Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/da27ed-3cc3-4937-8583-43e811f77681/1/CrONq5DGFFDcitZrSF1TbLr54Pk.mft
File: CrONq5DGFFDcitZrSF1TbLr54Pk.mft (raw, json)
Hash identifier: X8tWz0mpNpNE/RVbegtSmWFUefZB3hNgomoj070fMvU=
Subject key identifier: DE:8B:65:56:E4:DE:AF:BA:D4:A3:E8:6E:48:F5:EB:81:B9:B4:DF:C2
Authority key identifier: 0A:B3:8D:AB:90:C6:14:50:DC:8A:D6:6B:48:5D:53:6C:BA:F9:E0:F9
Certificate issuer: /CN=0ab38dab90c61450dc8ad66b485d536cbaf9e0f9
Certificate serial: 019886565A7B7DAC858EFC1A10D900E28936
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CrONq5DGFFDcitZrSF1TbLr54Pk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/da27ed-3cc3-4937-8583-43e811f77681/1/CrONq5DGFFDcitZrSF1TbLr54Pk.mft
Manifest number: 1621
Signing time: Thu 07 Aug 2025 21:01:02 +0000
Manifest this update: Thu 07 Aug 2025 21:01:02 +0000
Manifest next update: Fri 08 Aug 2025 21:01:02 +0000
Files and hashes: 1: CrONq5DGFFDcitZrSF1TbLr54Pk.crl (hash: QksPpKp3x3VaVPqaSGaQrjXPjMknY9dYQ/uptBCTKYc=)
2: dsMTPLjfaNvTqQpdbtuvGWvm6Hk.roa (hash: l6/M/n3EBumhBbie3xlIG6P/vZga7KGXHStNkbnqQXA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/da27ed-3cc3-4937-8583-43e811f77681/1/CrONq5DGFFDcitZrSF1TbLr54Pk.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/da27ed-3cc3-4937-8583-43e811f77681/1/CrONq5DGFFDcitZrSF1TbLr54Pk.mft
rsync://rpki.ripe.net/repository/DEFAULT/CrONq5DGFFDcitZrSF1TbLr54Pk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 08 Aug 2025 16:13:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:86:56:5a:7b:7d:ac:85:8e:fc:1a:10:d9:00:e2:89:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ab38dab90c61450dc8ad66b485d536cbaf9e0f9
Validity
Not Before: Aug 7 21:01:02 2025 GMT
Not After : Aug 8 21:01:02 2025 GMT
Subject: CN=de8b6556e4deafbad4a3e86e48f5eb81b9b4dfc2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:e7:ac:ac:86:15:e0:3d:2e:8d:01:44:55:aa:
0f:89:28:0b:82:cc:2a:e6:6f:6a:ae:16:0c:c1:01:
98:32:32:fd:82:77:7c:ba:e0:1a:8a:c0:d8:42:cb:
82:9c:b7:59:54:e4:0c:3d:79:3a:aa:dd:cd:48:19:
7e:45:5e:9a:36:43:51:22:62:7a:eb:b2:15:81:d6:
f1:bc:aa:94:fa:69:8a:ee:54:a8:85:13:0d:48:c6:
74:e7:12:e2:b5:8b:db:ac:20:bb:7b:1f:91:57:71:
47:01:4e:83:df:ba:37:76:8a:bb:6d:04:75:ea:b0:
5a:34:a8:f4:10:e0:76:8d:ac:04:0d:10:d0:f1:f7:
53:04:55:45:ee:fe:b5:8d:68:31:93:f5:39:de:69:
24:47:ac:e5:1e:35:27:82:0b:84:82:40:9a:51:76:
71:20:ef:8b:d2:2f:56:37:6a:51:9a:33:8d:f8:bc:
02:84:50:7c:58:75:ab:04:40:b4:c5:8d:1c:64:ec:
58:03:8f:68:93:90:59:07:41:fa:bd:d4:63:04:14:
57:80:32:db:a1:1e:5d:87:1b:84:cb:9b:64:6b:15:
59:1a:2b:47:73:c9:93:6c:10:d1:3f:ca:41:35:b0:
41:d6:97:1d:43:b6:bc:fd:ba:7f:6d:12:71:54:19:
54:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:8B:65:56:E4:DE:AF:BA:D4:A3:E8:6E:48:F5:EB:81:B9:B4:DF:C2
X509v3 Authority Key Identifier:
keyid:0A:B3:8D:AB:90:C6:14:50:DC:8A:D6:6B:48:5D:53:6C:BA:F9:E0:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CrONq5DGFFDcitZrSF1TbLr54Pk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/da27ed-3cc3-4937-8583-43e811f77681/1/CrONq5DGFFDcitZrSF1TbLr54Pk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/da27ed-3cc3-4937-8583-43e811f77681/1/CrONq5DGFFDcitZrSF1TbLr54Pk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:ea:0c:af:1e:04:5d:3b:a1:f8:af:c8:e6:1e:9d:58:80:06:
23:9a:c6:cc:a3:96:be:9a:4b:6e:96:0d:8a:cc:31:05:b3:73:
26:03:a4:4a:0b:ce:b2:b5:ce:ae:dc:d7:07:56:05:2f:81:17:
15:3c:17:8d:cc:dc:2f:4c:e6:59:fd:83:48:3b:9d:df:31:a5:
94:2d:b0:ed:7b:3e:8c:2f:03:82:ed:85:9b:49:b8:0a:d8:1d:
c0:2e:9d:77:d6:b5:47:01:ce:70:58:6e:7b:96:42:01:f2:f8:
19:7d:72:f8:8a:0c:3c:ce:39:1d:da:37:78:f2:c4:a4:88:72:
ea:21:19:15:58:e8:41:e9:33:9e:c1:24:f9:a8:fd:fe:b5:27:
b1:59:42:f1:69:d5:a5:02:bc:5f:1d:27:61:e4:0f:ea:be:da:
b3:99:6b:a3:d2:24:1a:ee:6d:bc:e6:9b:22:06:78:e6:07:b6:
30:76:22:88:a0:94:18:10:21:2a:b7:68:b0:c8:b0:4e:97:c4:
64:32:1b:f3:0b:f5:61:7a:16:77:8e:b9:66:f5:17:fb:09:5d:
de:32:ae:14:af:75:e9:d7:68:6e:c2:d3:80:14:1d:f3:59:b3:
6c:58:d2:8c:8e:d2:f1:96:20:6c:09:b8:d3:fb:f0:39:1a:c8:
fa:4e:f4:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 00:15:29 2025 by rpki-client