Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/349b83-6f74-49ec-a4fc-57462c283294/1/CM1ntfl7p5Wmv4aQa3ccHdLLHck.mft
File: CM1ntfl7p5Wmv4aQa3ccHdLLHck.mft (raw, json)
Hash identifier: /XPVvcYUf2DifPPlnCmdE9BmorTlsOxOVligCQ1SR6w=
Subject key identifier: ED:6A:76:82:8B:C2:C8:FF:13:5A:9D:17:D6:E1:51:5E:C0:B8:39:AC
Authority key identifier: 08:CD:67:B5:F9:7B:A7:95:A6:BF:86:90:6B:77:1C:1D:D2:CB:1D:C9
Certificate issuer: /CN=08cd67b5f97ba795a6bf86906b771c1dd2cb1dc9
Certificate serial: 019873E2ADB5EFB6FA7A9665D52DB3379CEA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CM1ntfl7p5Wmv4aQa3ccHdLLHck.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/349b83-6f74-49ec-a4fc-57462c283294/1/CM1ntfl7p5Wmv4aQa3ccHdLLHck.mft
Manifest number: 0541
Signing time: Mon 04 Aug 2025 07:01:31 +0000
Manifest this update: Mon 04 Aug 2025 07:01:31 +0000
Manifest next update: Tue 05 Aug 2025 07:01:31 +0000
Files and hashes: 1: CM1ntfl7p5Wmv4aQa3ccHdLLHck.crl (hash: t+qUKGrfxwpPBCQI/IDUG1mO+p+X3yuQBJUs59Q8lzM=)
2: R2V69ZkOUTYrzFoNRRlCyipVFJY.roa (hash: 1fYxoQiQnyI9X886nVPbCzerEk6YCs6KXxGjMqHwwf0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/349b83-6f74-49ec-a4fc-57462c283294/1/CM1ntfl7p5Wmv4aQa3ccHdLLHck.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/349b83-6f74-49ec-a4fc-57462c283294/1/CM1ntfl7p5Wmv4aQa3ccHdLLHck.mft
rsync://rpki.ripe.net/repository/DEFAULT/CM1ntfl7p5Wmv4aQa3ccHdLLHck.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e2:ad:b5:ef:b6:fa:7a:96:65:d5:2d:b3:37:9c:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08cd67b5f97ba795a6bf86906b771c1dd2cb1dc9
Validity
Not Before: Aug 4 07:01:31 2025 GMT
Not After : Aug 5 07:01:31 2025 GMT
Subject: CN=ed6a76828bc2c8ff135a9d17d6e1515ec0b839ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:24:17:b6:8e:7c:2e:41:48:2a:98:89:08:60:
2b:55:35:b3:51:69:0c:c2:79:c3:26:c3:83:22:b0:
99:96:0b:db:f1:b0:c7:1f:31:6b:4a:db:a2:e4:75:
9b:cb:a2:7f:27:22:f4:87:82:7c:e0:f8:ce:02:b5:
71:e2:5a:e1:3f:d0:d4:07:d7:98:94:c9:44:eb:77:
1f:12:ab:98:cb:11:55:ca:37:af:ae:ae:45:8e:4a:
06:cb:3e:77:72:e2:08:23:6d:09:a1:c9:65:3e:69:
dd:82:8c:d6:be:10:40:1e:6f:9f:10:ad:02:da:e8:
87:54:62:c3:0a:71:2e:5d:9c:cf:95:3a:41:5b:af:
96:8c:e1:22:00:8f:a1:30:2e:98:68:4a:a1:ba:db:
a8:ae:64:f4:b0:a0:45:cc:f5:fc:76:c9:55:77:2e:
69:52:1c:96:8c:5b:07:6d:fb:6d:ba:9b:77:2f:a6:
14:03:20:f1:b5:90:00:8b:bd:86:ab:a4:f6:bf:f9:
a3:31:0d:a1:18:12:56:7a:a5:c3:32:cd:b2:12:89:
38:31:cf:b8:81:0a:b6:fe:2a:66:e3:aa:93:87:4f:
6b:48:dc:1e:b5:1d:39:76:00:31:6d:23:49:30:07:
d4:4f:49:16:51:bd:55:0d:41:af:01:d0:8d:77:3c:
a7:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:6A:76:82:8B:C2:C8:FF:13:5A:9D:17:D6:E1:51:5E:C0:B8:39:AC
X509v3 Authority Key Identifier:
keyid:08:CD:67:B5:F9:7B:A7:95:A6:BF:86:90:6B:77:1C:1D:D2:CB:1D:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CM1ntfl7p5Wmv4aQa3ccHdLLHck.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/349b83-6f74-49ec-a4fc-57462c283294/1/CM1ntfl7p5Wmv4aQa3ccHdLLHck.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/349b83-6f74-49ec-a4fc-57462c283294/1/CM1ntfl7p5Wmv4aQa3ccHdLLHck.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:c3:56:1e:2a:92:97:27:20:33:c1:9f:66:60:f3:b4:c8:45:
49:7b:4a:45:6e:ae:73:7a:cc:87:db:ad:b5:ae:7e:5d:c3:3f:
7a:5c:00:65:83:3a:15:83:97:45:e1:dc:d2:42:62:3c:eb:45:
b9:9e:02:fc:21:b1:d8:78:b7:f0:80:70:93:9b:9e:72:48:e3:
ef:84:19:f4:d0:29:93:88:a1:df:67:63:81:72:03:0a:91:a1:
57:05:6c:92:1e:c3:6b:65:91:a7:ce:21:02:15:b6:fa:1c:01:
aa:5e:ee:93:94:7c:5f:c9:ed:c0:b4:73:f5:ae:ad:fe:70:01:
b5:57:67:eb:1d:73:79:4d:6d:f3:20:d6:ca:a0:b0:3d:a5:61:
ec:ef:ab:7e:87:b8:99:dd:dc:0d:45:0a:43:86:b1:2e:7a:a6:
11:b9:9b:5f:6c:7a:67:08:a0:77:32:b2:32:39:10:27:55:bb:
e4:fd:8b:40:2e:0d:19:53:44:46:d1:b4:91:65:d5:32:89:82:
d7:26:9e:2b:de:3d:05:b9:4e:f0:74:d7:2e:5b:ff:e4:8c:fe:
fa:9f:85:c2:d8:eb:49:2b:df:b1:4d:23:d0:e1:c5:3b:2e:2a:
86:37:31:99:be:72:23:e6:44:b7:07:61:3d:ba:bc:75:5c:95:
62:b8:b2:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:11:50 2025 by rpki-client