Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/29c015-d747-4fc7-932b-df5cb9f0e3a4/1/CNHx-LQddPfYZrHlrf0Yr-ICcQg.mft
File: CNHx-LQddPfYZrHlrf0Yr-ICcQg.mft (raw, json)
Hash identifier: z1sOs2dCbkBOm3y8eEm/y9Qu5heYvws84Nrl2NhMSCI=
Subject key identifier: BB:69:09:7A:72:C6:48:55:40:CF:F4:A7:D6:FE:EC:7E:7F:E2:22:71
Authority key identifier: 08:D1:F1:F8:B4:1D:74:F7:D8:66:B1:E5:AD:FD:18:AF:E2:02:71:08
Certificate issuer: /CN=08d1f1f8b41d74f7d866b1e5adfd18afe2027108
Certificate serial: 0198D7062FD3F8CC21B3C7BD129102405B8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CNHx-LQddPfYZrHlrf0Yr-ICcQg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/29c015-d747-4fc7-932b-df5cb9f0e3a4/1/CNHx-LQddPfYZrHlrf0Yr-ICcQg.mft
Manifest number: 124E
Signing time: Sat 23 Aug 2025 13:02:43 +0000
Manifest this update: Sat 23 Aug 2025 13:02:43 +0000
Manifest next update: Sun 24 Aug 2025 13:02:43 +0000
Files and hashes: 1: CNHx-LQddPfYZrHlrf0Yr-ICcQg.crl (hash: 2BlusDcEhOdVYpBOD+3vqJNhrnILRjwqjwhBQ+L7ZYk=)
2: NSQQr0dchBVb5NqeR8z3x_MXCeI.roa (hash: XPvSVq5h7mPPG5QqR8bg1ZJJPL/y/MfsW5VYh5EY4C8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/29c015-d747-4fc7-932b-df5cb9f0e3a4/1/CNHx-LQddPfYZrHlrf0Yr-ICcQg.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/29c015-d747-4fc7-932b-df5cb9f0e3a4/1/CNHx-LQddPfYZrHlrf0Yr-ICcQg.mft
rsync://rpki.ripe.net/repository/DEFAULT/CNHx-LQddPfYZrHlrf0Yr-ICcQg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 13:02:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:06:2f:d3:f8:cc:21:b3:c7:bd:12:91:02:40:5b:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08d1f1f8b41d74f7d866b1e5adfd18afe2027108
Validity
Not Before: Aug 23 13:02:43 2025 GMT
Not After : Aug 24 13:02:43 2025 GMT
Subject: CN=bb69097a72c6485540cff4a7d6feec7e7fe22271
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:78:3f:ab:03:fa:23:77:14:9b:48:e1:80:bd:
d1:77:a9:cd:95:7f:43:c4:6f:f7:a7:a9:58:ad:03:
a5:64:70:a2:43:d5:3d:aa:55:72:7b:90:9c:1e:8d:
b0:62:34:d5:0b:04:85:3b:8f:6e:e1:eb:34:61:71:
34:af:76:09:4d:d7:79:e1:1d:8e:78:55:c6:2a:85:
ab:83:28:c0:e3:91:a6:20:23:24:92:b7:54:db:1c:
ac:c5:46:a9:de:ea:f9:4c:81:9f:40:44:76:26:cf:
2e:11:ae:6a:d1:b3:f8:40:a5:8d:35:f0:d7:1d:a8:
99:35:13:91:74:11:69:03:36:5f:73:28:5e:ec:bd:
70:1f:33:4c:d4:73:75:29:b2:29:dc:ff:13:4f:c3:
a5:d1:07:35:4a:63:01:3b:55:47:da:b2:83:f7:d3:
b7:af:a3:9d:92:f0:fe:d0:d2:48:7d:69:d6:d7:2d:
6f:c1:5a:c2:d4:d3:cc:ce:15:56:91:94:d0:9e:9e:
6d:ad:4a:ba:79:65:a8:2e:f5:d0:2f:d0:d5:dd:7b:
ef:b8:f8:92:14:b6:a7:bf:ad:2f:93:a9:4f:af:f3:
78:0e:b6:2f:c5:6d:2e:d6:d4:bf:88:d9:27:86:81:
d3:f9:09:ce:13:70:54:cc:25:dc:da:84:86:59:22:
97:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:69:09:7A:72:C6:48:55:40:CF:F4:A7:D6:FE:EC:7E:7F:E2:22:71
X509v3 Authority Key Identifier:
keyid:08:D1:F1:F8:B4:1D:74:F7:D8:66:B1:E5:AD:FD:18:AF:E2:02:71:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CNHx-LQddPfYZrHlrf0Yr-ICcQg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/29c015-d747-4fc7-932b-df5cb9f0e3a4/1/CNHx-LQddPfYZrHlrf0Yr-ICcQg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/29c015-d747-4fc7-932b-df5cb9f0e3a4/1/CNHx-LQddPfYZrHlrf0Yr-ICcQg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:56:79:df:34:da:6f:d3:66:70:7e:f7:c3:91:f3:e4:aa:d4:
3c:96:49:73:85:41:10:f0:cb:bb:86:d2:9b:eb:0b:95:33:d5:
4b:20:d9:5b:c0:83:0e:26:f1:28:6c:6c:6a:48:e1:ba:0f:98:
2a:30:c8:98:45:27:d7:b6:26:8b:15:0b:48:d4:df:ff:20:96:
15:58:e7:8e:1a:7f:6e:0a:55:db:90:4f:a5:4e:c7:88:35:85:
59:f5:e2:54:91:04:3a:12:6e:b2:ef:09:7b:62:e2:a6:d9:84:
d1:1b:83:66:cc:b5:d1:23:12:cb:ba:fa:6b:cf:3a:b3:08:0f:
69:83:7f:4e:5d:12:25:69:8f:58:a1:c0:a6:33:76:e3:0e:5d:
82:63:a7:ea:25:3d:22:56:ce:c5:78:d5:9b:33:46:40:1c:20:
99:32:3f:4a:79:b6:c9:24:90:3f:cb:b3:42:db:35:d7:3e:f2:
c6:49:ed:1c:1d:92:16:f8:ec:a0:33:2a:dd:ad:c5:10:62:66:
62:7e:08:04:04:b8:6f:c5:fd:23:bf:dc:df:1f:a9:ac:cf:16:
c5:b1:e7:39:a1:a4:a8:a2:61:e1:fa:a5:cd:10:88:b7:af:12:
b8:89:58:37:c7:e8:8a:d7:ad:db:ba:c3:68:f9:6d:ef:c8:e8:
d5:04:70:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 21:45:28 2025 by rpki-client