Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/c49d19-8c79-4f77-b450-c08cf197a10c/1/cpNPw8ra3m8HkHrrbgvlqexEB7k.mft
File: cpNPw8ra3m8HkHrrbgvlqexEB7k.mft (raw, json)
Hash identifier: tTGFN68rPLkWBvVR3oEn8fYBqY3X5A9fZ+B0QU268Yc=
Subject key identifier: 10:6A:A2:41:61:44:7D:A6:69:58:B7:F2:58:D4:F4:ED:A7:D3:CD:43
Authority key identifier: 72:93:4F:C3:CA:DA:DE:6F:07:90:7A:EB:6E:0B:E5:A9:EC:44:07:B9
Certificate issuer: /CN=72934fc3cadade6f07907aeb6e0be5a9ec4407b9
Certificate serial: 01987ABFA88E9008EE598F3DDD356EB161A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cpNPw8ra3m8HkHrrbgvlqexEB7k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/c49d19-8c79-4f77-b450-c08cf197a10c/1/cpNPw8ra3m8HkHrrbgvlqexEB7k.mft
Manifest number: 01BA
Signing time: Tue 05 Aug 2025 15:00:37 +0000
Manifest this update: Tue 05 Aug 2025 15:00:37 +0000
Manifest next update: Wed 06 Aug 2025 15:00:37 +0000
Files and hashes: 1: 5gtuF__7I-RTiMG2ukg-OsX2MbQ.roa (hash: Ba0mjq3pimajTCvvrrrZyoHBHvgCNhQury7Kq+n9Wpw=)
2: cpNPw8ra3m8HkHrrbgvlqexEB7k.crl (hash: 3BKFL3evcqhLGnnNOFv51UdomWxcBz/yFr7ayDyMi2c=)
3: ejCYeubtEX2rMSmkNAwpyfa0Enw.roa (hash: 4hn9ccLxIO+b+OCd227Erjt+kM9+/9+bRDsSA2RYfoU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/c49d19-8c79-4f77-b450-c08cf197a10c/1/cpNPw8ra3m8HkHrrbgvlqexEB7k.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/c49d19-8c79-4f77-b450-c08cf197a10c/1/cpNPw8ra3m8HkHrrbgvlqexEB7k.mft
rsync://rpki.ripe.net/repository/DEFAULT/cpNPw8ra3m8HkHrrbgvlqexEB7k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 14:37:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7a:bf:a8:8e:90:08:ee:59:8f:3d:dd:35:6e:b1:61:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72934fc3cadade6f07907aeb6e0be5a9ec4407b9
Validity
Not Before: Aug 5 15:00:37 2025 GMT
Not After : Aug 6 15:00:37 2025 GMT
Subject: CN=106aa24161447da66958b7f258d4f4eda7d3cd43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:3c:f9:f3:3b:85:46:3a:0d:94:6b:1e:c5:42:
67:b8:42:45:34:9d:c7:e1:7e:df:5a:ad:11:24:d8:
c8:65:6a:80:f9:ee:6a:41:62:a2:6d:b7:72:7f:7b:
59:0f:85:d0:b7:b3:4a:19:1e:dd:c5:d9:3c:46:ad:
87:78:77:8d:df:e5:06:3e:f2:ec:f9:85:f4:60:bc:
3f:f9:b9:0f:e2:1e:f2:79:7d:4a:7f:82:1a:82:7d:
eb:a3:d5:9e:c4:1e:ce:21:f7:3a:21:e3:75:1e:38:
c7:e3:bb:06:aa:41:93:25:2d:67:ca:31:69:2f:e8:
5b:5f:d6:7a:42:fc:c6:4a:69:cc:91:86:6d:1d:0a:
ea:9a:13:5b:51:86:dd:2a:db:21:4e:2e:5d:16:af:
45:35:ee:be:0f:ab:08:5a:f2:49:b4:a2:42:0b:39:
21:69:98:17:3a:30:2d:50:9a:d5:17:86:4e:fe:26:
bd:74:39:50:3d:1e:d0:a3:ee:3f:30:46:f9:6c:bd:
96:14:7a:00:46:b4:4b:99:88:4c:64:74:93:1e:9e:
d2:c3:f3:0e:be:b1:f4:d3:bc:17:fd:31:72:15:46:
4a:35:37:32:be:32:1d:88:35:a8:f1:ae:e9:aa:07:
70:8f:6f:10:6f:bb:77:60:a9:05:fb:c2:68:08:03:
65:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:6A:A2:41:61:44:7D:A6:69:58:B7:F2:58:D4:F4:ED:A7:D3:CD:43
X509v3 Authority Key Identifier:
keyid:72:93:4F:C3:CA:DA:DE:6F:07:90:7A:EB:6E:0B:E5:A9:EC:44:07:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cpNPw8ra3m8HkHrrbgvlqexEB7k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/c49d19-8c79-4f77-b450-c08cf197a10c/1/cpNPw8ra3m8HkHrrbgvlqexEB7k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/c49d19-8c79-4f77-b450-c08cf197a10c/1/cpNPw8ra3m8HkHrrbgvlqexEB7k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:6e:02:24:65:42:d4:db:6d:c8:c5:79:b4:dc:1b:3b:de:bd:
d9:4a:74:48:76:9d:f9:88:e9:b9:9d:6e:24:f8:e7:6b:e3:d5:
00:fa:a7:48:cf:f1:6d:70:a5:25:80:44:c7:ee:fa:41:83:23:
a7:a7:a3:ad:65:07:9a:94:55:7c:8b:1f:48:09:69:a8:97:4e:
6b:5f:04:ac:e3:06:43:fa:01:d9:db:11:2c:e5:8d:8e:a7:77:
f6:f1:63:78:ac:4a:84:50:f8:cf:60:d8:cf:e5:1c:8c:f1:e3:
fc:57:9f:e7:6b:0d:d5:4d:15:a6:dd:68:77:ca:09:1f:b4:c5:
8d:b6:25:dd:e6:6d:c4:9b:e5:96:09:88:a0:b5:fc:d9:8d:c7:
a7:58:02:01:55:6a:2a:b3:b7:d3:ef:79:af:72:25:23:a3:ab:
4b:42:21:78:99:61:8b:50:fa:c0:ae:f4:9d:39:b1:fc:40:87:
8a:3a:f1:64:6e:e2:f6:61:e3:b9:14:f8:5e:c9:00:89:6b:73:
12:e1:85:5b:bc:09:97:fc:96:e2:5d:1f:32:92:fe:71:f2:14:
45:a2:7c:79:cb:be:d8:6e:ec:12:bf:e1:f4:da:67:17:fc:4e:
b7:6b:b5:7a:56:92:77:e4:a3:5a:bf:29:18:e5:bf:16:8f:36:
63:98:0b:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 20:02:54 2025 by rpki-client