Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/0c9b54-130a-499a-bf9f-7610aabaa274/1/clwMcRHi9X_K-BE6QuVW6ILdXEs.mft
File: clwMcRHi9X_K-BE6QuVW6ILdXEs.mft (raw, json)
Hash identifier: qIV9TFNJfQ17w8dSUax6Mh4d4q9FR0DnAUo/GGoTKng=
Subject key identifier: 16:FF:C2:E8:3B:EE:C3:BE:2E:7F:07:02:CB:17:BD:AE:6A:EC:B0:CC
Authority key identifier: 72:5C:0C:71:11:E2:F5:7F:CA:F8:11:3A:42:E5:56:E8:82:DD:5C:4B
Certificate issuer: /CN=725c0c7111e2f57fcaf8113a42e556e882dd5c4b
Certificate serial: 0198D583BC78F0A4008B1B91489E9698F60C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/clwMcRHi9X_K-BE6QuVW6ILdXEs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/0c9b54-130a-499a-bf9f-7610aabaa274/1/clwMcRHi9X_K-BE6QuVW6ILdXEs.mft
Manifest number: 1652
Signing time: Sat 23 Aug 2025 06:00:37 +0000
Manifest this update: Sat 23 Aug 2025 06:00:37 +0000
Manifest next update: Sun 24 Aug 2025 06:00:37 +0000
Files and hashes: 1: 1RGgWDKxb5y298L2tt-0tOvqbNw.roa (hash: 2bZZWO6omsg2Mwm30E/Z1rRX+nPqPKuGxYg/2ZzCe0k=)
2: 3sxlJEA8BaERqC36Ubw3FlVF9Ek.roa (hash: YdpNn1ufX9tbeWscBU0U/F4gP263cfdud5JqGKKNPWQ=)
3: 68QeHj6JI2_T8Kr8hKctEhMPtbw.roa (hash: XnmM0ObtZKLV7g04CkYP3n/e5tgHKBrd4Q5O9o5IvnE=)
4: KoGcuhEWGpdaiyvAQhahi6JGn3c.roa (hash: 1hE6GXWKyFKYOi6wNNjRCkxxkmT7Rr3/DXP+/VqRcqY=)
5: ZLxVHxzZvKjjn2s6lQPPZdNzPyw.roa (hash: 9UddYVQskYka8RNl5TAXIUT0fsGnIVLCOhL+P2BIpeA=)
6: cLFXpbvXQ7ewA43ckj0WniT4JUE.roa (hash: MA0V95ed/gECxNSaptpMKxS+abLgaLPgcexWWf8XVhY=)
7: clwMcRHi9X_K-BE6QuVW6ILdXEs.crl (hash: BSxIN2PibdHnKfQ07xMAYh83BpSHn1IeFdaehl6a4uk=)
8: ejg2o5Q2dvoWaESAzfB0HEPf7xI.roa (hash: s8Vh1yl+9P0cPDEhtTkn7ElHKgWmn1YwQsHChgTqjlY=)
9: fN3bfVZFsYAwSt6ljIKuFdIrYTw.roa (hash: 2nn1lj90yzh4RI2kdOg6btEhvs2/WJxkszduCB8J4u4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/0c9b54-130a-499a-bf9f-7610aabaa274/1/clwMcRHi9X_K-BE6QuVW6ILdXEs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/0c9b54-130a-499a-bf9f-7610aabaa274/1/clwMcRHi9X_K-BE6QuVW6ILdXEs.mft
rsync://rpki.ripe.net/repository/DEFAULT/clwMcRHi9X_K-BE6QuVW6ILdXEs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:bc:78:f0:a4:00:8b:1b:91:48:9e:96:98:f6:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=725c0c7111e2f57fcaf8113a42e556e882dd5c4b
Validity
Not Before: Aug 23 06:00:37 2025 GMT
Not After : Aug 24 06:00:37 2025 GMT
