Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/3fa36d-8faf-4bdc-ad9e-013c1f01edb9/1/CDC8NLj0_Lwr9SO72-mgRKJEX74.mft
File: CDC8NLj0_Lwr9SO72-mgRKJEX74.mft (raw, json)
Hash identifier: B8MwLIOGBwXVD128VBRUZ469pSymMgUrcYkfi/7qDvk=
Subject key identifier: EF:16:3E:72:04:A3:01:B3:12:6B:21:52:9B:5E:72:09:D3:8A:01:CE
Authority key identifier: 08:30:BC:34:B8:F4:FC:BC:2B:F5:23:BB:DB:E9:A0:44:A2:44:5F:BE
Certificate issuer: /CN=0830bc34b8f4fcbc2bf523bbdbe9a044a2445fbe
Certificate serial: 0198744FA4442698AFDF8956513DC04806D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CDC8NLj0_Lwr9SO72-mgRKJEX74.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/3fa36d-8faf-4bdc-ad9e-013c1f01edb9/1/CDC8NLj0_Lwr9SO72-mgRKJEX74.mft
Manifest number: 1617
Signing time: Mon 04 Aug 2025 09:00:33 +0000
Manifest this update: Mon 04 Aug 2025 09:00:33 +0000
Manifest next update: Tue 05 Aug 2025 09:00:33 +0000
Files and hashes: 1: 7Jx_d84jw9RCpVbZlGjBj5ncWcE.roa (hash: 5qe+SEXJJD8iF6SfIvYp7Poby6fZfVkFooQVkliL5/M=)
2: CDC8NLj0_Lwr9SO72-mgRKJEX74.crl (hash: l9VJVtrQjEx++Pv+1A76SUDHHfbuWAGpxBMFBN5PlLM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/3fa36d-8faf-4bdc-ad9e-013c1f01edb9/1/CDC8NLj0_Lwr9SO72-mgRKJEX74.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/3fa36d-8faf-4bdc-ad9e-013c1f01edb9/1/CDC8NLj0_Lwr9SO72-mgRKJEX74.mft
rsync://rpki.ripe.net/repository/DEFAULT/CDC8NLj0_Lwr9SO72-mgRKJEX74.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 09:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:4f:a4:44:26:98:af:df:89:56:51:3d:c0:48:06:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0830bc34b8f4fcbc2bf523bbdbe9a044a2445fbe
Validity
Not Before: Aug 4 09:00:33 2025 GMT
Not After : Aug 5 09:00:33 2025 GMT
Subject: CN=ef163e7204a301b3126b21529b5e7209d38a01ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:41:25:22:a2:26:77:4a:9b:83:e9:5b:23:4e:
48:1c:99:fc:02:4c:5c:ba:07:ce:d3:5e:91:30:c2:
9d:a2:58:7d:d7:63:2a:2c:da:99:65:db:b1:12:c6:
49:f4:99:04:99:cb:a5:3a:99:65:96:b7:cd:d1:34:
e2:d9:93:cf:7a:82:43:fa:09:6a:1c:1e:96:fd:8a:
10:05:72:a1:95:51:2e:28:fe:51:20:98:52:38:09:
1d:71:06:1e:0f:57:cd:4d:dd:12:e2:f8:9b:a3:1b:
cd:f4:56:1d:97:50:8b:ac:bc:f3:aa:a0:7f:43:61:
12:e1:f6:09:3c:98:a3:a8:0f:99:84:79:83:cb:1b:
f2:d7:23:fa:2e:f8:4f:dc:89:fc:a2:54:60:c3:35:
4b:c0:64:20:fa:11:9c:b3:65:f2:34:85:80:36:96:
e5:86:bf:5e:6c:0e:b1:a6:d6:5a:51:42:8c:db:67:
54:04:af:20:46:c0:fc:ba:b3:d8:be:0f:e3:ba:6d:
3f:22:30:44:bc:94:9f:ff:58:7c:f5:96:2f:01:a5:
90:38:96:fa:93:26:36:a4:42:12:44:50:6c:b4:59:
57:e2:1e:73:cb:fd:8b:7f:35:64:0a:0f:09:17:c3:
b3:be:f3:7a:28:a5:69:68:4d:52:78:57:90:27:6d:
af:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:16:3E:72:04:A3:01:B3:12:6B:21:52:9B:5E:72:09:D3:8A:01:CE
X509v3 Authority Key Identifier:
keyid:08:30:BC:34:B8:F4:FC:BC:2B:F5:23:BB:DB:E9:A0:44:A2:44:5F:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CDC8NLj0_Lwr9SO72-mgRKJEX74.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/3fa36d-8faf-4bdc-ad9e-013c1f01edb9/1/CDC8NLj0_Lwr9SO72-mgRKJEX74.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/3fa36d-8faf-4bdc-ad9e-013c1f01edb9/1/CDC8NLj0_Lwr9SO72-mgRKJEX74.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:72:01:44:ee:29:4d:5f:5d:b5:30:4b:6b:50:f0:db:9e:f4:
fe:d8:cb:93:f3:5c:01:08:e2:60:66:56:ae:06:7d:ab:6d:11:
45:a0:fa:8f:9e:48:74:15:39:36:4f:52:b7:10:60:e9:13:2c:
94:fb:5c:76:da:fc:e8:89:9b:b5:84:59:f5:60:73:36:a8:62:
47:9a:5e:48:b9:12:f6:25:24:86:d9:5a:9e:88:f0:b8:21:f2:
69:3e:23:34:30:7f:8f:f6:dc:57:81:fc:9c:91:ac:f4:85:a1:
20:7b:4a:91:09:ce:4f:4e:9c:ad:f6:df:5d:8b:f7:6a:61:bb:
d3:fa:5e:e7:b0:6a:6c:03:96:66:ec:d6:48:83:b8:32:ab:88:
37:fb:6f:1f:c4:35:f0:bc:66:46:39:98:ab:d5:aa:e1:8d:2f:
8b:af:a5:09:10:70:38:21:a0:d6:ef:93:ac:f9:50:d1:9d:10:
20:4f:bc:07:1f:5e:d7:61:ec:b1:31:45:89:3c:79:37:c2:64:
b2:3e:73:8e:82:82:eb:d2:ff:33:bd:de:3d:9c:8b:c3:af:2f:
6f:6e:d4:4a:0a:2b:4a:88:3d:ac:f4:2c:50:1f:7a:b7:38:82:
4c:34:e0:98:99:21:61:90:98:bc:08:1b:26:b7:0b:fc:ef:87:
2f:87:16:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 15:32:58 2025 by rpki-client