Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/068cb9-6cba-453d-858a-c5bbf95f8584/1/cAwDCTCp0uTaiNgYUqRMP3i_tEA.mft
File: cAwDCTCp0uTaiNgYUqRMP3i_tEA.mft (raw, json)
Hash identifier: 27UTdLa0ZA9h0RgkTkSRT4xEZ5Ot5uRMsG9D+f6y3UI=
Subject key identifier: 21:36:5D:EB:AF:71:4E:E3:88:88:41:1B:3B:60:D5:C7:E5:2B:2D:EC
Authority key identifier: 70:0C:03:09:30:A9:D2:E4:DA:88:D8:18:52:A4:4C:3F:78:BF:B4:40
Certificate issuer: /CN=700c030930a9d2e4da88d81852a44c3f78bfb440
Certificate serial: 0198744F9CC4922B7055E72A0624882DA83F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cAwDCTCp0uTaiNgYUqRMP3i_tEA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/068cb9-6cba-453d-858a-c5bbf95f8584/1/cAwDCTCp0uTaiNgYUqRMP3i_tEA.mft
Manifest number: 1619
Signing time: Mon 04 Aug 2025 09:00:31 +0000
Manifest this update: Mon 04 Aug 2025 09:00:31 +0000
Manifest next update: Tue 05 Aug 2025 09:00:31 +0000
Files and hashes: 1: cAwDCTCp0uTaiNgYUqRMP3i_tEA.crl (hash: xo/KMKROOahPx4gBwSydjE4eVDWLpTuQJ0Qp4Vz5s7c=)
2: iXldcpMNtu5kim9vQXhjht5Ha_0.roa (hash: OZZlPHrzKaaexsTtY7l0u4aOhC15J2UaGXg/fHHU/6k=)
3: lishyzU5fcRQD0UnbZJENmou-sc.roa (hash: OXZjviRf58gZnLzaiDcKdYvZD8OZRwCWQQj7e3qyEJY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/068cb9-6cba-453d-858a-c5bbf95f8584/1/cAwDCTCp0uTaiNgYUqRMP3i_tEA.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/068cb9-6cba-453d-858a-c5bbf95f8584/1/cAwDCTCp0uTaiNgYUqRMP3i_tEA.mft
rsync://rpki.ripe.net/repository/DEFAULT/cAwDCTCp0uTaiNgYUqRMP3i_tEA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 09:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:4f:9c:c4:92:2b:70:55:e7:2a:06:24:88:2d:a8:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=700c030930a9d2e4da88d81852a44c3f78bfb440
Validity
Not Before: Aug 4 09:00:31 2025 GMT
Not After : Aug 5 09:00:31 2025 GMT
Subject: CN=21365debaf714ee38888411b3b60d5c7e52b2dec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:58:46:30:3d:f0:69:e8:93:ac:07:ef:74:c2:
ce:7e:25:0e:3b:2a:2a:e7:0a:3b:3b:54:b4:42:68:
ce:03:53:81:a5:13:17:c6:0f:33:38:4e:84:dd:3f:
01:35:89:af:26:34:60:1d:e8:b0:b1:4b:56:a9:58:
a4:ca:5e:55:32:6f:94:2f:90:ee:d4:f0:ba:6a:fa:
d9:ce:95:ed:7e:db:03:ee:e5:a0:03:5e:80:6e:c6:
8e:88:cd:5d:7d:67:4b:d0:72:76:c5:e9:ba:f4:9e:
4e:db:05:e7:22:75:7b:5f:40:36:06:90:ff:75:c3:
ce:91:95:54:43:8d:e3:a6:67:9f:5a:54:98:23:4e:
62:a2:0a:45:a2:15:60:cb:8e:ac:71:ad:f3:f1:d9:
6d:3d:fc:1a:93:4a:97:9c:32:6f:02:33:de:f8:68:
e4:0a:d0:cd:12:d8:84:10:fd:bd:e5:ac:f0:d3:aa:
f1:e8:0d:f6:61:6c:4e:d8:f0:e2:43:3f:a3:6b:4c:
4e:7e:ae:a9:9b:21:cc:c3:34:32:d6:ec:64:55:78:
41:c4:ff:5f:62:44:b2:fb:7a:64:7b:ad:23:b1:42:
cd:d8:38:66:41:20:7b:04:4d:30:23:0a:0c:f4:f2:
00:73:5f:8b:c5:c0:16:2d:c8:15:b4:c1:48:5a:94:
72:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:36:5D:EB:AF:71:4E:E3:88:88:41:1B:3B:60:D5:C7:E5:2B:2D:EC
X509v3 Authority Key Identifier:
keyid:70:0C:03:09:30:A9:D2:E4:DA:88:D8:18:52:A4:4C:3F:78:BF:B4:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cAwDCTCp0uTaiNgYUqRMP3i_tEA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/068cb9-6cba-453d-858a-c5bbf95f8584/1/cAwDCTCp0uTaiNgYUqRMP3i_tEA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/068cb9-6cba-453d-858a-c5bbf95f8584/1/cAwDCTCp0uTaiNgYUqRMP3i_tEA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:86:0f:d2:86:6d:11:dd:fe:a0:8e:3b:5d:52:58:94:7b:ab:
b2:b8:cd:79:49:c7:7e:02:22:85:61:06:9f:8f:6b:a7:d2:77:
8e:58:b0:bc:3c:92:9c:f4:09:3c:c3:8d:02:85:e1:e4:15:c8:
d2:db:7a:3c:96:ba:d2:17:93:75:e9:1e:10:91:c1:9b:88:20:
87:e6:87:b7:94:45:14:55:c5:ab:b1:cb:17:89:37:ee:e9:13:
6d:16:99:53:26:f5:24:3c:1e:39:79:01:93:a2:c0:f6:ab:18:
29:0f:25:aa:01:8c:5d:ff:1d:50:62:ba:55:ec:54:c7:7d:78:
5f:0b:4e:d4:b9:be:1d:1c:36:ae:c4:7c:85:2e:4f:0a:aa:86:
25:bd:9f:bc:9a:a2:65:38:b0:ab:76:99:34:da:29:c2:0c:8b:
31:27:3f:d9:32:8b:2d:60:fe:d8:b7:cd:b6:82:bf:8b:1a:72:
af:a0:b0:55:ba:18:9e:9d:29:5a:c8:97:a7:85:43:00:61:34:
46:e9:e2:61:47:09:76:e4:a0:49:c1:9e:b5:08:5d:eb:b9:34:
e6:c4:8b:96:80:a6:9a:b7:2b:67:03:20:7f:80:99:f1:5b:cc:
7f:00:97:17:86:86:0f:5c:cd:bc:b5:c3:1b:4d:ce:00:d9:16:
e3:bb:48:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 15:35:36 2025 by rpki-client