Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/c67522-71c5-4061-a18b-6933a90c53fa/1/cnadbkoPwsmAE7ci6yvrnm6HH8Y.mft
File: cnadbkoPwsmAE7ci6yvrnm6HH8Y.mft (raw, json)
Hash identifier: KUJzSO1b/sR6Lz+F7sWVda7orLduOQk7fOKeT20wfkA=
Subject key identifier: 1F:F1:07:D8:31:D7:D4:D7:64:70:CF:A7:53:7A:FA:68:AC:44:58:A9
Authority key identifier: 72:76:9D:6E:4A:0F:C2:C9:80:13:B7:22:EB:2B:EB:9E:6E:87:1F:C6
Certificate issuer: /CN=72769d6e4a0fc2c98013b722eb2beb9e6e871fc6
Certificate serial: 0198D5F1CAC16CBA84A3E76327C6E0732BC9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cnadbkoPwsmAE7ci6yvrnm6HH8Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/c67522-71c5-4061-a18b-6933a90c53fa/1/cnadbkoPwsmAE7ci6yvrnm6HH8Y.mft
Manifest number: 1653
Signing time: Sat 23 Aug 2025 08:00:49 +0000
Manifest this update: Sat 23 Aug 2025 08:00:49 +0000
Manifest next update: Sun 24 Aug 2025 08:00:49 +0000
Files and hashes: 1: M3fOEClsXKvLtAnTcn5Su0j9iMg.roa (hash: E6qGvNO+V5ltNH3cwyFEtJdp+n857np9BM5la+TV5nM=)
2: bkHUy_sgghNYVbWsbVxAbLGezkg.roa (hash: yMeTm4bL37IzjPkhConJ8z6pYcZ3+b2hJFSO0Nigh2w=)
3: cnadbkoPwsmAE7ci6yvrnm6HH8Y.crl (hash: Cz8hX1Nfu6la67Gl0sOjGbdNsPXa6k525UM936Rl0hY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/c67522-71c5-4061-a18b-6933a90c53fa/1/cnadbkoPwsmAE7ci6yvrnm6HH8Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/c67522-71c5-4061-a18b-6933a90c53fa/1/cnadbkoPwsmAE7ci6yvrnm6HH8Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/cnadbkoPwsmAE7ci6yvrnm6HH8Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:ca:c1:6c:ba:84:a3:e7:63:27:c6:e0:73:2b:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72769d6e4a0fc2c98013b722eb2beb9e6e871fc6
Validity
Not Before: Aug 23 08:00:49 2025 GMT
Not After : Aug 24 08:00:49 2025 GMT
Subject: CN=1ff107d831d7d4d76470cfa7537afa68ac4458a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:60:3a:b4:a3:1c:a0:c1:18:04:9a:c9:a9:73:
04:9e:bf:d8:7f:8c:66:8d:a5:f2:6c:1f:b5:54:59:
5b:64:d7:6a:bf:1b:1b:11:d6:06:4b:e5:3a:79:fd:
0e:35:6f:6e:72:ed:95:4e:f4:47:76:a0:8b:1c:ec:
cf:92:be:fe:e2:0c:b9:17:2d:ed:ff:da:1f:21:5a:
99:d7:53:dd:ac:74:fa:3f:8e:27:14:fd:50:31:e5:
87:65:ce:7b:2f:99:f2:a7:69:5c:fa:76:07:bb:a9:
2d:25:19:9c:9f:08:5e:d2:6f:28:7a:ae:c4:c9:dc:
31:c0:7b:3c:73:e2:7b:1d:97:73:d0:21:e7:b2:67:
26:ff:c2:d9:14:fe:02:59:de:83:be:2a:05:56:b3:
d1:72:00:a8:d3:f6:d3:f5:57:c8:a1:aa:70:48:90:
77:e0:85:33:6c:ff:a6:cf:06:8e:00:7e:12:11:14:
b0:99:19:ad:3c:60:42:77:5f:cc:06:eb:5c:cd:73:
89:34:f7:42:2a:66:58:85:26:cb:8b:bd:97:66:77:
c4:e0:f3:c7:bd:03:a1:1b:b0:45:72:91:57:8c:ce:
34:bd:0a:3c:61:3e:09:33:e0:d0:6b:c8:59:75:a8:
c2:5d:b9:8f:3e:57:37:6f:a7:66:71:40:83:c0:b9:
da:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:F1:07:D8:31:D7:D4:D7:64:70:CF:A7:53:7A:FA:68:AC:44:58:A9
X509v3 Authority Key Identifier:
keyid:72:76:9D:6E:4A:0F:C2:C9:80:13:B7:22:EB:2B:EB:9E:6E:87:1F:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cnadbkoPwsmAE7ci6yvrnm6HH8Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/c67522-71c5-4061-a18b-6933a90c53fa/1/cnadbkoPwsmAE7ci6yvrnm6HH8Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/c67522-71c5-4061-a18b-6933a90c53fa/1/cnadbkoPwsmAE7ci6yvrnm6HH8Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:a2:59:8c:0a:4c:b0:24:0a:f6:df:2d:ea:b7:ba:9f:b7:b9:
34:1f:77:f3:6a:4b:4d:ed:56:5c:29:5c:90:09:ad:d6:da:72:
9d:59:94:b8:43:3f:60:09:41:86:f0:48:44:75:e0:bf:3b:9c:
18:49:e5:6c:06:cf:5f:af:1f:86:c4:52:d6:e1:b0:c4:bc:aa:
f3:51:dd:a4:67:c9:f3:c5:e9:bc:42:cb:40:24:01:3c:00:6e:
0f:cc:53:4f:27:fb:47:aa:59:79:7b:16:2f:0e:91:aa:46:6c:
a5:48:e3:3e:2f:5c:c2:c2:4a:42:d8:94:e4:fd:e9:df:8f:96:
11:49:d3:07:b8:54:b7:0b:c1:9c:1e:4c:9b:a4:5d:73:ee:04:
db:d8:3e:86:ed:8a:46:6f:3e:5f:04:61:37:bd:6a:0c:e0:1d:
a6:0e:74:ea:6c:74:36:96:3a:af:41:9e:7d:b3:ed:1e:af:be:
d2:0c:a2:39:2f:0e:c2:83:8d:d5:bf:9b:46:72:a6:4c:a5:48:
7b:71:a6:87:42:4d:2a:90:9b:7f:ff:e2:79:88:e1:73:b0:66:
e4:d8:a4:c8:4f:10:f2:77:91:90:8f:c5:6f:10:bf:76:58:95:
b3:fb:35:24:c7:72:cf:ef:2f:ad:a0:0e:c3:ba:6d:cd:c3:50:
b7:b9:d5:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:08:41 2025 by rpki-client