Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/ba61ce-9c86-42ef-90fb-dd515e63cfcb/1/c45l-wPm1gfYviBDRdbgWkYLmk8.mft
File: c45l-wPm1gfYviBDRdbgWkYLmk8.mft (raw, json)
Hash identifier: oazZsQzI1ySjeEFkfXUX7rsdsjdQInucC++Gb5c/TjU=
Subject key identifier: CF:A0:52:D5:DC:AD:31:B1:D3:20:8F:3B:3C:FC:DC:59:CE:E3:48:8D
Authority key identifier: 73:8E:65:FB:03:E6:D6:07:D8:BE:20:43:45:D6:E0:5A:46:0B:9A:4F
Certificate issuer: /CN=738e65fb03e6d607d8be204345d6e05a460b9a4f
Certificate serial: 0198D65F8B108C6F3AB6D452A4E01D524E16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c45l-wPm1gfYviBDRdbgWkYLmk8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/ba61ce-9c86-42ef-90fb-dd515e63cfcb/1/c45l-wPm1gfYviBDRdbgWkYLmk8.mft
Manifest number: 0E4B
Signing time: Sat 23 Aug 2025 10:00:42 +0000
Manifest this update: Sat 23 Aug 2025 10:00:42 +0000
Manifest next update: Sun 24 Aug 2025 10:00:42 +0000
Files and hashes: 1: Bm65E--O4RsSyCzNAmCOH5DCwbg.roa (hash: Dk5vtQSO5xVuQ/klL2R5yHYHzC51XBPO7azd9yPCmHY=)
2: c45l-wPm1gfYviBDRdbgWkYLmk8.crl (hash: Vugm9C8zSfVUNDemOZtX2wWXoF66qR3kdgl+F90R998=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/ba61ce-9c86-42ef-90fb-dd515e63cfcb/1/c45l-wPm1gfYviBDRdbgWkYLmk8.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/ba61ce-9c86-42ef-90fb-dd515e63cfcb/1/c45l-wPm1gfYviBDRdbgWkYLmk8.mft
rsync://rpki.ripe.net/repository/DEFAULT/c45l-wPm1gfYviBDRdbgWkYLmk8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:8b:10:8c:6f:3a:b6:d4:52:a4:e0:1d:52:4e:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=738e65fb03e6d607d8be204345d6e05a460b9a4f
Validity
Not Before: Aug 23 10:00:42 2025 GMT
Not After : Aug 24 10:00:42 2025 GMT
Subject: CN=cfa052d5dcad31b1d3208f3b3cfcdc59cee3488d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:bd:2b:8f:2d:87:4b:35:fb:df:63:8d:7a:7c:
9b:49:bf:d2:3f:30:6a:4a:8a:db:08:26:b5:5e:2e:
5e:c8:47:76:03:7b:c4:dd:3e:42:40:83:45:61:31:
a5:89:f5:bf:93:15:02:55:c7:46:9d:50:d8:bd:25:
87:4b:db:3d:ba:45:68:27:55:13:60:07:85:21:96:
81:85:14:e4:e2:37:a6:79:e7:91:51:32:72:80:f9:
34:d4:0c:5c:8c:f7:f0:97:c4:3f:d1:e3:04:5c:55:
b3:62:7c:8a:ce:58:b8:fd:31:a7:ab:2d:a0:d5:d0:
47:90:fe:f2:8e:bb:ed:99:0a:03:45:a3:87:26:05:
0c:a8:92:6c:11:37:2f:ac:74:29:91:3b:1a:81:92:
eb:ee:2b:a9:02:dd:51:c0:0f:65:0d:3c:cf:65:43:
f9:a6:a5:91:fe:bb:06:44:59:90:91:51:50:a1:24:
47:de:4e:fd:24:6f:d4:b0:98:2a:ba:48:d8:85:fe:
d8:8c:b4:4a:dc:4f:67:2a:6b:78:13:20:f4:b2:ed:
b0:be:a8:41:99:9b:9f:34:b4:71:87:8b:5f:b1:72:
49:65:b7:0c:c3:d5:f5:9b:64:ed:49:c8:76:f8:10:
d1:e8:53:dc:8e:00:01:24:33:1a:da:bb:2e:96:aa:
1f:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:A0:52:D5:DC:AD:31:B1:D3:20:8F:3B:3C:FC:DC:59:CE:E3:48:8D
X509v3 Authority Key Identifier:
keyid:73:8E:65:FB:03:E6:D6:07:D8:BE:20:43:45:D6:E0:5A:46:0B:9A:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c45l-wPm1gfYviBDRdbgWkYLmk8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/ba61ce-9c86-42ef-90fb-dd515e63cfcb/1/c45l-wPm1gfYviBDRdbgWkYLmk8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/ba61ce-9c86-42ef-90fb-dd515e63cfcb/1/c45l-wPm1gfYviBDRdbgWkYLmk8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:31:30:75:45:47:07:a4:50:a7:1e:b5:8c:1f:43:89:17:0c:
1a:1f:16:b3:33:8d:21:b2:01:65:86:66:b2:a0:29:72:57:06:
58:52:c7:f1:46:2c:53:de:84:fe:78:45:1e:d0:d9:26:08:b5:
97:25:d8:69:d2:4e:30:79:46:e8:be:47:79:2e:0d:fb:cd:3f:
e7:60:10:3e:ad:29:68:b0:fe:56:f4:71:8e:f3:57:50:da:3b:
1e:a3:61:eb:c8:f7:39:63:87:fb:81:6e:af:90:de:62:ca:33:
af:bc:e1:56:04:e6:93:80:9a:c2:84:41:66:b8:ad:55:5a:83:
4b:0a:5f:76:3b:d6:bb:24:fc:1e:b9:3b:ce:50:d3:94:e1:cd:
3c:f2:0e:02:a8:37:11:e5:6a:f7:ed:4b:88:a1:64:7c:2d:bc:
65:9f:f7:62:34:c7:5c:d6:b4:a1:10:dd:ae:91:40:99:02:32:
a6:f2:7d:71:7d:35:9d:3f:b7:a5:09:68:e6:28:b3:69:fb:a6:
f6:30:d2:f3:89:31:ca:1a:0b:51:28:aa:ef:6a:ad:8f:01:91:
22:b3:19:9e:43:95:3f:e7:a6:a3:52:03:c4:2c:2c:6e:84:15:
d1:a5:67:eb:96:7c:f3:80:67:0a:da:b2:d4:f9:bf:89:69:42:
a3:63:d4:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:12:04 2025 by rpki-client