Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/cc843e-60c7-47ac-823b-f8d6bd30cc19/1/Ctz2LGtUEROaXRMJ3Z7ZJvQxQyA.mft
File: Ctz2LGtUEROaXRMJ3Z7ZJvQxQyA.mft (raw, json)
Hash identifier: UveTm7JHerqBZFYHz/VE7kju6z3K5rTGJxfk5DL9KOU=
Subject key identifier: 85:4F:7B:D4:D0:A0:0D:A6:65:C9:A2:6D:F0:A9:F7:04:82:82:FD:B8
Authority key identifier: 0A:DC:F6:2C:6B:54:11:13:9A:5D:13:09:DD:9E:D9:26:F4:31:43:20
Certificate issuer: /CN=0adcf62c6b5411139a5d1309dd9ed926f4314320
Certificate serial: 0198D5BC19EEE7001655D12E33896E163D33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ctz2LGtUEROaXRMJ3Z7ZJvQxQyA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/cc843e-60c7-47ac-823b-f8d6bd30cc19/1/Ctz2LGtUEROaXRMJ3Z7ZJvQxQyA.mft
Manifest number: 1337
Signing time: Sat 23 Aug 2025 07:02:10 +0000
Manifest this update: Sat 23 Aug 2025 07:02:10 +0000
Manifest next update: Sun 24 Aug 2025 07:02:10 +0000
Files and hashes: 1: Ctz2LGtUEROaXRMJ3Z7ZJvQxQyA.crl (hash: 9aEBnsGPesSYuY34nPH7AEao5SgtktPCvxPqTpro5Cc=)
2: GpM90An4j0aWnAQVOPwoRVNatnk.roa (hash: MKIleZe0XP5Hk0DTuIZD6iDzaTxtrUWEQu34eF8ZBrE=)
3: QRwZwj-EtgWsWtGLyP94z8eYhbY.roa (hash: XsWkHritSLVCWhTRPolIJOQ4NjLpOalWZgwmSQSOCg4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/cc843e-60c7-47ac-823b-f8d6bd30cc19/1/Ctz2LGtUEROaXRMJ3Z7ZJvQxQyA.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/cc843e-60c7-47ac-823b-f8d6bd30cc19/1/Ctz2LGtUEROaXRMJ3Z7ZJvQxQyA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ctz2LGtUEROaXRMJ3Z7ZJvQxQyA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bc:19:ee:e7:00:16:55:d1:2e:33:89:6e:16:3d:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0adcf62c6b5411139a5d1309dd9ed926f4314320
Validity
Not Before: Aug 23 07:02:10 2025 GMT
Not After : Aug 24 07:02:10 2025 GMT
Subject: CN=854f7bd4d0a00da665c9a26df0a9f7048282fdb8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:11:95:e4:c9:e3:83:2b:51:c7:33:22:8d:35:
42:68:e0:44:3a:7d:b7:80:f6:33:c2:c6:17:65:29:
7b:a8:45:73:2c:bc:11:e7:0e:ff:64:c4:a2:b3:e8:
48:36:d5:a4:dc:3a:57:8d:16:ba:a2:f6:4c:eb:e2:
71:c8:d8:c7:57:72:c8:e6:f9:33:a7:93:05:3c:eb:
90:85:5d:8b:b5:93:67:ad:09:fc:67:91:f8:b6:c1:
6c:71:b4:0a:a8:aa:e5:48:75:05:66:b4:92:e5:e8:
dc:bf:44:3a:22:d0:6f:c0:b4:81:08:7b:f3:a0:68:
aa:06:07:4a:ef:8f:37:c3:39:54:8c:b6:ce:1d:67:
a0:e3:ba:d3:dc:12:88:79:8b:7d:90:0d:7d:2e:7e:
8e:57:78:ef:34:ad:59:a9:4a:c6:cf:9e:15:a1:ad:
e3:91:c1:09:67:e2:b6:cc:c9:b2:71:73:ba:ab:d6:
e9:29:71:58:0c:ad:65:21:1b:84:3a:e8:fd:54:c9:
b7:76:4f:4c:94:d0:d7:30:fc:c5:db:ab:b0:77:ac:
29:c0:1f:cc:d6:cf:d2:11:b7:10:71:da:9f:aa:17:
eb:17:5e:6d:0a:d6:4b:4f:e6:eb:94:23:f4:a7:33:
a1:1b:59:22:8b:03:11:0c:c2:4b:42:a5:ac:70:53:
8e:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:4F:7B:D4:D0:A0:0D:A6:65:C9:A2:6D:F0:A9:F7:04:82:82:FD:B8
X509v3 Authority Key Identifier:
keyid:0A:DC:F6:2C:6B:54:11:13:9A:5D:13:09:DD:9E:D9:26:F4:31:43:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ctz2LGtUEROaXRMJ3Z7ZJvQxQyA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cc843e-60c7-47ac-823b-f8d6bd30cc19/1/Ctz2LGtUEROaXRMJ3Z7ZJvQxQyA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cc843e-60c7-47ac-823b-f8d6bd30cc19/1/Ctz2LGtUEROaXRMJ3Z7ZJvQxQyA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:5a:94:18:a4:2f:f4:b5:fb:f5:4d:54:d2:f3:d9:d4:67:ca:
02:9f:f7:8e:9e:dd:e0:bb:04:5d:62:09:dd:6e:b1:81:2d:0f:
41:5b:8a:69:2c:73:6e:ff:dd:bd:07:c5:6c:6d:90:61:35:06:
aa:df:5f:f3:2a:5b:3a:93:4a:ec:40:64:3c:6a:fb:f2:9e:54:
cc:b4:b6:6c:b0:8a:6e:38:f3:18:90:82:4e:15:ce:b6:7b:e3:
f6:73:f6:f7:fb:e9:31:7b:da:c3:51:e0:b2:db:fb:2f:8b:00:
d2:e0:f9:6e:7e:3c:fa:19:21:d6:15:38:bd:b3:aa:c9:20:4d:
30:ce:16:d2:9d:7c:56:0b:b1:d9:a2:aa:a4:30:e1:da:10:43:
61:fc:fc:85:70:a7:a9:32:cf:b2:60:f7:42:81:32:15:d9:c4:
bd:55:e8:97:a6:ad:04:c3:1e:5b:03:0d:a9:a1:2a:b5:1c:f4:
ee:0f:f6:72:48:e9:eb:71:33:4e:01:ce:6d:51:f6:26:50:f9:
8b:aa:29:08:66:cb:b6:74:e7:d8:84:06:58:1b:dd:d7:dc:c5:
f5:a8:77:aa:5a:1e:f5:91:a3:bd:48:88:35:28:19:12:b2:c6:
4d:bd:82:2d:c1:15:42:0a:36:92:36:47:e6:88:a4:8b:d7:05:
23:17:1c:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:17:23 2025 by rpki-client