Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/7e47d7-6137-4300-936b-46925c5249e6/1/Cwg4CHY8JiVBAg0ugdo0qqOCg7c.mft
File: Cwg4CHY8JiVBAg0ugdo0qqOCg7c.mft (raw, json)
Hash identifier: 42F1/YiSKXeck5LjNM6ME+doMfNrKGHLiw5jXnWqCDo=
Subject key identifier: B2:0D:5C:C3:A3:69:7A:2A:97:7F:99:4E:B7:07:4B:63:7B:16:5D:6F
Authority key identifier: 0B:08:38:08:76:3C:26:25:41:02:0D:2E:81:DA:34:AA:A3:82:83:B7
Certificate issuer: /CN=0b083808763c262541020d2e81da34aaa38283b7
Certificate serial: 0198D4744DD5390B9436FF6C2AA13D4EA57F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cwg4CHY8JiVBAg0ugdo0qqOCg7c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/7e47d7-6137-4300-936b-46925c5249e6/1/Cwg4CHY8JiVBAg0ugdo0qqOCg7c.mft
Manifest number: 1649
Signing time: Sat 23 Aug 2025 01:04:08 +0000
Manifest this update: Sat 23 Aug 2025 01:04:08 +0000
Manifest next update: Sun 24 Aug 2025 01:04:08 +0000
Files and hashes: 1: Cwg4CHY8JiVBAg0ugdo0qqOCg7c.crl (hash: VE16tKzzWqDA5kgt5nzZ33aVJE1l70cRlhgEnpWZxrY=)
2: yT0QV5Ngi5HD60A3c2kQ4p38KRg.roa (hash: 8raf59fZpsQk29I2msKlUU3U4aiSgd5bXc/q3fhuFvI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/7e47d7-6137-4300-936b-46925c5249e6/1/Cwg4CHY8JiVBAg0ugdo0qqOCg7c.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/7e47d7-6137-4300-936b-46925c5249e6/1/Cwg4CHY8JiVBAg0ugdo0qqOCg7c.mft
rsync://rpki.ripe.net/repository/DEFAULT/Cwg4CHY8JiVBAg0ugdo0qqOCg7c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:74:4d:d5:39:0b:94:36:ff:6c:2a:a1:3d:4e:a5:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b083808763c262541020d2e81da34aaa38283b7
Validity
Not Before: Aug 23 01:04:08 2025 GMT
Not After : Aug 24 01:04:08 2025 GMT
Subject: CN=b20d5cc3a3697a2a977f994eb7074b637b165d6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:a3:f1:e8:99:8f:74:61:b8:27:a2:a1:35:97:
32:8e:e0:46:85:ae:37:4f:b9:62:b9:73:cb:6e:4c:
8c:14:43:6e:5b:28:76:81:38:a6:e7:21:fe:90:aa:
c7:fb:78:3e:80:f5:1b:02:58:de:0b:c2:63:89:ab:
3d:c1:bf:f9:45:c3:0b:20:06:8f:0e:b3:fa:13:71:
01:57:7b:f1:b3:b4:eb:6c:68:68:80:30:22:49:b0:
ce:6e:23:98:ac:33:19:1f:5c:a8:63:22:cf:37:82:
7c:dc:02:5a:5d:28:b9:6f:6c:cd:40:b8:2c:d6:11:
75:a0:77:88:00:c7:06:b2:b1:39:23:6b:71:bf:29:
ba:3b:cc:11:bc:1e:5c:c7:bf:28:29:37:1f:ba:d6:
83:22:c9:87:05:24:10:d3:83:da:47:27:d3:80:6f:
12:88:1a:32:41:01:39:ad:ea:8a:58:0c:9c:5d:77:
39:b4:47:3c:83:ef:ef:36:b0:a7:78:3d:f2:27:41:
c1:04:03:d2:07:83:75:d9:5b:74:65:cb:97:cb:f7:
bb:96:97:13:15:61:ce:50:07:2d:ca:87:95:db:66:
ef:e9:af:3a:90:2a:f9:c5:3d:41:6c:ee:78:39:9a:
95:2a:5d:e5:c8:59:67:52:0a:8f:a6:56:d7:3c:ee:
00:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:0D:5C:C3:A3:69:7A:2A:97:7F:99:4E:B7:07:4B:63:7B:16:5D:6F
X509v3 Authority Key Identifier:
keyid:0B:08:38:08:76:3C:26:25:41:02:0D:2E:81:DA:34:AA:A3:82:83:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cwg4CHY8JiVBAg0ugdo0qqOCg7c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/7e47d7-6137-4300-936b-46925c5249e6/1/Cwg4CHY8JiVBAg0ugdo0qqOCg7c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/7e47d7-6137-4300-936b-46925c5249e6/1/Cwg4CHY8JiVBAg0ugdo0qqOCg7c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:eb:59:1b:22:e8:2d:d5:52:90:3b:c8:03:6e:c4:ad:a9:b3:
12:5b:db:5d:bf:16:56:eb:f0:8a:b5:95:35:ac:36:a5:95:e1:
13:7c:b4:38:cf:bf:8f:bc:92:5b:f0:71:dc:9b:9a:20:1e:72:
29:8a:31:e4:ac:73:6f:d3:8f:13:59:c9:a5:55:f8:c0:56:04:
38:8a:4c:eb:60:4f:aa:9e:19:41:0a:13:0d:4b:b7:dc:85:c5:
84:2f:8a:cd:eb:9e:64:a3:22:d0:34:e3:5c:c5:34:fe:93:29:
a1:d2:58:a5:df:6a:25:33:42:ca:db:29:b5:09:ab:94:8d:55:
ea:0b:91:1d:d4:dc:15:7e:54:10:a3:0c:1c:53:71:c3:14:bf:
7d:0d:17:9f:84:d9:70:ec:be:79:22:d0:4d:8e:49:7a:fd:f7:
98:1e:73:3a:25:cb:79:00:93:85:46:80:fb:b3:8b:c9:a6:4a:
95:d6:75:4a:30:62:70:be:73:9f:99:c0:31:51:b4:68:ed:fe:
e1:b1:fb:72:3e:be:05:f8:ea:19:84:ad:0c:e0:8c:b5:aa:dc:
38:b6:16:6a:74:52:9f:cd:7b:41:92:11:ee:de:36:4c:42:f6:
92:6d:21:aa:63:73:25:d8:e3:d8:e7:d7:38:47:4c:d1:60:4a:
68:fd:c5:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 09:37:40 2025 by rpki-client