Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/5bcee0-512e-41f4-8d6b-95d16364dbb9/1/CASs5pRvtwG7LEXjCsr-pm2sL3o.mft
File: CASs5pRvtwG7LEXjCsr-pm2sL3o.mft (raw, json)
Hash identifier: Wol/OZZiAfLrTUeJetVgxGUVL5Fw1anMR0xyr9Ag+e0=
Subject key identifier: 61:E0:EF:39:E9:5C:F3:FE:E8:00:E6:AF:91:29:65:37:AB:38:6F:72
Authority key identifier: 08:04:AC:E6:94:6F:B7:01:BB:2C:45:E3:0A:CA:FE:A6:6D:AC:2F:7A
Certificate issuer: /CN=0804ace6946fb701bb2c45e30acafea66dac2f7a
Certificate serial: 019872CFEA95A3003D582E5253D4E885AF42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CASs5pRvtwG7LEXjCsr-pm2sL3o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/5bcee0-512e-41f4-8d6b-95d16364dbb9/1/CASs5pRvtwG7LEXjCsr-pm2sL3o.mft
Manifest number: 0712
Signing time: Mon 04 Aug 2025 02:01:25 +0000
Manifest this update: Mon 04 Aug 2025 02:01:25 +0000
Manifest next update: Tue 05 Aug 2025 02:01:25 +0000
Files and hashes: 1: CASs5pRvtwG7LEXjCsr-pm2sL3o.crl (hash: n0z2elgPvoiUwdy88JSKXuYmEhG/butCz/r2mxGx2OM=)
2: CepTD_sRHzQKM1km_XqGFUiFw_A.roa (hash: 6VmSpRvYGLL0kNu4j1w0e4FEukjB/A4DJqf8FlG66dI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/5bcee0-512e-41f4-8d6b-95d16364dbb9/1/CASs5pRvtwG7LEXjCsr-pm2sL3o.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/5bcee0-512e-41f4-8d6b-95d16364dbb9/1/CASs5pRvtwG7LEXjCsr-pm2sL3o.mft
rsync://rpki.ripe.net/repository/DEFAULT/CASs5pRvtwG7LEXjCsr-pm2sL3o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 02:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:72:cf:ea:95:a3:00:3d:58:2e:52:53:d4:e8:85:af:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0804ace6946fb701bb2c45e30acafea66dac2f7a
Validity
Not Before: Aug 4 02:01:25 2025 GMT
Not After : Aug 5 02:01:25 2025 GMT
Subject: CN=61e0ef39e95cf3fee800e6af91296537ab386f72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:86:3e:1b:05:0b:cb:44:c5:ac:89:24:7c:55:
b5:99:3d:15:22:29:ae:a8:da:33:79:97:bc:b7:49:
ef:3f:ea:2e:4c:9e:24:a3:dd:b2:8d:f9:68:08:5b:
75:60:03:ea:f8:22:7d:a7:87:0d:86:c9:d0:7c:53:
69:07:47:63:22:66:ab:ab:0e:8a:5d:f5:9f:6d:1b:
f0:81:18:18:ac:16:5c:3f:08:6a:90:89:01:9e:f1:
25:1f:30:7a:e1:c7:6a:4f:7f:1b:89:1a:2c:0c:af:
3a:11:55:00:1b:8b:22:0c:d1:14:a3:6e:e0:fe:c1:
3c:ca:d9:ba:e7:1e:44:fb:b4:6f:fd:85:80:10:1b:
ab:73:f0:85:c9:69:f0:e2:0a:26:57:c4:82:5d:81:
30:07:3e:a3:72:c9:cb:ea:7a:2d:be:6e:33:7f:4d:
16:b2:60:de:b2:90:ef:b5:9c:d6:d9:94:32:ca:f0:
64:ac:5f:91:01:59:e0:44:37:68:03:7d:5c:2b:64:
ca:dd:81:cd:5e:36:79:92:84:f3:bd:46:c6:98:2f:
35:25:1f:7f:6b:69:5e:4b:61:c1:24:a2:2a:49:73:
1b:23:5d:11:b4:c9:b4:42:fa:b0:c6:d8:a4:06:26:
26:a9:ed:82:0c:d8:68:d3:22:e6:23:11:b1:d7:76:
ea:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:E0:EF:39:E9:5C:F3:FE:E8:00:E6:AF:91:29:65:37:AB:38:6F:72
X509v3 Authority Key Identifier:
keyid:08:04:AC:E6:94:6F:B7:01:BB:2C:45:E3:0A:CA:FE:A6:6D:AC:2F:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CASs5pRvtwG7LEXjCsr-pm2sL3o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/5bcee0-512e-41f4-8d6b-95d16364dbb9/1/CASs5pRvtwG7LEXjCsr-pm2sL3o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/5bcee0-512e-41f4-8d6b-95d16364dbb9/1/CASs5pRvtwG7LEXjCsr-pm2sL3o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:ae:e6:f2:dd:e0:67:a3:48:0a:56:58:1c:85:e4:1c:e9:e5:
d0:aa:85:2d:cf:e6:df:a4:89:13:fc:a0:1c:8c:7a:35:a8:6a:
a8:1e:49:c5:d0:ed:53:09:23:87:59:22:60:1d:ca:c2:23:a7:
cc:7e:d3:83:37:6f:62:d7:14:34:e3:20:0c:bc:92:59:d9:a9:
e2:e1:b9:32:9b:bf:2a:78:f5:70:41:b1:d1:70:f9:15:e9:a6:
41:3a:bb:21:53:c5:e8:87:9b:f0:2a:3e:d3:65:04:f6:ea:2b:
f5:6d:1f:4f:3d:5c:2d:65:d8:20:1d:76:c4:bc:3e:83:b2:21:
ae:5c:42:ba:21:b6:59:40:6b:94:37:64:36:b5:92:c2:ce:1d:
18:68:41:11:e1:43:72:68:1e:94:b1:20:05:b8:9d:36:42:bd:
ba:25:69:a7:ca:8c:55:f2:42:73:73:48:e8:f9:fe:4c:f4:7b:
74:74:ce:98:d1:5f:ce:e3:0a:f2:6c:f9:04:e2:8d:bd:b4:9b:
27:52:dd:1f:bf:24:a3:c5:09:a2:0b:d5:9d:2d:50:a7:e9:94:
56:b0:1f:05:3a:1a:91:35:1f:a2:f7:3c:a5:1d:e9:2d:2f:c4:
b8:7c:eb:67:0d:6a:d0:b4:de:63:f1:b9:2f:59:99:87:44:68:
50:ec:9c:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:14:13 2025 by rpki-client