Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/cc843e-60c7-47ac-823b-f8d6bd30cc19/1/Ctz2LGtUEROaXRMJ3Z7ZJvQxQyA.mft
File: Ctz2LGtUEROaXRMJ3Z7ZJvQxQyA.mft (raw, json)
Hash identifier: v0eAx993eULdZplsSvdPBGI9NryCdmcSuhsJFKh4rck=
Subject key identifier: E5:6F:FB:CC:CD:DF:A3:38:C6:9C:5B:15:32:D7:EB:D4:4B:0C:76:6F
Authority key identifier: 0A:DC:F6:2C:6B:54:11:13:9A:5D:13:09:DD:9E:D9:26:F4:31:43:20
Certificate issuer: /CN=0adcf62c6b5411139a5d1309dd9ed926f4314320
Certificate serial: 0198752B7EF4105F1E3E5F2B0D587A22AEDE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ctz2LGtUEROaXRMJ3Z7ZJvQxQyA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/cc843e-60c7-47ac-823b-f8d6bd30cc19/1/Ctz2LGtUEROaXRMJ3Z7ZJvQxQyA.mft
Manifest number: 1305
Signing time: Mon 04 Aug 2025 13:00:41 +0000
Manifest this update: Mon 04 Aug 2025 13:00:41 +0000
Manifest next update: Tue 05 Aug 2025 13:00:41 +0000
Files and hashes: 1: Ctz2LGtUEROaXRMJ3Z7ZJvQxQyA.crl (hash: 6w9zq3xDvgIQiGFW7rNRByHg3A01fn6YWoKSaCuP0K4=)
2: GpM90An4j0aWnAQVOPwoRVNatnk.roa (hash: MKIleZe0XP5Hk0DTuIZD6iDzaTxtrUWEQu34eF8ZBrE=)
3: QRwZwj-EtgWsWtGLyP94z8eYhbY.roa (hash: XsWkHritSLVCWhTRPolIJOQ4NjLpOalWZgwmSQSOCg4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/cc843e-60c7-47ac-823b-f8d6bd30cc19/1/Ctz2LGtUEROaXRMJ3Z7ZJvQxQyA.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/cc843e-60c7-47ac-823b-f8d6bd30cc19/1/Ctz2LGtUEROaXRMJ3Z7ZJvQxQyA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ctz2LGtUEROaXRMJ3Z7ZJvQxQyA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 12:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:75:2b:7e:f4:10:5f:1e:3e:5f:2b:0d:58:7a:22:ae:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0adcf62c6b5411139a5d1309dd9ed926f4314320
Validity
Not Before: Aug 4 13:00:41 2025 GMT
Not After : Aug 5 13:00:41 2025 GMT
Subject: CN=e56ffbcccddfa338c69c5b1532d7ebd44b0c766f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:56:3a:41:e6:fb:c3:b8:fa:fe:51:eb:14:d6:
43:ca:7b:90:c1:ba:a2:b0:92:4e:27:b7:80:34:8a:
20:a9:82:66:01:2f:e3:23:fe:27:16:6f:2f:a7:c9:
1c:fa:a3:d4:83:34:30:95:77:77:95:49:0f:d1:57:
49:09:4c:5f:65:60:da:7a:d3:f6:60:fd:7d:c2:57:
e8:18:f4:4c:0e:5f:8a:e4:5a:ee:3d:e8:80:95:5d:
34:a8:a9:38:4e:e3:38:ec:1b:7a:46:b2:1a:20:36:
e8:96:33:32:5c:00:85:88:a9:56:ea:b5:7b:4f:92:
f6:c6:e8:1e:0a:02:59:a6:25:05:17:e5:27:ef:1b:
7e:28:35:d1:13:36:50:4d:6d:93:b1:b3:ac:f6:c4:
71:2d:6e:e5:75:3d:d8:69:35:b4:85:f6:ca:41:8a:
b9:99:a2:7c:1e:68:22:fc:75:ec:36:d8:09:58:69:
3e:12:66:dc:a7:64:5a:28:18:99:1d:be:6c:8f:53:
9d:e3:2d:4d:3a:83:3a:9a:9c:40:74:9d:e5:97:be:
07:7b:84:5d:e6:71:df:e2:ac:40:2a:e2:a9:ad:a1:
d4:3c:01:af:e7:02:8f:90:44:ae:f4:a0:e6:2c:63:
ee:25:0d:c5:42:15:c3:d3:ab:6f:d5:d0:3c:92:f1:
27:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:6F:FB:CC:CD:DF:A3:38:C6:9C:5B:15:32:D7:EB:D4:4B:0C:76:6F
X509v3 Authority Key Identifier:
keyid:0A:DC:F6:2C:6B:54:11:13:9A:5D:13:09:DD:9E:D9:26:F4:31:43:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ctz2LGtUEROaXRMJ3Z7ZJvQxQyA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cc843e-60c7-47ac-823b-f8d6bd30cc19/1/Ctz2LGtUEROaXRMJ3Z7ZJvQxQyA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cc843e-60c7-47ac-823b-f8d6bd30cc19/1/Ctz2LGtUEROaXRMJ3Z7ZJvQxQyA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:e9:8c:dc:d5:b9:04:c2:f2:71:40:6d:f9:17:07:64:3d:39:
6d:a9:03:b8:af:1d:ce:56:92:93:dd:52:f9:79:50:58:71:c8:
1d:1b:57:7d:49:c4:eb:01:7b:66:19:66:1b:28:08:03:d7:0f:
28:04:11:40:45:f7:95:74:e6:37:d3:f5:7d:33:a0:f2:43:43:
11:f2:67:96:db:6e:ca:a7:17:55:31:5c:6d:3f:36:e4:c8:2a:
c8:99:94:c2:63:8e:21:3b:e1:19:07:29:5c:6b:68:d0:38:ad:
d5:c7:6e:56:a6:50:8e:97:e7:9a:fa:d6:8e:90:37:38:29:44:
30:03:98:1d:fe:68:d4:98:5b:ab:b4:a7:a8:eb:58:00:1c:99:
90:dc:93:8f:8d:a9:79:ca:c6:50:85:dc:78:b4:84:03:ff:30:
c3:b2:3b:31:71:e4:b3:de:21:fd:ad:1c:69:57:18:2f:df:e5:
76:40:b6:77:af:b1:0c:7b:5f:28:6d:81:3d:98:8c:aa:77:62:
db:2f:88:c9:87:a6:4d:b0:61:be:8f:f2:6e:68:90:13:7c:a8:
bc:e2:a0:92:03:76:ee:46:bf:fa:26:5f:0e:d7:a2:18:5e:cd:
21:b2:9c:d2:72:94:5e:6a:bf:06:94:2d:ca:e7:94:63:b7:78:
f0:a2:c4:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 15:34:36 2025 by rpki-client