Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/4d5295-f8f2-4e05-add0-519795a22502/1/cM9eaXxglK22vJcVazXgBf1M8uI.mft
File: cM9eaXxglK22vJcVazXgBf1M8uI.mft (raw, json)
Hash identifier: Bmyti2UokMqR5r+AZR7Y13AKPXmrD1G9POTCioMNMsI=
Subject key identifier: 3A:24:0A:94:5A:02:25:DC:36:38:7C:6F:19:0E:C8:D7:A8:DB:41:E9
Authority key identifier: 70:CF:5E:69:7C:60:94:AD:B6:BC:97:15:6B:35:E0:05:FD:4C:F2:E2
Certificate issuer: /CN=70cf5e697c6094adb6bc97156b35e005fd4cf2e2
Certificate serial: 0198D54EBE945E367190C29F8C2BDA3EDA83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cM9eaXxglK22vJcVazXgBf1M8uI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/4d5295-f8f2-4e05-add0-519795a22502/1/cM9eaXxglK22vJcVazXgBf1M8uI.mft
Manifest number: 1649
Signing time: Sat 23 Aug 2025 05:02:44 +0000
Manifest this update: Sat 23 Aug 2025 05:02:44 +0000
Manifest next update: Sun 24 Aug 2025 05:02:44 +0000
Files and hashes: 1: ZMvF8N06VsuZ5tNxMMczzsSTe5w.roa (hash: D7vN+YdR9s6oznh1bq9p5ngAxVIRYXDWMiWld/VomNA=)
2: cM9eaXxglK22vJcVazXgBf1M8uI.crl (hash: Rf4zcf3TJ+uWLjQ6cfRXa8YTNw3i1HrepPVMZd1mh6c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/4d5295-f8f2-4e05-add0-519795a22502/1/cM9eaXxglK22vJcVazXgBf1M8uI.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/4d5295-f8f2-4e05-add0-519795a22502/1/cM9eaXxglK22vJcVazXgBf1M8uI.mft
rsync://rpki.ripe.net/repository/DEFAULT/cM9eaXxglK22vJcVazXgBf1M8uI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:be:94:5e:36:71:90:c2:9f:8c:2b:da:3e:da:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70cf5e697c6094adb6bc97156b35e005fd4cf2e2
Validity
Not Before: Aug 23 05:02:44 2025 GMT
Not After : Aug 24 05:02:44 2025 GMT
Subject: CN=3a240a945a0225dc36387c6f190ec8d7a8db41e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:c8:0f:fc:22:4b:b8:54:a3:7a:da:91:0c:7c:
73:11:74:18:c4:6e:a5:b8:4b:0d:5e:cc:d0:f4:53:
3c:24:d9:c1:3f:6f:1a:f3:cc:2e:e8:8c:7f:f9:da:
bb:b6:ae:89:dc:32:02:b3:ee:20:21:a9:97:87:76:
d9:e4:3a:a7:5b:94:67:9f:9a:e3:b6:d9:f6:44:bb:
36:a7:4a:a0:39:c7:3e:6c:b2:22:cc:ad:48:2f:ee:
76:c5:7e:e9:cf:d3:f3:7f:25:92:52:d8:04:ce:45:
0a:b6:9c:1b:99:f0:62:7a:e8:16:5f:d2:44:42:1d:
ec:2b:dd:ad:f9:89:0f:61:9c:1f:c4:fc:9e:4e:96:
fc:5e:c5:c8:7d:42:ae:0b:14:f7:ad:6a:9b:7f:ab:
84:f2:93:66:e4:b5:2b:e2:19:48:14:30:f5:8e:34:
be:fa:a4:2b:6f:18:e7:07:01:80:25:16:f5:af:18:
89:a9:7e:66:5a:49:0f:b0:fb:10:db:33:f0:5c:c2:
13:c9:7d:5e:fb:c1:11:7d:91:9b:25:89:9c:38:d9:
68:67:c8:a9:bc:b9:23:39:f5:e8:eb:2f:c8:f6:ec:
2a:43:e5:bf:a4:56:30:b8:cc:63:8e:de:96:89:50:
04:66:c4:b9:79:36:a2:eb:e2:6a:07:2e:dc:94:41:
16:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:24:0A:94:5A:02:25:DC:36:38:7C:6F:19:0E:C8:D7:A8:DB:41:E9
X509v3 Authority Key Identifier:
keyid:70:CF:5E:69:7C:60:94:AD:B6:BC:97:15:6B:35:E0:05:FD:4C:F2:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cM9eaXxglK22vJcVazXgBf1M8uI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/4d5295-f8f2-4e05-add0-519795a22502/1/cM9eaXxglK22vJcVazXgBf1M8uI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/4d5295-f8f2-4e05-add0-519795a22502/1/cM9eaXxglK22vJcVazXgBf1M8uI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:b8:f1:b1:8b:74:b5:f3:a9:5e:60:5d:29:79:17:99:22:c6:
a9:29:2c:1c:e4:51:7c:cc:b1:92:ce:d7:f5:11:2a:e3:01:df:
16:a2:04:cb:10:f2:9a:f7:43:11:04:80:3a:c9:f2:5e:41:b4:
ab:e9:59:9e:c1:f3:c4:40:e9:40:75:38:61:39:32:4d:90:b5:
16:8e:f0:c4:99:a6:05:e1:c5:4f:9a:84:ec:35:10:f6:d6:4f:
e6:19:fc:b4:60:e6:9c:aa:92:ab:ad:e4:e0:58:d5:8e:0c:10:
e5:e8:b0:10:58:04:88:d6:17:98:97:9c:bd:88:91:1e:36:20:
60:a3:1b:f5:06:e2:51:7d:39:34:90:d5:6d:57:67:e9:f6:5c:
d8:83:12:ee:37:20:2d:54:44:0b:37:ae:1d:78:c2:7d:30:2e:
03:3b:37:db:7e:fa:d5:1e:fa:98:5d:d6:1e:ec:26:18:d3:9c:
6e:57:88:85:b5:24:e1:5f:84:12:56:e0:5c:3e:e9:2f:59:2a:
c4:1f:96:0c:5c:2f:f7:b9:13:cd:5d:a0:7c:b1:7e:2e:de:ee:
67:05:34:c2:2e:5d:eb:ce:69:a9:72:31:2e:e9:b9:74:ca:4b:
80:12:f8:01:dd:8f:16:c5:59:dc:92:7f:23:4f:66:60:3a:6e:
39:1e:f3:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:35:52 2025 by rpki-client