Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/cd883c-4d76-457e-a85c-dbaff81adca8/1/Cex03AtsLVudMOrzzSIpT3EZA58.mft
File: Cex03AtsLVudMOrzzSIpT3EZA58.mft (raw, json)
Hash identifier: yq8zQ0z9P/CszS52xHCgCE3t43X8LWLgalsMLwLcFDo=
Subject key identifier: 08:81:B0:07:3D:B1:86:6A:67:F5:00:48:D0:2D:EB:E9:C8:56:B3:86
Authority key identifier: 09:EC:74:DC:0B:6C:2D:5B:9D:30:EA:F3:CD:22:29:4F:71:19:03:9F
Certificate issuer: /CN=09ec74dc0b6c2d5b9d30eaf3cd22294f7119039f
Certificate serial: 019873E33BDE27BF1917CF85901C7D5CB4DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cex03AtsLVudMOrzzSIpT3EZA58.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/cd883c-4d76-457e-a85c-dbaff81adca8/1/Cex03AtsLVudMOrzzSIpT3EZA58.mft
Manifest number: 07B2
Signing time: Mon 04 Aug 2025 07:02:08 +0000
Manifest this update: Mon 04 Aug 2025 07:02:08 +0000
Manifest next update: Tue 05 Aug 2025 07:02:08 +0000
Files and hashes: 1: Cex03AtsLVudMOrzzSIpT3EZA58.crl (hash: 616VFWekcnOvAdklfAr1jjX0mUBLaHoh0LNczg2zz7g=)
2: vQYaMoR9txyndSYv7p8Vy1-ysWo.roa (hash: q7GID5FIOuixp8y5Io1pyufdLHt0l/VDVy3RytUEJPc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/cd883c-4d76-457e-a85c-dbaff81adca8/1/Cex03AtsLVudMOrzzSIpT3EZA58.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/cd883c-4d76-457e-a85c-dbaff81adca8/1/Cex03AtsLVudMOrzzSIpT3EZA58.mft
rsync://rpki.ripe.net/repository/DEFAULT/Cex03AtsLVudMOrzzSIpT3EZA58.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e3:3b:de:27:bf:19:17:cf:85:90:1c:7d:5c:b4:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09ec74dc0b6c2d5b9d30eaf3cd22294f7119039f
Validity
Not Before: Aug 4 07:02:08 2025 GMT
Not After : Aug 5 07:02:08 2025 GMT
Subject: CN=0881b0073db1866a67f50048d02debe9c856b386
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:a0:07:0a:d1:a7:fa:54:54:5f:53:11:0b:3f:
5a:a0:dd:43:55:df:dd:30:e7:09:a3:fe:ad:b6:f0:
e8:5c:10:db:01:6c:7a:ec:8a:29:31:8c:b7:7f:97:
91:1b:f6:ef:c8:b8:41:99:9c:86:97:10:01:7f:58:
54:81:c4:a6:77:3a:d4:90:47:1c:9a:8f:88:f7:e3:
96:b2:a8:e6:86:1d:0b:25:a7:e8:a4:94:65:d9:5d:
30:5b:93:2f:3c:05:98:e7:10:67:bd:51:85:75:7e:
20:e9:49:16:ee:8b:36:ea:51:0d:b3:50:a4:66:fd:
cd:0f:16:d7:36:c6:b5:eb:78:14:71:55:b5:1f:5a:
5e:51:88:70:92:e9:b2:53:69:c1:27:0e:1a:58:c8:
b5:14:ff:6a:20:07:b5:a6:87:29:30:a3:5d:9e:38:
e5:94:20:5b:8f:44:b6:f8:f7:77:72:67:d8:ff:e8:
e2:da:f5:d3:66:f6:96:01:76:ab:61:07:53:1e:92:
10:03:fa:61:ab:f0:57:33:5a:a5:e2:8d:3f:39:46:
15:f4:ae:0c:6e:5d:16:9e:81:fb:34:fe:05:50:b0:
b3:66:96:3f:1c:f8:41:9c:96:c0:79:1e:dd:50:db:
cd:65:67:9b:24:f1:6d:4f:33:5e:6d:ee:11:5f:a1:
bb:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:81:B0:07:3D:B1:86:6A:67:F5:00:48:D0:2D:EB:E9:C8:56:B3:86
X509v3 Authority Key Identifier:
keyid:09:EC:74:DC:0B:6C:2D:5B:9D:30:EA:F3:CD:22:29:4F:71:19:03:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cex03AtsLVudMOrzzSIpT3EZA58.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/cd883c-4d76-457e-a85c-dbaff81adca8/1/Cex03AtsLVudMOrzzSIpT3EZA58.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/cd883c-4d76-457e-a85c-dbaff81adca8/1/Cex03AtsLVudMOrzzSIpT3EZA58.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:ec:6a:e0:ba:4b:41:25:66:32:e3:9e:0e:4a:b8:38:63:19:
44:d3:f1:22:ca:0c:fc:c5:06:a7:f1:c7:a8:a2:b1:1d:6c:2a:
ad:de:07:f7:bc:f9:fb:7f:e5:34:70:8e:ce:a0:35:5a:21:14:
4c:89:92:41:d9:fa:73:97:7e:6e:66:97:2f:56:10:38:aa:da:
d0:e2:d7:78:4c:7d:66:33:24:1c:a0:fc:bd:b8:e3:88:0e:54:
08:07:be:bb:c4:f5:aa:ef:e0:39:2e:c2:1b:3d:f4:37:8d:7b:
67:47:b1:ef:4a:7a:36:c9:ce:c6:56:46:a5:fd:e0:83:76:56:
92:e6:df:18:a0:9e:7c:1f:78:6f:20:6b:14:3d:8a:2c:17:9f:
68:74:0e:70:8f:43:62:49:85:e4:47:0c:46:24:f6:1c:22:3b:
f6:4c:5f:6f:81:8e:23:e6:c2:10:03:e5:a3:61:f5:8b:31:41:
66:cf:be:ad:68:c9:ba:dc:20:8a:9d:e0:a5:4f:1c:ca:8f:d9:
33:88:9b:e5:27:7e:cb:a2:34:f9:a0:c8:a8:e8:95:ad:ba:cc:
b0:83:f2:e8:47:b7:b1:21:b0:4b:00:67:a0:b0:09:4c:fb:04:
80:e7:bf:b6:09:c7:9d:0d:03:e3:3a:23:cb:f5:6c:db:48:9d:
35:bb:e9:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 10:58:48 2025 by rpki-client