Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/e18c2d-64ff-44e8-8eef-b9c89b9b1f65/1/CuGlto7Kdo8hGkjoVtf1g_kOdec.mft
File: CuGlto7Kdo8hGkjoVtf1g_kOdec.mft (raw, json)
Hash identifier: tKizgVKTrU1k98bP3UIYD69qTci1SEJ0F7WBHo1eBHo=
Subject key identifier: 73:B5:14:0E:4F:56:4D:39:89:1B:DE:0F:BC:43:EA:05:2A:7B:10:B3
Authority key identifier: 0A:E1:A5:B6:8E:CA:76:8F:21:1A:48:E8:56:D7:F5:83:F9:0E:75:E7
Certificate issuer: /CN=0ae1a5b68eca768f211a48e856d7f583f90e75e7
Certificate serial: 0198733DCBEFCD2928E8B4C841120A202B17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CuGlto7Kdo8hGkjoVtf1g_kOdec.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/e18c2d-64ff-44e8-8eef-b9c89b9b1f65/1/CuGlto7Kdo8hGkjoVtf1g_kOdec.mft
Manifest number: 13C1
Signing time: Mon 04 Aug 2025 04:01:26 +0000
Manifest this update: Mon 04 Aug 2025 04:01:26 +0000
Manifest next update: Tue 05 Aug 2025 04:01:26 +0000
Files and hashes: 1: CuGlto7Kdo8hGkjoVtf1g_kOdec.crl (hash: tzh38CtX8EVxWPsAzm840F+0KtY1RR48X0pVOqNPtm4=)
2: fxLB2UJLDSaxPyWV2-cdEb8R5e8.roa (hash: qTbDhlkyoNs8mOWo2CnjkxjvNByWkkbKi24V6XgdMB8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/e18c2d-64ff-44e8-8eef-b9c89b9b1f65/1/CuGlto7Kdo8hGkjoVtf1g_kOdec.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/e18c2d-64ff-44e8-8eef-b9c89b9b1f65/1/CuGlto7Kdo8hGkjoVtf1g_kOdec.mft
rsync://rpki.ripe.net/repository/DEFAULT/CuGlto7Kdo8hGkjoVtf1g_kOdec.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:3d:cb:ef:cd:29:28:e8:b4:c8:41:12:0a:20:2b:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ae1a5b68eca768f211a48e856d7f583f90e75e7
Validity
Not Before: Aug 4 04:01:26 2025 GMT
Not After : Aug 5 04:01:26 2025 GMT
Subject: CN=73b5140e4f564d39891bde0fbc43ea052a7b10b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:d4:82:ce:57:a9:85:c2:03:b9:26:86:39:a1:
79:03:72:d3:d9:31:28:02:e6:8a:72:c6:16:1e:00:
cd:92:ba:48:6a:8a:e8:cb:51:dd:cc:0e:76:b1:c6:
35:d2:16:08:a6:44:32:c8:28:1b:e4:32:f7:24:10:
3b:bd:6f:16:99:ae:c2:fc:5a:e2:e6:d0:20:25:30:
82:54:5f:f9:92:f9:8b:73:f4:b4:27:72:0d:c6:92:
0c:52:84:3b:57:0d:79:d9:98:08:af:71:82:b5:3f:
00:55:19:e1:dd:84:8d:6c:71:6b:21:36:4e:c1:2f:
ec:59:53:75:29:91:cd:42:ac:34:e0:dc:11:84:3d:
79:8a:1a:28:31:af:2d:4c:f9:bf:fd:64:4d:f4:18:
0f:74:5f:56:2d:5f:ea:2a:79:fd:55:03:b4:37:92:
cd:11:46:23:0a:62:e5:b2:88:ea:6b:7f:be:ab:a8:
b2:05:01:15:7c:75:cb:71:63:6a:02:00:f8:2b:87:
e3:58:f8:4f:cc:61:17:19:76:b4:08:b3:a7:6a:cf:
28:62:23:2d:ff:a9:a2:79:8d:1e:6b:a5:57:b1:bb:
9e:e6:2e:b9:19:70:23:14:80:f0:f2:89:01:6a:29:
4e:78:9a:9a:51:80:1e:e4:b2:b4:91:d2:0e:1f:6e:
3f:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:B5:14:0E:4F:56:4D:39:89:1B:DE:0F:BC:43:EA:05:2A:7B:10:B3
X509v3 Authority Key Identifier:
keyid:0A:E1:A5:B6:8E:CA:76:8F:21:1A:48:E8:56:D7:F5:83:F9:0E:75:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CuGlto7Kdo8hGkjoVtf1g_kOdec.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/e18c2d-64ff-44e8-8eef-b9c89b9b1f65/1/CuGlto7Kdo8hGkjoVtf1g_kOdec.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/e18c2d-64ff-44e8-8eef-b9c89b9b1f65/1/CuGlto7Kdo8hGkjoVtf1g_kOdec.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:ba:a9:36:b1:b8:46:58:1d:3d:c8:e4:d9:7b:28:61:2d:77:
32:ee:9f:1f:ff:01:a5:17:e4:a1:89:e9:de:8b:73:2e:ea:d7:
db:9d:93:f7:60:f6:b5:25:53:08:7f:80:1c:11:51:3a:f8:f1:
8a:11:d5:60:a2:8d:59:3b:6d:e6:57:29:87:42:e3:6d:9f:d4:
99:a6:5f:15:9a:fe:31:75:c1:27:94:5d:44:5d:67:1c:8a:35:
06:e5:0b:6d:44:69:a1:3e:81:42:8a:1c:e6:98:f2:18:6a:60:
50:b5:e5:eb:46:f2:76:71:32:4c:f0:75:a1:6d:b1:5b:c7:8d:
50:10:da:da:63:07:7e:fa:fc:1d:b4:83:9b:e8:4e:7b:2b:6b:
e2:99:d0:e6:4f:47:64:e2:73:4e:70:24:bf:26:b6:15:d4:55:
e7:a5:04:9a:72:ca:bb:0d:01:65:4c:77:bc:61:69:50:c1:32:
f0:0c:49:6d:5e:a0:42:74:65:65:58:cb:48:b4:84:8b:bc:46:
c9:db:8b:9a:1e:8c:11:a2:fd:f8:4c:97:20:ba:a2:70:0f:ca:
78:a3:16:6c:91:c8:25:f9:39:f6:48:81:c7:7a:38:3d:cd:9e:
ab:9b:2b:df:54:d2:21:37:41:d0:ec:4a:25:98:d6:f8:7e:b2:
33:31:bd:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:11:54 2025 by rpki-client