Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/1faa24-f086-4b48-b1bd-45527e8e44d2/1/cuEqOHb_e9ANnZ67lyqx5iHqHo0.mft
File: cuEqOHb_e9ANnZ67lyqx5iHqHo0.mft (raw, json)
Hash identifier: MlVuVKVyEZqlDAnnNesiCylRdsEuA5VmiqHJwy9Y7eQ=
Subject key identifier: 2D:D8:6C:2C:9C:C7:C9:F9:2D:07:75:03:86:31:26:45:82:A2:9F:40
Authority key identifier: 72:E1:2A:38:76:FF:7B:D0:0D:9D:9E:BB:97:2A:B1:E6:21:EA:1E:8D
Certificate issuer: /CN=72e12a3876ff7bd00d9d9ebb972ab1e621ea1e8d
Certificate serial: 0198D583EC6BA4C1C395EF8C2FDE9B28604E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cuEqOHb_e9ANnZ67lyqx5iHqHo0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/1faa24-f086-4b48-b1bd-45527e8e44d2/1/cuEqOHb_e9ANnZ67lyqx5iHqHo0.mft
Manifest number: 15DC
Signing time: Sat 23 Aug 2025 06:00:49 +0000
Manifest this update: Sat 23 Aug 2025 06:00:49 +0000
Manifest next update: Sun 24 Aug 2025 06:00:49 +0000
Files and hashes: 1: cuEqOHb_e9ANnZ67lyqx5iHqHo0.crl (hash: insy0T51TkaqdhTEJbbL05Hs/gLqxuZe0DHcwMX5iVY=)
2: daRkFVsWIwe8tAsklauoDwt6UpA.roa (hash: a6fXOEYxSdy4VfRiyyu63eijEDfNFxmj7t/XlgH/vhk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/1faa24-f086-4b48-b1bd-45527e8e44d2/1/cuEqOHb_e9ANnZ67lyqx5iHqHo0.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/1faa24-f086-4b48-b1bd-45527e8e44d2/1/cuEqOHb_e9ANnZ67lyqx5iHqHo0.mft
rsync://rpki.ripe.net/repository/DEFAULT/cuEqOHb_e9ANnZ67lyqx5iHqHo0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:ec:6b:a4:c1:c3:95:ef:8c:2f:de:9b:28:60:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72e12a3876ff7bd00d9d9ebb972ab1e621ea1e8d
Validity
Not Before: Aug 23 06:00:49 2025 GMT
Not After : Aug 24 06:00:49 2025 GMT
Subject: CN=2dd86c2c9cc7c9f92d0775038631264582a29f40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:91:c6:9d:b3:d3:6f:c6:3c:4c:90:3e:aa:37:
8d:30:0e:d2:3b:20:5a:1f:5e:f5:8c:70:20:55:4f:
67:21:51:02:d7:61:1f:66:67:e8:bc:a3:40:4a:1a:
b0:39:25:66:2f:bc:56:b6:11:b7:e9:cf:19:a2:e0:
f4:de:c5:ba:fd:4c:4b:47:71:b8:bf:c3:95:be:eb:
39:a4:c3:ae:7f:17:fb:51:c4:50:af:a3:08:c7:67:
0d:f1:cb:17:ad:15:d1:80:1d:34:e9:61:43:7d:b9:
3e:af:23:58:d6:ac:75:c9:12:b7:08:8b:b9:6b:87:
43:3c:73:7e:b2:91:7a:46:4b:64:c1:a9:99:fc:b4:
54:e9:c1:19:2a:f5:2f:d6:1f:ec:fb:b1:60:61:db:
c1:12:ef:04:2c:ea:98:c6:93:79:ee:5c:fd:c8:7d:
16:7d:22:9f:b2:22:69:f3:c3:96:a4:ad:f6:ad:f3:
a8:78:40:88:a6:c3:34:37:0c:64:f3:f6:27:77:49:
61:e8:ca:42:34:b9:1e:47:e7:da:56:7b:d6:98:c1:
9f:3f:c6:da:e0:f4:f3:cb:b7:b4:e7:2d:ff:b5:89:
1f:2e:2d:99:db:dc:67:7f:e0:97:d9:d9:63:e5:ff:
7e:e6:bd:82:12:7f:e6:78:79:40:5b:2f:0a:e2:d1:
3f:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:D8:6C:2C:9C:C7:C9:F9:2D:07:75:03:86:31:26:45:82:A2:9F:40
X509v3 Authority Key Identifier:
keyid:72:E1:2A:38:76:FF:7B:D0:0D:9D:9E:BB:97:2A:B1:E6:21:EA:1E:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cuEqOHb_e9ANnZ67lyqx5iHqHo0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/1faa24-f086-4b48-b1bd-45527e8e44d2/1/cuEqOHb_e9ANnZ67lyqx5iHqHo0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/1faa24-f086-4b48-b1bd-45527e8e44d2/1/cuEqOHb_e9ANnZ67lyqx5iHqHo0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:09:d8:d7:9c:0b:16:ae:31:88:c8:4b:36:64:77:f7:aa:0b:
3e:7d:7b:21:f6:8e:b4:e6:8f:7c:23:68:4b:ab:08:64:05:99:
f1:e2:1c:14:a0:8d:89:14:f6:17:f3:2a:a9:63:ab:83:78:b5:
c1:4f:7a:9e:e4:5d:95:5d:0c:57:18:0f:c1:54:55:0e:9d:de:
81:b9:be:75:71:47:8f:27:e8:7c:ce:7c:4b:61:fd:45:55:fb:
e3:a1:56:c7:f9:80:02:d3:a6:96:ef:2b:cd:af:0c:e9:ee:6a:
c3:34:30:0b:7c:28:1a:0d:15:3e:f2:15:c1:46:8f:e0:71:e4:
2b:ed:55:98:5f:42:e2:e7:77:b0:9a:71:21:61:92:28:84:19:
a4:d1:ab:0a:fe:37:13:2b:e7:28:b0:7f:0f:44:4e:34:da:35:
ab:c7:ec:69:b7:08:dc:3e:7d:e5:67:6c:96:13:cd:5e:9f:92:
25:fb:40:b7:4f:fd:13:4d:e9:03:8f:8f:95:f9:c2:90:84:fd:
43:37:ca:ae:7e:57:1e:ce:cc:a5:7c:56:fe:c3:78:e1:04:b0:
45:51:65:bb:4f:ad:5b:52:62:36:44:af:29:c4:89:ed:4f:d7:
28:9b:ff:5e:9f:91:74:80:72:bd:2e:08:5f:71:c1:89:be:06:
d4:4d:78:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:12:57 2025 by rpki-client