Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/c128bc-cddb-4b07-8d01-62f1a350414c/1/cFtQehAZ98Rlc33FlzbAb93c7-c.mft
File: cFtQehAZ98Rlc33FlzbAb93c7-c.mft (raw, json)
Hash identifier: /J/Stqcx90IZTEa5jCRliWd+bYhvFtEXoFdtCuxvidM=
Subject key identifier: 58:51:B8:3C:09:7C:3A:61:7A:92:52:55:66:E8:F3:D9:5D:6A:92:33
Authority key identifier: 70:5B:50:7A:10:19:F7:C4:65:73:7D:C5:97:36:C0:6F:DD:DC:EF:E7
Certificate issuer: /CN=705b507a1019f7c465737dc59736c06fdddcefe7
Certificate serial: 0198D4DFDF622E94B4186C659F5831FB4124
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cFtQehAZ98Rlc33FlzbAb93c7-c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/c128bc-cddb-4b07-8d01-62f1a350414c/1/cFtQehAZ98Rlc33FlzbAb93c7-c.mft
Manifest number: 064F
Signing time: Sat 23 Aug 2025 03:01:38 +0000
Manifest this update: Sat 23 Aug 2025 03:01:38 +0000
Manifest next update: Sun 24 Aug 2025 03:01:38 +0000
Files and hashes: 1: I35QWc2nLFeohwH6DngqA3KZZFg.roa (hash: aZgBsm07l1h8BIWKajFFEnRBCv4q5gOkXWvMXnSlf3g=)
2: cFtQehAZ98Rlc33FlzbAb93c7-c.crl (hash: 7p91siuayY87ZUZI6akq3+0jGiOkjJSvaNcrcw5FoHI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/c128bc-cddb-4b07-8d01-62f1a350414c/1/cFtQehAZ98Rlc33FlzbAb93c7-c.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/c128bc-cddb-4b07-8d01-62f1a350414c/1/cFtQehAZ98Rlc33FlzbAb93c7-c.mft
rsync://rpki.ripe.net/repository/DEFAULT/cFtQehAZ98Rlc33FlzbAb93c7-c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:01:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:df:df:62:2e:94:b4:18:6c:65:9f:58:31:fb:41:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=705b507a1019f7c465737dc59736c06fdddcefe7
Validity
Not Before: Aug 23 03:01:38 2025 GMT
Not After : Aug 24 03:01:38 2025 GMT
Subject: CN=5851b83c097c3a617a92525566e8f3d95d6a9233
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:8a:7d:02:bc:da:8e:09:26:83:99:ab:06:e5:
a6:ea:e7:b1:01:df:20:34:9b:7a:c6:64:e7:c1:d9:
24:6a:e4:23:7c:42:69:06:b8:f9:69:93:13:9f:1e:
9a:20:53:98:b4:09:ea:33:fe:4a:87:27:9f:b0:82:
55:b3:58:6a:96:6f:57:a9:cf:8b:64:fc:21:45:c4:
44:a5:e0:70:3a:3e:94:7d:5b:0c:01:54:5f:2f:ea:
87:3c:e2:2f:30:53:42:6d:01:0b:2a:33:b2:5d:99:
06:55:56:ca:2f:ff:a7:9d:da:df:74:e0:c9:17:58:
28:32:61:42:53:5c:39:41:e7:a6:73:bb:6b:19:88:
80:f1:b8:f0:27:0b:a8:10:ef:3d:6a:9c:c0:c9:8b:
c4:12:5f:4e:59:a4:d2:68:ee:84:90:21:1d:65:7b:
d3:31:f4:05:04:09:10:aa:69:dd:3e:0c:9e:bd:f5:
d9:8a:ae:d7:6a:2a:4b:09:63:14:3d:98:e8:64:20:
6e:94:e4:09:1c:c9:5d:1a:a5:e8:bc:65:c6:e9:9f:
85:88:39:f4:1e:dd:73:84:d9:b6:a1:2f:94:cf:39:
c9:1d:b6:92:27:83:ee:a7:06:ea:35:07:f1:5f:51:
03:50:68:8b:43:35:da:7b:da:22:7f:19:08:ed:95:
e3:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:51:B8:3C:09:7C:3A:61:7A:92:52:55:66:E8:F3:D9:5D:6A:92:33
X509v3 Authority Key Identifier:
keyid:70:5B:50:7A:10:19:F7:C4:65:73:7D:C5:97:36:C0:6F:DD:DC:EF:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cFtQehAZ98Rlc33FlzbAb93c7-c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/c128bc-cddb-4b07-8d01-62f1a350414c/1/cFtQehAZ98Rlc33FlzbAb93c7-c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/c128bc-cddb-4b07-8d01-62f1a350414c/1/cFtQehAZ98Rlc33FlzbAb93c7-c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:c5:c3:a6:b2:58:c7:06:40:86:9a:39:dd:18:ae:6a:df:b3:
31:2c:13:81:2a:aa:bb:e6:a3:d7:42:4c:d2:c4:86:cd:76:e9:
f7:d9:0b:86:fb:dc:34:9a:da:5a:99:ef:a7:b0:cc:ac:80:47:
f1:24:3b:16:de:e9:39:e5:7b:eb:ed:23:25:40:86:69:93:3d:
aa:b1:7c:23:f4:25:7d:04:d8:d2:91:34:7a:c8:5a:0e:cb:76:
36:ff:ac:e3:c2:53:35:96:28:69:c6:19:d4:48:34:31:ba:fc:
07:7d:a0:87:0d:bd:71:3e:5d:fc:36:42:9c:79:19:d8:3a:4b:
5a:b1:6e:bb:8a:f3:0b:b8:7b:8f:a5:94:20:e6:0f:7c:58:5e:
ee:9b:bf:ac:3f:5d:9f:50:e9:9e:e6:a2:40:82:e3:ee:13:f3:
0f:83:58:e1:26:c3:78:1b:17:c4:27:22:e5:a9:79:41:97:e1:
19:cc:5a:cd:8d:36:0d:6a:39:c4:b8:7d:5c:1f:2c:73:82:0d:
53:81:3e:e5:97:7c:9b:07:43:0e:98:b4:14:c0:cd:25:c8:c2:
e2:d5:6a:c4:16:c9:89:30:7b:d3:be:ba:92:23:91:8f:bc:26:
f5:35:e0:ab:c1:d2:60:4f:e2:eb:38:ab:cf:f2:2d:6b:08:7c:
c3:1e:f9:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:51:59 2025 by rpki-client