Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/f37538-7f9f-4228-a31e-2dab43ac04b3/1/cJ-PMgghUjWc2vmqvUpVH0-0AhM.mft
File: cJ-PMgghUjWc2vmqvUpVH0-0AhM.mft (raw, json)
Hash identifier: M/qLXRzX6N3vqFFJRk5V1KQSB5wWt5OqO1aH8U9siU0=
Subject key identifier: CF:79:51:8E:6A:57:D5:DA:EC:8D:26:F2:79:0A:9E:F3:3D:30:55:F1
Authority key identifier: 70:9F:8F:32:08:21:52:35:9C:DA:F9:AA:BD:4A:55:1F:4F:B4:02:13
Certificate issuer: /CN=709f8f32082152359cdaf9aabd4a551f4fb40213
Certificate serial: 0198D4743D2BBB1232A4E51726FD30A6FFE1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cJ-PMgghUjWc2vmqvUpVH0-0AhM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/f37538-7f9f-4228-a31e-2dab43ac04b3/1/cJ-PMgghUjWc2vmqvUpVH0-0AhM.mft
Manifest number: 0A8B
Signing time: Sat 23 Aug 2025 01:04:04 +0000
Manifest this update: Sat 23 Aug 2025 01:04:04 +0000
Manifest next update: Sun 24 Aug 2025 01:04:04 +0000
Files and hashes: 1: cJ-PMgghUjWc2vmqvUpVH0-0AhM.crl (hash: +EDuVzf6DpgEhr8TRdAV5e+BibjU8A7dJc8J+d+ls5o=)
2: kJep7a3FRkNs3KQgMS6kDueqf3w.roa (hash: dBpCegRmmKMPJmbKSXlcIE1LjID2HAF4dE0zWcCDOWk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/f37538-7f9f-4228-a31e-2dab43ac04b3/1/cJ-PMgghUjWc2vmqvUpVH0-0AhM.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/f37538-7f9f-4228-a31e-2dab43ac04b3/1/cJ-PMgghUjWc2vmqvUpVH0-0AhM.mft
rsync://rpki.ripe.net/repository/DEFAULT/cJ-PMgghUjWc2vmqvUpVH0-0AhM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:04:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:74:3d:2b:bb:12:32:a4:e5:17:26:fd:30:a6:ff:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=709f8f32082152359cdaf9aabd4a551f4fb40213
Validity
Not Before: Aug 23 01:04:04 2025 GMT
Not After : Aug 24 01:04:04 2025 GMT
Subject: CN=cf79518e6a57d5daec8d26f2790a9ef33d3055f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:b4:5e:39:85:3f:67:0b:7f:3e:d3:f0:a6:54:
c0:25:79:51:56:cf:1a:68:63:93:fd:12:af:80:60:
e6:cd:2e:ca:33:1b:ea:3d:d0:70:44:7d:10:e9:bf:
a6:17:5a:10:53:ea:0a:e1:ed:ed:d9:67:69:c6:90:
c6:49:b8:e5:84:16:e5:86:29:a3:6b:92:0f:7a:f7:
3d:bf:72:eb:6e:19:c6:50:b0:85:63:5e:14:81:3d:
24:36:4b:55:03:0b:0b:03:3e:56:ac:0a:1d:6a:fe:
0d:62:e7:f6:f6:cb:32:1d:fb:3f:bf:29:b6:0f:d5:
b0:89:fe:6e:32:12:09:58:55:50:b7:b6:62:a5:7d:
f7:d9:a4:0b:ab:e1:1f:e0:4d:12:56:cb:f9:3b:21:
6e:03:fe:c9:de:1b:a4:eb:6a:14:da:91:8b:14:56:
9f:28:4c:6c:0f:d2:15:5c:64:84:c1:01:44:3c:c5:
e7:b7:b9:98:72:86:7f:71:6a:a1:7c:34:da:81:61:
fb:af:21:48:66:9e:90:f4:da:14:5c:17:b0:ac:d4:
fa:c2:03:3e:1f:16:01:0a:4f:c3:ba:87:a6:8e:7b:
72:aa:0a:d4:84:e0:57:9e:0e:b0:da:db:ad:2e:27:
03:73:48:85:15:5f:d1:be:ae:fc:c9:ce:b8:7a:9f:
61:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:79:51:8E:6A:57:D5:DA:EC:8D:26:F2:79:0A:9E:F3:3D:30:55:F1
X509v3 Authority Key Identifier:
keyid:70:9F:8F:32:08:21:52:35:9C:DA:F9:AA:BD:4A:55:1F:4F:B4:02:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cJ-PMgghUjWc2vmqvUpVH0-0AhM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/f37538-7f9f-4228-a31e-2dab43ac04b3/1/cJ-PMgghUjWc2vmqvUpVH0-0AhM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/f37538-7f9f-4228-a31e-2dab43ac04b3/1/cJ-PMgghUjWc2vmqvUpVH0-0AhM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:ba:b1:dd:ff:fa:be:79:af:5f:b8:58:8b:7e:5e:b4:eb:ca:
d6:96:dd:48:46:59:f9:08:b8:de:73:62:49:bf:40:b2:88:01:
19:0e:47:4f:ff:0c:77:6e:a0:f1:8d:38:13:bd:5d:75:9b:41:
23:4e:9f:67:03:cd:2d:98:bc:31:fa:a2:2d:85:a4:bf:a2:66:
59:56:df:7b:52:72:45:50:76:7b:10:60:20:73:1a:fa:fe:46:
0c:cd:01:17:78:96:10:0c:29:f2:97:57:13:03:86:5b:8f:ad:
7d:4c:c5:6c:ab:02:83:c8:47:0d:59:45:ed:ee:78:ad:4c:7c:
e1:46:3a:68:fd:30:01:32:41:4d:4f:a0:34:2b:2a:91:f9:a9:
88:5d:1b:b6:1d:5e:91:51:d5:6a:30:7d:61:27:25:a8:33:ff:
f8:40:8a:3f:e4:a2:0d:9a:08:00:c9:58:e8:1c:64:2c:c9:e2:
ff:4d:98:c4:10:0d:d9:ae:e6:b3:8d:79:ec:ea:37:70:b9:28:
64:d3:3d:b7:0c:ed:e0:3a:12:95:3b:3e:06:34:d8:c5:44:4a:
0f:e8:31:71:74:48:41:fe:78:dd:05:d2:6d:94:4b:3b:c9:7e:
59:a6:43:1c:17:c5:00:10:e2:58:a4:72:30:0a:f6:4f:4c:08:
8a:83:26:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:35:15 2025 by rpki-client