Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/849281-a302-4ff8-92e3-3ae4f9cf2683/1/c271cwBQxyD4x5BGbri4pI7750k.mft
File: c271cwBQxyD4x5BGbri4pI7750k.mft (raw, json)
Hash identifier: 4pL5L0t45HJJCQHXAVifuUxl2/ajJc1V8Mms7tPWj44=
Subject key identifier: 07:6A:EC:E2:D6:04:BF:41:C1:4A:7B:73:0C:EA:7F:B3:50:D1:37:C2
Authority key identifier: 73:6E:F5:73:00:50:C7:20:F8:C7:90:46:6E:B8:B8:A4:8E:FB:E7:49
Certificate issuer: /CN=736ef5730050c720f8c790466eb8b8a48efbe749
Certificate serial: 019874BE15C7330F8B42389330715FEAF914
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c271cwBQxyD4x5BGbri4pI7750k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/849281-a302-4ff8-92e3-3ae4f9cf2683/1/c271cwBQxyD4x5BGbri4pI7750k.mft
Manifest number: 1619
Signing time: Mon 04 Aug 2025 11:01:11 +0000
Manifest this update: Mon 04 Aug 2025 11:01:11 +0000
Manifest next update: Tue 05 Aug 2025 11:01:11 +0000
Files and hashes: 1: U_EXFi0_K3LJzzOGjdd59sx5hhk.roa (hash: InLExGG/VRrfIxx+5P3BkdCZ9LeR0AfhLMm27/EtRM8=)
2: c271cwBQxyD4x5BGbri4pI7750k.crl (hash: sLtyOSsVLYS7QcM1OO3mRHQ6IVnpzBV46BQ6WkqFUDQ=)
3: fpEtFF5tn_F6AS7ORtQk_79zOLM.roa (hash: ecIVoFs7h4RkV6LSwkMSO/FMl9ZMbuW6Wd5+RjOOYhk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/849281-a302-4ff8-92e3-3ae4f9cf2683/1/c271cwBQxyD4x5BGbri4pI7750k.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/849281-a302-4ff8-92e3-3ae4f9cf2683/1/c271cwBQxyD4x5BGbri4pI7750k.mft
rsync://rpki.ripe.net/repository/DEFAULT/c271cwBQxyD4x5BGbri4pI7750k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 11:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:be:15:c7:33:0f:8b:42:38:93:30:71:5f:ea:f9:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=736ef5730050c720f8c790466eb8b8a48efbe749
Validity
Not Before: Aug 4 11:01:11 2025 GMT
Not After : Aug 5 11:01:11 2025 GMT
Subject: CN=076aece2d604bf41c14a7b730cea7fb350d137c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:b6:68:70:79:7d:4f:b1:eb:62:ad:b2:52:3f:
1b:13:cc:59:96:f8:53:1a:47:0c:2f:bf:88:48:1a:
7a:11:47:b0:02:6a:d0:69:2c:3f:0d:1d:c2:e6:f6:
7f:d0:9e:e8:eb:09:58:1f:40:c7:54:31:65:67:fa:
a0:67:9a:60:c1:00:f7:06:5a:a0:0f:e7:d9:44:c6:
6b:01:1d:b4:dd:4a:6b:bc:79:8a:5f:03:d2:f3:96:
e1:e7:74:83:49:f8:71:6d:93:29:df:59:e3:96:03:
a3:6a:19:2f:3b:a7:2e:83:7c:54:66:61:b2:77:2e:
0c:96:56:c3:61:9c:14:47:30:d3:66:c2:08:38:9d:
83:2c:a8:77:6a:de:df:21:70:64:93:a2:aa:2c:f8:
0f:bf:ae:24:4a:4a:7a:00:b5:63:63:2a:8a:31:47:
f1:8a:11:ad:ee:a8:d3:8c:80:62:b8:24:41:89:93:
ce:17:d2:48:61:5e:c2:19:79:f0:10:b4:84:cd:43:
1b:4f:b4:b3:de:74:10:36:b3:1f:0b:ff:42:7b:37:
c1:80:82:9c:ce:07:c9:6d:e5:ba:fb:22:21:73:fc:
31:c9:8d:6c:ff:27:11:a8:74:9b:2f:2e:1b:70:0b:
71:2c:73:f9:44:e6:33:98:ac:3d:79:b2:2b:ce:bb:
e6:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:6A:EC:E2:D6:04:BF:41:C1:4A:7B:73:0C:EA:7F:B3:50:D1:37:C2
X509v3 Authority Key Identifier:
keyid:73:6E:F5:73:00:50:C7:20:F8:C7:90:46:6E:B8:B8:A4:8E:FB:E7:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c271cwBQxyD4x5BGbri4pI7750k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/849281-a302-4ff8-92e3-3ae4f9cf2683/1/c271cwBQxyD4x5BGbri4pI7750k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/849281-a302-4ff8-92e3-3ae4f9cf2683/1/c271cwBQxyD4x5BGbri4pI7750k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:78:0b:bd:36:b4:e3:66:06:87:3f:28:0e:8c:94:2a:ac:2a:
22:18:bc:7e:1f:3f:e3:05:fb:b6:dc:60:da:f9:3a:57:c0:c4:
4c:a9:24:a4:32:d5:88:57:a9:8d:76:36:55:85:b4:69:6d:bb:
f6:38:82:8d:de:e9:e1:88:e6:48:07:78:9b:35:71:84:d8:10:
a9:cc:c9:42:39:ab:f1:5a:8a:98:44:4f:ce:ea:d2:e4:42:0a:
c7:8f:6f:53:e9:7a:7c:10:0a:7d:61:a9:02:fd:5a:b3:e2:2a:
cb:68:4f:46:22:89:06:7b:6a:f1:71:7c:cc:44:1e:ae:5f:62:
1f:06:a8:8e:3d:07:8c:ba:6f:03:c6:f5:a9:e4:be:a4:3b:c8:
34:8f:8e:fd:c4:65:d7:27:25:ce:38:18:4b:39:b1:e4:bd:d0:
72:db:ff:64:6d:f0:b8:4e:7e:46:9c:a0:f9:b9:84:8b:18:50:
67:e0:49:d0:5a:aa:0f:64:1d:98:00:73:b8:ee:e1:62:72:fa:
95:1f:b8:36:a1:c7:93:24:33:7d:1e:9c:ff:2a:58:ad:44:24:
5c:f1:33:7f:c9:dd:0a:3c:a4:f8:30:13:53:9c:18:9b:a5:ae:
6d:43:ba:70:19:3a:c4:4b:4f:88:1b:41:4e:ea:b1:b7:8b:89:
d8:71:ac:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 14:10:37 2025 by rpki-client