Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/c98434-decc-404f-8049-4aa2eeb5267c/1/cmcwWIWc_XASlB2JY63M9jAKGe8.mft
File: cmcwWIWc_XASlB2JY63M9jAKGe8.mft (raw, json)
Hash identifier: KscCA+8qjhzhjREbsOtq4wO4DxpWKLSbwsVtH8zWi2A=
Subject key identifier: B2:FD:8A:27:59:AE:87:16:D6:F0:65:BA:FA:BE:E6:85:0E:74:5F:D2
Authority key identifier: 72:67:30:58:85:9C:FD:70:12:94:1D:89:63:AD:CC:F6:30:0A:19:EF
Certificate issuer: /CN=72673058859cfd7012941d8963adccf6300a19ef
Certificate serial: 0198D47375476C8AD40069052D279FB26FD6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cmcwWIWc_XASlB2JY63M9jAKGe8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/c98434-decc-404f-8049-4aa2eeb5267c/1/cmcwWIWc_XASlB2JY63M9jAKGe8.mft
Manifest number: 1649
Signing time: Sat 23 Aug 2025 01:03:12 +0000
Manifest this update: Sat 23 Aug 2025 01:03:12 +0000
Manifest next update: Sun 24 Aug 2025 01:03:12 +0000
Files and hashes: 1: 1-CBPCQEhah96ufyUbT9Pgx0vfDA.roa (hash: a/E265pRySYxwfkb5CZMhMIiUvhNhX2eZiajI2HOkkM=)
2: cmcwWIWc_XASlB2JY63M9jAKGe8.crl (hash: PXJSfadJhgjx7FipCSq+5jPf3bYYRk1/VRhamjTAB3M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/c98434-decc-404f-8049-4aa2eeb5267c/1/cmcwWIWc_XASlB2JY63M9jAKGe8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/c98434-decc-404f-8049-4aa2eeb5267c/1/cmcwWIWc_XASlB2JY63M9jAKGe8.mft
rsync://rpki.ripe.net/repository/DEFAULT/cmcwWIWc_XASlB2JY63M9jAKGe8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:03:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:73:75:47:6c:8a:d4:00:69:05:2d:27:9f:b2:6f:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72673058859cfd7012941d8963adccf6300a19ef
Validity
Not Before: Aug 23 01:03:12 2025 GMT
Not After : Aug 24 01:03:12 2025 GMT
Subject: CN=b2fd8a2759ae8716d6f065bafabee6850e745fd2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:d2:e2:43:65:11:fe:de:3e:88:0a:03:3a:f4:
53:ae:df:d4:13:cd:cb:3c:89:16:08:a8:c9:5b:44:
8d:10:c9:f3:d2:ef:22:4e:ad:a4:cd:38:d6:b9:ef:
90:12:cc:89:61:c3:89:90:b1:8f:16:29:9e:60:23:
b3:32:ef:f8:fe:f1:74:b6:d4:e5:57:03:9d:cd:b9:
80:58:70:0a:4c:30:4d:f5:ff:6f:3c:2a:24:44:1a:
67:36:9a:f1:20:62:73:72:de:cf:88:54:3a:17:41:
a9:b7:67:0b:56:f2:11:a3:4c:bf:50:c2:56:0d:3d:
e9:07:30:b7:a0:0a:e3:6e:1e:0e:91:98:dd:e2:5e:
b3:6f:ac:97:6c:69:1f:b5:92:d8:f7:bf:e4:9b:9f:
b9:20:a3:6e:da:eb:d8:85:9e:10:92:d5:e7:3f:fd:
43:48:e4:0d:39:de:e7:6b:1f:fa:bf:0c:81:04:23:
66:be:99:a4:81:fd:07:71:db:67:d5:aa:d4:2a:48:
a8:bf:71:8f:ba:61:c0:7a:b8:06:de:9d:8d:63:8c:
28:bf:94:59:59:43:6a:04:0b:b3:2d:be:2b:e4:aa:
ac:95:fd:65:dc:fd:21:84:28:40:2d:27:cf:be:c1:
e0:9b:66:38:45:0c:2b:2c:12:47:a4:eb:25:47:b8:
38:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:FD:8A:27:59:AE:87:16:D6:F0:65:BA:FA:BE:E6:85:0E:74:5F:D2
X509v3 Authority Key Identifier:
keyid:72:67:30:58:85:9C:FD:70:12:94:1D:89:63:AD:CC:F6:30:0A:19:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cmcwWIWc_XASlB2JY63M9jAKGe8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/c98434-decc-404f-8049-4aa2eeb5267c/1/cmcwWIWc_XASlB2JY63M9jAKGe8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/c98434-decc-404f-8049-4aa2eeb5267c/1/cmcwWIWc_XASlB2JY63M9jAKGe8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:6c:e4:bb:9a:73:67:28:09:8b:a2:eb:85:89:89:14:f5:f4:
91:8d:14:81:36:71:97:3a:35:be:28:06:7c:d7:ea:4b:e7:32:
55:bd:65:9c:51:c0:97:32:e3:d4:ef:a6:52:d2:a0:1c:48:27:
d9:c5:7a:78:72:ab:cd:a6:5d:d6:ad:20:5b:e0:9e:82:ca:62:
12:08:a0:da:20:0e:fa:b3:c4:93:6e:4f:58:98:c3:79:e8:c3:
b5:d4:32:3c:f4:72:96:ca:69:3b:28:f6:a7:d3:6d:0b:73:10:
a4:71:6a:5f:3c:c5:bc:68:e8:6a:68:08:f9:42:38:2f:83:ff:
1b:9b:bd:85:9b:ca:4c:97:99:c3:b2:90:84:16:be:5f:c0:24:
e2:0c:33:1f:cd:88:9a:63:64:4c:1b:81:11:e1:06:f9:ca:b5:
e8:f7:17:18:81:94:3b:41:ed:df:5e:72:fb:0f:cd:bc:d9:6a:
f6:da:7c:c4:e8:53:d1:58:51:cd:37:f4:f5:5d:03:79:0f:43:
a7:34:ea:c8:b5:de:8e:28:67:b2:04:50:34:32:f9:f4:19:93:
54:5b:b9:a3:96:72:0f:ec:93:5f:11:07:6b:7d:d5:e5:7e:cd:
15:72:1f:cb:ea:89:fc:1e:35:a1:6b:fd:c4:c4:aa:a3:af:7b:
ff:6a:1b:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:26:11 2025 by rpki-client