Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/4459b4-1838-4231-bd2c-40c0a652450a/1/c0-mGwhlEDj6-B6_El7IRbGWGIM.mft
File: c0-mGwhlEDj6-B6_El7IRbGWGIM.mft (raw, json)
Hash identifier: lM7YJzbVOT2cjj6oKzww13y9tkiszviRnuVvka7Q0cw=
Subject key identifier: D1:B5:22:04:0B:49:BD:39:1D:CC:9B:43:62:F0:92:67:82:A1:63:C7
Authority key identifier: 73:4F:A6:1B:08:65:10:38:FA:F8:1E:BF:12:5E:C8:45:B1:96:18:83
Certificate issuer: /CN=734fa61b08651038faf81ebf125ec845b1961883
Certificate serial: 0198D65F8A2F21C380D6519D8456AE35E527
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c0-mGwhlEDj6-B6_El7IRbGWGIM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/4459b4-1838-4231-bd2c-40c0a652450a/1/c0-mGwhlEDj6-B6_El7IRbGWGIM.mft
Manifest number: 0759
Signing time: Sat 23 Aug 2025 10:00:42 +0000
Manifest this update: Sat 23 Aug 2025 10:00:42 +0000
Manifest next update: Sun 24 Aug 2025 10:00:42 +0000
Files and hashes: 1: Ef_L0S4-Bp45a4AhicIQvktRdz4.roa (hash: /8pqkPBMXDiyNztqWEzFfiF8Q4r48DyQf1X0AGe+tXU=)
2: KD8apQsVPJ4S-o7CJiMR0Jx51PQ.roa (hash: 8wRRkrMsyRGit65zp+ividrP3xMpOsDdKqxjsreQ+LE=)
3: c0-mGwhlEDj6-B6_El7IRbGWGIM.crl (hash: AcFluuvq0hPldqoio/1Z5LY98TLQ7p8xelO8TmO3GEQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/4459b4-1838-4231-bd2c-40c0a652450a/1/c0-mGwhlEDj6-B6_El7IRbGWGIM.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/4459b4-1838-4231-bd2c-40c0a652450a/1/c0-mGwhlEDj6-B6_El7IRbGWGIM.mft
rsync://rpki.ripe.net/repository/DEFAULT/c0-mGwhlEDj6-B6_El7IRbGWGIM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:8a:2f:21:c3:80:d6:51:9d:84:56:ae:35:e5:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=734fa61b08651038faf81ebf125ec845b1961883
Validity
Not Before: Aug 23 10:00:42 2025 GMT
Not After : Aug 24 10:00:42 2025 GMT
Subject: CN=d1b522040b49bd391dcc9b4362f0926782a163c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:2a:f2:0f:5c:37:be:7f:3e:6d:3b:53:91:41:
47:a7:92:f2:bf:5e:d6:14:fd:c7:1f:f9:dc:2c:92:
5c:93:eb:da:06:a9:b1:87:98:7f:9c:96:cc:63:9b:
b8:30:44:bb:35:98:4d:16:77:90:87:38:66:cc:b0:
6e:10:1e:58:22:3f:f0:89:cc:f6:a0:b6:ff:79:0a:
52:d7:23:25:c3:cf:ed:a9:41:84:03:02:5f:ab:fb:
77:84:71:ef:43:53:e4:a0:02:e7:12:78:1a:f2:c3:
3c:ee:f4:73:bb:08:05:1c:3c:d6:c6:3f:f3:19:87:
6b:79:c0:0b:07:9e:73:db:6e:26:0f:d5:4f:f9:fc:
e4:70:cc:fd:71:46:3f:fd:fd:3f:33:47:7d:8f:50:
ff:19:03:f1:07:f1:58:ad:b1:ff:50:bc:f8:26:1f:
a8:86:2a:71:6f:23:50:db:22:fa:97:d3:e5:56:cc:
6b:a5:ee:58:a3:c2:fb:81:6c:2f:f0:ba:fd:75:9d:
49:8d:7c:44:52:f1:1f:87:e2:3d:c3:b4:b8:fd:52:
d9:39:6a:88:fd:f8:71:57:19:18:c9:4e:87:00:79:
d5:11:28:22:c4:72:e7:ac:de:59:5e:8c:4c:f8:02:
20:58:96:86:2f:8b:8d:51:26:d3:ec:05:ad:c3:41:
35:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:B5:22:04:0B:49:BD:39:1D:CC:9B:43:62:F0:92:67:82:A1:63:C7
X509v3 Authority Key Identifier:
keyid:73:4F:A6:1B:08:65:10:38:FA:F8:1E:BF:12:5E:C8:45:B1:96:18:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0-mGwhlEDj6-B6_El7IRbGWGIM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/4459b4-1838-4231-bd2c-40c0a652450a/1/c0-mGwhlEDj6-B6_El7IRbGWGIM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/4459b4-1838-4231-bd2c-40c0a652450a/1/c0-mGwhlEDj6-B6_El7IRbGWGIM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:74:78:c2:0f:3e:16:8e:e2:67:68:7a:10:20:88:f2:f4:d4:
72:04:6e:2f:62:76:59:06:b4:a7:9b:84:f2:db:e1:49:6c:ff:
94:c7:e4:4b:b2:c7:36:1d:47:48:0a:f2:5b:02:0a:92:a7:8b:
ec:dd:fe:fd:28:a4:3d:fa:66:29:31:af:69:51:5e:a3:79:da:
74:3a:36:0a:12:f3:95:8a:50:ea:20:9b:2f:ee:20:4f:84:7a:
69:82:ca:42:c8:47:9f:60:1b:3e:d1:56:7a:76:30:90:1a:1f:
05:0d:75:6f:56:89:76:b8:e2:d7:a2:99:ea:89:99:24:19:fd:
e3:ad:58:cc:a8:9d:f3:47:ed:0e:9e:04:7d:25:54:2c:05:15:
65:45:a4:5b:61:12:21:a7:ba:c6:69:c6:f0:f3:8f:9e:24:f6:
35:6d:a6:50:eb:1f:bd:7f:de:c3:ce:b8:76:7a:65:f2:00:99:
38:32:97:d8:d9:2e:e6:a7:4e:a7:02:f6:e1:1a:3f:1b:ca:3d:
57:8d:da:fc:ba:a8:c6:82:bb:0c:70:52:8b:14:ee:6c:ef:f8:
8d:07:f4:a2:16:03:3b:e7:42:0e:86:5c:01:50:9c:c9:34:b4:
48:08:37:5a:92:bb:7a:1f:dc:05:4f:02:1d:fb:35:84:a0:8a:
b4:30:61:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:42:29 2025 by rpki-client