Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/08d44c-f102-4b70-8db0-72abeefeda4a/1/cIAppnQXfv2ZJSJ1CUYYwMnPvR0.mft
File: cIAppnQXfv2ZJSJ1CUYYwMnPvR0.mft (raw, json)
Hash identifier: UMvJX1QsUSVzLF+SWxuACgyJ5V9uNyIi9Q5iQwQGfUY=
Subject key identifier: 7E:A6:5A:4E:51:F1:51:42:A6:B5:68:DE:74:33:FF:CA:6F:DB:A1:1A
Authority key identifier: 70:80:29:A6:74:17:7E:FD:99:25:22:75:09:46:18:C0:C9:CF:BD:1D
Certificate issuer: /CN=708029a674177efd99252275094618c0c9cfbd1d
Certificate serial: 0198D8849EC278A61E302223B00428A63AA6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cIAppnQXfv2ZJSJ1CUYYwMnPvR0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/08d44c-f102-4b70-8db0-72abeefeda4a/1/cIAppnQXfv2ZJSJ1CUYYwMnPvR0.mft
Manifest number: 0616
Signing time: Sat 23 Aug 2025 20:00:26 +0000
Manifest this update: Sat 23 Aug 2025 20:00:26 +0000
Manifest next update: Sun 24 Aug 2025 20:00:26 +0000
Files and hashes: 1: cIAppnQXfv2ZJSJ1CUYYwMnPvR0.crl (hash: LXS+Ug/4yVTkANmJOINGbae/Vg7HHFAVDTjLPky2Dus=)
2: gf0Xy6qbBLzQzsLjIlFfh_7JZjk.roa (hash: Ah/uhPrNkgzcI+es99gluPPaRScN93x4JTQmt+pb9V0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/08d44c-f102-4b70-8db0-72abeefeda4a/1/cIAppnQXfv2ZJSJ1CUYYwMnPvR0.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/08d44c-f102-4b70-8db0-72abeefeda4a/1/cIAppnQXfv2ZJSJ1CUYYwMnPvR0.mft
rsync://rpki.ripe.net/repository/DEFAULT/cIAppnQXfv2ZJSJ1CUYYwMnPvR0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d8:84:9e:c2:78:a6:1e:30:22:23:b0:04:28:a6:3a:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=708029a674177efd99252275094618c0c9cfbd1d
Validity
Not Before: Aug 23 20:00:26 2025 GMT
Not After : Aug 24 20:00:26 2025 GMT
Subject: CN=7ea65a4e51f15142a6b568de7433ffca6fdba11a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:1d:65:e7:86:0d:90:dd:ed:93:42:e6:99:29:
dd:ad:f3:91:43:aa:6c:7a:c4:b2:b6:58:cc:c1:e9:
cc:f7:3b:7c:4a:71:ff:7e:e2:1d:74:8d:0e:e8:ad:
3b:d7:70:2d:32:57:c3:cc:4a:6f:41:da:de:1f:83:
2a:92:74:ac:23:9f:ff:0b:94:03:11:87:7b:de:42:
93:59:50:d8:11:ab:95:87:37:47:04:e3:45:39:5d:
e4:98:2a:11:b6:c2:bc:0a:db:3d:e1:64:23:f6:51:
20:0a:b7:d0:51:da:02:db:0d:f2:37:c2:b0:76:a5:
9a:96:96:1d:66:3e:9e:68:28:3e:16:30:06:ec:76:
f5:e5:3f:bd:bb:c9:1a:16:3f:02:cb:dd:98:ba:72:
a0:eb:76:fb:72:ef:e9:f5:06:44:89:d3:b6:1d:f8:
01:d8:d8:e6:4f:a9:e1:1d:38:1f:25:c5:e2:b6:9c:
99:fb:51:6e:52:7c:75:5d:b1:3a:d8:86:81:6c:11:
e5:90:3c:74:f1:22:d3:59:50:ca:48:92:61:99:ea:
fc:2d:15:ab:9f:e2:50:5d:44:44:a0:35:63:95:d3:
2c:42:b8:0b:35:0f:80:b8:87:d4:e1:fc:20:4d:3d:
4b:1c:e7:f1:fd:da:1c:bf:57:04:72:9d:a1:bf:aa:
55:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:A6:5A:4E:51:F1:51:42:A6:B5:68:DE:74:33:FF:CA:6F:DB:A1:1A
X509v3 Authority Key Identifier:
keyid:70:80:29:A6:74:17:7E:FD:99:25:22:75:09:46:18:C0:C9:CF:BD:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cIAppnQXfv2ZJSJ1CUYYwMnPvR0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/08d44c-f102-4b70-8db0-72abeefeda4a/1/cIAppnQXfv2ZJSJ1CUYYwMnPvR0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/08d44c-f102-4b70-8db0-72abeefeda4a/1/cIAppnQXfv2ZJSJ1CUYYwMnPvR0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:91:f4:86:37:65:a5:34:34:cd:d5:30:60:6c:d6:e1:bd:10:
c1:9e:68:b6:7b:02:f2:f4:2d:d3:84:69:95:88:f3:24:a1:14:
72:1a:cb:c3:7b:e5:eb:0a:4a:aa:b0:c0:25:ba:0d:48:63:3a:
8f:da:63:a6:b5:71:c7:45:65:ad:f5:f2:12:4e:8c:ce:7b:63:
22:1a:e2:0e:97:0f:c7:56:a3:87:6c:b7:4f:8b:78:0d:c8:52:
79:af:af:73:69:91:9e:29:13:83:fb:e4:fd:a5:61:74:16:2d:
cb:3b:26:ac:dd:6b:5d:45:12:5b:de:44:66:4d:f9:c0:89:f9:
6b:8f:dd:1f:10:07:35:14:30:72:f2:54:82:ef:6a:24:48:85:
c8:8c:8f:99:88:75:c9:ad:df:fd:cf:d1:9f:06:9d:63:df:e4:
38:90:14:14:96:e2:9d:26:4c:02:32:e5:f5:6e:46:2e:fc:7a:
90:3f:2d:41:5b:b4:31:60:fc:b1:2d:3b:47:04:03:19:2f:0a:
e3:2a:dc:bd:38:1f:92:b9:be:48:ba:b7:1d:13:d1:e4:26:6b:
75:83:51:37:a5:84:40:63:c0:21:85:a4:bc:91:04:bd:f4:ff:
a5:da:a0:d3:48:7a:a3:21:2c:e2:a9:4c:f8:29:46:bb:f0:7c:
20:a4:10:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 00:23:20 2025 by rpki-client