Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/27e031-1386-4fca-bbe1-8e9b511cac1a/1/clC6rf8sKGxguWEH0sZNU37ArKY.mft
File: clC6rf8sKGxguWEH0sZNU37ArKY.mft (raw, json)
Hash identifier: brU10AM8SfR3C7mWD4wwDbrGV3ddT3QCPIVrNvJIfmo=
Subject key identifier: 04:73:68:DE:F8:FF:AE:02:5F:9B:35:49:73:03:CE:87:9E:91:97:43
Authority key identifier: 72:50:BA:AD:FF:2C:28:6C:60:B9:61:07:D2:C6:4D:53:7E:C0:AC:A6
Certificate issuer: /CN=7250baadff2c286c60b96107d2c64d537ec0aca6
Certificate serial: 0198D4DFFAD8F5DE248B5D610852834E21A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/clC6rf8sKGxguWEH0sZNU37ArKY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/27e031-1386-4fca-bbe1-8e9b511cac1a/1/clC6rf8sKGxguWEH0sZNU37ArKY.mft
Manifest number: 1646
Signing time: Sat 23 Aug 2025 03:01:45 +0000
Manifest this update: Sat 23 Aug 2025 03:01:45 +0000
Manifest next update: Sun 24 Aug 2025 03:01:45 +0000
Files and hashes: 1: ElkjMSo_kXjP6q9aSDUGnZi_eU0.roa (hash: 7q4VbgFNWa3tnFNDab0oMeZop6uPRWY6PGIt1SoGlFs=)
2: clC6rf8sKGxguWEH0sZNU37ArKY.crl (hash: Cfmqgrbh84ZinMLY954OhxZHIsecf53JdbR4T8iqxyY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/27e031-1386-4fca-bbe1-8e9b511cac1a/1/clC6rf8sKGxguWEH0sZNU37ArKY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/27e031-1386-4fca-bbe1-8e9b511cac1a/1/clC6rf8sKGxguWEH0sZNU37ArKY.mft
rsync://rpki.ripe.net/repository/DEFAULT/clC6rf8sKGxguWEH0sZNU37ArKY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:01:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:df:fa:d8:f5:de:24:8b:5d:61:08:52:83:4e:21:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7250baadff2c286c60b96107d2c64d537ec0aca6
Validity
Not Before: Aug 23 03:01:45 2025 GMT
Not After : Aug 24 03:01:45 2025 GMT
Subject: CN=047368def8ffae025f9b35497303ce879e919743
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:7d:29:b8:dd:c3:76:91:a6:73:85:c9:72:4e:
c8:a8:cd:c7:ea:a6:df:1a:9d:6e:c2:48:43:29:06:
2b:73:8e:22:ef:80:9b:25:f0:a3:58:08:e0:7d:35:
cf:72:b6:1b:03:54:0e:1f:60:37:05:b0:6d:33:7c:
18:3d:87:dc:5a:36:b1:2c:5f:72:85:35:ac:9b:89:
90:04:16:e4:fa:8d:e9:10:b6:03:6e:86:4e:92:a8:
89:f5:ca:93:06:44:63:ab:dc:61:9f:29:dd:61:3b:
ba:1d:b5:d4:be:dd:bd:91:7a:e9:4e:c5:61:07:62:
e9:94:c3:38:0d:d6:1f:50:e2:c6:7a:24:4c:52:f4:
3e:87:fd:96:fb:00:a4:61:13:2d:96:c6:3d:08:4d:
10:ba:f4:04:43:aa:94:e6:53:d1:12:0f:ff:a9:19:
34:53:54:59:ea:6b:94:13:b4:67:f8:fb:0c:dd:bc:
77:51:a2:c8:1e:6a:b9:0b:fc:d5:c7:7e:ac:ba:44:
43:08:72:1a:d3:15:d2:7f:ac:83:4e:76:9f:c8:d9:
24:ed:22:20:e4:45:11:fb:2d:a3:b7:9e:34:1b:07:
35:da:48:86:fb:b4:15:1a:c8:ec:a5:ce:a6:df:3c:
af:5d:8c:13:eb:81:34:74:fe:84:18:8c:a3:38:56:
a2:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:73:68:DE:F8:FF:AE:02:5F:9B:35:49:73:03:CE:87:9E:91:97:43
X509v3 Authority Key Identifier:
keyid:72:50:BA:AD:FF:2C:28:6C:60:B9:61:07:D2:C6:4D:53:7E:C0:AC:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/clC6rf8sKGxguWEH0sZNU37ArKY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/27e031-1386-4fca-bbe1-8e9b511cac1a/1/clC6rf8sKGxguWEH0sZNU37ArKY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/27e031-1386-4fca-bbe1-8e9b511cac1a/1/clC6rf8sKGxguWEH0sZNU37ArKY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:57:ba:5e:d5:8c:cd:2a:66:ac:d5:97:54:77:e2:2d:0d:5a:
b1:9f:2f:71:c4:d0:2e:4b:94:ae:99:0e:cf:6c:23:c7:f3:4a:
64:b6:1d:3f:6c:27:7c:46:5e:85:b2:0c:f4:c8:ea:c2:cd:83:
61:15:71:35:90:b2:1e:b7:8f:6b:24:aa:8f:e3:2c:2a:95:4b:
ce:3c:7f:70:87:3e:62:0e:fd:72:6c:b8:0a:da:a7:82:ad:ef:
c5:68:de:98:ae:ea:14:95:67:dd:cc:cc:14:ea:3c:1a:20:eb:
d8:01:14:46:d1:7b:67:cf:b2:24:fa:36:87:d8:1a:b7:38:72:
27:41:85:54:68:ae:7f:10:1c:b8:96:a5:db:1e:c7:61:06:d6:
c0:e5:e1:36:cb:fa:d9:9d:b1:bb:2b:33:3c:f1:25:71:a8:6c:
c9:8e:1f:27:aa:fc:1b:0a:1a:7a:e3:bf:89:27:22:58:7e:07:
f0:30:85:81:30:3a:20:28:71:41:99:ad:b5:e9:fd:ab:78:82:
9b:8c:7f:56:b4:01:81:de:50:e1:80:b0:c7:68:80:c5:ea:4e:
af:f6:dd:8f:d9:66:39:c6:ab:0a:71:5e:38:85:b8:be:07:46:
75:4d:7b:10:99:07:89:23:49:9e:99:13:4d:04:d3:a0:9f:f2:
a1:e7:b0:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:48:20 2025 by rpki-client