Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/149cf6-611d-4e03-a660-dce1127ab223/1/cMvrOI9ZAsFhYLvtCWLLYisruDI.mft
File: cMvrOI9ZAsFhYLvtCWLLYisruDI.mft (raw, json)
Hash identifier: OHfa0YB5Yh4rnxHm0wkc/diOyRK5Te2Zo/+HmnfDG2A=
Subject key identifier: 2B:E9:3A:70:49:21:25:56:6F:7E:7F:84:14:F7:A9:98:F2:87:40:AD
Authority key identifier: 70:CB:EB:38:8F:59:02:C1:61:60:BB:ED:09:62:CB:62:2B:2B:B8:32
Certificate issuer: /CN=70cbeb388f5902c16160bbed0962cb622b2bb832
Certificate serial: 01987A88F1A00F230633D0CBAA6DC2DFC0CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cMvrOI9ZAsFhYLvtCWLLYisruDI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/149cf6-611d-4e03-a660-dce1127ab223/1/cMvrOI9ZAsFhYLvtCWLLYisruDI.mft
Manifest number: 0C2F
Signing time: Tue 05 Aug 2025 14:00:51 +0000
Manifest this update: Tue 05 Aug 2025 14:00:51 +0000
Manifest next update: Wed 06 Aug 2025 14:00:51 +0000
Files and hashes: 1: Jx2nTRr5pEsEFWo_5nDYJEdIJkI.roa (hash: 5SCIBFwRcqmCVA4jK7ObW5hmOVN8QwAIditbrQHD6YU=)
2: cMvrOI9ZAsFhYLvtCWLLYisruDI.crl (hash: K2SJQbe+bwRqUp9OHv83iLglxb1MnsXUFq9qTYy0C6k=)
3: fVZny3FRspGg7D4Ss3AUbX0JyBI.roa (hash: SocyXocZHSo8f5zsAWiffJrBZyiPOdy55HQXZcolvh4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/149cf6-611d-4e03-a660-dce1127ab223/1/cMvrOI9ZAsFhYLvtCWLLYisruDI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/149cf6-611d-4e03-a660-dce1127ab223/1/cMvrOI9ZAsFhYLvtCWLLYisruDI.mft
rsync://rpki.ripe.net/repository/DEFAULT/cMvrOI9ZAsFhYLvtCWLLYisruDI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 14:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7a:88:f1:a0:0f:23:06:33:d0:cb:aa:6d:c2:df:c0:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70cbeb388f5902c16160bbed0962cb622b2bb832
Validity
Not Before: Aug 5 14:00:51 2025 GMT
Not After : Aug 6 14:00:51 2025 GMT
Subject: CN=2be93a70492125566f7e7f8414f7a998f28740ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:e4:a1:af:1b:cf:e5:ce:ed:de:bc:99:52:c3:
46:50:45:6b:30:f3:ad:d8:81:c3:ad:dd:1d:92:4f:
87:88:87:cf:fe:67:20:41:22:95:75:cc:db:ad:b2:
5a:67:24:f8:99:d7:c9:72:78:13:b7:16:85:27:79:
6b:65:23:a3:50:eb:d0:48:9a:c8:62:07:6a:14:11:
65:a7:46:71:a0:fa:d4:a7:96:bb:51:aa:39:6a:13:
f7:3a:df:75:01:a6:80:1c:cd:26:2d:21:c2:51:aa:
44:13:36:11:85:04:73:fc:a6:3a:89:4e:ca:23:a9:
32:55:79:8f:1d:93:ca:55:f5:06:7b:47:4a:4f:20:
4b:31:8f:e3:5a:f2:e4:3d:6f:ed:ef:06:d9:11:47:
8c:e4:70:75:82:57:c3:bd:de:0d:96:af:fa:d0:32:
09:9d:d4:f3:0d:39:2e:ab:04:ed:81:78:4a:0a:4a:
56:4d:59:b3:27:66:18:a1:c2:f8:f9:1a:57:42:b0:
7f:fd:a2:a6:1a:25:6e:40:da:64:66:01:84:7f:35:
26:d3:95:60:70:31:8c:50:f6:05:50:a9:31:15:50:
1f:13:e1:55:ea:42:76:be:c8:65:60:99:31:96:ce:
12:a6:83:1a:d4:6c:9e:54:82:c4:7d:8e:a7:d3:3d:
d9:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:E9:3A:70:49:21:25:56:6F:7E:7F:84:14:F7:A9:98:F2:87:40:AD
X509v3 Authority Key Identifier:
keyid:70:CB:EB:38:8F:59:02:C1:61:60:BB:ED:09:62:CB:62:2B:2B:B8:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cMvrOI9ZAsFhYLvtCWLLYisruDI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/149cf6-611d-4e03-a660-dce1127ab223/1/cMvrOI9ZAsFhYLvtCWLLYisruDI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/149cf6-611d-4e03-a660-dce1127ab223/1/cMvrOI9ZAsFhYLvtCWLLYisruDI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:d0:d5:fc:4c:9c:20:66:f3:58:8b:06:57:fa:12:85:7b:93:
b5:3f:c5:7b:12:9a:45:97:c8:f0:a9:64:22:02:95:f8:d4:9d:
21:df:3d:a7:56:bd:46:a6:83:05:22:74:dc:1e:d1:d0:d4:0d:
c1:03:a3:4d:7d:ed:b8:20:29:54:76:f0:8a:b0:1e:04:3e:b1:
81:c7:a9:77:90:8c:22:3d:21:08:1e:57:75:8b:32:78:b3:33:
01:01:3e:92:24:ce:bf:ec:10:8d:ba:f3:8b:63:d7:39:f6:53:
95:b1:e0:0f:31:b2:ad:4a:85:43:1f:28:21:67:44:c3:f9:d7:
d2:c7:bd:67:db:1b:8b:de:5a:e9:c3:bb:8a:ad:28:f6:f2:d6:
e4:59:ea:2c:e8:a4:78:44:15:61:6c:5a:70:bd:a4:f0:d2:1a:
7f:f6:fa:20:e8:2c:b7:68:ce:0b:7f:ff:90:e2:06:f2:61:d8:
18:e5:84:aa:f5:08:c8:03:c3:cc:92:55:12:d6:4d:4d:a7:f0:
63:6d:3d:a6:37:e5:14:d7:6d:d8:8d:67:22:81:fe:35:e2:f2:
d0:73:28:c2:a8:60:79:c1:49:f2:b4:4c:d2:68:b6:e4:ed:17:
67:de:ae:c2:9e:55:f7:2e:73:d8:46:f4:9c:a3:15:e3:3a:a6:
90:00:f2:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 17:08:12 2025 by rpki-client