Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/851d45-1422-4b31-bd8f-7993b9e03b0f/1/CiebQDjgAue9ZOUHbRo56-lvI8Q.mft
File: CiebQDjgAue9ZOUHbRo56-lvI8Q.mft (raw, json)
Hash identifier: n4ZF56mmxf7kM2whfGwr8XQqzDT2+4rrAgrA9Y+OZ24=
Subject key identifier: 2D:0D:B1:94:63:F3:56:85:F1:14:DE:15:DA:75:C8:10:61:D0:32:41
Authority key identifier: 0A:27:9B:40:38:E0:02:E7:BD:64:E5:07:6D:1A:39:EB:E9:6F:23:C4
Certificate issuer: /CN=0a279b4038e002e7bd64e5076d1a39ebe96f23c4
Certificate serial: 019873E35601AE5AB29A1FD6D2D549658277
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CiebQDjgAue9ZOUHbRo56-lvI8Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/851d45-1422-4b31-bd8f-7993b9e03b0f/1/CiebQDjgAue9ZOUHbRo56-lvI8Q.mft
Manifest number: 06C6
Signing time: Mon 04 Aug 2025 07:02:14 +0000
Manifest this update: Mon 04 Aug 2025 07:02:14 +0000
Manifest next update: Tue 05 Aug 2025 07:02:14 +0000
Files and hashes: 1: CiebQDjgAue9ZOUHbRo56-lvI8Q.crl (hash: 9Ra4oGugxfHV/UEywdGHCyNAVl4Iwpx9WnNfV+LINMY=)
2: XgZiHyWgL10sySKObf_Bjn8Hh_Q.roa (hash: 2Dl4jp91F4zOnOBtmwjhJgpK+aRbbY/cT57xX5iOAng=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/851d45-1422-4b31-bd8f-7993b9e03b0f/1/CiebQDjgAue9ZOUHbRo56-lvI8Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/851d45-1422-4b31-bd8f-7993b9e03b0f/1/CiebQDjgAue9ZOUHbRo56-lvI8Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/CiebQDjgAue9ZOUHbRo56-lvI8Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 07:02:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e3:56:01:ae:5a:b2:9a:1f:d6:d2:d5:49:65:82:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a279b4038e002e7bd64e5076d1a39ebe96f23c4
Validity
Not Before: Aug 4 07:02:14 2025 GMT
Not After : Aug 5 07:02:14 2025 GMT
Subject: CN=2d0db19463f35685f114de15da75c81061d03241
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:38:b5:b4:14:cc:bc:ee:4c:6f:92:7c:d5:40:
43:67:f9:bf:79:5b:a8:33:4f:be:79:86:5c:30:cb:
cd:16:13:95:d9:95:55:60:4d:e9:d7:24:8c:6b:e8:
74:77:d0:9b:30:45:bf:78:ff:9a:c0:33:ad:3a:bb:
cd:5c:15:a3:37:c9:bc:cd:43:78:c6:67:fa:e1:c7:
e8:d2:d9:0c:05:fb:a8:ca:0c:8b:92:3d:81:c5:21:
c0:1b:14:17:38:59:05:6e:a9:e5:46:e3:71:fc:b2:
0e:92:64:6f:27:25:c4:31:fa:94:58:86:fe:6c:cc:
5f:f8:28:44:0f:4b:d7:9e:f9:d4:36:db:1e:38:3a:
d1:09:81:e7:bb:4b:c4:09:c8:f2:9a:77:87:e7:fa:
05:19:32:eb:35:e0:54:a1:d6:f0:ba:a4:0e:89:0f:
b5:81:03:97:f4:04:10:6d:7d:9c:d3:6e:ca:2a:13:
63:3d:df:13:b5:b0:ac:b9:96:30:ec:88:99:6f:b9:
af:eb:65:9c:84:bc:52:b4:f3:9d:30:9e:97:0a:6e:
77:ee:1e:f3:77:ca:1a:69:8e:6d:9d:5e:f8:82:77:
75:50:1d:32:07:b9:cc:39:b6:12:79:18:bf:c3:eb:
59:f6:3d:d1:4a:62:cd:44:33:d8:52:6f:b3:16:c9:
9b:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:0D:B1:94:63:F3:56:85:F1:14:DE:15:DA:75:C8:10:61:D0:32:41
X509v3 Authority Key Identifier:
keyid:0A:27:9B:40:38:E0:02:E7:BD:64:E5:07:6D:1A:39:EB:E9:6F:23:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CiebQDjgAue9ZOUHbRo56-lvI8Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/851d45-1422-4b31-bd8f-7993b9e03b0f/1/CiebQDjgAue9ZOUHbRo56-lvI8Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/851d45-1422-4b31-bd8f-7993b9e03b0f/1/CiebQDjgAue9ZOUHbRo56-lvI8Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:5b:ac:98:ae:58:04:87:f7:f2:2c:5a:94:74:48:c0:fc:03:
94:6b:e7:df:3a:c1:66:94:e7:ba:fb:8e:7a:06:06:b5:98:56:
1a:70:eb:b3:b3:82:a3:7b:cc:dc:36:37:c5:33:6d:80:8a:84:
72:dd:af:97:3d:68:ef:0a:22:cd:a6:43:27:72:84:72:ed:18:
51:ae:11:4b:31:e5:25:b6:07:d3:8f:c3:6b:cd:5b:49:06:00:
77:07:97:84:ad:8d:51:b8:3b:9b:1f:fa:a2:08:e1:ec:e6:0b:
ab:19:5f:12:05:31:f5:ed:42:7d:f4:b4:eb:4c:0d:3c:03:ed:
0d:7b:ad:00:03:49:65:2f:e7:3d:45:01:e6:ee:ef:1d:5e:ad:
87:ce:c4:7d:e8:c0:cc:ef:88:a0:46:84:97:0e:c0:9e:77:20:
c0:07:69:6d:32:ec:ae:4d:4c:90:c1:3f:a5:7a:bb:c2:b1:73:
7d:58:88:e7:9c:a7:56:b8:b5:38:13:8a:27:37:2c:4f:59:41:
f1:0d:16:6f:38:b2:2c:81:c6:ff:3f:c6:f3:74:51:09:bb:e9:
1b:64:7e:5e:5f:ce:77:91:18:71:68:db:44:2b:8a:e9:ac:47:
ac:c6:c8:4c:1d:ec:86:84:61:7b:bb:3b:60:03:71:fc:fa:d0:
28:01:b3:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 16:13:54 2025 by rpki-client