Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/c20fba-5b67-438c-ab00-c7eb34e2dca6/1/cpnOZKDxYk17stKWnlwRrbqlSFw.mft
File: cpnOZKDxYk17stKWnlwRrbqlSFw.mft (raw, json)
Hash identifier: hXqxVRInSjJ5c9OCBORMK5GaPiAFHudQd2uWZ4bjRZA=
Subject key identifier: E4:E6:F0:9E:8A:65:9E:5E:18:BE:CC:11:94:A6:9C:BC:E9:65:E0:16
Authority key identifier: 72:99:CE:64:A0:F1:62:4D:7B:B2:D2:96:9E:5C:11:AD:BA:A5:48:5C
Certificate issuer: /CN=7299ce64a0f1624d7bb2d2969e5c11adbaa5485c
Certificate serial: 0198D515E25ED508FA899301D6AEF152C543
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cpnOZKDxYk17stKWnlwRrbqlSFw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/c20fba-5b67-438c-ab00-c7eb34e2dca6/1/cpnOZKDxYk17stKWnlwRrbqlSFw.mft
Manifest number: 0A71
Signing time: Sat 23 Aug 2025 04:00:37 +0000
Manifest this update: Sat 23 Aug 2025 04:00:37 +0000
Manifest next update: Sun 24 Aug 2025 04:00:37 +0000
Files and hashes: 1: cpnOZKDxYk17stKWnlwRrbqlSFw.crl (hash: nLXneqYtrlStYur+NzxfKuKpDdIFirPtazUk4S+9RJU=)
2: hGLXMAJyrLLUknw2I4rIa47GY5A.roa (hash: 2PfIq+E4/YZaE6ygL6f+ygB4E8ocD+aiVc7FkOqVsVA=)
3: vbTBxrwzB75awQdnuHxvUmGSxrI.roa (hash: BNvntPsh9Cs3tqn2zXlS+7ZhQF3J782Zk6D2d5jtV8U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/c20fba-5b67-438c-ab00-c7eb34e2dca6/1/cpnOZKDxYk17stKWnlwRrbqlSFw.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/c20fba-5b67-438c-ab00-c7eb34e2dca6/1/cpnOZKDxYk17stKWnlwRrbqlSFw.mft
rsync://rpki.ripe.net/repository/DEFAULT/cpnOZKDxYk17stKWnlwRrbqlSFw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 04:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:15:e2:5e:d5:08:fa:89:93:01:d6:ae:f1:52:c5:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7299ce64a0f1624d7bb2d2969e5c11adbaa5485c
Validity
Not Before: Aug 23 04:00:37 2025 GMT
Not After : Aug 24 04:00:37 2025 GMT
Subject: CN=e4e6f09e8a659e5e18becc1194a69cbce965e016
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:24:d7:63:7c:3f:ab:25:ac:4c:06:29:12:62:
b2:ae:b5:4c:f8:14:cc:aa:3c:c0:f6:1c:4a:f2:b7:
f9:9c:be:e6:80:09:0a:29:c0:8a:a8:ce:b0:31:90:
27:02:1a:42:16:55:a1:d5:74:8c:4b:9f:0d:86:86:
75:1f:1a:ce:de:f2:e9:ad:9d:2c:22:6e:e4:5f:ee:
54:1f:aa:20:1c:d1:a8:ac:eb:a5:45:7b:ea:94:fc:
ba:9a:54:02:46:d5:e6:8e:c1:f5:1f:3f:73:4a:b4:
15:b6:02:59:a5:15:df:da:e2:7e:b8:13:f5:0e:e6:
f4:e9:39:47:42:62:65:66:a3:34:d9:ae:16:f7:e0:
75:ad:9e:21:b6:3e:37:3b:e2:cf:2b:81:d3:15:3b:
d2:e3:08:1a:24:af:64:f4:96:86:ce:1a:e4:b2:64:
41:c0:c2:c4:03:05:82:68:87:69:29:bd:d4:4d:c3:
8d:47:66:e1:4c:99:2c:17:65:68:9e:b4:a7:9f:e9:
45:d1:b8:64:93:ac:46:2a:4f:80:5d:b5:8b:16:5a:
8d:bf:29:c4:43:94:5b:b3:ca:8a:45:bb:06:d9:a6:
d7:68:75:16:66:f9:d6:41:9f:ff:d4:ce:7f:ed:8d:
60:38:3d:92:a9:53:5d:f7:24:3b:e5:55:5a:4e:f6:
0d:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:E6:F0:9E:8A:65:9E:5E:18:BE:CC:11:94:A6:9C:BC:E9:65:E0:16
X509v3 Authority Key Identifier:
keyid:72:99:CE:64:A0:F1:62:4D:7B:B2:D2:96:9E:5C:11:AD:BA:A5:48:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cpnOZKDxYk17stKWnlwRrbqlSFw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/c20fba-5b67-438c-ab00-c7eb34e2dca6/1/cpnOZKDxYk17stKWnlwRrbqlSFw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/c20fba-5b67-438c-ab00-c7eb34e2dca6/1/cpnOZKDxYk17stKWnlwRrbqlSFw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:d1:5c:a1:de:4d:2f:a4:a4:c7:70:cf:ba:72:b5:52:e1:52:
41:c9:a7:d3:6b:7d:60:6b:56:ae:7f:99:bf:5c:ef:d5:5d:4f:
8a:19:ef:eb:c6:be:69:19:8d:60:91:28:26:e6:26:79:83:7e:
fb:df:9c:e3:18:7a:30:4a:36:36:fb:8e:24:a8:85:f6:56:64:
48:74:6a:92:2c:8a:3e:f9:fb:d4:a4:78:12:e4:30:86:99:49:
c9:14:3b:78:97:82:ff:4e:b7:29:e1:c3:9b:dc:50:bb:67:be:
69:10:a1:7f:ee:89:9d:90:c5:3c:16:60:01:7b:70:78:63:25:
9d:61:8d:6f:3e:d9:d7:87:8d:21:96:6a:df:68:dd:6a:c3:2d:
3d:ed:0b:3e:8c:cd:8a:a5:8f:9f:c0:d9:a8:13:c8:b1:4f:81:
f8:8b:e3:be:54:76:f1:b2:61:dc:7b:01:86:d1:e5:0c:f0:19:
9f:0c:8f:1b:ba:de:aa:f6:b8:d9:0c:a4:19:c2:14:03:fc:08:
d8:85:d7:26:b2:3a:2e:14:ca:cf:d2:17:16:f1:ab:3e:f3:22:
87:f5:b5:64:e4:aa:2a:8b:f3:19:20:b3:69:77:27:b3:c8:06:
a9:e9:03:00:29:51:ef:d8:c6:a2:30:3c:b3:5c:ba:c2:1a:a0:
2a:61:45:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:17:04 2025 by rpki-client