Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/1202e2-0b54-42ee-933a-2b1dc992eca2/1/p-cKBbmGOc165X_rGkCzZ-ycQ60.mft
File: p-cKBbmGOc165X_rGkCzZ-ycQ60.mft (raw, json)
Hash identifier: +JoC/+euxtTK2tohVhwPazmLUrEkGqbFf4sViMF/M/Q=
Subject key identifier: 3D:1A:F3:BE:58:04:86:48:B3:2A:18:6F:EC:82:70:D2:B5:BC:74:6F
Authority key identifier: A7:E7:0A:05:B9:86:39:CD:7A:E5:7F:EB:1A:40:B3:67:EC:9C:43:AD
Certificate issuer: /CN=a7e70a05b98639cd7ae57feb1a40b367ec9c43ad
Certificate serial: 0198744FE35C3CE469A52D1E43CBD1756331
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p-cKBbmGOc165X_rGkCzZ-ycQ60.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/1202e2-0b54-42ee-933a-2b1dc992eca2/1/p-cKBbmGOc165X_rGkCzZ-ycQ60.mft
Manifest number: 0A5B
Signing time: Mon 04 Aug 2025 09:00:49 +0000
Manifest this update: Mon 04 Aug 2025 09:00:49 +0000
Manifest next update: Tue 05 Aug 2025 09:00:49 +0000
Files and hashes: 1: fbHkL-NwzOez_gqY2PAh-dqPCjE.roa (hash: Q4MsLL7SIokgLjLmWwHX1Dj+xIpsxjtJ9IG++E0gJUc=)
2: p-cKBbmGOc165X_rGkCzZ-ycQ60.crl (hash: s6JY7gbwS1YmU99QXHOzNzxuYe/EVLzBi/zSFFKVDgQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/1202e2-0b54-42ee-933a-2b1dc992eca2/1/p-cKBbmGOc165X_rGkCzZ-ycQ60.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/1202e2-0b54-42ee-933a-2b1dc992eca2/1/p-cKBbmGOc165X_rGkCzZ-ycQ60.mft
rsync://rpki.ripe.net/repository/DEFAULT/p-cKBbmGOc165X_rGkCzZ-ycQ60.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:4f:e3:5c:3c:e4:69:a5:2d:1e:43:cb:d1:75:63:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7e70a05b98639cd7ae57feb1a40b367ec9c43ad
Validity
Not Before: Aug 4 09:00:49 2025 GMT
Not After : Aug 5 09:00:49 2025 GMT
Subject: CN=3d1af3be58048648b32a186fec8270d2b5bc746f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:02:5a:40:48:6f:65:0d:db:6c:52:17:26:0b:
50:64:f8:07:36:07:8a:b6:1c:d9:a1:78:07:7d:a8:
18:56:1e:a5:b6:69:a9:f0:50:77:83:da:5e:05:d0:
ae:bf:f4:2c:3d:08:9c:03:16:85:a0:89:07:64:0f:
ea:75:04:2f:28:6b:dc:6f:99:cc:8f:84:83:0c:4c:
4f:91:af:04:61:48:ae:ea:99:ee:89:72:0a:a7:83:
0b:57:7d:e9:8e:df:24:85:3b:4c:0c:0e:c3:a4:1f:
63:30:34:30:05:07:b0:bd:f0:a7:94:86:e0:df:ba:
4f:1b:0f:6a:1c:e0:02:5d:b5:f5:36:87:73:8e:d4:
a8:96:3b:77:05:80:85:a5:1b:98:3f:60:71:39:32:
a0:b9:2e:c7:11:e9:d7:f6:39:51:f6:99:24:27:59:
9a:5c:86:a9:e9:f5:ff:00:3f:6f:e1:98:47:90:59:
bf:08:79:13:a4:3f:f2:a0:a3:2e:a0:38:39:a2:5f:
66:17:31:da:09:53:42:c4:2c:c7:a3:5d:0d:75:09:
7a:5a:c2:eb:45:be:ac:71:1d:1d:dd:ae:c0:fd:7c:
58:bf:25:5a:ac:e7:41:65:8b:fa:f8:6c:12:e5:18:
4b:36:b4:4c:0e:ac:f4:b7:75:2f:b7:9b:82:ac:98:
36:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:1A:F3:BE:58:04:86:48:B3:2A:18:6F:EC:82:70:D2:B5:BC:74:6F
X509v3 Authority Key Identifier:
keyid:A7:E7:0A:05:B9:86:39:CD:7A:E5:7F:EB:1A:40:B3:67:EC:9C:43:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p-cKBbmGOc165X_rGkCzZ-ycQ60.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/1202e2-0b54-42ee-933a-2b1dc992eca2/1/p-cKBbmGOc165X_rGkCzZ-ycQ60.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/1202e2-0b54-42ee-933a-2b1dc992eca2/1/p-cKBbmGOc165X_rGkCzZ-ycQ60.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:dd:a1:5d:0f:23:3f:75:50:fd:0b:5d:fd:a4:2c:0b:3d:65:
c6:72:f1:d1:12:f2:f3:a4:98:79:93:70:cd:61:12:77:13:87:
ef:d2:aa:ac:90:04:3e:d9:0c:ed:7e:cc:86:be:98:41:be:fa:
72:f0:8f:24:33:8a:e0:ea:17:83:cb:45:cc:82:47:15:a5:e8:
e1:b0:11:85:45:36:18:77:9d:29:e8:b4:4b:ba:5a:f2:47:0b:
e8:fe:22:42:47:78:49:9d:d6:65:d2:e2:61:47:1e:e0:83:7e:
13:44:ef:66:4e:8a:12:00:c5:50:69:5f:77:0a:2d:ed:95:1a:
b5:39:05:7e:37:c7:df:c2:0c:19:f0:97:7c:58:17:fb:46:68:
96:79:0a:72:78:7e:e5:4d:e7:b5:a9:b4:ac:bb:e0:e1:e8:cc:
33:41:df:4a:a6:37:d9:9c:66:7a:fd:8b:a7:77:77:85:af:5f:
96:05:2f:4d:b6:2b:c8:3c:85:98:7d:7c:b3:63:34:91:34:d1:
cb:7e:f1:a1:8a:54:cd:cf:45:29:05:58:a6:48:5f:12:4e:9f:
5c:b5:13:3a:11:da:f7:2c:4b:cf:8d:ff:50:85:29:a5:e0:60:
e5:db:51:05:08:62:05:5f:71:39:80:d1:f6:0f:4f:c9:80:91:
0f:96:a7:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:14:14 2025 by rpki-client