Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/6ef832-d4a3-4614-83eb-ba177c197965/1/cMySQTZlvWsN3lGpprVl5ywyHlI.mft
File: cMySQTZlvWsN3lGpprVl5ywyHlI.mft (raw, json)
Hash identifier: bFn3xeKyjvYLJYowFVLs3wfUnifMeXw8jvNNq4U9sjw=
Subject key identifier: 71:BD:16:06:4F:9D:A1:D8:8C:DC:70:BA:CD:B4:48:18:E5:E9:B2:C1
Authority key identifier: 70:CC:92:41:36:65:BD:6B:0D:DE:51:A9:A6:B5:65:E7:2C:32:1E:52
Certificate issuer: /CN=70cc92413665bd6b0dde51a9a6b565e72c321e52
Certificate serial: 0198D8510E20753B8B7FE3BF81E49F02ED7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cMySQTZlvWsN3lGpprVl5ywyHlI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/6ef832-d4a3-4614-83eb-ba177c197965/1/cMySQTZlvWsN3lGpprVl5ywyHlI.mft
Manifest number: 0727
Signing time: Sat 23 Aug 2025 19:04:07 +0000
Manifest this update: Sat 23 Aug 2025 19:04:07 +0000
Manifest next update: Sun 24 Aug 2025 19:04:07 +0000
Files and hashes: 1: cMySQTZlvWsN3lGpprVl5ywyHlI.crl (hash: H1b5fkyFdU41Zx5RjFZmm+lxgi0ANENJFO0JoO27ZVg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/6ef832-d4a3-4614-83eb-ba177c197965/1/cMySQTZlvWsN3lGpprVl5ywyHlI.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/6ef832-d4a3-4614-83eb-ba177c197965/1/cMySQTZlvWsN3lGpprVl5ywyHlI.mft
rsync://rpki.ripe.net/repository/DEFAULT/cMySQTZlvWsN3lGpprVl5ywyHlI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d8:51:0e:20:75:3b:8b:7f:e3:bf:81:e4:9f:02:ed:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70cc92413665bd6b0dde51a9a6b565e72c321e52
Validity
Not Before: Aug 23 19:04:07 2025 GMT
Not After : Aug 24 19:04:07 2025 GMT
Subject: CN=71bd16064f9da1d88cdc70bacdb44818e5e9b2c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:44:09:69:82:10:7f:9a:19:54:a6:1c:34:9d:
de:18:2e:f0:d6:d2:ba:f4:95:86:eb:0d:e8:3a:9f:
20:b1:7b:74:ad:28:29:5d:9f:ea:84:16:0c:3e:45:
62:1a:3b:cb:33:e2:a8:32:1f:53:24:77:a4:bd:c0:
7c:80:d7:43:af:c3:10:51:8b:a6:ab:45:4b:c6:bc:
c6:d2:ae:07:c6:eb:97:34:b1:bd:57:b5:13:00:f7:
a1:e7:a2:8b:ae:eb:3b:f5:e5:27:bd:fa:15:b3:6c:
65:9c:e4:45:08:03:20:1f:e8:b5:db:cd:65:97:3a:
1d:fa:75:1e:67:55:db:db:5d:a3:b3:4a:c4:72:f4:
00:1c:86:03:40:c8:66:fa:62:4e:e4:50:a8:98:f5:
8b:38:ed:54:98:47:ef:ab:e3:bd:78:4c:78:4d:e5:
ca:ef:67:33:56:4d:22:93:aa:20:13:51:57:74:f5:
47:8b:08:f8:d1:d3:cd:0d:1f:96:78:ae:8c:0e:7f:
ff:86:2e:6c:af:f1:b3:0f:86:e8:05:ae:2c:08:6c:
5f:30:8e:a3:c3:f8:69:dd:71:11:30:8e:3d:2f:9c:
49:6f:a9:b0:93:07:e1:ad:e1:2a:54:79:f9:5a:0f:
b7:54:8b:95:88:5c:3f:58:d1:ef:ba:b9:2f:da:37:
c2:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:BD:16:06:4F:9D:A1:D8:8C:DC:70:BA:CD:B4:48:18:E5:E9:B2:C1
X509v3 Authority Key Identifier:
keyid:70:CC:92:41:36:65:BD:6B:0D:DE:51:A9:A6:B5:65:E7:2C:32:1E:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cMySQTZlvWsN3lGpprVl5ywyHlI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/6ef832-d4a3-4614-83eb-ba177c197965/1/cMySQTZlvWsN3lGpprVl5ywyHlI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/6ef832-d4a3-4614-83eb-ba177c197965/1/cMySQTZlvWsN3lGpprVl5ywyHlI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:97:9c:24:f6:04:68:fb:c8:a6:e4:b4:8b:74:69:46:6b:af:
5f:c9:a3:b8:5f:2a:60:18:18:ca:4e:64:91:5a:6e:fd:92:59:
4b:b8:a1:12:3d:a4:1f:ef:20:81:ce:7b:1c:d3:9b:57:2a:68:
d4:3b:be:30:ef:85:67:bb:7b:be:24:66:1d:2b:0b:0c:8a:03:
20:ca:56:a2:eb:3f:05:17:a5:05:c7:f6:a2:f8:0b:dd:ee:66:
dc:50:7a:d1:cc:d9:7d:03:57:f2:89:92:88:6a:47:0b:71:d6:
d9:1c:3f:2a:3b:c3:bc:6c:81:b6:70:da:5c:c3:0f:5a:ff:06:
4e:07:4f:b1:95:a7:a3:26:5e:ea:f6:3c:ee:26:99:8a:21:6e:
cd:ee:9b:0c:72:e9:b3:66:67:84:35:96:ac:34:0e:ef:44:ec:
a9:c3:ee:b6:62:c3:bf:c9:93:56:b2:99:55:51:98:e8:b5:ba:
30:82:71:4f:67:39:39:15:64:03:54:22:50:fe:79:f1:99:3a:
b1:2f:aa:13:84:8c:7b:c6:32:75:65:1e:a1:b9:9b:6e:cd:c8:
a8:6a:ae:52:e0:98:9b:d1:26:b3:6b:69:68:9e:90:d1:57:9e:
68:32:2d:39:f3:26:7c:f8:7a:23:14:7c:be:57:24:95:ae:88:
4c:99:82:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 00:16:28 2025 by rpki-client