Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/068cb9-6cba-453d-858a-c5bbf95f8584/1/cAwDCTCp0uTaiNgYUqRMP3i_tEA.mft
File: cAwDCTCp0uTaiNgYUqRMP3i_tEA.mft (raw, json)
Hash identifier: L4RJMEv4qZrXZ3dCYRby9RvTP9RWJHcF+5/eqOqzSrk=
Subject key identifier: 64:95:8C:DE:AD:29:D3:8A:4C:8C:04:CA:D9:88:6F:6F:59:01:2D:77
Authority key identifier: 70:0C:03:09:30:A9:D2:E4:DA:88:D8:18:52:A4:4C:3F:78:BF:B4:40
Certificate issuer: /CN=700c030930a9d2e4da88d81852a44c3f78bfb440
Certificate serial: 0198D4E0C9D31547BA33F0F11B3DC6BD63F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cAwDCTCp0uTaiNgYUqRMP3i_tEA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/068cb9-6cba-453d-858a-c5bbf95f8584/1/cAwDCTCp0uTaiNgYUqRMP3i_tEA.mft
Manifest number: 164B
Signing time: Sat 23 Aug 2025 03:02:38 +0000
Manifest this update: Sat 23 Aug 2025 03:02:38 +0000
Manifest next update: Sun 24 Aug 2025 03:02:38 +0000
Files and hashes: 1: cAwDCTCp0uTaiNgYUqRMP3i_tEA.crl (hash: vP6D0P3hFMNZvy2NZApertdA7zADuOd7hYEEFw70nnE=)
2: iXldcpMNtu5kim9vQXhjht5Ha_0.roa (hash: OZZlPHrzKaaexsTtY7l0u4aOhC15J2UaGXg/fHHU/6k=)
3: lishyzU5fcRQD0UnbZJENmou-sc.roa (hash: OXZjviRf58gZnLzaiDcKdYvZD8OZRwCWQQj7e3qyEJY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/068cb9-6cba-453d-858a-c5bbf95f8584/1/cAwDCTCp0uTaiNgYUqRMP3i_tEA.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/068cb9-6cba-453d-858a-c5bbf95f8584/1/cAwDCTCp0uTaiNgYUqRMP3i_tEA.mft
rsync://rpki.ripe.net/repository/DEFAULT/cAwDCTCp0uTaiNgYUqRMP3i_tEA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:02:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:c9:d3:15:47:ba:33:f0:f1:1b:3d:c6:bd:63:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=700c030930a9d2e4da88d81852a44c3f78bfb440
Validity
Not Before: Aug 23 03:02:38 2025 GMT
Not After : Aug 24 03:02:38 2025 GMT
Subject: CN=64958cdead29d38a4c8c04cad9886f6f59012d77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:31:2d:12:04:bf:c2:4c:82:ba:07:12:36:78:
e1:4f:fa:2e:ed:89:fe:68:04:a1:fc:91:22:1f:4c:
fa:1c:59:eb:80:a0:bf:e5:1b:ad:27:b5:41:58:22:
9c:8d:6b:34:56:e2:5b:e6:f3:6b:ab:a6:27:14:77:
3b:49:d8:a1:87:c4:49:af:c4:3c:d7:94:66:89:cc:
f4:5a:31:1a:b6:16:92:85:71:7d:f7:b0:a0:74:4c:
89:ee:5a:e7:ed:4c:ba:28:6d:37:d9:88:f9:27:a3:
f2:3e:35:f0:86:5a:de:b4:54:c1:59:f7:33:72:39:
f2:34:5b:89:da:e1:1b:b4:7a:cc:2b:54:d9:05:39:
57:ca:a7:9f:62:a7:4c:60:9a:31:3d:e1:3c:0a:d5:
5b:30:86:73:22:f8:55:7a:cd:3b:eb:23:fe:af:20:
ea:7d:65:e1:36:6f:eb:43:38:78:4a:78:ff:2d:b9:
44:69:c3:c3:9f:38:e8:0d:6c:89:65:02:23:34:3f:
f5:fa:fc:11:e7:18:c9:0a:7b:dd:91:37:80:c2:11:
f6:e6:ed:b8:c0:71:43:85:ed:36:75:72:85:8b:25:
13:6d:96:e6:3f:2f:9f:f6:46:f7:5a:78:41:e6:b9:
bc:33:26:1c:5f:f9:22:57:6c:c5:95:d1:00:e4:d0:
65:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:95:8C:DE:AD:29:D3:8A:4C:8C:04:CA:D9:88:6F:6F:59:01:2D:77
X509v3 Authority Key Identifier:
keyid:70:0C:03:09:30:A9:D2:E4:DA:88:D8:18:52:A4:4C:3F:78:BF:B4:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cAwDCTCp0uTaiNgYUqRMP3i_tEA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/068cb9-6cba-453d-858a-c5bbf95f8584/1/cAwDCTCp0uTaiNgYUqRMP3i_tEA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/068cb9-6cba-453d-858a-c5bbf95f8584/1/cAwDCTCp0uTaiNgYUqRMP3i_tEA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:f5:43:da:37:91:d5:0d:3d:8f:00:5d:13:11:8c:73:bf:80:
50:5a:a1:91:0e:bd:73:8f:d2:f0:c8:f2:34:19:da:5b:52:db:
17:8f:58:09:8a:58:c8:63:c9:ff:48:06:d5:a9:32:12:dc:e6:
2e:dd:4f:0a:f0:e4:1a:8e:0f:e6:4b:d1:10:03:e5:6f:f3:97:
f1:35:a5:19:5a:8e:0f:04:4b:e6:51:f4:0a:29:83:9e:fa:3b:
bc:56:a6:35:69:e4:97:a1:cf:07:2d:76:e0:93:ee:db:64:c2:
52:f2:1a:c8:e5:e0:a7:38:4a:36:78:34:af:a0:5d:0a:40:19:
8b:38:79:b6:3d:cf:a2:d0:c9:40:cd:f3:5c:8f:d7:45:b0:f8:
5a:e4:67:ee:3c:9c:77:47:8f:28:50:4e:12:a5:49:aa:f6:36:
a5:80:79:ce:aa:26:e7:c3:44:46:f5:de:8b:50:e9:ce:e2:86:
9a:bc:1e:b2:4f:84:23:da:05:53:a6:cf:27:34:04:b3:19:53:
3c:2c:5f:9c:1b:5b:1a:19:d2:07:41:80:4f:d5:af:23:9f:6e:
e1:3b:23:56:15:80:74:60:cc:c5:21:9b:88:38:1f:e8:fd:3a:
74:2a:e0:62:34:e7:d2:1b:4c:d7:85:98:2e:18:03:88:3b:dc:
a5:1e:79:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:16:18 2025 by rpki-client