Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/684ee3-fbed-4226-91ad-52fe4434350e/1/CFl4byJsttSQv7VClOYRp9Uajx4.mft
File: CFl4byJsttSQv7VClOYRp9Uajx4.mft (raw, json)
Hash identifier: 5fjTVqH0IYPye70yxq+hcjklDahHGCsUrU+Ha7WhM60=
Subject key identifier: 45:7B:D4:70:E9:52:3F:21:07:40:03:0B:85:4E:03:FB:9B:6E:01:59
Authority key identifier: 08:59:78:6F:22:6C:B6:D4:90:BF:B5:42:94:E6:11:A7:D5:1A:8F:1E
Certificate issuer: /CN=0859786f226cb6d490bfb54294e611a7d51a8f1e
Certificate serial: 0198A1287234A4EC53678E028707D40801A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CFl4byJsttSQv7VClOYRp9Uajx4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/684ee3-fbed-4226-91ad-52fe4434350e/1/CFl4byJsttSQv7VClOYRp9Uajx4.mft
Manifest number: 1632
Signing time: Wed 13 Aug 2025 02:00:39 +0000
Manifest this update: Wed 13 Aug 2025 02:00:39 +0000
Manifest next update: Thu 14 Aug 2025 02:00:39 +0000
Files and hashes: 1: CFl4byJsttSQv7VClOYRp9Uajx4.crl (hash: g9qEANyb+ta5NN0Xx1DzUx8FhVa9tGiLo9WilBBCNY0=)
2: O47iRpmVJrN5kyLHejtw1EVG-MI.roa (hash: YFHAgBAtSXAS/PD/F6eJBYD3guMI7Imk/Lvqn022i00=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/684ee3-fbed-4226-91ad-52fe4434350e/1/CFl4byJsttSQv7VClOYRp9Uajx4.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/684ee3-fbed-4226-91ad-52fe4434350e/1/CFl4byJsttSQv7VClOYRp9Uajx4.mft
rsync://rpki.ripe.net/repository/DEFAULT/CFl4byJsttSQv7VClOYRp9Uajx4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 22:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:a1:28:72:34:a4:ec:53:67:8e:02:87:07:d4:08:01:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0859786f226cb6d490bfb54294e611a7d51a8f1e
Validity
Not Before: Aug 13 02:00:39 2025 GMT
Not After : Aug 14 02:00:39 2025 GMT
Subject: CN=457bd470e9523f210740030b854e03fb9b6e0159
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:35:ec:b5:9d:1e:de:b5:0f:13:59:4a:01:c8:
fb:ba:ad:ff:73:c9:ff:d6:c4:af:7b:dc:3d:3d:7c:
a7:c7:9c:4c:33:10:dd:33:37:a2:70:45:80:31:84:
c6:37:10:c5:dc:e9:bf:4d:22:40:6a:8a:01:33:58:
18:db:b0:27:46:f3:c0:f0:9a:03:9b:71:4e:60:cd:
57:d5:d5:bb:e3:92:c4:42:80:e9:44:68:52:b1:a1:
df:d0:e2:65:8b:c9:64:c9:29:e1:a4:83:92:3d:89:
e2:e8:99:4e:7b:65:f8:d5:b0:70:8c:dc:a3:19:ef:
53:89:50:99:ab:23:fb:32:10:00:ab:67:89:53:9f:
1c:04:82:8f:6b:5d:16:2a:af:59:be:40:09:e5:28:
93:b2:13:14:68:bb:fd:e1:04:e2:98:1a:7e:60:ff:
51:95:5e:33:76:93:44:40:67:b8:67:d2:ea:78:a1:
62:01:17:c0:1d:25:5f:cb:97:43:bf:90:42:b0:f4:
e4:fa:b6:f8:7d:8b:b2:65:e5:aa:c5:fe:0a:2e:da:
fe:a4:d1:a9:d8:6f:10:b1:6f:70:49:f1:a8:4f:f0:
1a:01:f5:fa:1b:27:78:eb:fd:fc:f8:dc:73:82:35:
e2:58:bf:56:f6:9d:67:b8:6e:62:ea:29:08:83:83:
e3:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:7B:D4:70:E9:52:3F:21:07:40:03:0B:85:4E:03:FB:9B:6E:01:59
X509v3 Authority Key Identifier:
keyid:08:59:78:6F:22:6C:B6:D4:90:BF:B5:42:94:E6:11:A7:D5:1A:8F:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CFl4byJsttSQv7VClOYRp9Uajx4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/684ee3-fbed-4226-91ad-52fe4434350e/1/CFl4byJsttSQv7VClOYRp9Uajx4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/684ee3-fbed-4226-91ad-52fe4434350e/1/CFl4byJsttSQv7VClOYRp9Uajx4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ca:a8:07:18:0a:5f:8b:dd:ac:7b:a4:04:ca:08:84:34:f6:68:
a7:85:48:d1:1d:ae:10:98:5c:56:88:5e:62:9f:71:23:ef:16:
e1:60:d3:05:b9:b4:bf:f1:f6:7c:99:f9:43:a1:d3:41:72:e8:
77:19:aa:0b:0b:7d:42:60:24:02:36:c3:54:58:c2:59:26:75:
5b:f4:a8:84:21:79:4a:d5:8a:b7:db:24:26:63:81:b4:6b:bf:
f3:43:1d:c6:03:86:13:08:59:a7:98:93:dc:bd:e5:79:fd:e8:
f3:f8:50:70:83:c7:e5:53:9a:84:59:47:4f:49:07:40:ce:50:
9f:1f:46:0f:b5:f1:23:cc:08:58:1a:ce:96:55:11:b2:f5:f7:
a4:83:0f:f9:a4:16:5d:2e:a3:58:9f:ee:31:ff:c5:55:53:fa:
41:da:1b:5a:4d:47:9b:5d:99:92:a1:60:83:3f:15:1c:74:65:
43:6c:9e:8d:0a:e9:af:23:2d:9c:ac:90:64:b0:12:85:b0:37:
9e:f2:34:16:7f:23:df:7d:d3:2f:ce:fe:96:01:79:6c:1b:0f:
59:74:6a:06:41:81:a1:02:e5:63:c6:bd:74:14:1f:4c:a6:2b:
de:f7:c7:ca:6a:c5:6d:ac:9a:b3:69:e8:fe:43:72:d0:7d:27:
4d:ef:77:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 05:33:48 2025 by rpki-client