Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/b172b7-6ae5-46e1-b0c0-0065e4a890b4/1/rcpuVKzQJs76NitCJ7iQgcClAEk.mft
File: rcpuVKzQJs76NitCJ7iQgcClAEk.mft (raw, json)
Hash identifier: hGEBbQwyW6GPFrNxem9JUR3ncA6j6Nic8DUBRc9LQOQ=
Subject key identifier: 41:1D:25:BA:57:14:CF:DE:CB:8E:DB:E7:7B:7A:80:AB:E4:2F:6F:E5
Authority key identifier: AD:CA:6E:54:AC:D0:26:CE:FA:36:2B:42:27:B8:90:81:C0:A5:00:49
Certificate issuer: /CN=adca6e54acd026cefa362b4227b89081c0a50049
Certificate serial: 0198D404D9013FC6416C584E4882D41C0E17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rcpuVKzQJs76NitCJ7iQgcClAEk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/b172b7-6ae5-46e1-b0c0-0065e4a890b4/1/rcpuVKzQJs76NitCJ7iQgcClAEk.mft
Manifest number: 03A7
Signing time: Fri 22 Aug 2025 23:02:24 +0000
Manifest this update: Fri 22 Aug 2025 23:02:24 +0000
Manifest next update: Sat 23 Aug 2025 23:02:24 +0000
Files and hashes: 1: nH-mLa1nqtF7NuWi_AxaaJ7rrpE.roa (hash: k+SK+iFUjD8k3G8uFqdLPMVQgq2VY/v5iPwBM07SwqU=)
2: rcpuVKzQJs76NitCJ7iQgcClAEk.crl (hash: zlOsrxzfQbJzns7QeQKCc6jEcaInSWtRpIqLO5hBRRo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/b172b7-6ae5-46e1-b0c0-0065e4a890b4/1/rcpuVKzQJs76NitCJ7iQgcClAEk.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/b172b7-6ae5-46e1-b0c0-0065e4a890b4/1/rcpuVKzQJs76NitCJ7iQgcClAEk.mft
rsync://rpki.ripe.net/repository/DEFAULT/rcpuVKzQJs76NitCJ7iQgcClAEk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Aug 2025 23:02:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:04:d9:01:3f:c6:41:6c:58:4e:48:82:d4:1c:0e:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=adca6e54acd026cefa362b4227b89081c0a50049
Validity
Not Before: Aug 22 23:02:24 2025 GMT
Not After : Aug 23 23:02:24 2025 GMT
Subject: CN=411d25ba5714cfdecb8edbe77b7a80abe42f6fe5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:d0:6f:7c:cc:b9:4f:b8:cf:17:d1:76:99:40:
d3:e0:30:2c:df:aa:3c:c9:df:07:d1:1e:1e:bc:33:
8a:4a:a7:55:ad:33:50:d4:58:f0:de:51:92:8a:f7:
50:bb:8c:16:86:32:65:53:a3:aa:c7:11:f8:6d:e2:
e2:9f:6b:cc:00:68:3c:b4:f4:6a:89:70:56:b7:c4:
f8:e6:b3:74:49:8c:b8:d4:e7:3f:40:50:19:84:ac:
74:f5:68:67:5b:cf:4d:41:44:b4:4d:c7:58:34:0d:
45:96:3d:0f:dc:23:72:9a:a6:d7:79:5d:96:34:80:
5b:43:d5:95:4e:5a:14:c2:71:0a:cc:46:1b:22:07:
ad:cf:2e:ec:3e:06:b2:e0:61:2e:7b:e3:47:8f:70:
50:e3:12:ba:f2:24:9d:9a:03:f8:46:4f:55:d4:c7:
6f:af:92:a8:f0:be:43:b5:3f:bb:ae:d0:0f:3c:6d:
7e:48:5c:9f:4f:06:a8:df:db:6b:df:b0:a0:88:22:
44:37:64:b7:2d:ce:27:9a:bd:11:d6:0d:03:08:a3:
3c:2d:29:71:e2:ca:61:d0:7e:23:45:1a:c3:78:2c:
ce:e6:36:60:38:19:ab:88:75:32:0a:38:67:73:b9:
6b:f7:c5:98:1d:b9:38:63:3a:98:37:a6:c1:b8:65:
0d:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:1D:25:BA:57:14:CF:DE:CB:8E:DB:E7:7B:7A:80:AB:E4:2F:6F:E5
X509v3 Authority Key Identifier:
keyid:AD:CA:6E:54:AC:D0:26:CE:FA:36:2B:42:27:B8:90:81:C0:A5:00:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rcpuVKzQJs76NitCJ7iQgcClAEk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/b172b7-6ae5-46e1-b0c0-0065e4a890b4/1/rcpuVKzQJs76NitCJ7iQgcClAEk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/b172b7-6ae5-46e1-b0c0-0065e4a890b4/1/rcpuVKzQJs76NitCJ7iQgcClAEk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:11:d4:0e:2e:26:dc:b4:11:db:db:f0:09:47:2a:89:f3:de:
a9:b3:fa:bd:f9:60:4b:06:a9:38:6b:7b:66:91:dc:a9:18:43:
36:21:b1:4f:31:71:98:7f:0f:9c:e6:cf:a4:17:73:62:62:69:
8a:43:51:3e:ef:27:ac:67:48:08:23:e8:a1:b9:c7:ef:6a:fa:
df:95:16:b6:d9:07:e7:c5:81:9d:d1:2b:6d:cc:12:d1:6a:8d:
de:1e:c3:6d:da:b4:89:c3:a3:98:3d:20:27:b9:c5:a9:c3:4b:
ea:29:1d:54:8e:27:4e:1e:d0:9c:d7:d3:61:7b:72:23:f5:5b:
f7:61:31:4f:a8:c1:96:af:10:fa:74:05:c3:9f:3d:83:49:96:
9b:51:6b:90:e8:04:ba:e5:95:0a:37:4d:89:41:2a:e8:7a:53:
d1:3f:8d:ff:91:cb:44:79:8e:5c:74:c4:7f:3d:02:7a:9b:4d:
9d:d9:6e:73:b9:cc:3a:2a:e6:d1:3f:10:17:ac:50:b1:06:76:
20:07:c7:f1:5a:7b:73:63:6e:bc:58:37:b6:91:00:3f:dc:2d:
b6:7e:3d:70:8f:01:96:a2:ad:93:4c:38:09:75:dc:30:aa:9f:
56:e9:d8:51:ef:44:7d:88:4c:dc:5e:ab:e2:cb:35:11:80:bf:
8b:9e:55:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 09:37:41 2025 by rpki-client