Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/883fd6-c6b6-4ae1-a187-f3069ee590da/1/cLTaDxATrNthwveibRTE8N6CIuw.mft
File: cLTaDxATrNthwveibRTE8N6CIuw.mft (raw, json)
Hash identifier: CJ8ZK0FpB7r1YP3ZMd8cUtYVGfZP6SN2Byrgk4Zqv+E=
Subject key identifier: 85:7E:E6:6D:50:73:7A:E6:9D:AE:6C:04:25:63:B2:BA:25:53:9C:DB
Authority key identifier: 70:B4:DA:0F:10:13:AC:DB:61:C2:F7:A2:6D:14:C4:F0:DE:82:22:EC
Certificate issuer: /CN=70b4da0f1013acdb61c2f7a26d14c4f0de8222ec
Certificate serial: 019873E2517EEB536B66ABEB3E98DF8C37E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cLTaDxATrNthwveibRTE8N6CIuw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/883fd6-c6b6-4ae1-a187-f3069ee590da/1/cLTaDxATrNthwveibRTE8N6CIuw.mft
Manifest number: 1618
Signing time: Mon 04 Aug 2025 07:01:08 +0000
Manifest this update: Mon 04 Aug 2025 07:01:08 +0000
Manifest next update: Tue 05 Aug 2025 07:01:08 +0000
Files and hashes: 1: F94-zZFEc6qh0jKnwFf7o1uXF7I.roa (hash: w7SpfiHOXF1SxdkUidpIylH68mEs/yNWYY/p77Td/KQ=)
2: cLTaDxATrNthwveibRTE8N6CIuw.crl (hash: z2UoNZG5eWFdmOcW4aBOJ2At11RiLVTb4zzSPTf1VDs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/883fd6-c6b6-4ae1-a187-f3069ee590da/1/cLTaDxATrNthwveibRTE8N6CIuw.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/883fd6-c6b6-4ae1-a187-f3069ee590da/1/cLTaDxATrNthwveibRTE8N6CIuw.mft
rsync://rpki.ripe.net/repository/DEFAULT/cLTaDxATrNthwveibRTE8N6CIuw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 07:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e2:51:7e:eb:53:6b:66:ab:eb:3e:98:df:8c:37:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70b4da0f1013acdb61c2f7a26d14c4f0de8222ec
Validity
Not Before: Aug 4 07:01:08 2025 GMT
Not After : Aug 5 07:01:08 2025 GMT
Subject: CN=857ee66d50737ae69dae6c042563b2ba25539cdb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:58:e0:a6:36:61:ac:b6:51:a4:d3:b7:01:3b:
22:3c:65:74:0a:fa:d1:d1:ad:d3:88:26:8d:e7:9b:
6e:2f:a9:53:30:2f:d5:4c:37:b0:49:ff:d2:f8:42:
fb:b0:45:62:82:d9:45:aa:9d:40:e9:24:98:d2:1a:
a8:41:30:22:82:dd:28:63:dc:46:bc:68:4d:45:0d:
b1:12:b0:b8:48:49:18:5c:f4:19:f4:5e:40:cd:cd:
a6:a9:96:da:0f:69:1e:33:02:27:e0:c9:f5:83:58:
50:c1:e0:b9:8b:24:b3:4a:57:ad:3a:11:70:06:d7:
d6:cc:cf:cb:68:03:39:e3:46:8c:16:b2:90:73:f4:
7a:87:58:2b:90:6c:8d:a1:1b:28:d4:da:35:4b:47:
d9:69:fe:e9:3f:69:06:f1:1e:2f:1d:c8:47:9a:7e:
5d:35:ea:6e:63:a4:09:1b:58:92:48:60:26:62:87:
1d:3c:ee:0c:a8:ba:b7:69:b0:fd:21:83:45:18:9b:
7d:8f:2d:de:bf:bd:6a:76:7a:9d:9a:30:08:97:b9:
a1:1e:c3:00:cc:f2:49:8a:21:8d:27:b0:95:92:ed:
a8:c0:84:69:85:b3:54:01:da:7b:9d:bf:c9:e2:f7:
9b:1c:b1:26:a9:a6:29:4d:77:e2:28:2b:a9:59:10:
ac:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:7E:E6:6D:50:73:7A:E6:9D:AE:6C:04:25:63:B2:BA:25:53:9C:DB
X509v3 Authority Key Identifier:
keyid:70:B4:DA:0F:10:13:AC:DB:61:C2:F7:A2:6D:14:C4:F0:DE:82:22:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cLTaDxATrNthwveibRTE8N6CIuw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/883fd6-c6b6-4ae1-a187-f3069ee590da/1/cLTaDxATrNthwveibRTE8N6CIuw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/883fd6-c6b6-4ae1-a187-f3069ee590da/1/cLTaDxATrNthwveibRTE8N6CIuw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:08:f6:d0:55:f5:b5:a5:4d:35:88:91:b3:1c:48:e4:25:c3:
cd:2a:bf:77:77:9e:c9:c3:08:54:e6:14:a6:0f:fb:61:bf:f6:
d4:9e:db:f3:55:74:e9:46:97:1c:0a:be:31:1a:43:4e:ed:81:
1a:c5:f6:c4:68:84:1d:ce:d6:31:7d:f3:f9:56:7f:2d:94:95:
08:01:10:9e:a8:d0:db:78:ef:8c:1f:16:c8:98:c0:b5:1d:37:
b5:5c:dc:ba:d5:fd:f5:ab:3d:61:4c:15:97:f5:a2:c0:df:4d:
bb:00:58:5f:f8:c7:33:11:0a:8b:df:55:52:06:92:22:d3:7c:
48:98:01:e3:2c:46:57:15:1e:bc:2c:18:c1:c5:95:65:32:c2:
65:ca:a7:bf:4b:bc:bd:e4:80:01:41:76:ca:d6:dc:b5:4b:69:
25:07:63:ab:39:3e:63:71:a4:30:cf:37:87:e1:ae:9f:76:5a:
e8:81:83:d7:d1:96:e4:cd:6f:9b:7a:f2:4c:b8:ba:59:f9:82:
92:d7:b3:8d:90:c8:68:72:ec:65:7a:0e:0f:f2:0b:4d:78:77:
a7:95:69:e8:24:37:cd:57:12:ca:ad:54:34:63:b0:ca:03:9f:
2d:da:bb:0d:7d:d4:5b:c6:37:9a:67:e1:97:04:4c:41:db:c0:
f9:1b:43:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 15:37:01 2025 by rpki-client