Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/be2083-ea7b-4454-873e-965fac977721/1/CLoC9plc7Oap_TR1vQsc8N2Fgm4.mft
File: CLoC9plc7Oap_TR1vQsc8N2Fgm4.mft (raw, json)
Hash identifier: T/3SfRsfm0cowACS3exfwYruBORbcD/GHnSrQh0bZDI=
Subject key identifier: C0:36:77:C9:83:31:75:4C:D3:A7:CD:9D:76:18:69:BB:74:D0:C7:4F
Authority key identifier: 08:BA:02:F6:99:5C:EC:E6:A9:FD:34:75:BD:0B:1C:F0:DD:85:82:6E
Certificate issuer: /CN=08ba02f6995cece6a9fd3475bd0b1cf0dd85826e
Certificate serial: 0198D705FB58766173A04A442194C3352B2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CLoC9plc7Oap_TR1vQsc8N2Fgm4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/be2083-ea7b-4454-873e-965fac977721/1/CLoC9plc7Oap_TR1vQsc8N2Fgm4.mft
Manifest number: 164E
Signing time: Sat 23 Aug 2025 13:02:30 +0000
Manifest this update: Sat 23 Aug 2025 13:02:30 +0000
Manifest next update: Sun 24 Aug 2025 13:02:30 +0000
Files and hashes: 1: CLoC9plc7Oap_TR1vQsc8N2Fgm4.crl (hash: uhcUHVRKbO1MATjmOt6QVnhZgWCaSInlgWMa4jNA5Eg=)
2: xXBeI29eya94rPehpseNSugXOrU.roa (hash: xdHRa/hprzQEAOlWU9drCOQodom24Wp/yVhCxd9qLIo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/be2083-ea7b-4454-873e-965fac977721/1/CLoC9plc7Oap_TR1vQsc8N2Fgm4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/be2083-ea7b-4454-873e-965fac977721/1/CLoC9plc7Oap_TR1vQsc8N2Fgm4.mft
rsync://rpki.ripe.net/repository/DEFAULT/CLoC9plc7Oap_TR1vQsc8N2Fgm4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 13:02:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:05:fb:58:76:61:73:a0:4a:44:21:94:c3:35:2b:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08ba02f6995cece6a9fd3475bd0b1cf0dd85826e
Validity
Not Before: Aug 23 13:02:30 2025 GMT
Not After : Aug 24 13:02:30 2025 GMT
Subject: CN=c03677c98331754cd3a7cd9d761869bb74d0c74f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:59:ac:cf:7d:c4:61:c7:59:af:64:2c:01:da:
54:ec:15:7d:32:28:bc:7a:b6:5f:7d:db:6d:ae:ef:
d1:77:8a:0c:ab:c7:9e:12:50:2d:43:84:38:69:bf:
0c:1a:75:d2:3f:02:47:ca:41:46:df:52:d2:18:59:
f8:85:01:81:71:55:22:85:87:cd:e5:48:99:4f:21:
df:c7:83:8e:95:7f:bb:02:8d:87:db:ac:44:f4:01:
f9:52:c7:48:41:23:a9:7a:bf:72:a0:3b:35:f0:17:
08:7e:a2:8a:99:fc:72:dc:36:bf:04:9a:8e:72:6d:
c3:c7:35:db:09:42:f1:fe:4b:c1:f3:01:6c:1a:21:
e7:fb:d6:aa:d1:74:4d:a3:da:0c:30:8f:55:44:00:
73:22:eb:81:ca:36:eb:a3:9c:07:63:a8:c4:32:12:
d2:0b:5c:0c:13:e0:c2:c0:2e:40:88:7a:43:b2:73:
e6:30:34:f1:bc:5c:35:6a:56:21:04:25:8c:9c:fa:
58:48:55:c3:e4:23:d7:fd:ea:c9:19:2e:28:1d:a2:
c0:ac:8a:df:fe:f3:6e:4e:73:6f:cf:79:e1:f3:28:
c9:46:fc:5e:80:c2:ae:7d:68:9d:47:a1:2b:54:cd:
5d:50:b4:7d:44:75:72:4a:11:ef:b9:f8:5d:e4:e0:
3b:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:36:77:C9:83:31:75:4C:D3:A7:CD:9D:76:18:69:BB:74:D0:C7:4F
X509v3 Authority Key Identifier:
keyid:08:BA:02:F6:99:5C:EC:E6:A9:FD:34:75:BD:0B:1C:F0:DD:85:82:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CLoC9plc7Oap_TR1vQsc8N2Fgm4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/be2083-ea7b-4454-873e-965fac977721/1/CLoC9plc7Oap_TR1vQsc8N2Fgm4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/be2083-ea7b-4454-873e-965fac977721/1/CLoC9plc7Oap_TR1vQsc8N2Fgm4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:d9:bd:2e:a3:b3:c5:2c:18:41:97:c1:d7:bf:3c:8d:57:21:
38:ab:5c:5f:b7:d8:0b:42:55:48:72:64:c2:1e:94:7d:19:0e:
b4:db:64:0e:ba:da:c7:fc:5b:42:18:34:16:c1:00:e6:9c:3a:
d1:27:34:f0:02:c4:b0:15:02:0d:74:f8:ed:93:5c:c0:a0:2c:
fc:87:92:dd:f5:08:27:5b:b1:c2:72:39:7f:74:08:ea:e4:51:
b9:1e:60:6c:e1:b5:6e:03:4e:f0:bd:85:1c:9a:26:f9:dd:2a:
8d:96:e9:49:33:a9:85:04:bd:4a:14:1e:19:54:9e:be:11:10:
bc:64:91:dc:69:ff:58:3a:e4:73:cf:7f:7b:85:fa:8d:93:c4:
11:5e:59:41:1e:1b:3f:c8:cd:95:81:75:62:74:f6:40:53:4c:
55:cb:27:ed:e9:44:b0:3f:f3:ed:1f:df:1a:b0:99:31:d4:ef:
2c:3e:11:7b:85:e5:33:37:08:b2:30:3c:3b:c1:db:b5:48:67:
0a:49:7f:dd:bf:fb:07:5a:a6:be:5c:29:82:f8:37:22:2a:38:
fd:82:cc:9a:ca:e5:ab:4c:f5:24:11:a7:f4:82:6b:f2:53:43:
3c:6f:bf:95:81:c4:ee:5f:59:2d:6d:3c:ae:ff:d9:cb:89:33:
3c:75:be:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 21:19:16 2025 by rpki-client