Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/1cb9fc-6b33-42d5-9423-79ecd8a9b6d6/1/cTXjiUY0SCsIMXd1x5ZX6bgxLU0.mft
File: cTXjiUY0SCsIMXd1x5ZX6bgxLU0.mft (raw, json)
Hash identifier: lbHneEzPC2dGnXBGzRz7Ka87I/d7YCh+5o7n8RkJwOA=
Subject key identifier: 53:68:EB:51:AB:FB:5B:87:57:44:3F:19:D5:9B:C7:1E:21:28:37:8C
Authority key identifier: 71:35:E3:89:46:34:48:2B:08:31:77:75:C7:96:57:E9:B8:31:2D:4D
Certificate issuer: /CN=7135e3894634482b08317775c79657e9b8312d4d
Certificate serial: 019873743EAFC5EC11954729A0C0F4BB7501
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cTXjiUY0SCsIMXd1x5ZX6bgxLU0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/1cb9fc-6b33-42d5-9423-79ecd8a9b6d6/1/cTXjiUY0SCsIMXd1x5ZX6bgxLU0.mft
Manifest number: 104D
Signing time: Mon 04 Aug 2025 05:00:54 +0000
Manifest this update: Mon 04 Aug 2025 05:00:54 +0000
Manifest next update: Tue 05 Aug 2025 05:00:54 +0000
Files and hashes: 1: 3vMVhDVuSakGpKEegLzmX9CZn_0.roa (hash: 0WA7LBg+VlA+MYR6g5nbmdux2cCvdzgMgFAqrxmL/5k=)
2: cTXjiUY0SCsIMXd1x5ZX6bgxLU0.crl (hash: MI2UFIKvPJHjDajOGpqw0ot62hhsFY3ggKUqkKHTg1Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/1cb9fc-6b33-42d5-9423-79ecd8a9b6d6/1/cTXjiUY0SCsIMXd1x5ZX6bgxLU0.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/1cb9fc-6b33-42d5-9423-79ecd8a9b6d6/1/cTXjiUY0SCsIMXd1x5ZX6bgxLU0.mft
rsync://rpki.ripe.net/repository/DEFAULT/cTXjiUY0SCsIMXd1x5ZX6bgxLU0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:74:3e:af:c5:ec:11:95:47:29:a0:c0:f4:bb:75:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7135e3894634482b08317775c79657e9b8312d4d
Validity
Not Before: Aug 4 05:00:54 2025 GMT
Not After : Aug 5 05:00:54 2025 GMT
Subject: CN=5368eb51abfb5b8757443f19d59bc71e2128378c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:50:52:8a:73:85:b5:75:ba:c9:be:b5:68:d5:
fc:27:49:37:67:93:16:e0:16:a3:96:fe:80:a7:28:
78:e7:9b:c0:bf:07:b3:2b:c7:a8:63:70:aa:be:85:
a3:20:27:9e:05:21:f7:28:72:a7:3e:cb:51:77:44:
d6:d7:d9:e5:51:67:66:15:51:7f:8c:4b:68:29:57:
fc:ca:eb:fb:d4:e1:bd:cd:f6:6f:48:cd:82:42:1f:
62:73:7e:af:fa:a7:50:0d:67:66:c8:58:99:be:e0:
55:03:48:49:4a:ff:d1:00:83:3b:3d:25:0f:a9:7a:
43:46:6f:81:02:a2:d3:58:46:85:ec:18:b7:e3:07:
07:c1:b1:09:b1:a2:69:8b:f8:61:d8:56:ae:55:dc:
ec:81:5d:c6:47:4d:bb:4f:88:e6:bc:7d:b0:f4:f0:
7e:ab:d8:59:e7:4b:ba:a9:c8:0f:77:fb:75:70:b2:
85:e1:15:57:8c:d8:1c:8e:70:d0:98:a3:4f:8b:28:
50:38:a5:10:af:bb:3e:92:32:0b:ef:c8:a3:b1:ce:
cd:17:d4:e2:8d:9e:31:00:24:a7:b0:4f:c8:71:e3:
cc:cb:50:c5:8a:7d:23:92:fd:44:10:8f:d9:28:4b:
d4:bb:90:ca:ae:5f:24:cb:5a:24:a5:be:fe:c5:e6:
82:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:68:EB:51:AB:FB:5B:87:57:44:3F:19:D5:9B:C7:1E:21:28:37:8C
X509v3 Authority Key Identifier:
keyid:71:35:E3:89:46:34:48:2B:08:31:77:75:C7:96:57:E9:B8:31:2D:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cTXjiUY0SCsIMXd1x5ZX6bgxLU0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/1cb9fc-6b33-42d5-9423-79ecd8a9b6d6/1/cTXjiUY0SCsIMXd1x5ZX6bgxLU0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/1cb9fc-6b33-42d5-9423-79ecd8a9b6d6/1/cTXjiUY0SCsIMXd1x5ZX6bgxLU0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:a4:ce:85:13:3b:07:22:28:28:81:88:b7:73:79:97:40:f4:
66:cb:ce:a4:67:a4:6e:5e:24:50:b6:58:16:4c:d8:52:1e:04:
f1:ab:88:50:d1:5d:2d:8c:39:74:c8:22:f4:a0:61:bc:b3:0b:
0c:df:c0:cf:bc:8f:dc:2d:ed:b1:77:16:c8:1d:96:d4:59:59:
f6:ba:de:04:27:ea:d8:74:55:ba:35:29:1d:41:3e:09:be:5c:
be:1b:13:f1:19:19:11:72:c9:46:99:3a:de:14:17:01:9b:52:
a2:a5:82:8c:48:22:f0:53:92:e3:ef:17:8d:f5:99:4b:75:00:
58:1c:e0:dc:10:ea:71:ad:45:5c:4d:cf:04:aa:e9:7f:4b:16:
17:41:25:15:9e:9c:fc:e3:25:84:56:90:b3:87:5a:76:30:0b:
dc:37:92:e2:6d:96:3a:94:8c:a9:d3:4f:7e:8e:6f:e5:94:31:
7d:5d:f0:4f:21:61:7c:7a:0d:a5:52:05:da:3e:28:f3:1d:69:
60:e2:5a:62:8d:25:36:62:00:31:6b:96:8a:8e:72:6d:77:d1:
82:19:25:c0:9c:9d:b5:58:67:40:df:1b:23:b5:74:b3:32:f9:
2b:c9:bb:3e:60:db:c9:98:e2:18:24:fe:a9:66:ed:10:73:6f:
7c:68:15:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:16:22 2025 by rpki-client