Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/3a39e9-3d40-46f8-bb0f-5ba43b118f75/1/CioVfwBRX5W2313A1S6xtdQ_3lw.mft
File: CioVfwBRX5W2313A1S6xtdQ_3lw.mft (raw, json)
Hash identifier: rtJfMaySIccZuYUf84dEBDdEZbwU/rmW1XCfHfKu4X8=
Subject key identifier: CB:33:D2:12:1E:1D:46:EC:48:F2:47:A8:F9:FF:F4:7D:C9:88:80:31
Authority key identifier: 0A:2A:15:7F:00:51:5F:95:B6:DF:5D:C0:D5:2E:B1:B5:D4:3F:DE:5C
Certificate issuer: /CN=0a2a157f00515f95b6df5dc0d52eb1b5d43fde5c
Certificate serial: 01987D8B4856F27CF0BF759228ED42D10CDE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CioVfwBRX5W2313A1S6xtdQ_3lw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/3a39e9-3d40-46f8-bb0f-5ba43b118f75/1/CioVfwBRX5W2313A1S6xtdQ_3lw.mft
Manifest number: 161A
Signing time: Wed 06 Aug 2025 04:02:16 +0000
Manifest this update: Wed 06 Aug 2025 04:02:16 +0000
Manifest next update: Thu 07 Aug 2025 04:02:16 +0000
Files and hashes: 1: 4tKIyKN2LpGytONfG9Wwzb3sMh8.roa (hash: So7qtpci+LVeK7KYvgn0X4FAkS3oDmYxiev+fG5cuSs=)
2: CioVfwBRX5W2313A1S6xtdQ_3lw.crl (hash: Y+rTbPr09XskTJ02ZFDLcjznjv0gztQ/nBz3/nkpOqE=)
3: Ulk603SVbOQAiKSzR_IZBatvpSU.roa (hash: 1Gak7FJcv6XeZUXfgmGsLnHftg1ktwdBLJgL9CPQ7IA=)
4: rjFAvFxrdSB0H68aH_zK0lS1GcA.roa (hash: iKO/ulWqGpWzjwhANl857sDa0g01+J+R36f50OBJrb0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/3a39e9-3d40-46f8-bb0f-5ba43b118f75/1/CioVfwBRX5W2313A1S6xtdQ_3lw.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/3a39e9-3d40-46f8-bb0f-5ba43b118f75/1/CioVfwBRX5W2313A1S6xtdQ_3lw.mft
rsync://rpki.ripe.net/repository/DEFAULT/CioVfwBRX5W2313A1S6xtdQ_3lw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 04:02:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7d:8b:48:56:f2:7c:f0:bf:75:92:28:ed:42:d1:0c:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a2a157f00515f95b6df5dc0d52eb1b5d43fde5c
Validity
Not Before: Aug 6 04:02:16 2025 GMT
Not After : Aug 7 04:02:16 2025 GMT
Subject: CN=cb33d2121e1d46ec48f247a8f9fff47dc9888031
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:ef:ee:97:f6:78:95:74:75:37:f0:9d:5c:53:
31:ff:7c:d7:78:b4:bd:c0:6c:ab:c7:29:54:99:d5:
99:e2:4f:64:2a:c3:e5:f6:c6:33:28:bd:ca:dd:d3:
e8:ff:10:ad:81:1e:32:1b:e2:29:23:6a:51:ff:0f:
9f:ee:e9:71:f2:cc:e4:e8:00:0f:31:06:f9:a1:4b:
b4:cf:fd:08:af:f0:01:29:ba:1b:e3:6b:b7:d7:e9:
04:22:5f:20:3f:5a:4e:46:07:d7:0c:37:5c:59:8b:
8e:c7:ca:e6:49:49:8c:16:0d:f8:16:be:33:eb:91:
f2:57:7b:eb:68:32:38:36:d6:dd:1a:9f:27:ce:84:
8e:db:77:37:53:f2:7a:1d:75:01:94:99:86:bb:0f:
28:df:6b:51:57:59:2a:b8:eb:53:81:7d:1d:39:d3:
37:34:bc:e6:60:77:0a:dc:78:de:43:87:02:f5:5e:
58:37:5f:4f:e4:20:e3:2d:14:27:2b:c1:07:d5:32:
6e:c8:00:a6:ff:67:09:cc:10:94:79:e9:7c:6c:4e:
92:91:b2:8f:75:98:5a:40:9b:27:80:48:f2:83:71:
74:62:c5:ed:66:5c:81:22:6c:ad:55:35:1e:68:70:
1b:f0:c0:e0:36:f7:90:3e:65:ca:3d:9e:87:7c:c5:
95:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:33:D2:12:1E:1D:46:EC:48:F2:47:A8:F9:FF:F4:7D:C9:88:80:31
X509v3 Authority Key Identifier:
keyid:0A:2A:15:7F:00:51:5F:95:B6:DF:5D:C0:D5:2E:B1:B5:D4:3F:DE:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CioVfwBRX5W2313A1S6xtdQ_3lw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/3a39e9-3d40-46f8-bb0f-5ba43b118f75/1/CioVfwBRX5W2313A1S6xtdQ_3lw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/3a39e9-3d40-46f8-bb0f-5ba43b118f75/1/CioVfwBRX5W2313A1S6xtdQ_3lw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:5c:5e:20:1b:14:2d:dd:a1:28:49:2e:12:57:e7:58:28:2e:
1c:66:36:34:56:17:1e:7c:96:8e:69:0b:46:75:41:de:e7:96:
ce:69:c8:7d:92:5f:91:89:d7:4e:43:93:96:17:3d:03:91:f9:
0b:6c:a9:08:79:fc:f1:09:90:47:4e:cd:4f:55:83:e0:3f:7a:
52:3d:77:c0:22:00:4d:20:86:8e:04:0e:f2:10:9a:c3:38:2b:
7a:40:19:69:e0:13:ae:f1:a8:19:b6:2e:6c:29:9d:af:7c:c3:
01:8c:53:8d:c0:63:5a:7f:03:67:9e:c6:79:08:21:d1:83:78:
be:33:a7:2e:0b:91:05:00:b9:4d:4e:e8:05:15:8b:ae:16:ec:
bd:29:ef:64:4b:99:ed:6c:8b:04:ef:5e:74:2d:7b:f5:5c:b6:
31:a3:9b:bd:c8:b0:83:7f:5b:cd:de:bc:14:9b:1b:78:84:67:
e6:09:75:2e:b2:28:9d:a8:02:cc:ff:36:5e:6f:34:20:a1:4e:
a1:6e:71:df:68:e7:c1:88:9c:c3:21:51:e3:ec:93:b5:c0:ff:
40:d7:3f:0d:e7:36:c3:42:ba:db:86:81:b0:66:08:8d:f7:13:
69:fe:ee:b1:b8:b6:4b:f1:c6:40:66:88:2f:0d:54:8e:ab:bb:
8a:c8:c7:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 11:09:25 2025 by rpki-client