Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/70d450-80e4-44f9-99f3-21bc63f165f8/1/cWdSuRdHlX3M_w5x2mdPMp2DLeM.mft
File: cWdSuRdHlX3M_w5x2mdPMp2DLeM.mft (raw, json)
Hash identifier: rD4Q3QqwjgyidE3QpvJT+asvTs2iFAqF5TJl5rOUxlU=
Subject key identifier: 30:E5:D8:32:84:9B:81:01:BD:96:A6:85:D5:B0:EC:0B:6F:64:2C:55
Authority key identifier: 71:67:52:B9:17:47:95:7D:CC:FF:0E:71:DA:67:4F:32:9D:83:2D:E3
Certificate issuer: /CN=716752b91747957dccff0e71da674f329d832de3
Certificate serial: 019873E23BC3079E9241A6A2835501E8EA0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cWdSuRdHlX3M_w5x2mdPMp2DLeM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/70d450-80e4-44f9-99f3-21bc63f165f8/1/cWdSuRdHlX3M_w5x2mdPMp2DLeM.mft
Manifest number: 121E
Signing time: Mon 04 Aug 2025 07:01:02 +0000
Manifest this update: Mon 04 Aug 2025 07:01:02 +0000
Manifest next update: Tue 05 Aug 2025 07:01:02 +0000
Files and hashes: 1: PNXE3f7nm-ojlPdvV_1yYpzHd1o.roa (hash: TFO2XkeOQG2ZuVhhUVPTDBMBQ7rIutsnw7Dyad/B8zE=)
2: cWdSuRdHlX3M_w5x2mdPMp2DLeM.crl (hash: D/iKoUgBFXAjcLvjUoBPS6NgM2wDlAO5KwNGoKKFIOI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/70d450-80e4-44f9-99f3-21bc63f165f8/1/cWdSuRdHlX3M_w5x2mdPMp2DLeM.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/70d450-80e4-44f9-99f3-21bc63f165f8/1/cWdSuRdHlX3M_w5x2mdPMp2DLeM.mft
rsync://rpki.ripe.net/repository/DEFAULT/cWdSuRdHlX3M_w5x2mdPMp2DLeM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e2:3b:c3:07:9e:92:41:a6:a2:83:55:01:e8:ea:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=716752b91747957dccff0e71da674f329d832de3
Validity
Not Before: Aug 4 07:01:02 2025 GMT
Not After : Aug 5 07:01:02 2025 GMT
Subject: CN=30e5d832849b8101bd96a685d5b0ec0b6f642c55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:28:f7:b7:71:3d:bd:64:86:8a:92:d9:7a:93:
ef:03:6e:d0:b9:c6:f8:6b:4c:af:ec:51:d2:d6:2f:
9b:c3:d0:2b:86:76:98:b2:32:38:8b:61:f1:9a:84:
04:70:eb:74:b6:ca:04:2e:88:33:e6:53:91:18:ae:
b4:f9:97:cf:64:90:8c:b9:d6:d9:6e:48:47:26:ab:
b9:08:1a:0d:45:74:08:9f:96:2d:b1:c6:52:6e:a0:
d5:78:3a:61:05:a5:bc:8d:9e:33:f5:d2:66:62:46:
83:61:34:32:28:a8:15:b6:86:01:2d:dc:ab:23:6b:
81:4b:1b:a8:12:cc:11:69:a2:6f:a2:bd:26:63:53:
08:2c:e6:8f:b4:0f:76:8d:dd:17:81:26:84:74:bb:
00:d3:9e:77:59:5e:90:46:e2:b0:ef:f4:cf:37:84:
85:b0:2a:80:6a:4f:64:4b:00:b9:66:ba:2f:bd:34:
9f:87:43:80:52:b0:c3:4b:77:3d:2e:45:09:99:32:
89:43:84:1d:0a:0f:ee:1b:07:42:c3:01:73:14:3c:
d7:dc:70:5f:f2:a6:5c:76:a4:04:07:61:69:10:7d:
e7:63:5c:a5:5f:e0:4e:a5:7d:b7:34:2e:6b:27:3e:
f0:b7:cf:82:f2:9c:d9:ed:e0:47:d0:e2:63:18:33:
23:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:E5:D8:32:84:9B:81:01:BD:96:A6:85:D5:B0:EC:0B:6F:64:2C:55
X509v3 Authority Key Identifier:
keyid:71:67:52:B9:17:47:95:7D:CC:FF:0E:71:DA:67:4F:32:9D:83:2D:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cWdSuRdHlX3M_w5x2mdPMp2DLeM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/70d450-80e4-44f9-99f3-21bc63f165f8/1/cWdSuRdHlX3M_w5x2mdPMp2DLeM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/70d450-80e4-44f9-99f3-21bc63f165f8/1/cWdSuRdHlX3M_w5x2mdPMp2DLeM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:00:b6:ba:6d:27:6e:40:12:8c:c6:b2:32:42:ae:3d:7c:14:
b4:24:69:dc:1f:51:fe:57:5d:64:8e:91:32:c2:7c:2f:d4:6c:
54:74:7b:61:4d:b4:e4:ed:21:cd:21:48:a1:0d:52:66:08:bf:
44:fa:26:21:4e:78:40:ba:33:b7:eb:94:35:bc:b1:10:6b:ce:
88:87:bd:99:70:e6:64:53:84:dd:e3:13:1f:94:06:b8:4d:37:
37:c7:37:a1:c0:64:2d:43:5d:ce:ca:74:86:a9:5e:ad:f4:ba:
71:ef:90:be:b8:1e:c8:8b:53:22:56:0c:06:1e:66:ae:26:ad:
46:b0:8b:8d:99:76:c4:e2:98:a2:db:f9:cc:e4:95:10:c0:cd:
27:8d:d1:4a:7b:c5:aa:aa:82:1f:60:d7:27:6f:62:01:79:20:
c7:d9:ab:16:ff:e8:00:c7:42:3f:35:4e:c4:27:be:a2:f9:ed:
10:02:cd:a7:76:e1:5d:52:67:67:f2:05:bf:60:48:c7:52:77:
81:a6:cf:51:02:3e:d5:ad:2c:c8:a6:96:61:ac:c3:a4:73:51:
4f:b7:75:08:96:ee:06:a2:08:24:47:52:7e:7e:36:37:0b:a4:
cd:1e:a5:76:85:49:b7:5d:98:d8:66:6a:7c:1d:63:58:0d:b4:
5a:07:05:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:09:48 2025 by rpki-client