Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/74b280-e1b4-4310-8085-d65617bd3b4f/1/9cuFbUJpIZ7ToMDcRzMyNvFVlTo.mft
File: 9cuFbUJpIZ7ToMDcRzMyNvFVlTo.mft (raw, json)
Hash identifier: 2c4HvaWS6c8MhYxEHs0nGShVYU+lCTJdWwwDZdEqCLw=
Subject key identifier: 2F:16:1E:1B:6A:2F:F9:50:2C:66:15:82:F4:40:7A:E8:6E:7F:FA:EE
Authority key identifier: F5:CB:85:6D:42:69:21:9E:D3:A0:C0:DC:47:33:32:36:F1:55:95:3A
Certificate issuer: /CN=f5cb856d4269219ed3a0c0dc47333236f155953a
Certificate serial: 0198D960263A791742DB680E6E15C5240C71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9cuFbUJpIZ7ToMDcRzMyNvFVlTo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/74b280-e1b4-4310-8085-d65617bd3b4f/1/9cuFbUJpIZ7ToMDcRzMyNvFVlTo.mft
Manifest number: 0110
Signing time: Sun 24 Aug 2025 00:00:13 +0000
Manifest this update: Sun 24 Aug 2025 00:00:13 +0000
Manifest next update: Mon 25 Aug 2025 00:00:13 +0000
Files and hashes: 1: 9cuFbUJpIZ7ToMDcRzMyNvFVlTo.crl (hash: K5djCxrbMdhjImfZviKjKuLfMxa74I9OeDf6clFvQMg=)
2: _R2-unRLTVoARNA84wK9QwIRcHg.roa (hash: pLbQbiX22eVdy+zNJ3CqYse/kH4/484+cWZJ4cChULA=)
3: a3SyScX72L5TkWnjrj7OuShiBm0.roa (hash: EcnC4sDg2JzNdW4ec0ThJsTXhRWMy/yu92wkqgkxq6Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/74b280-e1b4-4310-8085-d65617bd3b4f/1/9cuFbUJpIZ7ToMDcRzMyNvFVlTo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/74b280-e1b4-4310-8085-d65617bd3b4f/1/9cuFbUJpIZ7ToMDcRzMyNvFVlTo.mft
rsync://rpki.ripe.net/repository/DEFAULT/9cuFbUJpIZ7ToMDcRzMyNvFVlTo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 23:01:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d9:60:26:3a:79:17:42:db:68:0e:6e:15:c5:24:0c:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5cb856d4269219ed3a0c0dc47333236f155953a
Validity
Not Before: Aug 24 00:00:13 2025 GMT
Not After : Aug 25 00:00:13 2025 GMT
Subject: CN=2f161e1b6a2ff9502c661582f4407ae86e7ffaee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:0d:3c:47:32:ab:33:84:eb:3b:c3:c6:fa:3c:
9d:41:ce:d4:bd:5a:d7:6e:42:96:f0:1c:8e:72:d5:
b2:91:34:3c:fa:eb:56:bc:63:b7:cd:a9:83:09:73:
ab:d8:cf:bc:2f:59:86:1b:6f:90:ce:4b:80:55:12:
21:3a:09:a3:9f:05:df:dd:ba:5b:30:33:89:93:32:
b5:c4:7a:e9:67:b6:c3:db:e3:84:6c:8a:98:82:92:
27:e5:d2:75:63:6c:17:34:98:a1:6d:2f:71:f6:4e:
13:32:f5:86:0f:c4:1f:83:48:0f:9b:2d:26:f8:a9:
0f:8a:a7:ec:8d:a5:69:02:d4:9d:a8:31:67:2f:cc:
9c:8b:86:b0:86:50:10:29:9b:e4:18:06:f8:c5:e3:
82:87:d7:ef:eb:f1:d3:f9:5c:74:d7:d5:4c:55:4b:
a1:e6:f7:21:59:dc:b5:83:e5:07:2a:63:c1:eb:cd:
a4:3b:f8:3a:59:5a:a4:52:d6:eb:49:22:88:68:00:
1f:2d:79:62:9a:17:ea:70:29:0c:e3:04:1e:3b:31:
39:0d:f5:cf:5c:f6:df:00:91:f5:0d:08:f1:d7:4b:
1b:e3:72:0f:6b:db:27:2c:05:99:df:1f:cb:fc:ce:
03:49:7c:33:bb:73:1b:e3:c5:8a:a1:bd:72:03:16:
b3:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:16:1E:1B:6A:2F:F9:50:2C:66:15:82:F4:40:7A:E8:6E:7F:FA:EE
X509v3 Authority Key Identifier:
keyid:F5:CB:85:6D:42:69:21:9E:D3:A0:C0:DC:47:33:32:36:F1:55:95:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9cuFbUJpIZ7ToMDcRzMyNvFVlTo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/74b280-e1b4-4310-8085-d65617bd3b4f/1/9cuFbUJpIZ7ToMDcRzMyNvFVlTo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/74b280-e1b4-4310-8085-d65617bd3b4f/1/9cuFbUJpIZ7ToMDcRzMyNvFVlTo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cf:ba:58:b0:35:f9:de:58:75:74:c2:19:c9:92:40:8a:de:76:
53:77:44:69:07:b2:b0:d0:d7:fb:f3:c3:69:de:af:96:c3:4b:
98:2d:1b:61:19:97:08:04:33:b8:44:53:eb:0e:65:64:4e:a7:
f9:1a:9f:e5:2c:25:73:54:3d:ae:bd:6b:32:1a:43:18:2c:6e:
20:84:2f:b3:58:b1:c8:b4:73:2f:86:29:d9:34:3e:7f:6a:4d:
f2:a9:e0:83:93:99:cf:fa:4d:b7:c2:21:21:1d:fb:d2:3c:2f:
8f:bb:c0:44:d6:f4:8a:6c:32:e2:c4:2d:ff:17:d1:a5:d0:33:
7d:dd:21:f1:bd:c7:88:67:b4:d1:60:d2:dc:4c:fe:9d:93:17:
45:f4:65:5d:f5:c8:4e:d8:fa:23:fd:5a:5f:2d:a3:c3:21:52:
d2:30:44:6d:c2:01:68:47:5f:fb:1b:f1:37:61:39:2e:d9:ef:
3f:16:6b:c7:a3:12:28:c4:b2:db:50:70:23:67:91:2c:8d:e8:
e9:cc:5d:ef:75:bf:4f:c5:78:5a:9f:0a:a3:22:db:2f:28:a5:
a7:fc:b2:e8:79:e2:89:da:7c:5d:0a:ed:a2:02:64:40:0e:b6:
df:ef:c3:79:71:26:13:3a:f3:98:14:23:5d:ea:b0:75:25:18:
9d:2a:31:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 04:21:54 2025 by rpki-client