Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/53d56a-096e-458a-9a94-08a68632a63a/1/cJ1plX0zNDKsysgQIx4ok4jjAuI.mft
File: cJ1plX0zNDKsysgQIx4ok4jjAuI.mft (raw, json)
Hash identifier: +ymQR0Ay9UnLS6JpB8LZwVyXIY2QJ6y7ooiM008cnKY=
Subject key identifier: 79:F8:05:9F:D3:14:1A:7B:8A:98:CC:E0:F5:95:01:BA:55:34:DA:86
Authority key identifier: 70:9D:69:95:7D:33:34:32:AC:CA:C8:10:23:1E:28:93:88:E3:02:E2
Certificate issuer: /CN=709d69957d333432accac810231e289388e302e2
Certificate serial: 019875D1B2EA831837528ADCB568955FEF9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cJ1plX0zNDKsysgQIx4ok4jjAuI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/53d56a-096e-458a-9a94-08a68632a63a/1/cJ1plX0zNDKsysgQIx4ok4jjAuI.mft
Manifest number: 1619
Signing time: Mon 04 Aug 2025 16:02:13 +0000
Manifest this update: Mon 04 Aug 2025 16:02:13 +0000
Manifest next update: Tue 05 Aug 2025 16:02:13 +0000
Files and hashes: 1: 9y87QXHvPreUOvjZ1Oe2QvXling.roa (hash: THAUh6ARfmUeBlEORlfxrZB6XW0KTPM4GpL4IBGKtq4=)
2: cJ1plX0zNDKsysgQIx4ok4jjAuI.crl (hash: lJ1sKdDPZWDNuHZK8qmFVrAHmqlc6p5PB4LYFvKVQF0=)
3: dagjZoA2cgv7IOwssRcqkxBEGlA.roa (hash: MlQsKiZwSfxtbg0qv4PHAKQxosBgQWpaFiAz9StErlg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/53d56a-096e-458a-9a94-08a68632a63a/1/cJ1plX0zNDKsysgQIx4ok4jjAuI.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/53d56a-096e-458a-9a94-08a68632a63a/1/cJ1plX0zNDKsysgQIx4ok4jjAuI.mft
rsync://rpki.ripe.net/repository/DEFAULT/cJ1plX0zNDKsysgQIx4ok4jjAuI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 12:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:75:d1:b2:ea:83:18:37:52:8a:dc:b5:68:95:5f:ef:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=709d69957d333432accac810231e289388e302e2
Validity
Not Before: Aug 4 16:02:13 2025 GMT
Not After : Aug 5 16:02:13 2025 GMT
Subject: CN=79f8059fd3141a7b8a98cce0f59501ba5534da86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:63:6c:42:27:49:58:1a:42:11:93:ed:a7:85:
aa:8e:f3:fd:d1:95:42:52:d4:dc:2d:ea:eb:38:e6:
c9:40:30:92:3f:aa:ef:17:e9:dd:28:bd:8e:b6:47:
a1:c3:13:6e:fe:a7:8b:62:68:0b:e1:63:c8:e9:1b:
c8:3d:72:63:98:b7:16:09:92:8c:4f:5b:25:d5:37:
36:f4:95:72:1c:86:71:8c:ba:be:77:9f:ff:ff:77:
8a:0e:1a:fe:7e:22:7f:56:37:c6:33:2a:5d:83:ab:
19:1c:9a:0d:7a:4a:09:e3:48:7d:4c:a7:56:33:32:
e6:bf:d1:64:e3:e4:e8:98:db:a3:86:61:42:ab:a8:
c7:92:be:47:03:da:09:60:68:9c:d9:59:52:f1:13:
a8:98:ac:77:8b:a1:60:be:af:f1:26:70:52:ad:14:
7c:19:30:b9:4e:46:4a:27:c7:44:07:4e:8a:a6:ce:
ee:e0:eb:5c:e9:b1:79:e0:16:4e:81:84:77:92:38:
d2:91:ef:05:ac:e1:82:a4:ab:f1:45:a5:72:c7:17:
05:96:bf:15:a3:9a:42:ed:98:62:44:0b:e3:78:25:
73:8e:c4:27:7f:79:25:45:66:04:8f:1e:48:0b:6c:
79:6e:1c:5e:64:ca:23:f0:5d:0c:c2:bd:a1:00:03:
fe:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:F8:05:9F:D3:14:1A:7B:8A:98:CC:E0:F5:95:01:BA:55:34:DA:86
X509v3 Authority Key Identifier:
keyid:70:9D:69:95:7D:33:34:32:AC:CA:C8:10:23:1E:28:93:88:E3:02:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cJ1plX0zNDKsysgQIx4ok4jjAuI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/53d56a-096e-458a-9a94-08a68632a63a/1/cJ1plX0zNDKsysgQIx4ok4jjAuI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/53d56a-096e-458a-9a94-08a68632a63a/1/cJ1plX0zNDKsysgQIx4ok4jjAuI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:b0:1a:df:61:e6:2c:e3:a0:1b:ba:2c:52:e1:7a:30:25:78:
71:28:04:e6:3e:20:8b:f4:d8:74:94:c5:6b:74:69:93:80:e3:
97:95:70:34:85:80:7a:e5:da:ee:56:4d:94:6b:ce:fa:a7:39:
c2:e5:35:0f:60:2e:21:84:71:fd:03:24:59:1e:fe:07:6d:53:
15:40:90:aa:3e:da:33:65:c5:75:fa:ad:a6:1a:c7:61:94:3b:
53:3b:fa:fd:89:99:bc:04:b0:b3:f5:b2:ca:25:04:ad:0d:e9:
ae:89:ec:2e:cf:19:0f:72:a7:e5:4f:c3:73:48:b6:3d:a9:12:
71:6e:c1:27:59:26:1b:9a:0b:30:5a:a9:8d:e5:a9:cb:a1:37:
16:51:c3:f2:f7:a9:be:d5:ad:2d:c1:4c:68:58:74:7a:42:68:
61:93:8b:e8:c5:36:51:7b:07:80:9c:d8:c7:61:ad:be:26:31:
13:d6:e6:a8:ce:35:40:66:70:cb:5d:d1:55:ac:c5:58:32:e7:
df:05:6c:8f:1a:ef:32:54:c7:22:78:32:c9:c7:1e:79:cf:0c:
74:15:ad:dd:e7:35:84:fa:c2:07:ce:05:f6:9e:c0:71:e1:2a:
1a:e0:78:77:c3:47:a5:5a:f6:0a:4d:f6:16:68:0e:28:c9:4f:
51:45:a9:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 19:17:15 2025 by rpki-client