11:0f:
f5:98:5a:0f:21:9c:31:c3:16:b9:ee:cc:04:2a:ae:01:6c:20:
ac:52:ca:0e:e4:32:44:ad:f7:0f:2d:4c:dd:55:a3:26:34:22:
9f:c5:a3:22:d8:d3:0c:1b:d8:c6:78:a4:a9:c3:1a:84:cd:c6:
f3:81:69:e3:97:0a:b9:dc:8b:25:9b:12:1c:ac:b2:1e:f0:d0:
93:e9:d7:7d:54:0e:28:79:d3:f4:be:8c:a4:4e:63:50:9f:2d:
9d:bd:cd:b3:40:e6:f7:59:9f:1a:c6:9b:10:0f:9d:20:24:f4:
77:bc:e5:f4:6c:51:e9:85:68:c5:6f:a8:2d:64:4e:f7:8c:da:
99:36:8b:fa:77:d0:fa:f4:86:92:68:d5:1f:51:3a:08:fe:63:
89:80:35:28:54:0c:c2:94:e8:4f:92:0b:8d:65:ec:32:d8:42:
f2:71:3b:b5:72:4d:5a:e9:48:c4:fa:22:0b:86:bc:37:7b:59:
92:38:c7:e0:19:5b:35:94:47:73:11:82:bc:09:c1:4e:05:d8:
94:c4:38:52:f0:3d:21:10:1a:de:6a:d8:e0:88:73:f0:9d:b7:
93:e7:aa:d7:92:6b:fb:cd:eb:c2:89:24:1c:37:23:d1:dc:fb:
7c:ae:fb:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 09:49:30 2025 by rpki-client