Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/c98434-decc-404f-8049-4aa2eeb5267c/1/cmcwWIWc_XASlB2JY63M9jAKGe8.mft
File: cmcwWIWc_XASlB2JY63M9jAKGe8.mft (raw, json)
Hash identifier: OrHwWK16IntV9PQpKqz9PiLxz3d3+NfDyCqAFY7Ayrs=
Subject key identifier: 95:AF:F2:54:BD:39:12:D5:72:A2:98:76:9A:82:31:DD:66:D4:D1:9A
Authority key identifier: 72:67:30:58:85:9C:FD:70:12:94:1D:89:63:AD:CC:F6:30:0A:19:EF
Certificate issuer: /CN=72673058859cfd7012941d8963adccf6300a19ef
Certificate serial: 019873E21F55B5607AC6E4867CAB7AE55842
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cmcwWIWc_XASlB2JY63M9jAKGe8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/c98434-decc-404f-8049-4aa2eeb5267c/1/cmcwWIWc_XASlB2JY63M9jAKGe8.mft
Manifest number: 1617
Signing time: Mon 04 Aug 2025 07:00:55 +0000
Manifest this update: Mon 04 Aug 2025 07:00:55 +0000
Manifest next update: Tue 05 Aug 2025 07:00:55 +0000
Files and hashes: 1: 1-CBPCQEhah96ufyUbT9Pgx0vfDA.roa (hash: a/E265pRySYxwfkb5CZMhMIiUvhNhX2eZiajI2HOkkM=)
2: cmcwWIWc_XASlB2JY63M9jAKGe8.crl (hash: KruVSAdpfnE00V1Jy7ZQIRJl2+lCTB6NRyj4VbYoZa4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/c98434-decc-404f-8049-4aa2eeb5267c/1/cmcwWIWc_XASlB2JY63M9jAKGe8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/c98434-decc-404f-8049-4aa2eeb5267c/1/cmcwWIWc_XASlB2JY63M9jAKGe8.mft
rsync://rpki.ripe.net/repository/DEFAULT/cmcwWIWc_XASlB2JY63M9jAKGe8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e2:1f:55:b5:60:7a:c6:e4:86:7c:ab:7a:e5:58:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72673058859cfd7012941d8963adccf6300a19ef
Validity
Not Before: Aug 4 07:00:55 2025 GMT
Not After : Aug 5 07:00:55 2025 GMT
Subject: CN=95aff254bd3912d572a298769a8231dd66d4d19a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:da:c1:f0:69:88:53:6e:b8:fe:3a:38:a2:4f:
b8:c0:27:39:58:8b:b8:ff:e5:5b:62:1e:ef:01:fc:
34:2d:2d:c9:51:48:ab:d3:30:ff:5d:1f:f3:1e:8e:
29:9a:54:eb:9f:cb:7f:ca:24:6b:75:af:c2:b3:7d:
28:be:a4:12:08:18:07:23:15:cb:25:05:39:bb:73:
25:2e:f6:6a:5c:f2:69:99:73:43:c8:7e:70:46:70:
2a:8a:01:95:49:6c:cb:07:eb:a9:8f:b6:f6:c2:ea:
87:42:0e:51:2a:6f:b3:be:8a:ee:50:61:33:b5:d6:
45:3a:80:00:e6:49:81:71:fb:89:17:f3:11:9e:e7:
fc:32:75:da:0f:93:da:1c:19:4b:07:be:87:9b:44:
5e:70:99:51:89:d6:ec:8e:32:0f:01:86:59:c4:e0:
50:f4:7e:fe:0e:99:ba:a9:cf:bd:58:3b:15:a1:86:
d8:47:8d:43:ea:f1:53:86:18:20:8e:d1:13:c0:a7:
75:e5:c7:3f:50:25:3e:f9:1e:a2:6d:3b:0e:99:0d:
0e:4c:8e:0c:f9:8a:11:90:20:c5:b1:ac:84:c5:38:
c5:8b:fc:a2:a2:c3:31:7f:6a:9d:b6:17:b2:f2:4a:
07:81:76:a1:16:e6:31:fe:84:7d:9f:d2:ea:6f:5e:
a0:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:AF:F2:54:BD:39:12:D5:72:A2:98:76:9A:82:31:DD:66:D4:D1:9A
X509v3 Authority Key Identifier:
keyid:72:67:30:58:85:9C:FD:70:12:94:1D:89:63:AD:CC:F6:30:0A:19:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cmcwWIWc_XASlB2JY63M9jAKGe8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/c98434-decc-404f-8049-4aa2eeb5267c/1/cmcwWIWc_XASlB2JY63M9jAKGe8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/c98434-decc-404f-8049-4aa2eeb5267c/1/cmcwWIWc_XASlB2JY63M9jAKGe8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:ba:f0:6e:1b:a9:88:6c:30:0d:8f:65:38:e0:a1:91:8e:99:
ae:95:93:45:2c:57:f3:60:e6:03:64:2b:58:9c:5c:89:06:a8:
42:8f:26:d7:ee:0a:86:e7:e9:88:82:3b:79:d3:2b:b0:14:89:
ae:64:7c:af:7c:61:7d:4e:82:64:da:58:c6:cf:fe:f8:7f:f3:
6f:de:cc:4f:9a:31:38:92:0b:45:ea:34:73:cc:91:74:29:89:
9f:a8:8a:d0:98:dd:c9:93:5e:b5:30:d4:ab:2c:4d:4a:31:33:
ae:4f:bb:9b:bf:61:67:8f:35:6d:59:f4:04:e7:e7:a8:1d:e9:
b6:4c:f8:96:1a:01:11:fd:c4:c3:37:7f:5d:42:88:e0:61:b6:
e4:e9:95:0c:cd:ea:66:58:96:af:29:44:d2:bb:9c:b1:0c:03:
33:1e:25:dc:72:6a:e0:ff:93:a7:32:b2:df:f0:ee:47:6b:f4:
de:08:aa:74:36:16:b6:bf:ef:d3:93:23:fb:7f:7c:3e:21:ea:
82:9a:eb:2f:5b:5a:22:da:e2:b4:f3:73:18:5d:c5:f9:31:f5:
3b:d4:34:5b:83:12:f6:5b:ea:3d:63:bc:1f:33:2d:e4:01:18:
f3:be:3a:58:38:10:2d:68:37:5e:3a:8f:8b:2a:0e:ad:5a:86:
87:d9:4c:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:00:19 2025 by rpki-client