Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/f649e5-a7cb-4218-93e0-43e31800df0c/1/cKC1rKcx6nHybWPSPCLBI7K7Eg8.mft
File: cKC1rKcx6nHybWPSPCLBI7K7Eg8.mft (raw, json)
Hash identifier: 3HdE1Fj0agyuROCxymn5GlAcKc9bIImaLFQ0XPbVlMs=
Subject key identifier: EE:8C:2B:59:5D:38:FE:58:00:94:1C:42:53:9C:CC:83:93:C9:11:AC
Authority key identifier: 70:A0:B5:AC:A7:31:EA:71:F2:6D:63:D2:3C:22:C1:23:B2:BB:12:0F
Certificate issuer: /CN=70a0b5aca731ea71f26d63d23c22c123b2bb120f
Certificate serial: 01987F0AA41C493D6F2400135E46B5665291
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cKC1rKcx6nHybWPSPCLBI7K7Eg8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/f649e5-a7cb-4218-93e0-43e31800df0c/1/cKC1rKcx6nHybWPSPCLBI7K7Eg8.mft
Manifest number: 0955
Signing time: Wed 06 Aug 2025 11:01:00 +0000
Manifest this update: Wed 06 Aug 2025 11:01:00 +0000
Manifest next update: Thu 07 Aug 2025 11:01:00 +0000
Files and hashes: 1: 5K2zlrIHADlFytOUhc54zx-uCAw.roa (hash: VJ3nEApsPTUcM1XeIb75bGQ+CbjZ/H8pdnWKdP3UYOg=)
2: cKC1rKcx6nHybWPSPCLBI7K7Eg8.crl (hash: +6mH/QHMZ0dFXUqwy85KJH181fka7z2Id5K8YHGeLWQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/f649e5-a7cb-4218-93e0-43e31800df0c/1/cKC1rKcx6nHybWPSPCLBI7K7Eg8.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/f649e5-a7cb-4218-93e0-43e31800df0c/1/cKC1rKcx6nHybWPSPCLBI7K7Eg8.mft
rsync://rpki.ripe.net/repository/DEFAULT/cKC1rKcx6nHybWPSPCLBI7K7Eg8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 11:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7f:0a:a4:1c:49:3d:6f:24:00:13:5e:46:b5:66:52:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70a0b5aca731ea71f26d63d23c22c123b2bb120f
Validity
Not Before: Aug 6 11:01:00 2025 GMT
Not After : Aug 7 11:01:00 2025 GMT
Subject: CN=ee8c2b595d38fe5800941c42539ccc8393c911ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:43:fc:d7:18:a8:b6:d0:bb:cb:46:48:e1:3b:
1d:b3:96:00:8c:a6:58:a6:b9:35:4e:0a:b4:ce:7d:
dc:ca:96:5e:e8:b4:36:48:fe:9c:1c:43:08:75:e3:
96:bd:57:71:ab:04:a7:06:8c:b7:51:14:17:cf:9d:
66:1f:20:63:95:0c:d8:0b:c0:3c:24:d6:f9:b1:ed:
c7:e2:2d:15:41:9a:60:d2:4a:db:cc:04:b3:a2:50:
6b:fb:e3:bd:51:19:2f:97:bf:e5:2e:07:bf:fb:e7:
3f:c4:7e:70:a3:3d:ab:de:97:f2:45:fb:60:27:3c:
3c:fa:17:37:0f:37:32:15:fc:50:fb:b3:2b:72:ae:
71:07:f4:09:02:58:0a:34:05:f1:14:66:6a:a0:60:
bb:25:5c:89:1d:b2:d8:87:ed:55:cc:bc:37:dc:a1:
27:b0:b0:cd:73:ce:9c:be:6b:01:53:a4:66:a1:df:
2a:48:ff:00:89:f6:97:61:85:1b:67:c8:e4:ec:a7:
c3:51:95:a3:1a:0a:d7:27:b6:c8:36:fd:29:6b:a5:
32:c2:a3:59:3b:ec:8b:5e:0c:de:cb:da:58:9a:87:
21:e6:65:28:9d:04:95:d0:a2:3b:d4:ef:47:12:ae:
9b:f2:52:a3:83:b7:ea:72:1d:17:e1:50:16:a4:2e:
2b:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:8C:2B:59:5D:38:FE:58:00:94:1C:42:53:9C:CC:83:93:C9:11:AC
X509v3 Authority Key Identifier:
keyid:70:A0:B5:AC:A7:31:EA:71:F2:6D:63:D2:3C:22:C1:23:B2:BB:12:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cKC1rKcx6nHybWPSPCLBI7K7Eg8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/f649e5-a7cb-4218-93e0-43e31800df0c/1/cKC1rKcx6nHybWPSPCLBI7K7Eg8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/f649e5-a7cb-4218-93e0-43e31800df0c/1/cKC1rKcx6nHybWPSPCLBI7K7Eg8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:56:1d:77:2e:50:5c:c7:81:0d:b1:f2:1f:a6:04:46:2d:fb:
73:4f:57:c1:fb:b3:63:93:fb:4d:0b:29:99:04:2d:b9:6f:78:
7b:78:d5:1b:55:dd:58:22:c6:51:c0:51:c0:8c:1e:c2:d0:88:
07:1f:54:fb:2b:7e:02:d1:3c:14:c0:60:56:30:dc:39:18:cf:
5a:0a:c1:ec:bd:fa:62:59:f5:a9:18:8b:fe:5f:ef:86:a4:d8:
de:3f:0a:c9:32:f4:dc:54:f5:d9:36:8a:e2:c0:eb:fc:57:09:
5d:e0:ae:22:53:df:a1:1e:d6:11:d6:03:23:14:4b:89:b1:10:
12:46:ab:71:65:cf:4f:ed:f6:41:b9:a3:1f:e9:a3:24:00:bb:
b8:d1:02:c0:30:a0:59:53:64:ec:10:fa:7a:ee:83:66:8c:20:
40:d6:4b:f1:be:20:b6:9b:a0:b9:1f:ed:3f:96:46:71:47:37:
5f:8a:08:f9:22:76:97:41:58:28:dc:19:d7:ff:65:7c:bf:1f:
33:01:91:9a:72:bb:ee:61:01:8c:17:b7:69:d1:ba:fe:b0:16:
78:21:41:1c:aa:53:d1:f6:5c:0b:ff:b8:77:88:48:de:51:c1:
b4:48:c6:d8:e8:11:b1:17:90:91:e9:4f:09:0d:45:75:16:ef:
50:2b:47:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 18:48:01 2025 by rpki-client