Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/140105-e462-48d2-a58f-a57035792e57/1/cPXZ7u-jBa7K7jHm_LTiIyGygEo.mft
File: cPXZ7u-jBa7K7jHm_LTiIyGygEo.mft (raw, json)
Hash identifier: PUwY8Kg/0CQyfkYVjL0XQcY+c3G1T8awzqgu6EXnbO0=
Subject key identifier: 65:14:12:DC:52:E8:E3:53:07:56:6E:12:9E:D9:3E:3C:8D:32:E4:F3
Authority key identifier: 70:F5:D9:EE:EF:A3:05:AE:CA:EE:31:E6:FC:B4:E2:23:21:B2:80:4A
Certificate issuer: /CN=70f5d9eeefa305aecaee31e6fcb4e22321b2804a
Certificate serial: 019873E204B42B30EF65CA22E1C756C98485
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cPXZ7u-jBa7K7jHm_LTiIyGygEo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/140105-e462-48d2-a58f-a57035792e57/1/cPXZ7u-jBa7K7jHm_LTiIyGygEo.mft
Manifest number: 1617
Signing time: Mon 04 Aug 2025 07:00:48 +0000
Manifest this update: Mon 04 Aug 2025 07:00:48 +0000
Manifest next update: Tue 05 Aug 2025 07:00:48 +0000
Files and hashes: 1: 16PMvyBjwLMgKpIOkxrHYliD-08.roa (hash: Y3LQq9IlsGjKrSV01GWpHO25wmy0HId5ENMWGwyBnEU=)
2: cPXZ7u-jBa7K7jHm_LTiIyGygEo.crl (hash: GAix3CJ0FwKy0pvr9uxwyJea++YCFTa7A6ZklaLVhHY=)
3: jgcslWHmygjkRIS6MtfzGhZ40MU.roa (hash: sDmrr8zpKt5WpBGAECM7NZQll745IxQeWlqllvJtGkM=)
4: nikcVRLPEkpjmj22Ziw5gbk7U3I.roa (hash: MneHYx5l45SiPBky73Uw5AM8Oy5u1LgkSXDWT7ZAv/c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/140105-e462-48d2-a58f-a57035792e57/1/cPXZ7u-jBa7K7jHm_LTiIyGygEo.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/140105-e462-48d2-a58f-a57035792e57/1/cPXZ7u-jBa7K7jHm_LTiIyGygEo.mft
rsync://rpki.ripe.net/repository/DEFAULT/cPXZ7u-jBa7K7jHm_LTiIyGygEo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e2:04:b4:2b:30:ef:65:ca:22:e1:c7:56:c9:84:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70f5d9eeefa305aecaee31e6fcb4e22321b2804a
Validity
Not Before: Aug 4 07:00:48 2025 GMT
Not After : Aug 5 07:00:48 2025 GMT
Subject: CN=651412dc52e8e35307566e129ed93e3c8d32e4f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:5f:1a:f6:b5:70:8d:fb:d3:5e:de:6d:2e:fd:
cd:02:df:05:94:a2:2c:20:c6:1a:50:c7:9f:46:42:
b4:b9:13:38:20:e2:13:f7:2a:aa:c7:cc:f9:16:f0:
b9:08:f7:15:35:04:97:aa:4c:3a:df:2e:db:61:ee:
05:a2:27:71:65:17:90:2c:0d:09:81:74:5d:1c:38:
d5:2d:e3:27:9e:e1:dd:c3:2d:36:0b:4c:13:14:ae:
f4:5c:cb:0d:3c:33:ea:6d:9c:c3:fa:9e:96:25:1d:
71:8d:21:2e:53:a5:f0:9b:2b:db:98:e9:7c:c6:44:
f9:69:86:bc:0f:0a:66:6b:ee:5c:8e:cd:3a:9c:fa:
f6:62:af:62:9a:df:6e:0b:b1:ca:83:b7:1f:d0:c1:
16:87:9f:0e:c6:f9:da:d2:08:5d:4c:f1:a8:4a:11:
c4:ff:f6:94:41:14:37:3a:a9:61:a4:c0:63:1a:57:
a5:46:84:3d:91:14:59:e1:b3:d4:78:38:3b:2f:b0:
cb:24:f9:56:f3:6c:47:fd:bf:b5:d6:bf:1c:42:51:
cb:2d:32:9e:83:29:ea:46:67:00:28:44:42:79:3c:
1d:15:3e:b2:4a:0d:79:07:d1:a4:41:f0:53:fa:9b:
4e:73:8b:f9:fe:8c:da:bc:e6:40:07:94:d3:05:68:
dc:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:14:12:DC:52:E8:E3:53:07:56:6E:12:9E:D9:3E:3C:8D:32:E4:F3
X509v3 Authority Key Identifier:
keyid:70:F5:D9:EE:EF:A3:05:AE:CA:EE:31:E6:FC:B4:E2:23:21:B2:80:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cPXZ7u-jBa7K7jHm_LTiIyGygEo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/140105-e462-48d2-a58f-a57035792e57/1/cPXZ7u-jBa7K7jHm_LTiIyGygEo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/140105-e462-48d2-a58f-a57035792e57/1/cPXZ7u-jBa7K7jHm_LTiIyGygEo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:3c:72:da:f6:71:25:80:11:28:79:33:97:3c:b1:23:02:8b:
54:bf:13:1a:45:8d:04:a4:8a:18:7b:86:7b:1e:d1:df:7f:8e:
6d:00:43:20:19:b3:40:20:19:8c:49:af:23:c4:ad:33:97:2e:
74:e8:8f:cb:13:88:7d:87:6d:ad:4c:8c:51:c0:c9:c5:ab:a3:
6d:e4:04:52:1b:00:ce:ed:4c:7c:dd:0f:92:0f:99:d1:71:3a:
11:bf:6e:f3:15:c4:f2:21:60:3d:28:d8:67:69:e9:bb:eb:6b:
d9:46:33:be:bd:4c:0b:c9:25:90:6a:13:8e:f6:00:f2:34:95:
f5:56:a2:d7:af:67:4e:17:0b:66:32:35:86:82:3a:78:68:47:
4e:6f:49:21:03:c9:c5:cd:32:6a:36:a8:ff:c9:72:94:ef:7f:
17:f1:22:50:45:e5:34:4d:64:22:a7:a8:ba:01:2d:06:12:9d:
1b:3b:12:a8:cb:09:54:97:3a:85:6a:b8:f1:2b:8c:43:55:57:
c9:1f:05:39:de:7e:77:c7:4d:df:86:2e:1e:f8:ee:c1:30:d4:
34:7f:bb:f2:29:e4:cb:a0:2b:a7:15:0e:88:27:00:3a:76:3c:
6b:7f:f7:5e:ea:92:da:54:eb:c2:8d:eb:bf:57:59:d9:1a:1e:
5c:2b:45:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:21:06 2025 by rpki-client