Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/585e61-9a49-45a9-91f7-df8adad897bf/1/C2kIfO9gA1jvmMHJfaByNN_Q4Dc.mft
File: C2kIfO9gA1jvmMHJfaByNN_Q4Dc.mft (raw, json)
Hash identifier: TFGw4434NNQjBpR8gtxZaSiKG9hLlcHGoLI73fEFv9o=
Subject key identifier: 8F:74:E8:9E:01:3A:74:66:28:B5:1A:58:87:BC:D0:83:D1:76:10:B3
Authority key identifier: 0B:69:08:7C:EF:60:03:58:EF:98:C1:C9:7D:A0:72:34:DF:D0:E0:37
Certificate issuer: /CN=0b69087cef600358ef98c1c97da07234dfd0e037
Certificate serial: 0198D583E5D3F6F5323C428CEB13B69A8774
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C2kIfO9gA1jvmMHJfaByNN_Q4Dc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/585e61-9a49-45a9-91f7-df8adad897bf/1/C2kIfO9gA1jvmMHJfaByNN_Q4Dc.mft
Manifest number: BA
Signing time: Sat 23 Aug 2025 06:00:47 +0000
Manifest this update: Sat 23 Aug 2025 06:00:47 +0000
Manifest next update: Sun 24 Aug 2025 06:00:47 +0000
Files and hashes: 1: B9IzXLL2ixuUY8NCctMry3Z9SSY.roa (hash: LgY0TUvH+7Vh/0iBbmvFVKw12ZRzdi35NQADfuagyL0=)
2: C2kIfO9gA1jvmMHJfaByNN_Q4Dc.crl (hash: MB2xkbaGRsE6ou0Pu2h+MhZmb9O33mfiVNczNFCNmc4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/585e61-9a49-45a9-91f7-df8adad897bf/1/C2kIfO9gA1jvmMHJfaByNN_Q4Dc.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/585e61-9a49-45a9-91f7-df8adad897bf/1/C2kIfO9gA1jvmMHJfaByNN_Q4Dc.mft
rsync://rpki.ripe.net/repository/DEFAULT/C2kIfO9gA1jvmMHJfaByNN_Q4Dc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:e5:d3:f6:f5:32:3c:42:8c:eb:13:b6:9a:87:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b69087cef600358ef98c1c97da07234dfd0e037
Validity
Not Before: Aug 23 06:00:47 2025 GMT
Not After : Aug 24 06:00:47 2025 GMT
Subject: CN=8f74e89e013a746628b51a5887bcd083d17610b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:21:c3:15:62:1e:46:89:42:64:23:52:9a:06:
e2:72:d5:ce:ca:35:25:a2:17:38:dc:cc:73:59:a5:
6a:3d:ce:fb:83:f6:a2:1b:01:4d:7a:4b:bc:aa:64:
25:c9:e2:c4:ca:6b:c4:a9:ae:34:75:ae:9a:b4:92:
57:69:7e:03:7b:0b:d0:89:b7:ae:3f:2f:d0:7a:e5:
e4:30:0f:fc:b5:be:88:d1:e6:0c:b8:f4:f8:1f:5f:
00:2c:7a:98:eb:aa:19:ef:9f:2e:75:b5:ec:3b:50:
36:8c:58:f0:20:0f:be:e3:42:92:8b:0d:a2:0d:a3:
cd:55:ed:90:be:a8:63:b9:58:ba:77:40:04:19:e0:
aa:1f:2c:c0:e5:9c:e2:cc:ff:01:fa:3a:7e:38:b1:
40:37:ac:49:68:5e:f3:12:fa:a7:eb:f1:e5:3e:00:
ab:4a:a5:0e:1b:5a:bc:c1:b4:09:b6:b2:08:08:a9:
92:5d:aa:77:60:3f:e3:e2:36:ac:3f:10:21:b2:88:
83:ca:df:d2:d5:c7:f2:6b:63:02:ba:63:2b:61:55:
f1:3c:78:87:de:7b:b4:60:48:f8:60:79:84:93:26:
f8:dd:42:8c:08:8c:d4:91:43:67:31:e7:af:f3:50:
0d:3c:b4:23:1c:c8:c7:a7:70:c4:54:d8:08:3a:17:
ca:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:74:E8:9E:01:3A:74:66:28:B5:1A:58:87:BC:D0:83:D1:76:10:B3
X509v3 Authority Key Identifier:
keyid:0B:69:08:7C:EF:60:03:58:EF:98:C1:C9:7D:A0:72:34:DF:D0:E0:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C2kIfO9gA1jvmMHJfaByNN_Q4Dc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/585e61-9a49-45a9-91f7-df8adad897bf/1/C2kIfO9gA1jvmMHJfaByNN_Q4Dc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/585e61-9a49-45a9-91f7-df8adad897bf/1/C2kIfO9gA1jvmMHJfaByNN_Q4Dc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:f7:e8:aa:dd:ea:4c:aa:8b:8c:c6:a4:75:ad:18:60:10:44:
36:b5:9f:ac:e8:22:9d:56:02:68:33:80:fe:56:c9:d8:90:b6:
6f:6e:4a:83:3e:a2:ba:30:cb:36:e4:31:19:1f:16:64:ec:b2:
4f:02:c8:3f:40:f3:7b:c2:8e:8a:40:5c:75:59:04:e7:22:5d:
02:a7:bc:5b:93:d3:99:fe:4c:63:a7:1f:83:f8:cc:3d:ae:e1:
1a:e3:ba:ee:fb:47:9c:bd:bd:56:b8:c2:8c:38:f8:d9:3a:a8:
cc:12:c5:ee:8d:7f:72:47:1c:50:f6:46:0e:a9:b8:7f:1d:45:
b2:44:6e:ce:d4:ab:66:6f:df:6d:2e:e2:b3:16:61:60:40:41:
ef:dc:9a:c4:7e:4a:b2:84:85:33:00:6d:a4:c3:76:1f:e5:79:
f5:3e:53:f0:25:08:9d:06:4a:b9:1c:ed:44:4a:bc:47:64:1b:
b2:fb:5b:c2:78:e5:71:7b:24:e0:95:88:ec:3b:ea:f7:fe:41:
a7:35:ae:d5:43:80:f2:5d:27:a2:05:19:92:84:85:61:8c:70:
4c:43:65:6b:ed:c4:db:92:e9:27:a0:bc:1a:bc:b8:c7:96:53:
53:e0:77:5e:62:f0:35:6f:65:ea:39:f3:43:6e:76:2c:e5:83:
6c:db:0f:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:21:19 2025 by rpki-client