Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/4bebe7-3f8e-4949-8980-9f6fa0e1a5a5/1/cJ626qpJ3WtIPgSxQ05NrHntnTE.mft
File: cJ626qpJ3WtIPgSxQ05NrHntnTE.mft (raw, json)
Hash identifier: xtiX5IdUSPD7sJSWbZck0Afh0xV3bmvEmDSK/GCVRuU=
Subject key identifier: B1:F6:46:2A:6D:DC:B4:0C:9C:69:A8:6B:F9:B0:91:A8:61:22:A7:67
Authority key identifier: 70:9E:B6:EA:AA:49:DD:6B:48:3E:04:B1:43:4E:4D:AC:79:ED:9D:31
Certificate issuer: /CN=709eb6eaaa49dd6b483e04b1434e4dac79ed9d31
Certificate serial: 01987E660F2E889E9F7B49F9F7F4CB12676A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cJ626qpJ3WtIPgSxQ05NrHntnTE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/4bebe7-3f8e-4949-8980-9f6fa0e1a5a5/1/cJ626qpJ3WtIPgSxQ05NrHntnTE.mft
Manifest number: 11A3
Signing time: Wed 06 Aug 2025 08:01:14 +0000
Manifest this update: Wed 06 Aug 2025 08:01:14 +0000
Manifest next update: Thu 07 Aug 2025 08:01:14 +0000
Files and hashes: 1: cJ626qpJ3WtIPgSxQ05NrHntnTE.crl (hash: tuN7zinfdMUHTDQPmN3sD6QI6v+duc1hCwsTaYO5Ycc=)
2: pszj2ow_8e4yhWJ4p_2OlR6lAZA.roa (hash: Bkleu+zwlUm+Ij3pdF+L2pghaKZyEcPMCuJgamcNwU0=)
3: x05s8cxNFz3Ea01ENwVR0hPrDdY.roa (hash: 7Z21y2oOiXJmBN38XDJhWItGwbzVeLKb+Gde/eJFRgQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/4bebe7-3f8e-4949-8980-9f6fa0e1a5a5/1/cJ626qpJ3WtIPgSxQ05NrHntnTE.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/4bebe7-3f8e-4949-8980-9f6fa0e1a5a5/1/cJ626qpJ3WtIPgSxQ05NrHntnTE.mft
rsync://rpki.ripe.net/repository/DEFAULT/cJ626qpJ3WtIPgSxQ05NrHntnTE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 08:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7e:66:0f:2e:88:9e:9f:7b:49:f9:f7:f4:cb:12:67:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=709eb6eaaa49dd6b483e04b1434e4dac79ed9d31
Validity
Not Before: Aug 6 08:01:14 2025 GMT
Not After : Aug 7 08:01:14 2025 GMT
Subject: CN=b1f6462a6ddcb40c9c69a86bf9b091a86122a767
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:3a:58:27:19:9a:02:0f:fd:e4:a5:15:b3:d1:
3a:1e:1a:23:e3:78:75:12:d3:a1:15:92:0b:2f:55:
1c:6a:71:38:f8:d3:e7:3f:68:b5:5c:bc:19:e3:68:
b8:d5:67:9d:6b:0f:5a:3c:93:0d:a1:a6:1b:5d:59:
c8:a8:c5:72:d0:07:dd:c9:fc:b0:6e:5c:d7:aa:3e:
44:1a:64:79:f0:89:c8:d6:e4:c9:d6:8d:45:52:38:
e7:81:af:08:b2:5e:8e:48:fd:4a:f7:71:eb:f4:00:
74:8f:72:e5:c3:79:ac:2b:f9:83:ae:a5:7c:f8:74:
48:4a:2a:83:7b:5b:56:81:e1:30:8c:94:23:f8:b7:
44:ab:ec:38:f0:d8:c2:8e:d2:9b:6f:ff:5c:30:a6:
82:d3:61:c6:bd:56:30:59:e7:b1:99:81:71:ab:d8:
12:b5:82:f7:ba:a4:55:ff:9f:0b:07:c5:5d:73:7a:
a0:fd:e5:7f:b3:fe:cc:13:75:e8:df:83:45:b6:76:
dd:1c:23:a0:2e:11:07:26:49:a4:5a:8e:5e:75:36:
5a:c7:9d:82:7f:98:1f:b0:a1:bf:e3:df:8d:fe:d1:
cc:10:74:e1:78:4a:f7:7b:c6:8c:79:eb:0b:5c:fd:
29:a4:c8:f3:d0:ee:f3:c8:01:42:55:fc:b7:fe:64:
0a:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:F6:46:2A:6D:DC:B4:0C:9C:69:A8:6B:F9:B0:91:A8:61:22:A7:67
X509v3 Authority Key Identifier:
keyid:70:9E:B6:EA:AA:49:DD:6B:48:3E:04:B1:43:4E:4D:AC:79:ED:9D:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cJ626qpJ3WtIPgSxQ05NrHntnTE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/4bebe7-3f8e-4949-8980-9f6fa0e1a5a5/1/cJ626qpJ3WtIPgSxQ05NrHntnTE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/4bebe7-3f8e-4949-8980-9f6fa0e1a5a5/1/cJ626qpJ3WtIPgSxQ05NrHntnTE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:68:a2:e1:df:71:7e:16:5a:6d:b7:4e:c7:f7:63:db:86:b2:
4b:00:4e:32:8b:cb:3b:2b:8a:f0:05:0a:60:dd:01:59:37:11:
7e:38:84:80:bc:88:d4:0e:0d:20:20:ab:cf:1d:7a:5d:ae:59:
1a:7e:7b:5a:39:8b:8d:3f:03:a8:eb:ad:49:32:0d:98:8c:9d:
6b:f5:a8:40:fa:a0:5c:2c:b9:a8:b2:70:36:2f:c9:ed:8c:9b:
bc:e6:e2:8d:63:ae:11:cd:ae:fe:ab:43:40:91:08:67:83:4d:
5c:6b:0c:07:fb:27:44:de:f0:65:38:76:a7:3e:58:f2:c5:79:
c0:0a:47:89:93:b1:28:3e:66:bb:78:cc:6f:a5:4d:84:63:6a:
bc:2e:bb:f0:45:71:05:c5:cf:06:ec:41:04:93:84:30:bc:32:
fd:08:8b:b0:2c:05:a8:0d:9b:6f:55:97:0f:f3:99:40:1c:91:
2c:0b:3a:72:c3:61:2c:80:72:2c:c7:9f:7a:62:c5:a6:bb:c1:
3d:e9:81:0b:d7:78:1e:4b:3b:e7:4d:f2:39:fa:21:29:41:ba:
a3:79:91:82:2b:55:31:43:43:2c:0c:72:42:de:4f:09:10:d4:
ce:16:d3:09:1d:bf:9b:ee:18:58:5e:ee:5e:f9:5c:38:6f:03:
4a:cc:e8:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 11:07:39 2025 by rpki-client