Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/0ad264-3a50-4563-a35a-0d2bbe58c145/1/Cl9hKRQr0Kncad_UAkif8l9bPvI.mft
File: Cl9hKRQr0Kncad_UAkif8l9bPvI.mft (raw, json)
Hash identifier: fB65PJimz3vURF7l6LSj6fhKhxS+c5wJPEDQDQSBtTQ=
Subject key identifier: A0:5D:C6:66:79:6B:DB:5A:42:0F:34:28:F5:E2:DA:5D:15:1E:31:B8
Authority key identifier: 0A:5F:61:29:14:2B:D0:A9:DC:69:DF:D4:02:48:9F:F2:5F:5B:3E:F2
Certificate issuer: /CN=0a5f6129142bd0a9dc69dfd402489ff25f5b3ef2
Certificate serial: 0198D473356606FAA01B537781F093EF8DD6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cl9hKRQr0Kncad_UAkif8l9bPvI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/0ad264-3a50-4563-a35a-0d2bbe58c145/1/Cl9hKRQr0Kncad_UAkif8l9bPvI.mft
Manifest number: 1648
Signing time: Sat 23 Aug 2025 01:02:56 +0000
Manifest this update: Sat 23 Aug 2025 01:02:56 +0000
Manifest next update: Sun 24 Aug 2025 01:02:56 +0000
Files and hashes: 1: Cl9hKRQr0Kncad_UAkif8l9bPvI.crl (hash: z7am3eRV8pll58D76Ntys7N/esQQNK0ks3utOSIYstA=)
2: CuosGZsAQa_atOUfAfS4SUVwI3o.roa (hash: Ah8ug2ZnqIvKy7wR+jjWOatqPL6Ooi9wmYyJPajHlvk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/0ad264-3a50-4563-a35a-0d2bbe58c145/1/Cl9hKRQr0Kncad_UAkif8l9bPvI.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/0ad264-3a50-4563-a35a-0d2bbe58c145/1/Cl9hKRQr0Kncad_UAkif8l9bPvI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Cl9hKRQr0Kncad_UAkif8l9bPvI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:02:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:73:35:66:06:fa:a0:1b:53:77:81:f0:93:ef:8d:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a5f6129142bd0a9dc69dfd402489ff25f5b3ef2
Validity
Not Before: Aug 23 01:02:56 2025 GMT
Not After : Aug 24 01:02:56 2025 GMT
Subject: CN=a05dc666796bdb5a420f3428f5e2da5d151e31b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:fc:ae:d0:44:44:8a:f5:f5:59:ed:9b:0d:b5:
24:1e:f4:e5:a1:d5:2a:a3:9f:3b:30:21:64:b6:9f:
de:c6:66:f3:d2:c8:29:be:d5:17:14:e7:6d:f2:3d:
25:68:5f:e9:10:6c:2e:21:f0:59:8d:e7:66:64:47:
cd:d2:96:e9:f0:7d:57:76:0c:34:88:b6:43:c6:ab:
41:fe:3a:ae:ca:8c:88:63:19:a7:bd:6a:38:b7:95:
ea:a9:7b:ad:6c:9b:34:04:da:5e:5c:cd:c3:ab:34:
bd:67:58:d3:ce:6c:10:58:5c:46:ff:d5:75:de:1e:
2c:e5:98:5f:fa:23:a0:5d:55:b2:c3:be:15:4f:9a:
47:94:a5:1a:f4:0c:3d:fc:ee:b9:71:ba:0f:8b:82:
58:a1:ac:60:ab:9b:30:f9:13:31:c0:47:17:3a:1c:
d3:00:3f:d9:cd:9c:ba:12:4e:6a:d4:57:b2:e3:be:
37:70:5e:b5:c3:fa:f9:9a:d2:6e:a3:07:1b:10:3a:
1f:ce:3f:a0:d5:f9:56:0e:d6:fd:57:d1:c2:ab:3f:
f5:89:fa:07:05:ba:e3:00:e6:f5:24:b3:4c:a7:78:
cf:21:54:9e:30:68:1b:1f:12:9f:98:bf:d9:27:8e:
d7:41:39:9e:00:8d:45:40:7d:76:da:60:68:8f:ea:
46:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:5D:C6:66:79:6B:DB:5A:42:0F:34:28:F5:E2:DA:5D:15:1E:31:B8
X509v3 Authority Key Identifier:
keyid:0A:5F:61:29:14:2B:D0:A9:DC:69:DF:D4:02:48:9F:F2:5F:5B:3E:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cl9hKRQr0Kncad_UAkif8l9bPvI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/0ad264-3a50-4563-a35a-0d2bbe58c145/1/Cl9hKRQr0Kncad_UAkif8l9bPvI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/0ad264-3a50-4563-a35a-0d2bbe58c145/1/Cl9hKRQr0Kncad_UAkif8l9bPvI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:da:56:bd:d3:a2:03:3f:ae:b5:48:5a:05:a6:9b:38:03:62:
8d:95:00:0f:53:a5:62:c1:19:b7:a0:b3:ac:95:f7:c2:0a:2f:
98:c9:bf:0a:41:f6:bc:67:05:e5:b1:00:12:ef:5b:01:ea:27:
37:c3:f7:f8:ce:e9:32:ce:3b:bf:11:d5:2f:01:45:48:9c:5e:
c2:f4:b9:83:f4:b0:d6:7b:40:1e:fe:46:a5:ea:4b:87:cf:1f:
17:89:e9:73:16:16:e6:18:95:12:65:0e:da:02:5b:6c:b7:df:
20:f7:6d:01:d0:a0:d6:7f:e2:86:68:6d:6c:8a:76:36:d3:5c:
d1:ce:44:10:cb:bc:fb:53:6c:99:d3:3a:b8:a6:d5:c2:bd:29:
0e:bd:88:e8:c1:51:d7:c2:c1:da:4c:94:7a:82:00:07:2a:91:
a5:e2:0a:e1:d1:08:89:78:73:41:56:30:53:c9:9c:4b:a5:d8:
93:9d:d6:ef:72:b1:a3:21:f8:ac:a2:45:6b:17:52:6a:42:30:
33:d3:bb:61:11:06:0c:af:f9:ae:3d:44:49:ab:86:1b:31:5a:
f1:aa:27:69:fb:8a:3a:35:cd:57:f4:dd:73:a9:13:c8:9b:91:
e0:f7:a3:c8:30:71:2c:9e:17:0d:f1:7b:78:dd:97:92:2a:7f:
c9:7c:4f:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:37:49 2025 by rpki-client