Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/42ff05-4ac6-4cec-b5d4-f6c16aca175e/1/CLP7QBlnsG-EG8ah6dSSqadfkmg.mft
File: CLP7QBlnsG-EG8ah6dSSqadfkmg.mft (raw, json)
Hash identifier: qTrFkvAv3fE/CezsKpojjXfnuxIYmIwdmyt/h90BxMM=
Subject key identifier: E3:06:20:E4:F6:03:3C:B8:AA:40:66:68:CA:44:1F:59:70:4B:F6:E4
Authority key identifier: 08:B3:FB:40:19:67:B0:6F:84:1B:C6:A1:E9:D4:92:A9:A7:5F:92:68
Certificate issuer: /CN=08b3fb401967b06f841bc6a1e9d492a9a75f9268
Certificate serial: 0198D6CDA55375710A811344F76E294E03E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CLP7QBlnsG-EG8ah6dSSqadfkmg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/42ff05-4ac6-4cec-b5d4-f6c16aca175e/1/CLP7QBlnsG-EG8ah6dSSqadfkmg.mft
Manifest number: 03D8
Signing time: Sat 23 Aug 2025 12:00:57 +0000
Manifest this update: Sat 23 Aug 2025 12:00:57 +0000
Manifest next update: Sun 24 Aug 2025 12:00:57 +0000
Files and hashes: 1: CLP7QBlnsG-EG8ah6dSSqadfkmg.crl (hash: gd8bS1TW7IuljNeCnDYq5Mkm6OYIS0/VxFL2IXWOiYE=)
2: eHRO21DmqwNpVgTB2vD5a-Ys0dI.roa (hash: aBKp2xE7MsTi71gMh8o9d5bU6XkJQ/dv6sIkU9dHe34=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/42ff05-4ac6-4cec-b5d4-f6c16aca175e/1/CLP7QBlnsG-EG8ah6dSSqadfkmg.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/42ff05-4ac6-4cec-b5d4-f6c16aca175e/1/CLP7QBlnsG-EG8ah6dSSqadfkmg.mft
rsync://rpki.ripe.net/repository/DEFAULT/CLP7QBlnsG-EG8ah6dSSqadfkmg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:cd:a5:53:75:71:0a:81:13:44:f7:6e:29:4e:03:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08b3fb401967b06f841bc6a1e9d492a9a75f9268
Validity
Not Before: Aug 23 12:00:57 2025 GMT
Not After : Aug 24 12:00:57 2025 GMT
Subject: CN=e30620e4f6033cb8aa406668ca441f59704bf6e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:35:e7:43:38:e6:ca:6e:0a:04:c5:06:44:3e:
41:b4:a2:d7:ef:13:9d:44:ba:64:7a:1d:2c:c5:05:
28:8e:d1:30:3d:45:cd:7d:7c:e0:9d:ed:35:2f:bc:
a3:fb:05:e1:16:02:bd:e2:57:27:ad:8e:e2:ee:e2:
dd:c4:aa:48:9a:cf:0e:a5:ca:7b:5c:2b:71:84:3a:
39:c8:22:85:81:9f:4f:1f:19:c6:64:a6:94:c4:d2:
ea:64:b8:0a:fc:52:d5:68:5d:5e:9d:12:f8:e8:c7:
ff:ff:d5:6d:5e:ba:bd:7c:d4:16:a9:0b:99:90:94:
23:48:76:a8:4b:0b:ea:f2:e0:78:54:57:bf:ac:6b:
c0:59:00:96:9e:a1:b0:ae:55:c2:ca:8f:72:f9:83:
f4:14:bd:d7:68:d4:fa:fd:e4:22:4a:98:7b:dd:94:
b3:49:bc:b9:f4:3b:e3:ff:2c:d5:f2:cf:18:f4:be:
ee:31:55:3f:5a:b1:21:b1:89:e4:49:16:80:7f:c0:
de:a0:18:2a:4a:63:89:3c:b6:69:7b:d5:c9:1a:d5:
9a:dc:3f:f8:ae:1c:6b:fc:8a:f7:ea:83:4d:f6:c5:
19:80:cc:ca:2a:96:9d:66:af:c6:ae:60:48:a9:27:
0e:72:fb:6e:78:28:5f:2a:3b:89:f6:c2:92:86:73:
ac:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:06:20:E4:F6:03:3C:B8:AA:40:66:68:CA:44:1F:59:70:4B:F6:E4
X509v3 Authority Key Identifier:
keyid:08:B3:FB:40:19:67:B0:6F:84:1B:C6:A1:E9:D4:92:A9:A7:5F:92:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CLP7QBlnsG-EG8ah6dSSqadfkmg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/42ff05-4ac6-4cec-b5d4-f6c16aca175e/1/CLP7QBlnsG-EG8ah6dSSqadfkmg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/42ff05-4ac6-4cec-b5d4-f6c16aca175e/1/CLP7QBlnsG-EG8ah6dSSqadfkmg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:30:aa:6d:a7:f0:dc:89:4e:18:b0:36:b4:ac:9d:01:51:d6:
31:06:4f:7c:25:8c:00:31:e3:b2:11:94:b2:a3:be:5c:f8:97:
fa:40:7a:3d:8e:0f:7f:15:5b:d7:8f:77:9e:33:92:d6:a5:a5:
54:90:28:61:26:5c:51:d5:25:df:ca:93:41:be:67:e6:58:b5:
7a:08:fa:d2:23:65:9f:b9:35:07:87:f4:79:45:69:da:b2:c7:
ee:1a:9f:e2:98:10:92:2d:e0:bb:05:fc:e5:d6:d3:92:de:19:
6d:2d:c4:b6:9a:df:dd:8b:df:38:0f:71:da:6d:6b:11:86:b8:
62:b6:d7:b0:85:23:04:87:62:ee:11:2c:fc:70:25:74:61:cc:
7d:56:31:85:d1:f1:c8:5a:0c:a8:b2:b1:0c:59:37:82:40:88:
cf:c7:93:34:8e:3d:d6:98:61:9c:dc:62:cc:5c:2c:6b:9a:47:
57:16:d4:e1:92:d2:06:98:75:e9:d7:97:bc:fd:b3:8a:bc:0b:
3f:c8:b6:75:b0:0c:06:08:29:6c:fe:0c:2e:be:3b:ec:47:2d:
f9:54:29:84:e3:af:1a:c7:70:30:9b:46:03:cf:15:96:9c:f8:
06:d5:84:cb:92:d4:d9:2a:10:71:9b:3f:cf:d4:6f:85:82:5d:
e1:cb:9a:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:47:34 2025 by rpki-client