Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/477c86-c7d6-4e37-bff6-a0072bac9f48/1/cms1Dp9PElni-cYJsi5l-9GGIGs.mft
File: cms1Dp9PElni-cYJsi5l-9GGIGs.mft (raw, json)
Hash identifier: 2Wr+V4lyqDFYx+d83kHnm/bu6MUyvh4zFFyHl0JSymo=
Subject key identifier: 7E:4F:A5:AE:04:58:75:5C:7E:11:C0:84:2E:16:98:DB:D8:6C:CF:BF
Authority key identifier: 72:6B:35:0E:9F:4F:12:59:E2:F9:C6:09:B2:2E:65:FB:D1:86:20:6B
Certificate issuer: /CN=726b350e9f4f1259e2f9c609b22e65fbd186206b
Certificate serial: 01987450A7E80AD44BFFED7A348549D974BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cms1Dp9PElni-cYJsi5l-9GGIGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/477c86-c7d6-4e37-bff6-a0072bac9f48/1/cms1Dp9PElni-cYJsi5l-9GGIGs.mft
Manifest number: 0910
Signing time: Mon 04 Aug 2025 09:01:39 +0000
Manifest this update: Mon 04 Aug 2025 09:01:39 +0000
Manifest next update: Tue 05 Aug 2025 09:01:39 +0000
Files and hashes: 1: CgBNGq2vvpW1xEBq_J8TTjYOWu0.roa (hash: CfZUCA05oFbMMXS/ui8XIHr2JUyCob7FGarrcgeEvE0=)
2: _DE8jBpnVZ36FaQjKKqWbHiWbvo.roa (hash: nj3mkL3pbPWWGWLOVhi9o9i9dXTzVhaJgzjUgFTiKuo=)
3: cms1Dp9PElni-cYJsi5l-9GGIGs.crl (hash: L4G9DsuIrbYF6JgLGROWCWXSZGdbjFXhzo6fm+IoqDU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/477c86-c7d6-4e37-bff6-a0072bac9f48/1/cms1Dp9PElni-cYJsi5l-9GGIGs.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/477c86-c7d6-4e37-bff6-a0072bac9f48/1/cms1Dp9PElni-cYJsi5l-9GGIGs.mft
rsync://rpki.ripe.net/repository/DEFAULT/cms1Dp9PElni-cYJsi5l-9GGIGs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:50:a7:e8:0a:d4:4b:ff:ed:7a:34:85:49:d9:74:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=726b350e9f4f1259e2f9c609b22e65fbd186206b
Validity
Not Before: Aug 4 09:01:39 2025 GMT
Not After : Aug 5 09:01:39 2025 GMT
Subject: CN=7e4fa5ae0458755c7e11c0842e1698dbd86ccfbf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:f1:1b:4d:c2:1e:63:9b:f3:aa:80:e2:f7:d6:
be:d8:c6:0a:08:a9:d2:a1:6d:5f:b6:29:e1:29:44:
49:d0:22:30:2b:9f:da:52:96:c1:c6:2e:88:c9:4c:
8f:54:84:18:98:76:7a:55:fe:a4:30:3e:4f:33:07:
ce:27:c0:48:1e:22:01:85:42:80:4b:b0:78:45:7d:
7d:39:58:ef:7e:63:f7:dc:31:a3:0c:ed:b6:78:00:
6a:a5:2b:02:fe:92:7e:f2:24:f8:50:5b:a4:35:06:
a9:0f:27:f0:c2:81:fc:86:cc:50:60:da:53:d8:50:
5e:5a:0f:1a:31:bb:cb:f3:67:2f:7f:38:83:44:c1:
4e:cd:86:df:71:c9:81:4f:d5:34:50:6e:60:06:3f:
18:f9:e6:b9:84:1e:11:3d:9c:e0:e9:cb:1e:07:15:
0d:05:a9:dc:04:30:b4:a6:f4:8c:51:54:65:48:e4:
91:32:a2:36:6b:c6:f0:9f:57:9e:a6:0f:ff:72:43:
58:fc:bb:e7:bc:73:6c:b8:bd:13:10:ae:59:5b:dc:
8d:9d:fb:55:17:9d:c5:11:b0:42:b4:a3:8e:97:3a:
f7:d9:69:22:90:8b:5d:6c:73:f3:f6:ef:df:2a:ad:
f4:ab:51:14:7e:66:8c:80:2d:cb:e7:1d:e3:f9:5e:
84:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:4F:A5:AE:04:58:75:5C:7E:11:C0:84:2E:16:98:DB:D8:6C:CF:BF
X509v3 Authority Key Identifier:
keyid:72:6B:35:0E:9F:4F:12:59:E2:F9:C6:09:B2:2E:65:FB:D1:86:20:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cms1Dp9PElni-cYJsi5l-9GGIGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/477c86-c7d6-4e37-bff6-a0072bac9f48/1/cms1Dp9PElni-cYJsi5l-9GGIGs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/477c86-c7d6-4e37-bff6-a0072bac9f48/1/cms1Dp9PElni-cYJsi5l-9GGIGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:32:ed:e3:75:44:18:4a:cf:61:e1:56:7c:2e:ee:60:6b:6d:
d8:1f:f8:80:60:56:3f:d8:7e:6e:73:8a:85:5f:e6:e8:ff:6f:
80:a9:b0:43:b8:dd:d5:3d:7f:d3:8e:1c:b5:83:5b:23:54:c4:
25:27:ac:2a:f8:46:b7:f6:1c:d1:5e:59:73:d3:af:92:f4:71:
0c:d0:62:39:79:76:d6:bc:8c:f9:b9:b4:51:90:30:20:9b:13:
53:ff:ec:ae:97:b3:7f:f7:e9:49:6e:72:cb:45:52:f0:74:7c:
b7:1b:e8:74:b1:dc:3f:c7:48:1e:7e:76:2d:6f:57:cc:30:2b:
23:ad:be:82:00:c3:fd:23:90:e5:0a:d6:91:b4:09:fa:b4:df:
78:d9:ee:08:04:80:dd:3e:8c:bd:da:79:da:56:fe:a2:56:23:
95:9d:0b:33:c0:28:56:3d:90:a6:0f:61:c4:f1:fd:66:d4:3d:
1c:eb:6b:05:db:a1:f0:91:cc:15:7c:fd:1c:35:e6:9a:7a:41:
4c:65:e0:53:ef:d4:69:1a:b6:bf:67:b4:18:1d:bd:c1:31:10:
da:4a:f4:c6:0c:32:14:47:66:88:4c:d2:14:91:9d:e6:a9:95:
80:8d:14:9f:1f:27:43:0c:1e:04:c4:64:0a:df:82:45:bd:a0:
12:0d:b5:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:13:43 2025 by rpki-client