Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/883fd6-c6b6-4ae1-a187-f3069ee590da/1/cLTaDxATrNthwveibRTE8N6CIuw.mft
File: cLTaDxATrNthwveibRTE8N6CIuw.mft (raw, json)
Hash identifier: CNbCwM4HKv8eq7l74//lUwDJsfUPsTgOQLRUodHGWVU=
Subject key identifier: 0C:7E:16:E3:84:33:41:8B:91:2C:A4:80:33:48:06:18:6B:15:50:BD
Authority key identifier: 70:B4:DA:0F:10:13:AC:DB:61:C2:F7:A2:6D:14:C4:F0:DE:82:22:EC
Certificate issuer: /CN=70b4da0f1013acdb61c2f7a26d14c4f0de8222ec
Certificate serial: 0198D65FA2C005F9C3AB0AB466FD7F3106EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cLTaDxATrNthwveibRTE8N6CIuw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/883fd6-c6b6-4ae1-a187-f3069ee590da/1/cLTaDxATrNthwveibRTE8N6CIuw.mft
Manifest number: 164B
Signing time: Sat 23 Aug 2025 10:00:48 +0000
Manifest this update: Sat 23 Aug 2025 10:00:48 +0000
Manifest next update: Sun 24 Aug 2025 10:00:48 +0000
Files and hashes: 1: F94-zZFEc6qh0jKnwFf7o1uXF7I.roa (hash: w7SpfiHOXF1SxdkUidpIylH68mEs/yNWYY/p77Td/KQ=)
2: cLTaDxATrNthwveibRTE8N6CIuw.crl (hash: boQNafvgDMF8IELTrLviOPiXT+z5xr2jehP/4c28JyI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/883fd6-c6b6-4ae1-a187-f3069ee590da/1/cLTaDxATrNthwveibRTE8N6CIuw.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/883fd6-c6b6-4ae1-a187-f3069ee590da/1/cLTaDxATrNthwveibRTE8N6CIuw.mft
rsync://rpki.ripe.net/repository/DEFAULT/cLTaDxATrNthwveibRTE8N6CIuw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:a2:c0:05:f9:c3:ab:0a:b4:66:fd:7f:31:06:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70b4da0f1013acdb61c2f7a26d14c4f0de8222ec
Validity
Not Before: Aug 23 10:00:48 2025 GMT
Not After : Aug 24 10:00:48 2025 GMT
Subject: CN=0c7e16e38433418b912ca480334806186b1550bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:ed:51:d9:1e:ea:6e:f8:b0:75:de:42:6b:74:
b9:81:d4:d7:08:2d:bf:8f:d6:78:77:a5:a5:4d:89:
5d:02:70:d0:68:46:8e:fd:a5:47:b6:0a:7f:a8:87:
35:69:6e:9d:d4:04:46:13:4f:72:d8:b8:7d:4c:96:
05:e7:42:5f:44:88:2c:84:6f:06:54:e6:16:f0:fb:
a7:f4:2f:51:76:5a:19:75:b8:ce:d4:26:46:2e:49:
33:5c:7a:b2:cd:01:8b:98:02:ad:cd:06:fb:a7:88:
38:23:f3:b2:ad:37:a7:00:41:d4:47:4b:d0:39:41:
a9:bd:cf:ed:fd:e2:12:20:f3:9e:28:c8:e6:84:11:
ed:75:1a:07:86:64:ba:bb:39:66:82:96:1e:d8:91:
e3:e9:4b:20:18:a1:80:18:e1:57:0e:f4:01:37:bd:
3c:b9:1b:0e:c0:3e:d5:37:4a:64:cf:f4:5a:f6:5d:
b4:aa:81:30:18:41:fe:24:dd:26:10:6b:bd:b9:50:
fb:49:f2:05:6e:ad:e7:a0:59:49:90:ae:bb:b3:1c:
f3:2f:63:b8:19:06:1a:9e:86:de:5f:f9:8b:24:38:
c3:40:02:0d:8c:75:d9:35:cd:1e:83:5b:59:6b:ae:
58:57:4c:c2:7b:59:77:79:86:52:77:71:3c:87:ab:
74:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:7E:16:E3:84:33:41:8B:91:2C:A4:80:33:48:06:18:6B:15:50:BD
X509v3 Authority Key Identifier:
keyid:70:B4:DA:0F:10:13:AC:DB:61:C2:F7:A2:6D:14:C4:F0:DE:82:22:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cLTaDxATrNthwveibRTE8N6CIuw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/883fd6-c6b6-4ae1-a187-f3069ee590da/1/cLTaDxATrNthwveibRTE8N6CIuw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/883fd6-c6b6-4ae1-a187-f3069ee590da/1/cLTaDxATrNthwveibRTE8N6CIuw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:be:95:98:13:27:ab:f2:43:5d:c0:f5:28:8f:e7:16:0e:cf:
63:2a:72:9c:1a:db:75:56:5d:b6:91:b0:94:52:07:7a:75:7c:
03:85:d3:09:17:40:a1:83:7f:3e:55:0b:27:04:d0:de:44:c6:
f7:46:3e:ab:29:c3:a2:e6:4b:a7:71:22:3d:77:a9:1c:a8:3e:
d0:3a:aa:07:f6:e7:2b:50:27:f2:04:f2:2b:76:22:ee:2c:f7:
ad:05:01:c4:b2:97:be:2b:d3:a3:8e:a1:29:c5:96:ea:1a:59:
65:23:32:f2:88:78:d0:50:13:5f:e7:58:68:91:ac:6f:b1:3e:
6c:c9:58:c8:e8:90:b3:3f:4b:27:60:83:11:99:5b:dd:bb:fa:
ae:09:bd:a5:62:14:f3:8c:2e:66:2c:24:83:65:b0:d2:00:84:
94:b7:dd:40:30:d0:74:40:14:66:57:ce:e2:09:4e:1e:e4:3c:
45:9f:3c:7f:7e:60:5f:d7:77:19:96:10:c4:47:82:56:86:71:
08:4e:45:5c:18:74:e8:9e:f4:20:a2:ab:26:af:8c:82:01:c2:
d3:97:e7:9d:12:11:d4:26:88:c7:ff:41:8e:b6:cf:3e:57:47:
04:6a:7b:ed:86:a3:09:8b:9b:ee:08:96:a7:cd:e3:15:ea:c4:
ca:7b:0b:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:20:01 2025 by rpki-client