Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/2bbd21-d147-4c78-8d2e-a209b90f27d9/1/ctdCYWpoBB9_D80HkvOOQQOnncI.mft
File: ctdCYWpoBB9_D80HkvOOQQOnncI.mft (raw, json)
Hash identifier: jCYetefGm5fmq3iSboAIdVCVX2Q8eU7XtDstIob8Pv0=
Subject key identifier: 1A:48:58:9F:B0:48:F8:13:74:D3:C7:73:53:01:3C:34:EB:76:7E:AD
Authority key identifier: 72:D7:42:61:6A:68:04:1F:7F:0F:CD:07:92:F3:8E:41:03:A7:9D:C2
Certificate issuer: /CN=72d742616a68041f7f0fcd0792f38e4103a79dc2
Certificate serial: 01987450755FEDBD66535F40A7802690B61B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ctdCYWpoBB9_D80HkvOOQQOnncI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/2bbd21-d147-4c78-8d2e-a209b90f27d9/1/ctdCYWpoBB9_D80HkvOOQQOnncI.mft
Manifest number: 02EA
Signing time: Mon 04 Aug 2025 09:01:26 +0000
Manifest this update: Mon 04 Aug 2025 09:01:26 +0000
Manifest next update: Tue 05 Aug 2025 09:01:26 +0000
Files and hashes: 1: ctdCYWpoBB9_D80HkvOOQQOnncI.crl (hash: zvb2fVFuGTFfqWbb+euT9AYpTqB0KyhJzjIS2xq7Amc=)
2: zto4NeQB1_I3QORAJXQ-oNO5db0.roa (hash: 4X/MAtxcgqfp8hiwe6Iai+qfAWiiXuU0LC7+GPHFtZ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/2bbd21-d147-4c78-8d2e-a209b90f27d9/1/ctdCYWpoBB9_D80HkvOOQQOnncI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/2bbd21-d147-4c78-8d2e-a209b90f27d9/1/ctdCYWpoBB9_D80HkvOOQQOnncI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ctdCYWpoBB9_D80HkvOOQQOnncI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:50:75:5f:ed:bd:66:53:5f:40:a7:80:26:90:b6:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72d742616a68041f7f0fcd0792f38e4103a79dc2
Validity
Not Before: Aug 4 09:01:26 2025 GMT
Not After : Aug 5 09:01:26 2025 GMT
Subject: CN=1a48589fb048f81374d3c77353013c34eb767ead
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:a1:52:0d:96:ce:7f:db:5c:5d:70:d0:fd:09:
2d:9d:3a:36:c1:4b:f7:5c:ba:02:3e:85:00:1d:62:
8f:68:c5:a2:e6:51:f9:ba:c0:10:b9:78:3f:de:c7:
ac:48:b0:68:6c:7b:92:35:98:d6:97:fb:c7:14:b2:
59:bf:2a:4d:e2:46:1e:43:0d:c5:ae:03:22:2c:48:
92:e8:45:8c:5e:d3:5d:00:f7:29:0a:51:f2:13:ff:
1f:58:10:7c:29:cf:a2:9d:ec:b6:53:11:d8:ed:73:
78:4a:a4:a6:af:fb:fa:1f:0a:bc:21:eb:d8:79:94:
59:b3:eb:a1:21:a1:e9:bb:20:f2:8f:11:4d:1f:03:
3d:6c:e2:f2:03:45:fa:cd:bf:dd:db:48:7a:a3:09:
80:ee:7f:74:ac:fa:ad:09:a0:81:26:2b:c6:4a:33:
13:72:ea:bb:9f:4f:9b:23:f3:5a:4d:a7:7f:1a:4b:
41:bc:03:ea:66:5d:d1:6e:83:98:05:f8:b9:40:d3:
78:71:24:d7:da:66:92:89:2c:49:39:23:fa:ee:0e:
79:85:65:72:33:89:61:c1:25:4f:79:70:5b:9a:22:
ce:a2:2c:97:e2:d4:e0:15:f7:e8:30:27:98:59:75:
6e:c6:2f:78:44:60:82:d6:4b:68:06:04:e2:b2:99:
ad:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:48:58:9F:B0:48:F8:13:74:D3:C7:73:53:01:3C:34:EB:76:7E:AD
X509v3 Authority Key Identifier:
keyid:72:D7:42:61:6A:68:04:1F:7F:0F:CD:07:92:F3:8E:41:03:A7:9D:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ctdCYWpoBB9_D80HkvOOQQOnncI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/2bbd21-d147-4c78-8d2e-a209b90f27d9/1/ctdCYWpoBB9_D80HkvOOQQOnncI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/2bbd21-d147-4c78-8d2e-a209b90f27d9/1/ctdCYWpoBB9_D80HkvOOQQOnncI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:c2:be:b6:41:6d:d4:49:06:04:3b:85:05:21:93:b9:38:c4:
ad:22:d5:08:29:87:f0:dc:9a:f0:0f:e6:f4:02:b8:cf:2c:a1:
a4:df:cc:44:5d:63:98:b8:c4:bf:bf:81:3f:4a:44:4e:ae:23:
b7:af:5d:8b:78:07:98:a7:1b:a4:6a:05:da:9f:7e:27:53:ed:
9f:45:5b:98:85:63:2c:a6:cb:86:3c:68:65:15:1e:c6:67:8e:
4a:80:18:78:b3:d5:e1:df:df:65:92:e8:57:29:87:d0:80:a9:
61:1b:c6:17:29:5a:6f:89:5b:cb:a9:8a:6b:53:16:73:c7:8b:
e0:ca:6c:d9:49:e5:12:c5:53:55:b7:48:25:ec:f5:0b:e6:59:
df:10:15:b7:6c:3c:83:1b:7b:c8:65:e2:fc:ce:05:0c:af:24:
5d:62:a7:6d:4e:f5:58:d9:54:d3:0c:61:63:f9:e9:df:93:43:
b5:50:16:57:43:fb:15:91:e4:d3:49:b0:fb:be:13:43:a6:0d:
c9:4b:3a:fe:a9:2a:0b:f5:70:92:e7:25:7b:5e:01:9b:09:6a:
da:b0:6a:49:6e:ba:ed:8d:74:28:95:ea:e7:33:49:bc:7c:96:
e7:82:02:22:32:5f:bf:05:41:67:a2:d0:a6:ed:ae:dc:d2:2e:
b7:e6:7c:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:09:30 2025 by rpki-client