Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/deec2e-0cd6-4113-b2b9-2a0cf13173d8/1/cNvqB1PfCD5XgrufOAtdeZy3igY.mft
File: cNvqB1PfCD5XgrufOAtdeZy3igY.mft (raw, json)
Hash identifier: N8WF+pRzO71cSjY1VcyLqAdj7WEebfpiLCH9mnhjLLc=
Subject key identifier: 0B:E2:1B:55:77:60:A1:7E:9D:6C:DC:0F:17:4F:39:01:F2:73:F3:CE
Authority key identifier: 70:DB:EA:07:53:DF:08:3E:57:82:BB:9F:38:0B:5D:79:9C:B7:8A:06
Certificate issuer: /CN=70dbea0753df083e5782bb9f380b5d799cb78a06
Certificate serial: 0198D6CD59C487FA2ED34251258EDD396483
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cNvqB1PfCD5XgrufOAtdeZy3igY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/deec2e-0cd6-4113-b2b9-2a0cf13173d8/1/cNvqB1PfCD5XgrufOAtdeZy3igY.mft
Manifest number: 15DD
Signing time: Sat 23 Aug 2025 12:00:38 +0000
Manifest this update: Sat 23 Aug 2025 12:00:38 +0000
Manifest next update: Sun 24 Aug 2025 12:00:38 +0000
Files and hashes: 1: 7wYbQJjmUZJ3jrCYQep7ej1ycX8.roa (hash: gX6AQ4uDUscH9HZMwyFhtSxb+YXiJVmytGAK7BhRx4Q=)
2: cNvqB1PfCD5XgrufOAtdeZy3igY.crl (hash: qdUqs4PKGs2DJSFLb0+KxZeVpBADQXmaZyTko6mx08I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/deec2e-0cd6-4113-b2b9-2a0cf13173d8/1/cNvqB1PfCD5XgrufOAtdeZy3igY.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/deec2e-0cd6-4113-b2b9-2a0cf13173d8/1/cNvqB1PfCD5XgrufOAtdeZy3igY.mft
rsync://rpki.ripe.net/repository/DEFAULT/cNvqB1PfCD5XgrufOAtdeZy3igY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:cd:59:c4:87:fa:2e:d3:42:51:25:8e:dd:39:64:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70dbea0753df083e5782bb9f380b5d799cb78a06
Validity
Not Before: Aug 23 12:00:38 2025 GMT
Not After : Aug 24 12:00:38 2025 GMT
Subject: CN=0be21b557760a17e9d6cdc0f174f3901f273f3ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:31:3a:27:d0:83:94:e9:fd:36:b3:f5:c0:62:
a2:08:5f:91:20:45:a0:23:68:09:6a:da:49:bd:e2:
af:35:cc:71:ba:13:c4:b4:17:b5:a6:48:bc:6e:1d:
23:24:90:13:e3:8a:5a:27:a1:3a:21:63:6b:ec:01:
fd:2a:65:06:60:5f:1a:e6:2c:7d:3a:84:f2:ac:89:
fc:81:02:99:23:b2:92:4b:92:a0:46:50:5f:bf:1f:
7c:d6:90:3f:82:8f:72:02:d1:ce:4c:db:6a:a5:98:
51:b0:dd:37:0c:0f:83:bf:1f:78:b9:cd:53:9d:de:
65:17:47:0a:09:3d:74:e6:d5:77:c0:fd:6a:89:ff:
ee:b0:68:31:18:41:af:6c:c8:65:6d:4e:ef:10:76:
5f:87:37:3f:bf:27:69:4c:07:71:3b:f8:e1:4c:22:
8f:e3:45:1c:16:60:cc:37:bd:cf:3e:7a:f3:38:aa:
20:e6:b9:63:7f:de:3c:6b:04:ff:31:96:83:e1:29:
7c:b9:41:a7:9e:3f:89:24:65:65:b6:9f:5a:18:00:
03:8e:d0:42:dc:6b:d5:06:b1:2c:bb:23:db:32:b9:
5c:76:ec:92:13:01:1c:b4:e0:fd:1c:5b:d0:3a:3a:
f6:42:f0:83:bd:ba:d8:20:e7:9c:b4:c0:19:34:ed:
f3:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:E2:1B:55:77:60:A1:7E:9D:6C:DC:0F:17:4F:39:01:F2:73:F3:CE
X509v3 Authority Key Identifier:
keyid:70:DB:EA:07:53:DF:08:3E:57:82:BB:9F:38:0B:5D:79:9C:B7:8A:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cNvqB1PfCD5XgrufOAtdeZy3igY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/deec2e-0cd6-4113-b2b9-2a0cf13173d8/1/cNvqB1PfCD5XgrufOAtdeZy3igY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/deec2e-0cd6-4113-b2b9-2a0cf13173d8/1/cNvqB1PfCD5XgrufOAtdeZy3igY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:f1:1c:43:8d:45:cb:8f:85:02:72:9d:71:b7:bf:84:d8:23:
79:7e:d3:fd:3b:49:84:a6:b7:52:62:71:f4:96:b3:bc:1d:f0:
78:c0:65:86:c2:82:7c:59:5e:b9:6b:de:f0:1f:da:db:24:3e:
cc:97:86:44:7c:73:c3:05:aa:25:fd:43:79:d2:35:fd:4c:bc:
19:fd:f5:5e:e8:b3:85:7a:17:61:bf:75:19:74:02:27:92:b9:
08:ca:7e:53:41:ee:e4:cc:00:c2:47:16:2f:8b:29:72:62:4b:
44:13:f9:b9:f0:c0:6c:8a:b3:9b:63:e5:29:22:e5:ac:e6:67:
61:88:07:d3:19:b3:93:01:91:2c:48:6b:22:e1:66:8f:8e:2e:
eb:ee:54:d1:50:48:1f:b7:ec:69:8b:28:92:c7:dd:46:d6:59:
19:b0:5e:a8:a9:13:b7:bd:0a:24:4e:78:1b:c0:f5:68:ae:c1:
68:51:a3:e3:95:3a:36:55:d9:1c:6f:c0:1a:ff:0d:b2:11:b7:
36:8c:a8:ac:0b:1c:1f:1a:a2:31:fe:7a:80:2b:95:69:04:c9:
b8:77:b9:8b:31:ef:44:74:6f:d6:e9:d9:9c:8a:76:aa:1a:bf:
24:41:ab:06:d0:ed:95:7d:7f:1f:f0:9c:a4:a6:96:e4:56:e0:
b8:c6:ab:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:46:54 2025 by rpki-client