Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/3a39e9-3d40-46f8-bb0f-5ba43b118f75/1/CioVfwBRX5W2313A1S6xtdQ_3lw.mft
File: CioVfwBRX5W2313A1S6xtdQ_3lw.mft (raw, json)
Hash identifier: F2evTXOFnGkcOw0ctOkbyz3acZDEWicSEC3isUagVEk=
Subject key identifier: 70:1B:B9:15:23:85:C0:FD:B7:85:0B:A6:FD:FC:2E:9B:1C:71:2E:D5
Authority key identifier: 0A:2A:15:7F:00:51:5F:95:B6:DF:5D:C0:D5:2E:B1:B5:D4:3F:DE:5C
Certificate issuer: /CN=0a2a157f00515f95b6df5dc0d52eb1b5d43fde5c
Certificate serial: 0198D4738BE0CAA358FE9E1F9BB660320345
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CioVfwBRX5W2313A1S6xtdQ_3lw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/3a39e9-3d40-46f8-bb0f-5ba43b118f75/1/CioVfwBRX5W2313A1S6xtdQ_3lw.mft
Manifest number: 1647
Signing time: Sat 23 Aug 2025 01:03:18 +0000
Manifest this update: Sat 23 Aug 2025 01:03:18 +0000
Manifest next update: Sun 24 Aug 2025 01:03:18 +0000
Files and hashes: 1: 4tKIyKN2LpGytONfG9Wwzb3sMh8.roa (hash: So7qtpci+LVeK7KYvgn0X4FAkS3oDmYxiev+fG5cuSs=)
2: CioVfwBRX5W2313A1S6xtdQ_3lw.crl (hash: A4ewYsgqAHul1w032UVlyOyCYjJO1/8IR0VjXKpolTo=)
3: Ulk603SVbOQAiKSzR_IZBatvpSU.roa (hash: 1Gak7FJcv6XeZUXfgmGsLnHftg1ktwdBLJgL9CPQ7IA=)
4: rjFAvFxrdSB0H68aH_zK0lS1GcA.roa (hash: iKO/ulWqGpWzjwhANl857sDa0g01+J+R36f50OBJrb0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/3a39e9-3d40-46f8-bb0f-5ba43b118f75/1/CioVfwBRX5W2313A1S6xtdQ_3lw.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/3a39e9-3d40-46f8-bb0f-5ba43b118f75/1/CioVfwBRX5W2313A1S6xtdQ_3lw.mft
rsync://rpki.ripe.net/repository/DEFAULT/CioVfwBRX5W2313A1S6xtdQ_3lw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:03:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:73:8b:e0:ca:a3:58:fe:9e:1f:9b:b6:60:32:03:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a2a157f00515f95b6df5dc0d52eb1b5d43fde5c
Validity
Not Before: Aug 23 01:03:18 2025 GMT
Not After : Aug 24 01:03:18 2025 GMT
Subject: CN=701bb9152385c0fdb7850ba6fdfc2e9b1c712ed5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:99:6a:77:90:fa:30:ce:ed:52:3c:9d:93:1b:
a2:ae:db:41:ee:56:ee:fd:3d:63:d5:65:71:dd:4d:
68:0b:24:9b:f5:43:4c:2d:24:6e:ae:8e:f9:b9:81:
9a:6c:4e:04:0e:bb:18:91:96:37:63:04:49:af:21:
ac:5f:c0:85:28:7b:51:45:45:4c:32:06:29:b6:12:
1f:28:11:5f:54:69:9e:28:72:f5:f5:5a:33:bd:23:
08:54:86:16:fd:23:9b:da:4c:02:d3:d8:43:45:e4:
8c:a8:7d:02:45:7a:64:77:08:30:4f:d3:9e:95:81:
38:9c:7d:4f:b2:ff:e6:35:ca:4b:1b:fe:0c:2d:d6:
b8:6e:5b:f6:92:20:b9:af:c6:40:2d:a4:f2:af:a5:
79:cc:f1:cb:f6:cf:47:b4:df:cb:ad:e8:0c:87:7d:
6d:e4:45:ed:ed:49:2a:2a:63:53:55:64:9f:09:d4:
74:58:26:08:c7:9e:16:fc:b9:27:91:b1:a7:a6:42:
49:0e:36:b1:bb:43:9a:66:de:23:cd:a4:19:ac:36:
6e:38:ef:a0:53:5f:33:08:24:8d:58:26:7c:48:36:
4c:88:04:0b:09:3a:5a:8e:c9:44:6b:69:66:66:f0:
10:52:12:d7:9a:b9:ce:10:cf:e0:13:29:10:93:a6:
c2:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:1B:B9:15:23:85:C0:FD:B7:85:0B:A6:FD:FC:2E:9B:1C:71:2E:D5
X509v3 Authority Key Identifier:
keyid:0A:2A:15:7F:00:51:5F:95:B6:DF:5D:C0:D5:2E:B1:B5:D4:3F:DE:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CioVfwBRX5W2313A1S6xtdQ_3lw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/3a39e9-3d40-46f8-bb0f-5ba43b118f75/1/CioVfwBRX5W2313A1S6xtdQ_3lw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/3a39e9-3d40-46f8-bb0f-5ba43b118f75/1/CioVfwBRX5W2313A1S6xtdQ_3lw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:39:12:b7:44:9a:f8:f5:34:a1:75:48:eb:4f:4b:cf:be:c7:
6d:9a:48:a6:ab:df:0d:67:7c:cd:d4:e4:a6:cb:12:fa:37:5e:
01:c1:3b:51:7c:32:81:25:18:80:49:32:b6:c0:2d:04:e0:74:
cd:1e:4f:0c:85:8b:62:2c:af:e8:77:c8:c8:65:98:15:ff:0e:
5f:0c:d7:58:35:82:55:e1:9a:ab:0b:7f:1e:f0:e2:17:7d:be:
ed:d5:a3:1c:d8:12:35:9a:e1:0c:b6:3c:a9:6c:c3:ce:98:d3:
92:ec:58:9d:83:60:08:9a:3b:56:ed:7a:8f:87:1f:9f:ab:22:
95:19:5e:7c:90:51:db:b6:5d:2b:27:77:9b:b1:9e:fe:ee:d4:
d5:1c:eb:96:80:53:dd:0d:8f:47:da:26:d7:04:d4:ca:ea:db:
be:88:82:2d:4a:3d:6c:3c:53:83:8d:06:16:e7:91:06:45:82:
ed:35:6f:49:03:b6:2a:3a:73:39:3c:6d:13:5f:68:3a:8d:88:
d8:5e:24:9d:e7:63:69:b6:3f:9c:e0:b8:15:5e:52:24:28:d2:
e7:f5:5c:2a:81:5c:47:7c:c0:dc:44:51:2f:68:e5:50:31:01:
3b:15:71:66:bb:04:78:ef:e8:cc:c4:ef:0c:fe:8b:07:73:80:
16:e1:43:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:36:54 2025 by rpki-client