Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/a6304b-6c59-4f5f-b646-5f0d91f4f908/1/c8vBR-rdgVSBUfNRDi3gnYaKxsw.mft
File: c8vBR-rdgVSBUfNRDi3gnYaKxsw.mft (raw, json)
Hash identifier: ES4Pg3gnpxpg73oBIPU//z8gkkk4AU320WE6PIZ8Cv0=
Subject key identifier: 03:32:3A:41:91:20:4F:5D:1D:8F:EF:FD:D7:3C:20:B5:89:99:CF:F9
Authority key identifier: 73:CB:C1:47:EA:DD:81:54:81:51:F3:51:0E:2D:E0:9D:86:8A:C6:CC
Certificate issuer: /CN=73cbc147eadd81548151f3510e2de09d868ac6cc
Certificate serial: 0198D5BBC40C7C1022ACC20BB78C2F62F0E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c8vBR-rdgVSBUfNRDi3gnYaKxsw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/a6304b-6c59-4f5f-b646-5f0d91f4f908/1/c8vBR-rdgVSBUfNRDi3gnYaKxsw.mft
Manifest number: 1649
Signing time: Sat 23 Aug 2025 07:01:49 +0000
Manifest this update: Sat 23 Aug 2025 07:01:49 +0000
Manifest next update: Sun 24 Aug 2025 07:01:49 +0000
Files and hashes: 1: YlBw5zZMyGmVSKcyUcis3LeoBu4.roa (hash: FNW2TVY99VnemA7lyfpV1rEplwNPKCZ+roIw6UfcWJE=)
2: c8vBR-rdgVSBUfNRDi3gnYaKxsw.crl (hash: issgFsps7ARMpr5ZuzwULWbZeHTt44hyMOKr92c/xwo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/a6304b-6c59-4f5f-b646-5f0d91f4f908/1/c8vBR-rdgVSBUfNRDi3gnYaKxsw.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/a6304b-6c59-4f5f-b646-5f0d91f4f908/1/c8vBR-rdgVSBUfNRDi3gnYaKxsw.mft
rsync://rpki.ripe.net/repository/DEFAULT/c8vBR-rdgVSBUfNRDi3gnYaKxsw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:c4:0c:7c:10:22:ac:c2:0b:b7:8c:2f:62:f0:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73cbc147eadd81548151f3510e2de09d868ac6cc
Validity
Not Before: Aug 23 07:01:49 2025 GMT
Not After : Aug 24 07:01:49 2025 GMT
Subject: CN=03323a4191204f5d1d8feffdd73c20b58999cff9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:02:73:98:d5:98:d2:b5:a4:59:9f:e5:95:2c:
b0:fa:c5:f9:4f:85:2e:46:3b:6d:93:ef:54:d3:07:
76:fb:82:ff:6e:a1:da:5a:fa:a5:54:05:92:38:5e:
ea:e9:cb:d6:a3:58:5b:a0:f9:94:b0:d4:3e:e9:4c:
df:06:34:da:7e:ac:ae:79:f7:08:dd:74:28:52:df:
de:f2:6c:b5:19:1c:bb:82:d0:df:ac:24:1a:3a:8a:
da:a5:86:d3:0b:05:19:85:5c:7c:d8:67:61:c7:29:
54:e6:72:0b:12:96:fb:8d:5d:a4:a8:73:d3:0f:07:
be:c9:99:1b:0c:47:05:50:12:7e:05:79:3a:68:c8:
e4:e5:16:33:58:43:60:67:7d:20:a3:03:51:13:57:
2d:c5:8b:4a:d0:9a:d0:ce:8d:5f:ff:24:b6:ad:a0:
a8:87:cb:75:66:9e:60:73:19:c2:3d:2c:9d:04:71:
99:a0:5f:51:73:a5:8d:db:f9:6b:a1:62:05:e5:0c:
f7:f8:30:0f:c1:32:9a:3a:23:fc:6e:52:19:fb:b7:
aa:8a:5d:7d:39:55:88:7d:d2:34:d4:26:22:2f:ab:
69:ed:3f:49:aa:30:ca:44:ce:07:40:7e:53:95:31:
97:6b:02:cb:1e:6c:23:ef:83:e3:38:33:30:34:0f:
6a:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:32:3A:41:91:20:4F:5D:1D:8F:EF:FD:D7:3C:20:B5:89:99:CF:F9
X509v3 Authority Key Identifier:
keyid:73:CB:C1:47:EA:DD:81:54:81:51:F3:51:0E:2D:E0:9D:86:8A:C6:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8vBR-rdgVSBUfNRDi3gnYaKxsw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/a6304b-6c59-4f5f-b646-5f0d91f4f908/1/c8vBR-rdgVSBUfNRDi3gnYaKxsw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/a6304b-6c59-4f5f-b646-5f0d91f4f908/1/c8vBR-rdgVSBUfNRDi3gnYaKxsw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:f1:ff:97:05:d3:7a:fb:0e:bc:ab:14:21:a8:da:1f:70:67:
82:b1:1b:81:e0:ca:bb:e0:e4:ec:ef:6c:4d:d1:c0:1f:1e:6b:
8d:b0:e1:dc:b9:b7:82:08:2f:a2:65:57:07:a6:94:c3:99:81:
51:7d:54:b7:6b:4f:22:09:08:da:69:ab:89:9c:99:c5:6a:b8:
f0:41:b2:cd:db:37:1f:4c:7d:e9:d8:2a:2e:64:f4:21:03:7c:
b7:09:cb:2c:b1:fb:87:c6:cf:18:6d:c0:93:4b:39:f9:c8:32:
b2:d4:1c:7a:13:73:7c:2b:4b:07:b7:b7:2a:59:90:4a:c4:46:
c5:63:d7:0f:2b:ec:49:f8:72:ac:c1:a4:82:f7:a4:cd:4c:02:
ef:22:46:17:fa:be:6b:38:9d:38:e6:8e:1a:4b:03:50:81:b9:
c3:9b:02:b5:96:ac:70:8e:db:ac:f4:41:41:b0:cb:9e:b8:5b:
6a:93:0f:6a:b7:b4:14:7f:ba:31:43:7b:52:95:e4:4f:6e:92:
49:b6:15:e0:a4:bd:e0:62:ee:db:55:48:26:25:8c:3f:e9:22:
e2:a6:16:02:af:57:d6:08:9e:f5:8d:c8:e6:65:51:1e:70:09:
1b:f6:bb:4e:b2:2a:9a:42:4a:f6:b3:5d:5e:cf:c5:3b:1b:8f:
58:81:93:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:34:18 2025 by rpki-client