Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/b9a1a0-6ada-4dde-965b-46ff7ce2c140/1/cHdwf2aXiCaodeuNLrMzvthWlmc.mft
File: cHdwf2aXiCaodeuNLrMzvthWlmc.mft (raw, json)
Hash identifier: 4zklPltp+cNzqKRMavJDm/46UMuT5a9HBmjzIfr67Zs=
Subject key identifier: 32:05:8F:47:05:7B:64:37:1A:46:A8:0A:B8:8D:26:07:6B:B1:D8:9D
Authority key identifier: 70:77:70:7F:66:97:88:26:A8:75:EB:8D:2E:B3:33:BE:D8:56:96:67
Certificate issuer: /CN=7077707f66978826a875eb8d2eb333bed8569667
Certificate serial: 0198D6616FBBE9DAA53AA44C0758C33D5E9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cHdwf2aXiCaodeuNLrMzvthWlmc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/b9a1a0-6ada-4dde-965b-46ff7ce2c140/1/cHdwf2aXiCaodeuNLrMzvthWlmc.mft
Manifest number: 0830
Signing time: Sat 23 Aug 2025 10:02:46 +0000
Manifest this update: Sat 23 Aug 2025 10:02:46 +0000
Manifest next update: Sun 24 Aug 2025 10:02:46 +0000
Files and hashes: 1: ZBqGiL5Lwt5_4rzPo7SO0cTda9c.roa (hash: KELG75sz8Tw2WawKyeiPVA4v+ezxNcK7f4e9XzFuUUw=)
2: cHdwf2aXiCaodeuNLrMzvthWlmc.crl (hash: UeVLD+zGif25Pc9jhVw4HAVAOdLoGERpyVIMfMbNJHI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/b9a1a0-6ada-4dde-965b-46ff7ce2c140/1/cHdwf2aXiCaodeuNLrMzvthWlmc.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/b9a1a0-6ada-4dde-965b-46ff7ce2c140/1/cHdwf2aXiCaodeuNLrMzvthWlmc.mft
rsync://rpki.ripe.net/repository/DEFAULT/cHdwf2aXiCaodeuNLrMzvthWlmc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:02:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:61:6f:bb:e9:da:a5:3a:a4:4c:07:58:c3:3d:5e:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7077707f66978826a875eb8d2eb333bed8569667
Validity
Not Before: Aug 23 10:02:46 2025 GMT
Not After : Aug 24 10:02:46 2025 GMT
Subject: CN=32058f47057b64371a46a80ab88d26076bb1d89d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:68:02:41:dc:9c:a7:03:ed:95:d9:00:88:f5:
24:05:01:e1:43:e2:80:8a:fd:69:56:20:ec:26:b3:
2d:93:0b:29:f4:dc:55:b7:c0:11:b5:dc:a1:65:5f:
1d:f1:23:90:0a:5b:7d:7e:d2:72:2b:b7:72:28:79:
14:d5:dd:33:a8:81:67:f5:0b:2f:31:68:ca:2d:46:
a7:15:ea:de:6e:5b:c5:06:54:3b:ce:f0:81:93:6b:
14:aa:9c:87:a6:07:6f:ca:bb:e6:3f:61:7d:50:08:
a3:7d:df:51:4d:d5:70:60:c4:cf:80:d7:93:62:76:
24:83:95:d7:2c:ab:5d:a7:a2:bb:62:20:f1:e4:2c:
55:d5:36:6d:ea:66:8a:76:13:da:d3:e8:6c:b3:37:
52:f2:95:69:19:4a:77:fa:95:a5:29:fd:81:6f:25:
82:04:9b:f1:35:5f:f7:bb:26:2a:55:e5:dc:ac:90:
fe:ce:d5:c4:63:34:8a:af:51:94:51:2e:6d:64:66:
2c:3f:b5:07:d6:80:5f:60:cf:80:be:87:99:c0:3f:
1a:03:ec:97:84:93:96:81:f9:ac:a4:4e:96:2e:d8:
fe:e0:f5:da:62:0f:16:07:f6:74:7f:53:d5:c4:af:
77:9a:c3:e1:23:af:40:aa:ff:cc:92:59:a4:7c:ba:
09:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:05:8F:47:05:7B:64:37:1A:46:A8:0A:B8:8D:26:07:6B:B1:D8:9D
X509v3 Authority Key Identifier:
keyid:70:77:70:7F:66:97:88:26:A8:75:EB:8D:2E:B3:33:BE:D8:56:96:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cHdwf2aXiCaodeuNLrMzvthWlmc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/b9a1a0-6ada-4dde-965b-46ff7ce2c140/1/cHdwf2aXiCaodeuNLrMzvthWlmc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/b9a1a0-6ada-4dde-965b-46ff7ce2c140/1/cHdwf2aXiCaodeuNLrMzvthWlmc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:c9:97:f3:29:94:ac:1f:37:54:91:cb:38:03:c5:9a:14:c8:
c4:7d:2c:86:4c:16:5f:91:f0:e2:5d:99:54:ea:b9:b3:07:16:
13:6a:d7:55:43:09:53:99:32:24:15:7c:35:38:14:61:43:d8:
d9:67:9d:c1:3c:61:c4:0b:35:e8:46:77:00:ef:f3:4e:5b:47:
e0:62:27:d6:a0:ae:39:8f:57:49:7e:7d:31:f5:ef:e2:6c:76:
b2:ba:6e:e6:2b:ce:57:6e:f2:83:08:cc:71:02:1a:f9:0b:b2:
28:4e:1d:ba:dd:f0:77:97:f4:95:0e:a2:e9:79:12:80:2b:da:
79:ae:6c:a2:f6:4b:3d:2d:d5:4b:e2:fd:a6:4e:23:81:1d:2e:
73:30:23:c7:60:80:a7:da:b6:31:c7:95:7d:e7:dd:3f:50:58:
a7:7c:4f:df:16:e9:8d:d2:34:2a:31:c5:e5:2f:1e:36:24:02:
69:09:c0:21:c0:3f:a7:2e:d7:0a:51:97:e4:43:af:f2:72:39:
01:59:bd:68:82:84:81:5d:b3:ea:ec:3c:f8:90:25:50:f4:07:
54:b0:cc:6d:61:7a:a0:ba:75:62:0c:6a:d4:87:56:24:21:6c:
8e:49:1d:3a:8e:aa:b6:0f:ef:68:c0:21:99:19:ab:80:82:11:
34:7d:97:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:40:45 2025 by rpki-client