Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/03e4f7-10f3-4114-a1e5-3502658ae6f5/1/_-cGk0VLwzSF3sadIZ0FAmVKwEo.mft
File: _-cGk0VLwzSF3sadIZ0FAmVKwEo.mft (raw, json)
Hash identifier: +tDVInyUkWwYfhb6JiD+PUeGdkS6gB8sFeMhfgwvvQU=
Subject key identifier: C9:B1:8B:76:E0:EE:FB:45:40:D9:25:F9:17:00:67:8C:A8:52:70:27
Authority key identifier: FF:E7:06:93:45:4B:C3:34:85:DE:C6:9D:21:9D:05:02:65:4A:C0:4A
Certificate issuer: /CN=ffe70693454bc33485dec69d219d0502654ac04a
Certificate serial: 0198D4A7E4E9E2AD5A8A745705B568A082F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_-cGk0VLwzSF3sadIZ0FAmVKwEo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/03e4f7-10f3-4114-a1e5-3502658ae6f5/1/_-cGk0VLwzSF3sadIZ0FAmVKwEo.mft
Manifest number: 10DB
Signing time: Sat 23 Aug 2025 02:00:29 +0000
Manifest this update: Sat 23 Aug 2025 02:00:29 +0000
Manifest next update: Sun 24 Aug 2025 02:00:29 +0000
Files and hashes: 1: HTKjluKoMYE3YnxNS8OX7g6z7cg.roa (hash: sAIqDaQKvUjEGEm5NaK3hjATSYMoprKa9F9LOvjEkOU=)
2: _-cGk0VLwzSF3sadIZ0FAmVKwEo.crl (hash: 1Q8ttDnLwRbx7ZiTGUaekT4c2SQvudy+GWbbJCvvMrs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/03e4f7-10f3-4114-a1e5-3502658ae6f5/1/_-cGk0VLwzSF3sadIZ0FAmVKwEo.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/03e4f7-10f3-4114-a1e5-3502658ae6f5/1/_-cGk0VLwzSF3sadIZ0FAmVKwEo.mft
rsync://rpki.ripe.net/repository/DEFAULT/_-cGk0VLwzSF3sadIZ0FAmVKwEo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 02:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:a7:e4:e9:e2:ad:5a:8a:74:57:05:b5:68:a0:82:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffe70693454bc33485dec69d219d0502654ac04a
Validity
Not Before: Aug 23 02:00:29 2025 GMT
Not After : Aug 24 02:00:29 2025 GMT
Subject: CN=c9b18b76e0eefb4540d925f91700678ca8527027
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:0b:62:f6:1b:05:a9:71:a2:42:f8:c0:f0:c5:
21:a1:3c:ac:2a:34:f6:49:37:bf:e5:d5:ed:34:56:
63:06:f8:f2:53:ce:dd:80:8d:29:39:31:53:24:46:
c9:53:0a:f9:e6:46:68:cc:a4:0c:00:48:3f:fa:9d:
94:ca:b0:aa:d1:ef:37:be:25:d6:a9:4f:e9:67:f5:
24:17:d6:ce:04:56:6f:b5:95:26:4a:eb:0c:e6:68:
43:12:67:6a:0b:c0:e8:47:a9:1e:00:0e:b6:6b:e7:
ea:8e:4d:67:53:73:42:2c:26:7f:ea:42:76:89:59:
f5:dc:18:8d:51:68:3f:76:29:31:5f:bb:aa:ce:b0:
a9:eb:cd:c0:88:8e:f4:38:fb:60:fd:6a:40:92:c5:
4d:7d:b4:97:f1:5e:24:f9:43:36:ce:57:b1:75:97:
74:63:2e:4c:9f:79:f7:d5:15:b2:e5:25:c0:b7:0f:
e4:ca:e7:91:fa:a5:40:0b:79:62:28:e8:ae:de:16:
b9:d7:f6:d1:b6:55:3a:b8:85:6a:c2:75:f8:a5:23:
49:46:f6:49:a2:a0:19:f7:9d:03:fd:e5:9c:e6:fd:
f8:cb:42:fe:e7:19:fb:96:b7:6a:95:c1:37:c2:ff:
95:f7:79:8a:53:9e:36:a5:c4:59:8f:a3:d3:4f:99:
b0:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:B1:8B:76:E0:EE:FB:45:40:D9:25:F9:17:00:67:8C:A8:52:70:27
X509v3 Authority Key Identifier:
keyid:FF:E7:06:93:45:4B:C3:34:85:DE:C6:9D:21:9D:05:02:65:4A:C0:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_-cGk0VLwzSF3sadIZ0FAmVKwEo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/03e4f7-10f3-4114-a1e5-3502658ae6f5/1/_-cGk0VLwzSF3sadIZ0FAmVKwEo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/03e4f7-10f3-4114-a1e5-3502658ae6f5/1/_-cGk0VLwzSF3sadIZ0FAmVKwEo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:07:21:a3:26:58:00:dd:d0:f6:e2:76:d6:fa:64:ab:57:63:
1d:5a:71:32:6b:57:ce:94:12:e1:48:a3:cd:21:3e:16:99:c7:
dd:49:ae:98:e9:3b:e1:1b:99:3d:34:88:57:53:d1:e6:67:c9:
d8:66:d3:20:e2:85:ab:4d:1b:c9:65:b9:6b:29:55:4e:ba:dc:
dc:f7:b2:5f:12:3c:a6:dd:68:fe:a3:0c:cf:6d:e1:38:b4:17:
ae:57:e9:53:d0:71:fe:39:7b:83:79:7a:bc:0c:5e:54:69:8d:
1e:26:eb:24:3c:b0:fe:83:f4:db:df:0a:e6:68:a1:50:cd:4d:
b3:4f:82:a4:76:82:90:3f:b8:1f:92:c3:c4:9b:b2:d8:cb:16:
19:1c:c9:ac:ee:e3:5d:4f:1f:8f:d4:95:02:c2:a9:9f:67:c1:
a6:99:4f:7f:b7:71:15:af:ab:f4:8b:9c:b2:ae:7b:e8:ce:61:
cc:56:6a:c6:a5:2e:a8:4e:62:ca:ca:7b:2c:d8:7a:24:1d:01:
2b:52:00:b5:c6:55:f5:bf:4c:78:58:d1:ec:d8:57:df:19:c3:
2c:54:c2:e5:02:c5:56:a7:eb:76:28:e9:bc:73:1b:61:c1:11:
22:a7:1b:ed:9f:b1:c3:25:e0:8a:2c:51:8d:2e:83:2f:dc:c9:
a2:cd:c6:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:02:23 2025 by rpki-client