Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/22b0fe-9dc8-4bef-a299-30097a246a9c/1/cIYS6HA6ZgiJyg9FfPG02KDVO00.mft
File: cIYS6HA6ZgiJyg9FfPG02KDVO00.mft (raw, json)
Hash identifier: JWV7FjX59IjqJYF+fYEsOdklRIvkXak468enxdA69mE=
Subject key identifier: 8E:86:BC:47:2D:EF:19:98:B9:70:2E:08:1C:11:EA:2D:72:9D:3B:B4
Authority key identifier: 70:86:12:E8:70:3A:66:08:89:CA:0F:45:7C:F1:B4:D8:A0:D5:3B:4D
Certificate issuer: /CN=708612e8703a660889ca0f457cf1b4d8a0d53b4d
Certificate serial: 0198733D3BABC17FB56827852DD170CB8055
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cIYS6HA6ZgiJyg9FfPG02KDVO00.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/22b0fe-9dc8-4bef-a299-30097a246a9c/1/cIYS6HA6ZgiJyg9FfPG02KDVO00.mft
Manifest number: 0CBB
Signing time: Mon 04 Aug 2025 04:00:49 +0000
Manifest this update: Mon 04 Aug 2025 04:00:49 +0000
Manifest next update: Tue 05 Aug 2025 04:00:49 +0000
Files and hashes: 1: DmXSHAWyzkOoxqiFMJESxxoNQRE.roa (hash: JS4gdknzcsCYuR0k7tQp82qH1Pua7AKi87dIAAaokTc=)
2: G1B5f1Zo9mXXkjO8qvbHOoggkQk.roa (hash: aEmK04Ia5XU5AnX1t6+4/7AVUK1sMbT5CaQWCjlA0q4=)
3: cIYS6HA6ZgiJyg9FfPG02KDVO00.crl (hash: TirLSnR0diyFhJEJW4g5llUH33LXSe32/wnVhQj7VEg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/22b0fe-9dc8-4bef-a299-30097a246a9c/1/cIYS6HA6ZgiJyg9FfPG02KDVO00.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/22b0fe-9dc8-4bef-a299-30097a246a9c/1/cIYS6HA6ZgiJyg9FfPG02KDVO00.mft
rsync://rpki.ripe.net/repository/DEFAULT/cIYS6HA6ZgiJyg9FfPG02KDVO00.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:3d:3b:ab:c1:7f:b5:68:27:85:2d:d1:70:cb:80:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=708612e8703a660889ca0f457cf1b4d8a0d53b4d
Validity
Not Before: Aug 4 04:00:49 2025 GMT
Not After : Aug 5 04:00:49 2025 GMT
Subject: CN=8e86bc472def1998b9702e081c11ea2d729d3bb4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:52:53:b5:82:c3:03:1f:ab:4f:18:45:ce:dc:
c8:f6:de:28:14:fd:62:ad:58:81:07:00:49:82:62:
91:d0:7b:f2:a2:df:59:f6:40:0b:4a:be:03:3a:97:
82:41:35:7c:0f:bd:06:58:6f:c0:97:b6:41:8e:d4:
25:30:22:02:d1:d1:ac:23:f5:ce:c7:d2:ea:af:a6:
8d:ac:e6:4d:57:d4:0b:1e:07:c0:2f:5c:02:96:27:
1a:ab:8c:b5:57:67:cf:e3:a4:99:69:c0:bc:19:ce:
96:10:eb:5b:0d:da:9a:55:a6:fd:b0:de:0a:82:c1:
33:b3:a8:3c:f1:76:d3:82:3d:b2:76:6d:6c:cf:0f:
d3:97:48:f3:3b:a6:99:e4:0c:7a:f6:3f:d4:99:68:
a1:40:b8:08:c1:53:9c:a4:27:42:38:03:1e:54:fd:
b9:54:51:88:ac:98:9d:31:d8:84:b6:82:5e:d9:9a:
9a:1f:c5:1c:62:79:a9:04:2b:a7:ac:f2:bb:7a:10:
24:22:9b:09:68:47:e1:6a:1d:0d:14:52:e5:cd:15:
2b:b3:dd:5e:5d:5e:76:dc:21:c9:5a:b2:4e:0e:70:
4f:2d:79:29:4f:71:f5:90:a4:f2:bd:cd:4c:5e:92:
4a:70:22:96:aa:f3:02:28:b9:9d:93:87:e2:ac:19:
0a:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:86:BC:47:2D:EF:19:98:B9:70:2E:08:1C:11:EA:2D:72:9D:3B:B4
X509v3 Authority Key Identifier:
keyid:70:86:12:E8:70:3A:66:08:89:CA:0F:45:7C:F1:B4:D8:A0:D5:3B:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cIYS6HA6ZgiJyg9FfPG02KDVO00.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/22b0fe-9dc8-4bef-a299-30097a246a9c/1/cIYS6HA6ZgiJyg9FfPG02KDVO00.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/22b0fe-9dc8-4bef-a299-30097a246a9c/1/cIYS6HA6ZgiJyg9FfPG02KDVO00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:68:8d:73:91:89:29:4f:26:37:ca:57:31:7b:a2:c0:74:c5:
1a:44:c9:1a:53:0b:d7:53:d4:80:25:cd:51:cf:fb:c5:99:44:
37:ce:2d:c7:34:23:cc:38:d0:ea:06:f8:17:bc:eb:4a:ae:f9:
16:f4:b5:58:0e:77:7f:2b:f2:34:18:77:aa:9c:e8:8d:5f:70:
cc:cb:86:d0:2d:c6:cf:57:2f:d7:ae:69:19:63:16:92:8a:34:
6d:60:e4:98:aa:e6:9d:1b:dd:a7:1a:20:04:4a:44:1c:4d:9b:
af:60:b8:52:bc:e6:89:3c:e5:70:ce:12:b5:3f:85:54:13:aa:
68:50:d9:29:13:c2:22:15:b9:24:c1:be:9c:03:91:5a:fd:d5:
e5:26:5b:61:c4:1f:2a:cb:63:dc:ff:13:42:90:d8:6d:3e:47:
b6:2b:ee:54:32:1c:3d:9b:34:15:32:a6:4b:ff:e6:31:bc:97:
8f:b3:0a:78:ea:f6:2e:d6:4f:c0:8a:ea:d4:9b:5a:3c:ca:5a:
ea:01:aa:30:c4:c1:e9:0f:72:24:f4:76:f2:a4:66:4f:b4:8c:
c5:20:09:40:dd:0a:be:85:c9:9a:55:85:7d:3a:64:be:3d:d5:
60:05:f4:88:b2:04:28:1b:2d:d0:51:b9:3d:b8:b1:c4:88:0d:
a7:d8:9c:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:10:54 2025 by rpki-client