Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/c40875-061a-42df-9c6d-87a6845f66f9/1/cimwOc-KrxQdbm1hbnwWkInLyzI.mft
File: cimwOc-KrxQdbm1hbnwWkInLyzI.mft (raw, json)
Hash identifier: Gi0eFhEfa2CQZRwEq75NQZEqErUOkPjOsJswGx1767I=
Subject key identifier: 6B:FC:B7:6D:20:C3:08:1B:26:20:A2:8A:CA:08:92:69:05:27:E0:DA
Authority key identifier: 72:29:B0:39:CF:8A:AF:14:1D:6E:6D:61:6E:7C:16:90:89:CB:CB:32
Certificate issuer: /CN=7229b039cf8aaf141d6e6d616e7c169089cbcb32
Certificate serial: 01987E2F16ADADC0AE78F8C155BE2016E0F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cimwOc-KrxQdbm1hbnwWkInLyzI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/c40875-061a-42df-9c6d-87a6845f66f9/1/cimwOc-KrxQdbm1hbnwWkInLyzI.mft
Manifest number: 0D59
Signing time: Wed 06 Aug 2025 07:01:11 +0000
Manifest this update: Wed 06 Aug 2025 07:01:11 +0000
Manifest next update: Thu 07 Aug 2025 07:01:11 +0000
Files and hashes: 1: _11c4KnryngFBZ3LrSwCjXVWAnI.roa (hash: 4suX3JVW+dbra41XqoLSgaNnHC7+X6k6GS1R8JLgxL8=)
2: cimwOc-KrxQdbm1hbnwWkInLyzI.crl (hash: 22PiwWl2u/k8Bee5HtBePkZUDkC0aPyPDG/JXD9TPG4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/c40875-061a-42df-9c6d-87a6845f66f9/1/cimwOc-KrxQdbm1hbnwWkInLyzI.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/c40875-061a-42df-9c6d-87a6845f66f9/1/cimwOc-KrxQdbm1hbnwWkInLyzI.mft
rsync://rpki.ripe.net/repository/DEFAULT/cimwOc-KrxQdbm1hbnwWkInLyzI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 07:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7e:2f:16:ad:ad:c0:ae:78:f8:c1:55:be:20:16:e0:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7229b039cf8aaf141d6e6d616e7c169089cbcb32
Validity
Not Before: Aug 6 07:01:11 2025 GMT
Not After : Aug 7 07:01:11 2025 GMT
Subject: CN=6bfcb76d20c3081b2620a28aca0892690527e0da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:1d:e7:88:86:93:7d:d9:61:f4:35:68:3d:96:
c1:62:54:01:a2:eb:83:e4:80:fb:c3:eb:6e:6e:6d:
c9:44:40:19:3f:15:f9:f1:db:a2:b3:a3:9a:46:2f:
a4:c5:29:ad:b2:bf:bd:7e:26:fd:9c:76:41:dc:61:
b2:70:d4:29:a2:51:48:df:c3:f5:e2:b9:32:2b:47:
e4:f7:88:4c:78:51:6d:40:e5:d6:ad:14:22:85:90:
ad:b8:6b:6f:52:45:5b:e0:bb:e9:c8:4d:6e:4e:1e:
8b:92:2c:29:46:79:f8:7e:fc:59:11:81:4c:5e:78:
43:a4:e4:d0:e8:bb:37:ad:be:f5:fb:eb:4d:e8:3e:
83:f3:60:a1:ad:24:d8:79:74:59:c7:b2:15:3a:32:
f0:dd:51:5d:18:88:d3:79:97:b2:d0:b7:f1:3f:67:
c3:30:ed:19:c7:22:93:16:be:75:36:f0:9f:2d:41:
de:cd:2b:a3:1a:86:4c:73:07:06:57:50:d1:1c:7b:
fd:4d:6b:25:9a:34:05:2e:26:8e:3c:0f:56:49:b5:
fc:15:45:4e:1d:9e:28:dc:4e:17:59:3e:2c:c8:09:
7f:04:2f:1c:4b:95:b7:72:30:1c:13:31:2b:25:63:
8b:34:80:7f:ed:4c:e3:11:80:f8:51:a4:33:6e:cc:
f1:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:FC:B7:6D:20:C3:08:1B:26:20:A2:8A:CA:08:92:69:05:27:E0:DA
X509v3 Authority Key Identifier:
keyid:72:29:B0:39:CF:8A:AF:14:1D:6E:6D:61:6E:7C:16:90:89:CB:CB:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cimwOc-KrxQdbm1hbnwWkInLyzI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/c40875-061a-42df-9c6d-87a6845f66f9/1/cimwOc-KrxQdbm1hbnwWkInLyzI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/c40875-061a-42df-9c6d-87a6845f66f9/1/cimwOc-KrxQdbm1hbnwWkInLyzI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:5e:54:b0:44:c3:0b:ad:06:f1:75:30:b1:73:6d:71:5f:8c:
14:4e:95:e0:fb:e7:d4:1a:ac:9a:1c:cc:fb:bb:b1:4b:8b:da:
de:f0:c0:39:19:93:74:78:3c:62:86:af:76:0e:57:5e:6e:c3:
de:74:1e:0a:87:35:6f:73:71:07:a0:9a:74:dd:d1:e5:2b:e7:
b5:88:da:79:90:3a:e0:b7:f2:a5:07:3c:36:17:21:8c:68:07:
fd:e4:70:cf:2d:47:16:92:3d:10:1f:d6:be:b1:7d:83:9d:79:
90:ba:63:9e:fb:d6:4a:3c:46:9a:23:41:0b:e8:d9:db:92:d7:
40:16:64:cb:2d:0a:9d:a3:83:79:1f:36:14:56:6b:ba:0a:71:
d2:41:bf:8e:06:d0:be:11:37:d6:25:05:a0:4d:37:b3:1f:ea:
4f:0c:b5:b3:1b:de:ce:31:d6:07:f2:25:b5:51:fe:83:24:1c:
9a:ea:48:62:af:ce:55:53:32:95:64:74:9c:1f:54:7b:96:e3:
76:ef:5b:eb:24:44:c7:50:f1:09:86:c6:1e:33:4b:db:c0:1f:
3d:0e:27:93:03:2a:c8:62:e0:82:a7:5b:db:c5:cf:68:4c:cb:
52:f9:b6:b5:f3:8b:5b:75:7d:b0:0a:78:b3:36:3e:a0:e9:9f:
cc:fc:a8:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 14:06:08 2025 by rpki-client