Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/e6e15c-12b0-40be-8bc1-5708f580e36a/1/CnN3j7G-woyZgmUq7ehqAEwmgvE.mft
File: CnN3j7G-woyZgmUq7ehqAEwmgvE.mft (raw, json)
Hash identifier: ke5HPX/a9SdT25nzO9vsWKuNdU0NdD0jBDjrnN9qV3E=
Subject key identifier: 99:1C:07:62:A3:BB:D4:4F:5A:0F:A8:40:C0:5C:60:2F:EE:59:9C:CE
Authority key identifier: 0A:73:77:8F:B1:BE:C2:8C:99:82:65:2A:ED:E8:6A:00:4C:26:82:F1
Certificate issuer: /CN=0a73778fb1bec28c9982652aede86a004c2682f1
Certificate serial: 0198D5BC4C5011C169E2C406984A48E1113F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CnN3j7G-woyZgmUq7ehqAEwmgvE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/e6e15c-12b0-40be-8bc1-5708f580e36a/1/CnN3j7G-woyZgmUq7ehqAEwmgvE.mft
Manifest number: 0F5E
Signing time: Sat 23 Aug 2025 07:02:23 +0000
Manifest this update: Sat 23 Aug 2025 07:02:23 +0000
Manifest next update: Sun 24 Aug 2025 07:02:23 +0000
Files and hashes: 1: CnN3j7G-woyZgmUq7ehqAEwmgvE.crl (hash: RVZ/6zfYyeHpFxtsBWTAQfCmouWlObA/zFoVsWuulbo=)
2: WG1KaYBil4vEXHxcooJOyBDWYD4.roa (hash: KHIxCFkGSHSfCiqYXlIC0/8nqViYZ1Y0FqW8AdTQIkI=)
3: u0xWet9ZDHMXVkjPrbzs1OmWO1g.roa (hash: ZwDDqnoNXIsm40ptE+7O6BmOJ1pGhObOr/LwRxZDq2E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/e6e15c-12b0-40be-8bc1-5708f580e36a/1/CnN3j7G-woyZgmUq7ehqAEwmgvE.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/e6e15c-12b0-40be-8bc1-5708f580e36a/1/CnN3j7G-woyZgmUq7ehqAEwmgvE.mft
rsync://rpki.ripe.net/repository/DEFAULT/CnN3j7G-woyZgmUq7ehqAEwmgvE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bc:4c:50:11:c1:69:e2:c4:06:98:4a:48:e1:11:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a73778fb1bec28c9982652aede86a004c2682f1
Validity
Not Before: Aug 23 07:02:23 2025 GMT
Not After : Aug 24 07:02:23 2025 GMT
Subject: CN=991c0762a3bbd44f5a0fa840c05c602fee599cce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:c9:e3:b6:6d:6f:38:bb:33:58:5e:b7:7d:44:
48:df:79:2b:e7:f2:0f:01:2a:1a:b5:da:0d:0d:4e:
03:a4:79:f7:34:98:f5:ea:23:a7:1c:c0:68:78:a7:
de:37:f9:ad:b5:51:ce:e2:0d:6c:b6:9d:55:b6:55:
27:9c:25:3f:2c:7b:fd:5e:34:22:1d:9f:0a:9c:a1:
32:6c:43:c3:dc:fe:fb:89:06:aa:0b:91:90:4e:3c:
b5:b8:4b:c3:c5:bb:34:8a:ea:37:f1:4d:70:56:0e:
15:fc:fe:01:7a:42:90:4f:7a:92:22:f8:13:76:c2:
7d:8a:12:87:97:2e:8d:08:91:3d:d3:98:c1:0e:a3:
7b:f7:c5:22:61:8f:a4:4e:65:47:56:51:6e:d1:37:
1a:1b:b7:d6:52:d0:d0:64:16:11:09:70:e3:cd:60:
0e:67:f1:cc:c8:1a:39:24:d7:c7:21:6b:b0:aa:92:
f4:62:0b:5d:37:73:02:da:15:70:23:90:cf:f7:54:
a7:54:b6:e7:9d:7a:e0:8f:b5:a4:a3:fa:4b:da:bc:
d9:83:d1:a7:bc:d0:31:b3:c8:5e:e3:b6:d4:cc:fa:
e3:fa:b4:b3:61:61:75:96:9d:a6:d0:2a:27:73:9b:
94:05:07:4c:d8:cd:8d:90:55:7b:ae:e9:e7:08:c1:
14:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:1C:07:62:A3:BB:D4:4F:5A:0F:A8:40:C0:5C:60:2F:EE:59:9C:CE
X509v3 Authority Key Identifier:
keyid:0A:73:77:8F:B1:BE:C2:8C:99:82:65:2A:ED:E8:6A:00:4C:26:82:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CnN3j7G-woyZgmUq7ehqAEwmgvE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/e6e15c-12b0-40be-8bc1-5708f580e36a/1/CnN3j7G-woyZgmUq7ehqAEwmgvE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/e6e15c-12b0-40be-8bc1-5708f580e36a/1/CnN3j7G-woyZgmUq7ehqAEwmgvE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:ac:4c:07:df:3b:2d:2a:bf:fe:24:7a:8b:03:f5:06:3c:06:
76:81:33:2a:4e:18:15:50:6d:ee:21:2c:70:14:4a:b3:a2:02:
59:49:71:7f:66:fb:2b:dc:79:02:8c:1f:90:02:f7:ba:fa:d1:
d0:e5:4d:fb:3d:e9:8b:f2:b9:75:bb:72:20:72:a7:76:b5:fb:
e0:18:69:df:db:30:72:b0:72:61:22:3e:72:e6:3b:91:39:d3:
fb:79:9c:06:da:db:5b:e4:f5:38:80:b3:4a:44:9c:0c:d4:18:
19:c5:fa:c3:2e:48:12:e5:5e:60:f1:35:aa:eb:bc:40:fc:8b:
f4:e1:4d:51:eb:63:6e:75:c2:b6:a1:78:b0:86:47:54:c2:c2:
e8:ce:98:6b:e7:dd:a3:8e:a3:7b:49:7d:ca:e9:0d:c2:38:da:
39:fb:8c:3d:de:bd:48:9e:3f:f3:9e:8e:a2:2b:25:74:9e:40:
e1:50:d2:5e:98:47:16:8b:6d:8e:4c:37:a4:3b:55:56:25:03:
bf:0c:0d:d8:47:d8:2d:1d:81:97:6a:65:6b:c3:67:57:20:8a:
e2:7e:ad:9d:b9:d0:26:94:ac:8c:8d:95:49:3b:88:61:3e:2d:
4e:12:43:bb:57:48:2b:94:3d:cf:3e:07:cf:41:48:3c:1e:72:
4e:39:5d:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:34:08 2025 by rpki-client