Subject: CN=16ffc2e83beec3be2e7f0702cb17bdae6aecb0cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:20:58:94:a1:1e:d1:d4:9b:c5:c7:33:fa:39:
9b:94:ae:ee:4b:7e:ae:b0:f7:f9:bf:77:32:26:1b:
7e:83:64:3e:3e:eb:55:f4:a6:36:96:24:17:b3:3c:
2b:22:77:ec:4a:f9:4c:8f:93:85:36:82:c3:b6:d0:
29:1c:d8:54:1f:87:7a:da:1e:df:98:49:dc:e9:69:
22:e4:7c:3b:58:21:c4:bf:a3:5d:1d:e9:6d:22:08:
66:29:53:d0:29:8c:63:bf:f9:d6:a5:3c:83:1e:d4:
78:52:1f:fd:d0:c8:1f:84:d0:7c:a2:24:0f:6a:a5:
1b:28:2e:79:2c:97:96:91:b2:82:a4:78:a3:2e:5e:
48:14:35:08:3c:f9:f6:cb:69:30:cd:4d:0e:55:28:
3d:9a:02:00:f3:a7:ec:b8:56:4a:f6:ff:e4:26:bb:
31:ec:6f:c0:66:43:2c:e4:d7:c3:b0:7f:db:23:2f:
60:71:21:36:25:58:bb:21:9d:11:20:b8:2f:3a:cd:
87:e4:a1:24:5d:c4:9b:5d:03:e2:2d:f8:13:fa:5c:
17:c7:f9:52:41:e7:7c:6f:08:a5:78:c0:cb:19:98:
d9:cb:66:d2:d9:29:00:d1:98:f4:a0:a0:41:32:f7:
e1:b8:44:de:75:2a:3b:16:85:ac:e8:8a:9f:2e:e7:
24:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:FF:C2:E8:3B:EE:C3:BE:2E:7F:07:02:CB:17:BD:AE:6A:EC:B0:CC
X509v3 Authority Key Identifier:
keyid:72:5C:0C:71:11:E2:F5:7F:CA:F8:11:3A:42:E5:56:E8:82:DD:5C:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/clwMcRHi9X_K-BE6QuVW6ILdXEs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/0c9b54-130a-499a-bf9f-7610aabaa274/1/clwMcRHi9X_K-BE6QuVW6ILdXEs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/0c9b54-130a-499a-bf9f-7610aabaa274/1/clwMcRHi9X_K-BE6QuVW6ILdXEs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:61:af:87:6e:bf:ae:2e:fb:3b:a2:68:db:29:4e:d5:47:bd:
e2:29:40:94:ba:50:09:a1:ac:d5:49:02:21:22:1a:e4:79:03:
d0:5d:c0:95:32:dc:4a:78:55:e6:47:b9:5f:c3:b3:98:0a:ec:
cf:4d:16:2a:c7:b7:21:d3:67:d2:b5:da:6b:72:79:21:e4:59:
97:e8:44:a4:3a:d2:62:d6:c2:57:23:55:d4:f6:6b:7f:b1:3b:
3b:fb:d9:0b:4e:8d:b3:ec:0a:52:bc:81:43:1c:60:a1:4c:5b:
7e:eb:46:77:f7:83:bb:ac:68:9f:dc:22:41:a2:bb:23:4e:9c:
8d:31:b3:b7:a4:b3:59:aa:6c:e1:80:55:43:66:2e:0e:8c:ae:
2c:73:e9:34:ad:d8:d0:58:9b:99:fd:46:1e:49:4a:12:0b:04:
62:bc:26:c7:4f:5b:2a:d9:9d:1b:72:05:9b:63:2a:97:84:52:
3e:ab:83:89:72:70:34:74:c9:da:51:79:b9:5a:53:b6:96:6e:
7a:dd:6d:04:6c:03:57:51:3e:d1:44:4a:47:e8:9f:e4:ec:98:
ed:f1:52:6f:97:58:d9:a5:93:b9:7d:a7:99:86:54:02:17:7c:
04:b6:57:73:38:87:cc:00:5b:8a:6a:48:cf:e2:f5:63:71:80:
21:3c:21:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:41:46 2025 by rpki-client