Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/305475-b224-4ea8-91ae-6e4cd836c7cb/1/CwqUDP0u7-gvVw-vxP3FvQeUGgY.mft
File: CwqUDP0u7-gvVw-vxP3FvQeUGgY.mft (raw, json)
Hash identifier: OHSc+mlrI3YW0MWJ4F4zMXE+N9H9cDgbEa/uPYvV0LE=
Subject key identifier: 2E:C9:63:68:88:D0:B7:CE:E5:6E:93:87:CA:ED:69:70:01:DC:FE:28
Authority key identifier: 0B:0A:94:0C:FD:2E:EF:E8:2F:57:0F:AF:C4:FD:C5:BD:07:94:1A:06
Certificate issuer: /CN=0b0a940cfd2eefe82f570fafc4fdc5bd07941a06
Certificate serial: 0198D515AA9F208F6110040D798EAF7065BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CwqUDP0u7-gvVw-vxP3FvQeUGgY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/305475-b224-4ea8-91ae-6e4cd836c7cb/1/CwqUDP0u7-gvVw-vxP3FvQeUGgY.mft
Manifest number: 08D6
Signing time: Sat 23 Aug 2025 04:00:23 +0000
Manifest this update: Sat 23 Aug 2025 04:00:23 +0000
Manifest next update: Sun 24 Aug 2025 04:00:23 +0000
Files and hashes: 1: CwqUDP0u7-gvVw-vxP3FvQeUGgY.crl (hash: PX2r38r6p4Y68mkOBCUTckN8T2zQCV9HNR+ue6AzYOY=)
2: Lh4J1VP02-oTK-HxM-W2DuWref8.roa (hash: W28vw4gwp9YROhgcttiVHyEse6JN5PCY1Q1d5LlTtlY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/305475-b224-4ea8-91ae-6e4cd836c7cb/1/CwqUDP0u7-gvVw-vxP3FvQeUGgY.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/305475-b224-4ea8-91ae-6e4cd836c7cb/1/CwqUDP0u7-gvVw-vxP3FvQeUGgY.mft
rsync://rpki.ripe.net/repository/DEFAULT/CwqUDP0u7-gvVw-vxP3FvQeUGgY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:15:aa:9f:20:8f:61:10:04:0d:79:8e:af:70:65:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b0a940cfd2eefe82f570fafc4fdc5bd07941a06
Validity
Not Before: Aug 23 04:00:23 2025 GMT
Not After : Aug 24 04:00:23 2025 GMT
Subject: CN=2ec9636888d0b7cee56e9387caed697001dcfe28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:6a:17:25:1a:b7:46:c7:53:46:60:dd:6b:e5:
5c:db:9a:83:72:ff:87:c0:3f:ea:5b:a9:16:27:d1:
a8:d4:6a:6d:f8:fd:7e:b8:1b:91:56:25:c5:04:8c:
2a:c0:7c:5c:06:76:cd:a0:db:dd:f8:03:e7:d0:5f:
e5:59:f7:64:6b:27:84:b7:ef:ea:40:9e:ff:50:c9:
2c:e0:54:1c:ff:c4:f2:44:c7:a7:e1:78:0d:a8:65:
b7:59:9a:06:18:c7:14:6f:92:c1:78:67:44:9f:42:
be:43:8b:e2:77:a8:46:7d:78:1c:43:00:7a:f3:8b:
94:94:f8:d6:d7:16:cc:ee:10:f4:9f:17:46:3a:1a:
ea:ee:40:59:cc:00:1a:95:ce:aa:1f:bd:64:5a:26:
b0:f0:91:9a:e2:fe:81:36:7c:bc:19:b4:27:05:3e:
16:c4:51:9f:87:27:53:4c:c7:4d:27:2b:f3:62:70:
45:4a:0a:45:96:04:89:c1:c6:c4:6f:9a:12:84:db:
1b:c5:2d:66:bc:1e:67:05:70:d4:da:d9:1e:bf:67:
bd:81:d3:45:c3:fb:32:ce:35:89:8b:86:56:e9:a8:
2c:cf:bf:51:20:17:d6:11:38:c1:05:48:d7:0b:a4:
b4:d6:9d:ee:e8:d1:b6:9b:e3:25:aa:9c:87:b6:5e:
5f:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:C9:63:68:88:D0:B7:CE:E5:6E:93:87:CA:ED:69:70:01:DC:FE:28
X509v3 Authority Key Identifier:
keyid:0B:0A:94:0C:FD:2E:EF:E8:2F:57:0F:AF:C4:FD:C5:BD:07:94:1A:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CwqUDP0u7-gvVw-vxP3FvQeUGgY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/305475-b224-4ea8-91ae-6e4cd836c7cb/1/CwqUDP0u7-gvVw-vxP3FvQeUGgY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/305475-b224-4ea8-91ae-6e4cd836c7cb/1/CwqUDP0u7-gvVw-vxP3FvQeUGgY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:7f:ad:0d:f8:ab:de:7c:ff:2b:8b:68:aa:c1:47:90:aa:e0:
60:5d:90:75:1a:23:a2:5a:d9:62:15:4b:d1:89:bc:57:86:1a:
e2:9d:07:02:b2:82:29:16:8e:13:c7:a1:3a:6d:f4:83:c5:3e:
6a:5f:47:eb:c8:a1:82:a2:d0:29:6a:31:13:10:9c:1b:12:ed:
ef:c9:02:5a:b5:19:8f:60:7e:d0:89:5a:fa:e7:84:4a:54:a6:
3e:66:05:67:9b:7c:e3:e1:90:19:a3:e3:a2:78:72:b2:7b:c0:
35:67:9b:83:b6:67:08:c9:bd:52:27:22:cb:05:66:6b:e2:fb:
f4:18:e5:02:5f:78:0f:39:84:f8:1b:5d:46:66:2c:41:5a:3e:
78:6e:eb:2e:f6:8f:0a:0e:b1:8c:e7:5f:87:87:71:83:29:de:
65:bf:bc:4d:9b:ba:90:ee:61:08:ff:15:0b:31:9f:88:c7:24:
16:67:ba:d1:a5:a7:83:65:9f:89:84:f2:25:a3:94:83:10:99:
93:74:ac:dc:91:47:4b:5c:ad:50:e1:2e:20:0d:d1:41:99:29:
3a:0f:6d:55:d7:38:a1:cb:6e:95:ff:0a:f2:68:aa:3d:80:7e:
e4:6d:e3:9a:9c:47:77:b8:fb:7d:5f:64:f1:5f:e8:9f:b2:36:
b5:ad:ae:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 09:41:53 2025 by rpki-client