Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/9d544a-229d-476a-b02f-1942e089f0b0/1/cRdcCDUnGBi7041t7X-Vq7xVdE8.mft
File: cRdcCDUnGBi7041t7X-Vq7xVdE8.mft (raw, json)
Hash identifier: C/CuqU9JG6Kb1u//yD6B0JafrjCzZHZHUQ4Iq5byo4U=
Subject key identifier: 42:1D:14:8F:05:33:8B:F7:B1:20:1F:A2:BC:82:38:74:56:3C:8F:69
Authority key identifier: 71:17:5C:08:35:27:18:18:BB:D3:8D:6D:ED:7F:95:AB:BC:55:74:4F
Certificate issuer: /CN=71175c0835271818bbd38d6ded7f95abbc55744f
Certificate serial: 0198D6CD7E290DB547FD319172284015531D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cRdcCDUnGBi7041t7X-Vq7xVdE8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/9d544a-229d-476a-b02f-1942e089f0b0/1/cRdcCDUnGBi7041t7X-Vq7xVdE8.mft
Manifest number: 063B
Signing time: Sat 23 Aug 2025 12:00:48 +0000
Manifest this update: Sat 23 Aug 2025 12:00:48 +0000
Manifest next update: Sun 24 Aug 2025 12:00:48 +0000
Files and hashes: 1: ElWcrbTwhZb7R0idVXjP0jp7adc.roa (hash: jXElL6yYNfab48AMv19NwH9bI4ZhaqIjJFV1RglaLYg=)
2: cRdcCDUnGBi7041t7X-Vq7xVdE8.crl (hash: KoV3b6EMmjhb8bU2arkJnsOAgQuWjN5POfa6QJpGTjA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/9d544a-229d-476a-b02f-1942e089f0b0/1/cRdcCDUnGBi7041t7X-Vq7xVdE8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/9d544a-229d-476a-b02f-1942e089f0b0/1/cRdcCDUnGBi7041t7X-Vq7xVdE8.mft
rsync://rpki.ripe.net/repository/DEFAULT/cRdcCDUnGBi7041t7X-Vq7xVdE8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:cd:7e:29:0d:b5:47:fd:31:91:72:28:40:15:53:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71175c0835271818bbd38d6ded7f95abbc55744f
Validity
Not Before: Aug 23 12:00:48 2025 GMT
Not After : Aug 24 12:00:48 2025 GMT
Subject: CN=421d148f05338bf7b1201fa2bc823874563c8f69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:02:d8:ea:8a:a0:bd:f8:4e:10:f7:ae:85:2a:
43:cd:c4:37:9f:d7:bb:10:6d:00:c9:4d:00:a5:78:
8f:55:a4:f8:ac:ae:45:b7:88:a5:ea:ba:66:1f:2e:
40:43:60:47:d9:cd:55:b0:25:a7:be:86:84:19:bd:
1c:b6:fe:01:5e:bb:65:d7:78:77:f5:03:cd:59:f2:
ce:f1:1f:49:ba:7e:63:79:ac:45:d2:af:28:58:a9:
7c:d6:3d:fc:f4:41:a1:c9:f2:5c:ab:49:2f:e0:06:
61:d3:b2:20:e1:a5:86:d7:c7:14:a0:f3:09:df:9f:
93:4b:9f:59:c0:15:49:8e:93:b5:75:ce:d7:be:6b:
6a:31:a4:ff:3c:be:ae:6a:76:49:3d:62:e0:7c:95:
cd:41:7b:82:77:14:09:bf:e2:be:37:0f:f3:f4:c0:
d1:af:21:37:81:7f:b1:fd:4b:1a:82:e6:6d:bd:cf:
d8:55:88:b7:3c:df:2d:1a:80:e0:85:31:b2:a6:89:
b4:b4:19:45:42:81:95:3e:32:fe:e2:33:db:85:e7:
4f:be:95:cf:83:8b:52:03:04:ec:45:89:46:14:d5:
8a:1a:e6:4e:6c:b0:d8:67:11:88:ea:05:63:7a:91:
52:81:78:d4:de:1d:2b:85:38:7b:ce:07:20:58:82:
3c:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:1D:14:8F:05:33:8B:F7:B1:20:1F:A2:BC:82:38:74:56:3C:8F:69
X509v3 Authority Key Identifier:
keyid:71:17:5C:08:35:27:18:18:BB:D3:8D:6D:ED:7F:95:AB:BC:55:74:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cRdcCDUnGBi7041t7X-Vq7xVdE8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/9d544a-229d-476a-b02f-1942e089f0b0/1/cRdcCDUnGBi7041t7X-Vq7xVdE8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/9d544a-229d-476a-b02f-1942e089f0b0/1/cRdcCDUnGBi7041t7X-Vq7xVdE8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:ea:85:e0:34:1e:f8:41:db:c5:3b:52:5c:27:cf:2d:cf:77:
02:7c:57:4e:f6:b6:e3:17:d7:af:1f:01:ba:72:34:d5:83:d4:
9a:6b:c0:10:9c:86:a1:71:69:e2:04:ed:48:43:57:10:f6:59:
18:39:37:69:30:93:20:76:e3:56:ff:2f:a0:9e:d1:87:5a:5e:
d3:94:63:5c:c4:dd:3f:5f:4d:fa:37:92:9e:79:fc:22:1d:02:
73:82:b2:be:3e:3e:1c:f2:ed:a3:e7:47:8d:99:5b:35:6c:ca:
2a:c2:fd:e5:18:9b:7f:74:a4:dd:e1:88:52:1a:59:59:9a:60:
04:d4:17:46:39:25:0f:2c:ad:a5:07:1c:d6:19:50:3f:15:dd:
12:01:0d:c7:8e:64:88:e6:b7:1c:09:9e:35:48:d4:76:ac:cb:
b2:0b:03:7e:11:1c:8c:0a:b6:e5:ae:05:ee:95:64:52:9c:14:
6f:b4:21:81:8d:f6:43:96:e4:ea:af:1b:38:0e:5f:0e:9c:aa:
6d:b9:3c:23:08:53:61:f5:98:23:17:d9:c6:42:f1:14:ec:dc:
48:03:ec:7b:bd:27:84:6f:e3:58:7f:3b:88:ea:40:ce:4e:e9:
53:2a:6b:49:51:78:43:a2:5f:ca:42:d6:8c:31:95:53:d5:1c:
6e:e5:ea:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:24:43 2025 by rpki-client