Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/8332cb-fd4b-49d9-b0a1-89def0082e2a/1/cDbgTlO505Z8-dQY54tgu60HWDE.mft
File: cDbgTlO505Z8-dQY54tgu60HWDE.mft (raw, json)
Hash identifier: SFf2ufPxYHei9gOkdkndORw/UnyIehWATPIvukNtcqY=
Subject key identifier: 9E:A2:2C:1F:F7:64:13:E1:A9:5F:4D:D1:2D:37:3E:CF:6C:03:01:70
Authority key identifier: 70:36:E0:4E:53:B9:D3:96:7C:F9:D4:18:E7:8B:60:BB:AD:07:58:31
Certificate issuer: /CN=7036e04e53b9d3967cf9d418e78b60bbad075831
Certificate serial: 0198D4E0EC66F21B37B333EA83321CC430DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cDbgTlO505Z8-dQY54tgu60HWDE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/8332cb-fd4b-49d9-b0a1-89def0082e2a/1/cDbgTlO505Z8-dQY54tgu60HWDE.mft
Manifest number: 01EC
Signing time: Sat 23 Aug 2025 03:02:47 +0000
Manifest this update: Sat 23 Aug 2025 03:02:47 +0000
Manifest next update: Sun 24 Aug 2025 03:02:47 +0000
Files and hashes: 1: 79VsR-5nub7DUrhryJn99r0sSJE.roa (hash: PKoaa5fww3RYvMlarfjIhYGHHPB9uxMDQ5a1vOFmd9k=)
2: cDbgTlO505Z8-dQY54tgu60HWDE.crl (hash: tIOfjZBd1aBWkHwDh/W84BiqKiK4fzaUvlSGLui4aP4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/8332cb-fd4b-49d9-b0a1-89def0082e2a/1/cDbgTlO505Z8-dQY54tgu60HWDE.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/8332cb-fd4b-49d9-b0a1-89def0082e2a/1/cDbgTlO505Z8-dQY54tgu60HWDE.mft
rsync://rpki.ripe.net/repository/DEFAULT/cDbgTlO505Z8-dQY54tgu60HWDE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:02:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:ec:66:f2:1b:37:b3:33:ea:83:32:1c:c4:30:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7036e04e53b9d3967cf9d418e78b60bbad075831
Validity
Not Before: Aug 23 03:02:47 2025 GMT
Not After : Aug 24 03:02:47 2025 GMT
Subject: CN=9ea22c1ff76413e1a95f4dd12d373ecf6c030170
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:6c:21:a7:76:b2:63:75:37:03:ac:d8:ca:58:
20:0e:f5:ef:13:a1:3b:00:d7:39:1d:b1:49:a0:a9:
e4:ed:5f:e5:8e:ae:97:82:9a:71:b4:9d:fe:8e:30:
30:9d:fc:fb:f5:fd:28:00:f0:e5:cd:47:30:f4:4a:
a8:86:4d:c0:5a:cc:75:e5:64:95:82:28:4e:8b:29:
ff:6e:28:96:7c:77:42:9f:55:e1:51:e3:3f:a6:80:
cf:ee:2f:71:32:d5:8b:cd:6a:15:b0:d7:7f:ee:43:
08:3b:d9:f6:d6:7d:d6:82:46:e8:43:be:2c:77:93:
bd:f8:d5:d3:b7:bc:be:36:c8:c8:d7:69:29:70:23:
12:a1:07:4b:0c:93:d9:59:96:45:60:53:2c:39:f4:
fd:fa:50:e4:99:a2:36:32:fb:c2:34:ef:b2:17:9d:
ce:05:72:47:82:a5:7b:59:42:55:37:51:85:01:40:
aa:75:ee:fb:0a:f4:be:7d:e5:c0:ab:6a:2c:9d:c9:
64:bb:d7:c9:aa:34:d8:1a:12:9e:60:d4:d9:67:69:
bc:29:85:71:8e:f4:81:8e:ee:2a:4d:d3:40:c4:e0:
f7:38:b1:a8:c4:24:93:40:cd:a7:fe:2b:98:5d:40:
3c:15:0b:f4:01:a3:25:83:ea:d4:02:75:aa:5a:6f:
ee:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:A2:2C:1F:F7:64:13:E1:A9:5F:4D:D1:2D:37:3E:CF:6C:03:01:70
X509v3 Authority Key Identifier:
keyid:70:36:E0:4E:53:B9:D3:96:7C:F9:D4:18:E7:8B:60:BB:AD:07:58:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cDbgTlO505Z8-dQY54tgu60HWDE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/8332cb-fd4b-49d9-b0a1-89def0082e2a/1/cDbgTlO505Z8-dQY54tgu60HWDE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/8332cb-fd4b-49d9-b0a1-89def0082e2a/1/cDbgTlO505Z8-dQY54tgu60HWDE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:87:52:5f:dc:2f:f7:c2:3e:b5:e7:81:2d:16:36:51:3e:fe:
44:c5:d1:01:22:76:89:66:cb:f1:34:0c:64:79:f5:90:cc:ae:
c2:68:92:8c:aa:47:ee:57:b7:82:4f:d9:f0:78:7c:dc:b1:80:
91:92:a7:3e:d5:b7:2f:8f:0e:86:76:6c:86:ed:1a:23:6d:b5:
9f:49:9c:1e:24:f1:e2:e0:d3:d7:01:0e:cb:7c:8d:bb:2f:fb:
62:18:7f:7d:be:ec:e8:83:06:35:e0:5c:22:8a:7f:b0:aa:84:
e3:0e:44:2b:cd:5d:cf:57:2c:f5:1d:cf:76:4d:7f:15:d6:e3:
68:ea:14:16:bb:56:49:ee:e3:11:21:00:9f:a0:75:99:5d:de:
de:cf:5e:e1:1c:44:03:75:98:95:f8:d4:96:eb:25:05:97:08:
f7:26:4c:21:32:5a:cf:c6:d4:03:27:69:55:41:b8:b8:4a:2c:
bd:81:1f:41:54:75:44:37:b8:28:90:cc:f7:02:c7:45:b9:c9:
4b:36:c9:d2:48:ab:4f:d2:95:20:de:24:0d:ef:a9:5a:2f:c2:
ac:2e:36:3e:57:2f:a2:66:5d:46:62:84:3d:a4:91:49:89:7f:
b0:68:89:c0:0c:0a:ad:9e:f2:c6:23:14:84:49:93:e3:70:d1:
32:f0:11:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:51:19 2025 by rpki-client