Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/d36409-8845-4fa3-9dbd-9834171eb7d6/1/cIPC79QTNUG2RbZheEzd1JxInFs.mft
File: cIPC79QTNUG2RbZheEzd1JxInFs.mft (raw, json)
Hash identifier: SBSg/evhBs9G8JvbpRDjHAwUWtIC04QA3FEDEWANxj4=
Subject key identifier: 35:36:29:91:A5:73:03:57:D5:E2:3D:A0:53:EB:B9:C7:DC:55:02:FB
Authority key identifier: 70:83:C2:EF:D4:13:35:41:B6:45:B6:61:78:4C:DD:D4:9C:48:9C:5B
Certificate issuer: /CN=7083c2efd4133541b645b661784cddd49c489c5b
Certificate serial: 0198D47421D8310E2D1E13AEA4411631899A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cIPC79QTNUG2RbZheEzd1JxInFs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/d36409-8845-4fa3-9dbd-9834171eb7d6/1/cIPC79QTNUG2RbZheEzd1JxInFs.mft
Manifest number: B6
Signing time: Sat 23 Aug 2025 01:03:57 +0000
Manifest this update: Sat 23 Aug 2025 01:03:57 +0000
Manifest next update: Sun 24 Aug 2025 01:03:57 +0000
Files and hashes: 1: WvOZemqg-ypHTTal2SMuUFTSuok.roa (hash: 2VHKeSfOF/+IIaH05goA5gK0Fp6ZUSiibX9gEoU9FvE=)
2: cIPC79QTNUG2RbZheEzd1JxInFs.crl (hash: 33seJt02KeCd/Ro3Tgu7wE/PcJk4citOtxu+P0EXSmM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/d36409-8845-4fa3-9dbd-9834171eb7d6/1/cIPC79QTNUG2RbZheEzd1JxInFs.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/d36409-8845-4fa3-9dbd-9834171eb7d6/1/cIPC79QTNUG2RbZheEzd1JxInFs.mft
rsync://rpki.ripe.net/repository/DEFAULT/cIPC79QTNUG2RbZheEzd1JxInFs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:03:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:74:21:d8:31:0e:2d:1e:13:ae:a4:41:16:31:89:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7083c2efd4133541b645b661784cddd49c489c5b
Validity
Not Before: Aug 23 01:03:57 2025 GMT
Not After : Aug 24 01:03:57 2025 GMT
Subject: CN=35362991a5730357d5e23da053ebb9c7dc5502fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:97:ee:14:59:35:26:f0:b0:f4:a4:d7:1a:80:
f5:fc:1d:78:b0:c4:ff:e2:7e:f3:d7:93:64:ea:fe:
9c:eb:33:58:c6:f5:dd:a6:a3:66:eb:77:16:5b:fc:
50:4a:d9:bf:2d:34:95:d0:95:e7:a0:9b:d6:ea:bb:
8f:2b:b8:5c:b1:8c:26:99:26:f3:ca:d0:7f:dc:7d:
08:7b:c8:30:4f:33:53:6b:59:00:6b:b0:af:01:90:
0e:7a:d6:33:c9:55:71:02:fe:2f:93:b3:34:88:39:
41:98:1e:b0:7a:e4:ae:95:7e:23:05:0b:9d:24:f0:
1d:bd:dc:f1:ad:f2:65:4a:10:14:1c:21:df:7f:35:
06:61:f5:45:86:25:1c:87:52:2a:af:54:e3:e5:f6:
a1:92:1e:5d:b0:44:6e:40:79:d2:8d:05:1f:32:2b:
2d:34:6e:8d:2e:69:6d:49:b2:16:da:41:fd:68:04:
2d:d9:3b:99:3c:14:fe:5d:b5:f1:4d:31:f2:39:a1:
f3:8b:13:b1:1c:ab:93:67:54:35:69:e5:e5:b8:80:
0d:00:cd:4b:e5:03:ad:7d:92:da:c1:2e:87:46:c5:
41:67:96:14:04:fe:ab:91:51:1f:16:4e:cb:f8:92:
b5:1c:b9:de:23:9b:99:cd:ef:24:25:81:a9:63:38:
64:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:36:29:91:A5:73:03:57:D5:E2:3D:A0:53:EB:B9:C7:DC:55:02:FB
X509v3 Authority Key Identifier:
keyid:70:83:C2:EF:D4:13:35:41:B6:45:B6:61:78:4C:DD:D4:9C:48:9C:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cIPC79QTNUG2RbZheEzd1JxInFs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/d36409-8845-4fa3-9dbd-9834171eb7d6/1/cIPC79QTNUG2RbZheEzd1JxInFs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/d36409-8845-4fa3-9dbd-9834171eb7d6/1/cIPC79QTNUG2RbZheEzd1JxInFs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:35:04:8f:30:25:ab:4a:12:2c:b2:f1:6b:0f:2c:b2:9f:b7:
00:e5:87:e6:aa:05:42:2b:11:85:43:37:52:c7:4b:3b:76:07:
86:f1:c5:ad:3b:87:b6:fe:bb:cc:b6:b4:71:bc:b7:92:7f:e9:
32:67:e4:46:55:7e:d1:16:59:4b:c4:d5:b8:97:88:1e:c7:b2:
67:59:4d:54:dd:70:cc:53:1c:18:56:36:69:09:a3:6a:30:2c:
07:19:e2:a1:6f:85:80:d2:d2:28:70:3d:ab:2a:2c:28:3b:ab:
5d:9f:6f:84:84:0f:47:0e:71:c8:87:ee:50:c8:fd:55:ab:1e:
86:83:fc:e2:5d:cb:c5:b5:e5:10:3c:4b:36:7e:ac:78:da:75:
6e:85:b5:3d:e9:8b:1e:18:2f:2f:8f:9f:ac:cf:8d:44:eb:56:
ff:77:54:ca:3a:44:d9:97:a0:f2:50:4f:57:82:af:aa:fd:79:
04:df:61:f2:8c:67:13:54:ff:4d:5e:30:09:e9:f8:2d:7f:1e:
08:5c:76:bc:4b:c3:33:1d:85:27:e4:1e:71:60:7f:ab:0d:d9:
aa:6e:d1:67:6a:2d:4a:97:ad:f3:8d:74:0d:06:bb:f1:8b:24:
41:53:e8:b0:5a:4c:a5:90:8f:21:d7:d1:23:fb:d8:33:58:37:
ac:65:1d:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:51:10 2025 by rpki-client