Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/c49d19-8c79-4f77-b450-c08cf197a10c/1/cpNPw8ra3m8HkHrrbgvlqexEB7k.mft
File: cpNPw8ra3m8HkHrrbgvlqexEB7k.mft (raw, json)
Hash identifier: 2B09+QpGznYGBWpDvsWwpPp36QCs822ld5CzbT3O9gc=
Subject key identifier: C5:79:4D:96:53:41:AD:FD:C9:A4:CD:BB:2B:D2:2D:E6:68:DD:F1:BE
Authority key identifier: 72:93:4F:C3:CA:DA:DE:6F:07:90:7A:EB:6E:0B:E5:A9:EC:44:07:B9
Certificate issuer: /CN=72934fc3cadade6f07907aeb6e0be5a9ec4407b9
Certificate serial: 0198D583A67210F8705C1D4030C485D8C04E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cpNPw8ra3m8HkHrrbgvlqexEB7k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/c49d19-8c79-4f77-b450-c08cf197a10c/1/cpNPw8ra3m8HkHrrbgvlqexEB7k.mft
Manifest number: 01E9
Signing time: Sat 23 Aug 2025 06:00:31 +0000
Manifest this update: Sat 23 Aug 2025 06:00:31 +0000
Manifest next update: Sun 24 Aug 2025 06:00:31 +0000
Files and hashes: 1: 5gtuF__7I-RTiMG2ukg-OsX2MbQ.roa (hash: Ba0mjq3pimajTCvvrrrZyoHBHvgCNhQury7Kq+n9Wpw=)
2: cpNPw8ra3m8HkHrrbgvlqexEB7k.crl (hash: tLxvPjqLfQs0W90GLF/GwZAFEGcwqwwijyGQcHSMk1M=)
3: ejCYeubtEX2rMSmkNAwpyfa0Enw.roa (hash: 4hn9ccLxIO+b+OCd227Erjt+kM9+/9+bRDsSA2RYfoU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/c49d19-8c79-4f77-b450-c08cf197a10c/1/cpNPw8ra3m8HkHrrbgvlqexEB7k.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/c49d19-8c79-4f77-b450-c08cf197a10c/1/cpNPw8ra3m8HkHrrbgvlqexEB7k.mft
rsync://rpki.ripe.net/repository/DEFAULT/cpNPw8ra3m8HkHrrbgvlqexEB7k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:a6:72:10:f8:70:5c:1d:40:30:c4:85:d8:c0:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72934fc3cadade6f07907aeb6e0be5a9ec4407b9
Validity
Not Before: Aug 23 06:00:31 2025 GMT
Not After : Aug 24 06:00:31 2025 GMT
Subject: CN=c5794d965341adfdc9a4cdbb2bd22de668ddf1be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:0b:0d:6c:22:4e:7c:3c:a9:30:6f:8d:87:68:
0b:37:c3:af:2f:a1:97:d6:94:b6:54:c0:ff:2d:d7:
fd:74:40:8e:09:fa:19:d4:f9:7a:f8:2b:2b:62:6b:
a9:94:0f:07:51:39:ec:49:2c:0b:6f:d2:d3:be:9e:
10:82:c5:05:8f:1e:8d:bc:23:d1:95:d8:77:cc:79:
25:2c:61:15:57:92:4f:46:8a:20:a5:ad:f6:88:4c:
57:b3:1c:cb:8b:a8:41:96:e3:6a:80:b3:47:e2:39:
f7:ec:58:45:5c:99:79:77:3f:74:2d:8a:e2:b4:cb:
92:6c:90:33:3f:b7:be:fa:a2:9c:55:93:3a:9c:5d:
71:1e:9a:fe:77:bf:90:cb:97:5c:b6:6d:08:3d:33:
72:7b:d2:0d:5f:fa:46:14:79:84:93:15:96:66:fc:
49:93:44:13:c6:49:b0:a5:c8:df:47:00:40:f5:8c:
ef:0b:4d:7d:59:82:90:b1:1d:dd:fd:58:59:94:5c:
17:8d:8b:76:71:1b:26:0a:18:64:86:ab:05:91:33:
5f:1a:0c:a6:54:45:14:99:92:e8:cd:c4:d5:8c:4d:
73:f7:56:88:f0:27:9f:00:0f:f8:56:18:e4:93:60:
98:2c:86:d7:d1:c8:35:7a:e8:e8:0e:f5:93:3b:e0:
fd:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:79:4D:96:53:41:AD:FD:C9:A4:CD:BB:2B:D2:2D:E6:68:DD:F1:BE
X509v3 Authority Key Identifier:
keyid:72:93:4F:C3:CA:DA:DE:6F:07:90:7A:EB:6E:0B:E5:A9:EC:44:07:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cpNPw8ra3m8HkHrrbgvlqexEB7k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/c49d19-8c79-4f77-b450-c08cf197a10c/1/cpNPw8ra3m8HkHrrbgvlqexEB7k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/c49d19-8c79-4f77-b450-c08cf197a10c/1/cpNPw8ra3m8HkHrrbgvlqexEB7k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:d5:4f:d9:e9:81:09:f2:d3:70:b3:3e:69:95:50:88:e3:bf:
e6:a4:7b:75:25:1f:92:9d:c5:56:9b:02:15:5c:5d:67:10:70:
11:24:4f:28:88:3e:70:05:5b:1d:a8:54:77:2b:ed:df:af:4d:
8e:5e:8e:03:97:ed:2f:0c:94:ff:27:39:f1:62:72:d5:f8:71:
4d:e2:69:d9:0c:80:49:b7:22:e8:8a:46:31:53:f4:3c:a9:d5:
c2:ec:8b:c5:ca:fe:12:cc:18:98:02:a0:b3:c6:3d:74:ec:33:
88:32:11:bf:a6:dd:e0:e1:11:93:45:82:1a:01:7e:bb:18:f6:
3c:77:3a:8c:e2:5f:25:8d:5f:70:fc:7d:d2:46:36:9c:a8:b2:
0c:b5:38:3c:ec:24:ca:4e:67:06:f1:7d:2c:4d:b4:12:59:98:
28:a9:e3:c6:17:af:a6:63:43:71:1c:f4:6c:c1:0d:2b:63:91:
8e:e8:c7:4d:3a:62:78:ae:2c:39:bd:f5:12:02:64:73:5e:eb:
dd:ac:6e:34:08:7c:d2:2d:99:f6:21:76:36:ea:e8:8c:a8:1c:
4b:af:cb:40:f8:b9:30:2a:27:f1:e1:a3:0f:4b:fe:71:23:cc:
38:60:a7:ca:be:a1:6a:4a:15:93:b8:f7:f0:ee:d4:1b:98:0b:
6f:db:ec:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:13:27 2025 by rpki-client