Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/503603-1a5d-4900-9829-48dea1021a69/1/CLDxLxFa1A8sK0qtRU0uQ2EcmgY.mft
File: CLDxLxFa1A8sK0qtRU0uQ2EcmgY.mft (raw, json)
Hash identifier: 79hftoIvdE0r7gcGC4Zh246xSVFd+ambFSw6cfVNcQk=
Subject key identifier: 20:DA:3A:6C:8D:FC:D1:B9:08:D2:3A:80:BF:E3:A5:BA:21:C4:8F:85
Authority key identifier: 08:B0:F1:2F:11:5A:D4:0F:2C:2B:4A:AD:45:4D:2E:43:61:1C:9A:06
Certificate issuer: /CN=08b0f12f115ad40f2c2b4aad454d2e43611c9a06
Certificate serial: 01987C778B94B0A344D1AD03569CA48C9698
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CLDxLxFa1A8sK0qtRU0uQ2EcmgY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/503603-1a5d-4900-9829-48dea1021a69/1/CLDxLxFa1A8sK0qtRU0uQ2EcmgY.mft
Manifest number: 12B5
Signing time: Tue 05 Aug 2025 23:01:05 +0000
Manifest this update: Tue 05 Aug 2025 23:01:05 +0000
Manifest next update: Wed 06 Aug 2025 23:01:05 +0000
Files and hashes: 1: CLDxLxFa1A8sK0qtRU0uQ2EcmgY.crl (hash: BU7d7Xb3q6n50jwr6F6y739iiKxCaOHcbNMcob/nvpM=)
2: tFsxYNJ-pvk9ebf-ewoCu0vCFeI.roa (hash: fEyaOVZRLIFifs+RWkNXOgYvzq9xsl1Jvqnurm5BNu8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/503603-1a5d-4900-9829-48dea1021a69/1/CLDxLxFa1A8sK0qtRU0uQ2EcmgY.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/503603-1a5d-4900-9829-48dea1021a69/1/CLDxLxFa1A8sK0qtRU0uQ2EcmgY.mft
rsync://rpki.ripe.net/repository/DEFAULT/CLDxLxFa1A8sK0qtRU0uQ2EcmgY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 23:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7c:77:8b:94:b0:a3:44:d1:ad:03:56:9c:a4:8c:96:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08b0f12f115ad40f2c2b4aad454d2e43611c9a06
Validity
Not Before: Aug 5 23:01:05 2025 GMT
Not After : Aug 6 23:01:05 2025 GMT
Subject: CN=20da3a6c8dfcd1b908d23a80bfe3a5ba21c48f85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:86:28:8c:ae:f2:5b:47:6f:e0:71:a8:51:78:
29:ac:76:66:77:e0:ba:ca:54:00:aa:f4:18:e2:02:
96:5a:45:52:3b:21:1c:f0:3f:55:d5:29:9d:9f:e7:
eb:5b:27:4e:58:8c:e8:f5:0e:8b:a5:9f:c9:64:6b:
6d:91:11:a7:c9:d6:f1:03:6a:82:e2:74:9c:26:64:
87:0d:d4:c0:9f:fd:23:09:50:43:2d:94:17:8d:e7:
df:9f:fd:21:ea:56:88:f4:c0:f2:7a:b6:0a:19:2f:
85:8d:d9:df:1b:44:55:5a:c9:45:40:1c:db:dc:52:
a3:41:ed:23:82:cf:c3:1a:b4:db:a5:da:1b:d2:97:
85:84:d5:c3:63:a5:7d:13:ef:ba:1b:fe:55:01:5a:
fc:74:2b:c6:1a:d1:82:e8:e4:00:10:00:ad:8f:48:
5c:1e:18:cd:0c:12:ef:12:e0:40:98:0f:12:c3:3f:
12:6f:38:a2:11:76:fe:2c:c7:d1:b1:61:7f:e3:ac:
8d:ef:b3:3b:be:5b:c1:32:9c:f5:5d:cd:db:aa:fc:
f9:ef:1a:ad:95:53:8d:64:ee:00:65:75:d8:ed:91:
b6:b7:8e:86:7f:3b:fb:b9:c9:12:16:c4:46:8b:d1:
70:4b:89:30:c4:a2:ba:94:fa:3c:5e:2d:2e:6a:8c:
2b:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:DA:3A:6C:8D:FC:D1:B9:08:D2:3A:80:BF:E3:A5:BA:21:C4:8F:85
X509v3 Authority Key Identifier:
keyid:08:B0:F1:2F:11:5A:D4:0F:2C:2B:4A:AD:45:4D:2E:43:61:1C:9A:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CLDxLxFa1A8sK0qtRU0uQ2EcmgY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/503603-1a5d-4900-9829-48dea1021a69/1/CLDxLxFa1A8sK0qtRU0uQ2EcmgY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/503603-1a5d-4900-9829-48dea1021a69/1/CLDxLxFa1A8sK0qtRU0uQ2EcmgY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:02:5d:30:c5:73:d3:ab:f9:36:8a:ba:66:56:13:44:59:24:
6a:54:0b:ac:76:a4:65:e1:02:17:0f:8d:76:d4:c2:ab:76:62:
a9:aa:d5:12:90:9f:1c:e5:1d:46:51:80:38:61:2c:b2:b8:10:
d3:35:bd:98:eb:6e:f4:8a:07:d4:a3:9a:2e:a6:10:f9:cd:57:
75:5b:72:ad:52:57:21:8b:8e:15:63:03:06:f8:79:dc:f4:e7:
14:d8:5c:7c:b5:b7:70:e9:f1:73:2a:83:28:12:14:d0:7d:b4:
49:59:09:09:cd:6f:1a:07:90:0d:6b:2c:6c:c4:0d:3b:17:2f:
9c:76:77:b9:ae:ba:25:e4:5e:e4:70:3b:0b:9d:6d:2b:bc:22:
9c:b7:f0:14:94:fd:ec:9a:64:a6:b7:82:50:76:77:95:90:d1:
ff:38:24:f6:e2:f5:51:07:9b:e8:0e:d7:c7:53:6f:28:2a:31:
b7:6b:55:ea:51:1e:88:0a:52:b9:0e:19:dd:4d:cb:39:90:26:
e3:22:ab:2f:49:d0:86:df:ab:32:c7:71:2b:61:02:cd:96:78:
f3:6b:46:a4:ae:a5:75:44:b8:4c:de:1b:4f:32:4c:8e:f8:ec:
24:95:13:e4:27:e5:e4:e0:45:2c:c0:76:91:ea:0a:63:09:f2:
fa:39:6c:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 06:07:41 2025 by rpki-client