Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/990513-f49c-45fb-a7bb-5f045688bb99/1/cCD5EV0ZQDH8XISfFau_2A4IYis.mft
File: cCD5EV0ZQDH8XISfFau_2A4IYis.mft (raw, json)
Hash identifier: uXvpx7b3cRpylf7sQCEpvj9LTU9jkUxP45SscdkwSog=
Subject key identifier: AC:AD:78:50:4E:53:14:AD:8C:29:5F:51:FD:39:0E:A5:FC:26:0D:8F
Authority key identifier: 70:20:F9:11:5D:19:40:31:FC:5C:84:9F:15:AB:BF:D8:0E:08:62:2B
Certificate issuer: /CN=7020f9115d194031fc5c849f15abbfd80e08622b
Certificate serial: 01987D1C2F40ADB7CF7877229ECEFE10FDB7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cCD5EV0ZQDH8XISfFau_2A4IYis.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/990513-f49c-45fb-a7bb-5f045688bb99/1/cCD5EV0ZQDH8XISfFau_2A4IYis.mft
Manifest number: 0FA6
Signing time: Wed 06 Aug 2025 02:00:55 +0000
Manifest this update: Wed 06 Aug 2025 02:00:55 +0000
Manifest next update: Thu 07 Aug 2025 02:00:55 +0000
Files and hashes: 1: cCD5EV0ZQDH8XISfFau_2A4IYis.crl (hash: 3v8yjreLBLbnLoLoFH7rMbRoKF8bPjEIuM414icwPqE=)
2: qVT8jOoIg3NQ7grXFr4I7SQu8PY.roa (hash: OKj4yzwEJbloQV+D0rgvNOZHy8KXLKDzSxRsqanfakg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/990513-f49c-45fb-a7bb-5f045688bb99/1/cCD5EV0ZQDH8XISfFau_2A4IYis.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/990513-f49c-45fb-a7bb-5f045688bb99/1/cCD5EV0ZQDH8XISfFau_2A4IYis.mft
rsync://rpki.ripe.net/repository/DEFAULT/cCD5EV0ZQDH8XISfFau_2A4IYis.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 23:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7d:1c:2f:40:ad:b7:cf:78:77:22:9e:ce:fe:10:fd:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7020f9115d194031fc5c849f15abbfd80e08622b
Validity
Not Before: Aug 6 02:00:55 2025 GMT
Not After : Aug 7 02:00:55 2025 GMT
Subject: CN=acad78504e5314ad8c295f51fd390ea5fc260d8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:28:0d:f7:af:52:fc:e7:d9:d9:fb:7a:23:1f:
c3:c4:37:43:94:2e:13:c1:75:e1:45:98:9a:5b:e4:
ff:86:30:47:2f:26:84:b2:70:a6:4b:8d:f4:d6:19:
06:0d:5d:97:b8:90:f8:af:8d:d1:ea:11:4b:cb:39:
14:ee:98:9b:66:0d:54:ad:8d:97:0f:8f:0e:bc:a4:
f0:70:00:b1:41:95:63:18:2d:f8:d4:c7:49:66:04:
c8:5f:27:81:8c:a8:60:31:ee:01:ec:c7:58:81:dd:
38:e4:5c:4b:d3:4c:5f:a6:90:f5:20:93:76:dd:a6:
14:3e:de:2d:cd:c3:eb:d7:a3:b4:e7:0a:8d:77:ba:
df:65:60:c0:fb:e7:dc:8b:29:18:75:07:52:5f:01:
2a:77:10:c3:57:25:96:10:b1:f3:d8:55:a6:55:8d:
2f:a4:92:35:c3:36:20:01:d6:c6:77:aa:0a:99:88:
f6:ae:a7:c0:61:a1:a8:d6:c1:1a:99:65:92:5b:93:
42:a3:48:69:d0:42:7f:0f:65:cb:92:52:eb:49:a6:
78:94:7d:24:5d:5e:8a:c5:01:68:02:89:7a:14:9a:
54:ba:01:36:10:7f:27:d2:06:82:05:69:01:3f:1d:
b0:42:1f:fe:4b:d0:ed:db:4e:cb:29:5d:c3:c8:b9:
70:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:AD:78:50:4E:53:14:AD:8C:29:5F:51:FD:39:0E:A5:FC:26:0D:8F
X509v3 Authority Key Identifier:
keyid:70:20:F9:11:5D:19:40:31:FC:5C:84:9F:15:AB:BF:D8:0E:08:62:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cCD5EV0ZQDH8XISfFau_2A4IYis.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/990513-f49c-45fb-a7bb-5f045688bb99/1/cCD5EV0ZQDH8XISfFau_2A4IYis.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/990513-f49c-45fb-a7bb-5f045688bb99/1/cCD5EV0ZQDH8XISfFau_2A4IYis.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:15:7f:cf:6a:26:c5:fd:4e:02:6d:08:65:01:8c:f5:33:3a:
31:95:d7:94:62:80:d4:9c:c7:22:3a:73:3a:a3:1c:91:c0:c1:
88:b1:c3:42:52:6c:23:c0:c2:f5:ac:76:8b:cc:f3:d0:09:f6:
74:b2:be:34:e8:f4:e9:78:3b:c9:f6:6c:78:1b:dc:c8:be:c0:
b2:d2:85:71:36:89:6a:7d:3e:d8:0f:b4:ed:3f:c6:19:ec:a0:
d7:e4:6f:35:ee:18:e3:6c:15:a6:0d:88:b6:0e:54:ff:36:51:
d0:0e:8e:2b:e9:93:d1:06:06:73:9f:3f:48:0b:62:18:ea:ab:
2d:4a:73:19:93:16:1b:27:af:02:6c:c4:a5:0d:3c:fe:00:e0:
ce:f6:60:b6:63:de:9d:26:d5:dc:ec:5b:93:fb:c9:3b:64:94:
66:3b:fd:e9:72:11:56:fc:34:36:ba:b1:17:fe:24:66:f3:22:
0e:7c:2f:49:6d:90:c5:18:44:00:d7:83:6d:25:d1:1f:b3:65:
b2:62:ab:82:b1:46:64:19:e2:c7:51:fe:73:4b:19:b9:cc:da:
09:4c:17:04:cf:0b:50:bb:88:a9:37:71:ff:23:c8:96:a9:b8:
68:71:52:b8:3b:16:38:ae:e2:3e:4e:14:83:4b:88:ef:41:b1:
a9:6a:ad:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 09:23:43 2025 by rpki-client