Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/2640df-b5d1-4c00-b2f2-5e5b8b28059a/1/CdGmNLu3rvrYfRIaX-VFZIc4yMU.mft
File: CdGmNLu3rvrYfRIaX-VFZIc4yMU.mft (raw, json)
Hash identifier: 4AZgaYKTk4xI5MYMNJkFoAvftwPtEAA7X1EOY3z7hWQ=
Subject key identifier: 40:5E:3F:03:8F:CD:B7:56:88:70:0F:4E:80:44:87:67:C8:10:E0:2B
Authority key identifier: 09:D1:A6:34:BB:B7:AE:FA:D8:7D:12:1A:5F:E5:45:64:87:38:C8:C5
Certificate issuer: /CN=09d1a634bbb7aefad87d121a5fe545648738c8c5
Certificate serial: 01987A1B531ECDC6332FAA162FB2A47E47FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CdGmNLu3rvrYfRIaX-VFZIc4yMU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/2640df-b5d1-4c00-b2f2-5e5b8b28059a/1/CdGmNLu3rvrYfRIaX-VFZIc4yMU.mft
Manifest number: 0B7D
Signing time: Tue 05 Aug 2025 12:01:07 +0000
Manifest this update: Tue 05 Aug 2025 12:01:07 +0000
Manifest next update: Wed 06 Aug 2025 12:01:07 +0000
Files and hashes: 1: 5vM6DWCDq0zAAIqdgdL6q-vEnCg.roa (hash: ZbcmhEUHiVvPP/q8OPaFsh6YhizZSJj69o+H0dDocGY=)
2: CNx16XPAZx-QHVANkd2qjppUy-M.roa (hash: tg4m4urbGkAxgg6JgxNQ4p4V5XeLVLobwIMo7jTTB2U=)
3: CdGmNLu3rvrYfRIaX-VFZIc4yMU.crl (hash: U8gTeXGCdAHLZhMlgxCyDW4JzZkLVJhC3OeS+LSK1bI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/2640df-b5d1-4c00-b2f2-5e5b8b28059a/1/CdGmNLu3rvrYfRIaX-VFZIc4yMU.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/2640df-b5d1-4c00-b2f2-5e5b8b28059a/1/CdGmNLu3rvrYfRIaX-VFZIc4yMU.mft
rsync://rpki.ripe.net/repository/DEFAULT/CdGmNLu3rvrYfRIaX-VFZIc4yMU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 12:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7a:1b:53:1e:cd:c6:33:2f:aa:16:2f:b2:a4:7e:47:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09d1a634bbb7aefad87d121a5fe545648738c8c5
Validity
Not Before: Aug 5 12:01:07 2025 GMT
Not After : Aug 6 12:01:07 2025 GMT
Subject: CN=405e3f038fcdb75688700f4e80448767c810e02b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:ed:d5:e5:0d:21:b0:68:b5:85:d3:61:79:6c:
5e:d9:66:11:15:7c:47:59:d1:0d:4b:fb:b8:df:d2:
78:7b:77:11:20:95:2c:30:95:26:ad:e9:c1:7d:86:
75:ae:f4:24:94:ec:d5:26:a2:78:2a:d6:02:2d:dd:
43:89:3a:8e:cc:90:bb:34:32:12:4d:a8:62:69:ec:
82:b6:e2:45:ef:8c:7d:01:63:ae:7a:f8:b6:11:4b:
4c:e9:fc:e8:87:ea:97:fe:5c:7a:8a:59:77:9c:91:
a2:a0:12:61:d4:2c:50:54:e4:3c:ba:59:7e:d2:f7:
2f:63:e7:a1:d0:b3:36:d5:51:bc:a0:2a:7a:68:75:
2f:aa:16:98:3b:3d:8e:9a:90:a3:02:07:06:de:c5:
ac:7d:49:7b:7a:4b:7a:a5:f3:56:05:bf:6b:6e:1e:
e4:7f:d5:d3:b6:03:9c:ac:a8:c2:e9:d7:f7:20:b3:
6f:42:1a:fd:25:c4:5f:ac:49:ad:5e:3e:0e:cb:14:
29:48:3a:a1:53:c6:de:0a:1c:1f:66:59:66:16:ad:
10:de:34:b9:fc:a3:84:73:e2:c9:98:94:7c:36:ca:
94:85:c4:f4:2b:0a:a3:00:78:7c:95:47:b5:d2:78:
4e:4b:69:75:7e:40:a1:7d:f1:ad:fe:e2:60:80:04:
49:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:5E:3F:03:8F:CD:B7:56:88:70:0F:4E:80:44:87:67:C8:10:E0:2B
X509v3 Authority Key Identifier:
keyid:09:D1:A6:34:BB:B7:AE:FA:D8:7D:12:1A:5F:E5:45:64:87:38:C8:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CdGmNLu3rvrYfRIaX-VFZIc4yMU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/2640df-b5d1-4c00-b2f2-5e5b8b28059a/1/CdGmNLu3rvrYfRIaX-VFZIc4yMU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/2640df-b5d1-4c00-b2f2-5e5b8b28059a/1/CdGmNLu3rvrYfRIaX-VFZIc4yMU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:77:57:36:69:70:1e:84:58:a1:27:7f:57:dc:52:f8:ca:88:
86:f3:a6:4f:bb:b6:8b:26:05:78:71:a5:bc:e4:a8:66:39:2a:
a4:0c:09:ca:e0:ca:68:ce:b4:5c:df:6a:fc:fc:95:81:d7:94:
8b:45:46:44:b0:e7:91:94:e5:01:91:fa:d5:66:2f:53:1c:e3:
bc:f3:ef:aa:4a:6c:d1:bd:66:76:76:74:d5:b8:85:13:ed:27:
3a:24:5d:94:5b:c7:0a:53:40:32:ec:95:89:ed:3d:be:26:41:
0e:3f:b2:36:be:04:5a:bb:12:b8:e7:92:19:ff:8b:e3:e1:e8:
09:70:52:d0:6e:8a:92:26:47:b1:2a:28:4b:fd:86:c6:ba:02:
22:14:e5:0b:a8:46:27:c5:23:d7:56:55:11:b0:d0:f8:b3:84:
13:51:95:e6:75:5a:a8:cc:e3:a5:2a:9a:fd:3a:c4:59:68:95:
4e:37:a2:a7:f6:cc:17:9f:19:bb:a4:26:33:c7:6d:28:32:63:
f4:f3:46:69:cd:50:4d:a9:89:2a:82:55:1d:4b:bb:32:6a:cd:
cd:ca:3c:c3:df:99:33:be:12:b8:a5:a4:0f:fd:b3:5a:07:42:
8f:20:d1:5d:73:13:6e:ab:77:f4:34:7c:10:0f:5e:1a:10:b6:
15:25:8a:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 17:14:27 2025 by rpki-client