Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/0f2da9-f3d5-4ab4-babe-79d91ef827ce/1/CjVXW5lHrOJc6Hd0yCd18Yl3_Rk.mft
File: CjVXW5lHrOJc6Hd0yCd18Yl3_Rk.mft (raw, json)
Hash identifier: ERaD8b39oAvwvwowX64OderqJd6aUckVH348WIGIM8A=
Subject key identifier: 04:08:ED:44:6B:59:77:5E:53:6F:DB:AD:C5:1B:4C:FC:94:19:74:F9
Authority key identifier: 0A:35:57:5B:99:47:AC:E2:5C:E8:77:74:C8:27:75:F1:89:77:FD:19
Certificate issuer: /CN=0a35575b9947ace25ce87774c82775f18977fd19
Certificate serial: 0198D6CCF4BA35460564C25738F568F23F52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CjVXW5lHrOJc6Hd0yCd18Yl3_Rk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/0f2da9-f3d5-4ab4-babe-79d91ef827ce/1/CjVXW5lHrOJc6Hd0yCd18Yl3_Rk.mft
Manifest number: 13D7
Signing time: Sat 23 Aug 2025 12:00:12 +0000
Manifest this update: Sat 23 Aug 2025 12:00:12 +0000
Manifest next update: Sun 24 Aug 2025 12:00:12 +0000
Files and hashes: 1: CjVXW5lHrOJc6Hd0yCd18Yl3_Rk.crl (hash: mHdfDYJLgrbxYS8q7pae4ykk/2kXJSJ9dWD87upOfzE=)
2: H8Hgbzgx0A7FcofaefkTfVc8Xz0.roa (hash: 1i3t+G4LlCk005AGKE/RTc337vB1zniPnJjKB0owze0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/0f2da9-f3d5-4ab4-babe-79d91ef827ce/1/CjVXW5lHrOJc6Hd0yCd18Yl3_Rk.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/0f2da9-f3d5-4ab4-babe-79d91ef827ce/1/CjVXW5lHrOJc6Hd0yCd18Yl3_Rk.mft
rsync://rpki.ripe.net/repository/DEFAULT/CjVXW5lHrOJc6Hd0yCd18Yl3_Rk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:cc:f4:ba:35:46:05:64:c2:57:38:f5:68:f2:3f:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a35575b9947ace25ce87774c82775f18977fd19
Validity
Not Before: Aug 23 12:00:12 2025 GMT
Not After : Aug 24 12:00:12 2025 GMT
Subject: CN=0408ed446b59775e536fdbadc51b4cfc941974f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:c6:0e:bd:69:00:de:7c:66:c2:8c:5c:33:e1:
80:12:bc:79:e2:8c:1f:ef:8b:db:ba:d8:ba:3d:18:
20:52:d0:63:5a:bd:ed:c7:37:aa:d6:b8:3c:05:36:
fd:6b:ed:ab:0f:d9:47:7c:fe:c4:72:75:4a:f5:da:
06:60:79:86:f8:96:d8:60:2d:1d:e5:ca:ca:25:43:
f1:25:1c:9c:dd:de:fd:f9:36:6d:02:bc:38:c6:d3:
c3:14:60:02:12:5d:c2:43:f0:4b:6a:a2:2b:9d:5a:
d7:45:94:a3:6a:d9:e7:19:52:fb:ca:02:28:9d:dc:
c1:32:c0:94:c1:7c:9c:5d:ef:9b:91:14:15:b2:cf:
b1:1c:a2:84:55:b1:8e:ca:d3:7b:92:31:51:f3:cb:
81:97:d6:d0:8b:34:55:b3:bf:27:4f:80:b2:90:a0:
4f:76:bc:77:74:17:1a:44:ba:60:f9:05:1c:6f:08:
99:57:9d:b4:cf:d7:83:e5:cd:4c:0d:9b:ca:ef:39:
08:1f:56:cc:8f:cf:1a:18:13:fd:25:bd:32:62:89:
1e:00:1a:71:39:46:a6:c0:69:75:0c:d1:4e:cf:9e:
c8:7e:93:ab:ad:43:39:6d:29:2a:db:54:04:cf:ff:
29:b8:88:35:c0:18:d5:e0:79:cd:7e:c6:67:7e:01:
e9:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:08:ED:44:6B:59:77:5E:53:6F:DB:AD:C5:1B:4C:FC:94:19:74:F9
X509v3 Authority Key Identifier:
keyid:0A:35:57:5B:99:47:AC:E2:5C:E8:77:74:C8:27:75:F1:89:77:FD:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CjVXW5lHrOJc6Hd0yCd18Yl3_Rk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/0f2da9-f3d5-4ab4-babe-79d91ef827ce/1/CjVXW5lHrOJc6Hd0yCd18Yl3_Rk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/0f2da9-f3d5-4ab4-babe-79d91ef827ce/1/CjVXW5lHrOJc6Hd0yCd18Yl3_Rk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:41:0f:e9:a7:d1:c9:cc:82:eb:37:0c:88:4d:a3:15:95:53:
e3:19:9a:56:5b:cf:d3:0f:c5:a2:a4:b2:51:bf:4f:95:ee:db:
20:3c:cc:90:a2:5f:46:f8:e1:f3:92:af:5a:d7:db:13:f3:8a:
c0:d7:a8:b2:45:d2:22:4a:18:32:89:e2:6a:57:87:3d:33:69:
56:b0:75:d2:e6:74:3c:c8:b5:06:d8:4b:7e:9b:f1:5d:52:37:
88:ad:05:2e:5e:11:86:14:60:7e:7a:af:e1:39:dc:1e:e5:fb:
91:c6:5c:09:9c:84:0d:54:75:d1:29:30:94:05:8d:26:6a:87:
49:2a:28:a2:9e:b6:b7:8f:67:4a:93:39:a5:d5:11:59:2f:18:
69:67:2c:de:2d:06:80:46:15:54:b8:4f:ee:e9:fb:80:cd:0f:
8f:ba:be:52:a8:7c:6e:be:ab:3a:18:6a:68:57:1c:9a:37:44:
cc:6c:1d:34:4c:66:3f:b9:b3:4f:9b:88:44:8e:f3:fa:ee:f6:
67:3a:80:13:5e:be:bb:7d:55:8c:6b:7f:a7:89:7d:62:95:04:
fa:b0:99:f5:01:e6:90:b0:da:51:b2:99:9a:89:56:11:bc:ff:
8a:6c:08:77:f7:f0:3f:c0:8e:e4:34:b3:0a:49:7e:d3:5a:66:
6d:9e:04:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:51:17 2025 by rpki-client