Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/852cfb-4471-4290-91f4-6bc4905c42d4/1/ClMYxYv1unQySyXQN0BN2N2p_yQ.mft
File: ClMYxYv1unQySyXQN0BN2N2p_yQ.mft (raw, json)
Hash identifier: +c+8DnhbRnkZJpEwQCAWq7TdWOssK1bFJFwOxTE8efo=
Subject key identifier: 31:0D:02:C9:37:EC:CA:DD:E1:06:22:42:BF:3F:BF:86:8A:CD:C2:77
Authority key identifier: 0A:53:18:C5:8B:F5:BA:74:32:4B:25:D0:37:40:4D:D8:DD:A9:FF:24
Certificate issuer: /CN=0a5318c58bf5ba74324b25d037404dd8dda9ff24
Certificate serial: 0198D583FF953CD816A8DE2B14FCBCFBC6E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ClMYxYv1unQySyXQN0BN2N2p_yQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/852cfb-4471-4290-91f4-6bc4905c42d4/1/ClMYxYv1unQySyXQN0BN2N2p_yQ.mft
Manifest number: 1649
Signing time: Sat 23 Aug 2025 06:00:54 +0000
Manifest this update: Sat 23 Aug 2025 06:00:54 +0000
Manifest next update: Sun 24 Aug 2025 06:00:54 +0000
Files and hashes: 1: ClMYxYv1unQySyXQN0BN2N2p_yQ.crl (hash: Q8YPK7zE8rcTA52HazeH3pN9WVO0TrdRRTRkaUAD6to=)
2: DLTd3WJjxjvYe7s9RQaXW0-asFQ.roa (hash: CEzU0MiwDAlXifXvS9Fry7MUXXUL96cqYeU54NDS/g8=)
3: MzKwgAtz12wzIsjgwju5LaHLtH8.roa (hash: DsGzfZzJWXHpJi5oY7AKelnpp/ss483xMhTBHOGogIk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/852cfb-4471-4290-91f4-6bc4905c42d4/1/ClMYxYv1unQySyXQN0BN2N2p_yQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/852cfb-4471-4290-91f4-6bc4905c42d4/1/ClMYxYv1unQySyXQN0BN2N2p_yQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/ClMYxYv1unQySyXQN0BN2N2p_yQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:ff:95:3c:d8:16:a8:de:2b:14:fc:bc:fb:c6:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a5318c58bf5ba74324b25d037404dd8dda9ff24
Validity
Not Before: Aug 23 06:00:54 2025 GMT
Not After : Aug 24 06:00:54 2025 GMT
Subject: CN=310d02c937eccadde1062242bf3fbf868acdc277
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:e6:5f:40:19:5f:fc:95:0a:c6:ce:73:39:5c:
04:9f:59:a2:4f:c0:00:0f:e4:e7:74:2f:4f:9a:6f:
ef:8a:9e:4e:f8:ed:e2:24:a0:5f:2c:96:58:bb:db:
d8:bc:d1:0c:6e:48:75:5f:8e:2c:36:27:5a:df:bf:
47:5f:53:6d:3a:df:6e:fb:c9:16:a3:38:e8:9d:36:
3a:28:0b:ec:95:6d:23:7b:d4:3a:8b:ec:18:b4:8a:
2b:40:6f:9f:58:cb:97:4f:76:a4:fd:cf:6a:ba:e7:
40:3b:8c:c1:a4:44:6d:26:c1:fe:a5:47:35:b7:84:
aa:d0:ee:36:29:64:dc:dc:17:06:29:81:95:fa:f2:
ce:11:21:65:13:9a:dc:c2:d2:34:42:31:57:2d:1d:
3a:93:4a:1d:4c:91:d4:cc:0e:c6:c4:f0:9d:83:a8:
7b:15:b5:46:e6:ed:59:82:ea:65:b8:3d:4a:6f:fa:
98:8c:f6:58:4b:33:cf:6e:e7:3f:36:86:9c:98:37:
7c:74:33:f0:3e:5a:25:fb:3d:30:ac:a0:35:27:9f:
c8:c7:fa:ce:c7:a3:94:ce:c5:f5:43:a0:c4:e6:a5:
0f:d2:92:62:57:56:17:f5:74:a0:10:36:ac:ce:a2:
5b:ed:64:6d:ff:3f:9b:1e:24:7c:e2:1c:b8:1b:27:
51:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:0D:02:C9:37:EC:CA:DD:E1:06:22:42:BF:3F:BF:86:8A:CD:C2:77
X509v3 Authority Key Identifier:
keyid:0A:53:18:C5:8B:F5:BA:74:32:4B:25:D0:37:40:4D:D8:DD:A9:FF:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ClMYxYv1unQySyXQN0BN2N2p_yQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/852cfb-4471-4290-91f4-6bc4905c42d4/1/ClMYxYv1unQySyXQN0BN2N2p_yQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/852cfb-4471-4290-91f4-6bc4905c42d4/1/ClMYxYv1unQySyXQN0BN2N2p_yQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:2c:bd:ec:1d:24:ec:5e:d0:8e:b6:a1:bc:fd:96:a8:c9:e4:
91:a9:55:a7:91:b6:31:99:d2:d2:24:5c:4e:36:82:4c:83:28:
6f:84:db:e1:2e:a3:ea:0f:ee:85:23:05:30:51:1c:c8:1c:d2:
38:75:ad:ab:77:7d:8a:15:8c:6f:fd:d1:9c:95:d2:8a:02:7c:
ec:52:ee:29:ac:86:c1:17:14:e2:51:cd:92:83:b1:d4:34:e9:
b2:f6:c1:f5:57:93:06:4f:ae:64:dc:ea:44:48:6d:82:9d:fa:
8e:24:79:89:c8:68:d9:c7:f5:76:d1:39:dc:39:34:16:e3:56:
82:a7:f0:75:4a:0f:e7:84:ea:0e:39:94:38:a1:78:e2:2a:d8:
90:10:0a:9c:d2:2c:d9:7e:e4:3f:92:e0:72:e9:76:c5:71:28:
60:92:fd:65:06:d7:61:dc:a7:c7:2e:36:07:61:8b:4c:da:44:
61:bc:91:29:09:47:78:0e:ad:fe:5b:fd:ac:e3:31:3e:ae:8c:
76:15:27:5a:54:90:fb:1b:f9:a6:bc:bd:95:38:cd:34:b6:c3:
a9:df:ea:07:6a:bb:8b:ac:55:96:4a:fe:fc:a9:a5:d7:55:23:
87:af:d5:73:81:c5:63:c5:d9:52:c1:11:8e:58:fe:cb:eb:55:
90:5c:44:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 09:41:25 2025 by rpki-client