Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/4cd16b-2a23-48a9-9eeb-2a4813a13120/1/CgbwM1N7vYY7vKK2IJLY3jYR9lE.mft
File: CgbwM1N7vYY7vKK2IJLY3jYR9lE.mft (raw, json)
Hash identifier: oQFc3IjmbrUERH3E4gIHyS3Q0UVZG8gCL7BCzBRBiZI=
Subject key identifier: C9:30:39:92:F8:19:28:DE:61:B8:46:2A:A5:46:51:FA:A7:9B:1B:00
Authority key identifier: 0A:06:F0:33:53:7B:BD:86:3B:BC:A2:B6:20:92:D8:DE:36:11:F6:51
Certificate issuer: /CN=0a06f033537bbd863bbca2b62092d8de3611f651
Certificate serial: 0198D3293AE01F62970C8E960D8C4CBA2017
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CgbwM1N7vYY7vKK2IJLY3jYR9lE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/4cd16b-2a23-48a9-9eeb-2a4813a13120/1/CgbwM1N7vYY7vKK2IJLY3jYR9lE.mft
Manifest number: 08EA
Signing time: Fri 22 Aug 2025 19:02:31 +0000
Manifest this update: Fri 22 Aug 2025 19:02:31 +0000
Manifest next update: Sat 23 Aug 2025 19:02:31 +0000
Files and hashes: 1: CgbwM1N7vYY7vKK2IJLY3jYR9lE.crl (hash: cV3I9hDJfDcGe26yTpFg/WFa2b2n0KFOzyASb6JQ2Z0=)
2: pltDgh5JbbEWSggwVXLGKtobVl8.roa (hash: XwQl2FIwqmmMyr6/rQAaXcZHJoaBjslDK7+U58bsYig=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/4cd16b-2a23-48a9-9eeb-2a4813a13120/1/CgbwM1N7vYY7vKK2IJLY3jYR9lE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/4cd16b-2a23-48a9-9eeb-2a4813a13120/1/CgbwM1N7vYY7vKK2IJLY3jYR9lE.mft
rsync://rpki.ripe.net/repository/DEFAULT/CgbwM1N7vYY7vKK2IJLY3jYR9lE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Aug 2025 19:02:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d3:29:3a:e0:1f:62:97:0c:8e:96:0d:8c:4c:ba:20:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a06f033537bbd863bbca2b62092d8de3611f651
Validity
Not Before: Aug 22 19:02:31 2025 GMT
Not After : Aug 23 19:02:31 2025 GMT
Subject: CN=c9303992f81928de61b8462aa54651faa79b1b00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:50:0e:22:d2:d9:53:52:70:ff:ec:24:b9:18:
6e:a4:b1:c2:90:97:cf:74:75:42:a6:29:3f:1b:0a:
8a:df:63:0f:f3:6f:50:d1:77:80:d5:64:09:d3:5d:
78:08:29:b7:3e:1a:e5:df:2b:21:7d:bc:64:b8:23:
7f:6b:ca:60:8d:2d:0e:d1:32:1e:4f:22:f7:d9:d8:
f5:2d:32:fa:e3:91:f9:c3:c7:94:49:56:dc:f4:b5:
45:5c:2b:99:c7:76:ac:e6:4b:2b:57:1c:ef:9e:13:
89:25:6b:93:5d:7a:e9:73:2f:90:5e:3e:5c:55:60:
07:a5:b0:a4:b5:d2:08:3e:1c:81:df:a8:23:7f:d3:
fe:4e:2a:4b:dc:ec:29:f7:c9:63:f2:57:08:e9:dd:
78:f3:77:b8:68:d2:ba:0d:95:6c:f6:69:fe:a3:38:
c1:13:9e:2f:94:2b:5f:d5:c2:df:66:76:d2:51:ab:
68:e7:82:a6:00:4e:ce:86:61:13:6a:69:37:d6:ff:
fc:9b:09:ef:3b:83:7c:74:53:13:b3:6e:b5:7e:88:
48:56:37:76:98:62:fc:6e:5c:83:15:e1:b4:17:d9:
c3:ee:81:4a:e5:f9:40:29:e2:47:f5:ba:fa:d6:a8:
91:19:b7:4f:50:f4:8a:38:6a:ae:67:92:63:32:95:
73:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:30:39:92:F8:19:28:DE:61:B8:46:2A:A5:46:51:FA:A7:9B:1B:00
X509v3 Authority Key Identifier:
keyid:0A:06:F0:33:53:7B:BD:86:3B:BC:A2:B6:20:92:D8:DE:36:11:F6:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CgbwM1N7vYY7vKK2IJLY3jYR9lE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/4cd16b-2a23-48a9-9eeb-2a4813a13120/1/CgbwM1N7vYY7vKK2IJLY3jYR9lE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/4cd16b-2a23-48a9-9eeb-2a4813a13120/1/CgbwM1N7vYY7vKK2IJLY3jYR9lE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:1d:46:10:ee:39:b4:f3:a8:41:24:20:5b:0b:42:a1:3f:bd:
5b:cd:99:be:cb:07:76:b0:ce:ba:5c:42:3f:8e:ef:f1:03:78:
fa:3f:58:5d:b1:35:06:26:d5:ee:52:7d:ab:2e:e5:bc:50:55:
ec:ab:0c:cb:14:3d:f3:0c:53:53:fe:27:97:40:82:55:dc:20:
85:05:82:e8:c2:21:55:a8:f7:c9:b4:06:45:9e:9b:6f:f2:74:
be:39:e3:bd:2a:5e:74:00:48:95:77:3d:30:c9:3f:b6:fe:5f:
cc:44:2e:1a:e7:2f:1e:4c:0e:6e:3a:34:cd:e4:25:b2:ed:2d:
12:ee:72:00:fb:69:5a:e2:32:de:33:84:71:f7:7c:df:14:3f:
5a:58:dd:05:3b:af:e3:69:d2:ca:99:62:12:d3:96:8b:64:65:
fb:78:86:86:f3:42:ac:69:9d:19:a1:20:b8:34:93:78:8c:db:
8e:12:cf:18:3f:b1:36:31:d0:81:71:8a:c2:f3:d5:ff:d8:6b:
7c:44:fd:c5:ce:0b:8e:e8:78:5b:2e:c1:6e:77:b9:28:f9:86:
9b:51:9b:44:dd:14:ad:3a:cb:6a:5f:fd:b0:18:c5:45:e3:a6:
38:49:bb:e8:41:99:70:de:bf:a1:70:39:4b:79:21:10:12:b4:
dc:9b:0c:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 01:35:10 2025 by rpki-client