Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/eae3d7-eee8-421e-80d9-982cce868ffa/1/CU6hz0_cNHXB8o1hHB8Y_gJ8EJg.mft
File: CU6hz0_cNHXB8o1hHB8Y_gJ8EJg.mft (raw, json)
Hash identifier: FDb+ulJf5QcfKoEmjRECKv8dLjzCJA+RKjZq18NgQvc=
Subject key identifier: C0:6C:29:F1:70:98:16:2E:C0:D2:D4:21:F2:C1:04:FF:36:C7:12:5C
Authority key identifier: 09:4E:A1:CF:4F:DC:34:75:C1:F2:8D:61:1C:1F:18:FE:02:7C:10:98
Certificate issuer: /CN=094ea1cf4fdc3475c1f28d611c1f18fe027c1098
Certificate serial: 01988CFE9B4CBED5A74FEA42319CC0122D88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CU6hz0_cNHXB8o1hHB8Y_gJ8EJg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/eae3d7-eee8-421e-80d9-982cce868ffa/1/CU6hz0_cNHXB8o1hHB8Y_gJ8EJg.mft
Manifest number: 1623
Signing time: Sat 09 Aug 2025 04:02:32 +0000
Manifest this update: Sat 09 Aug 2025 04:02:32 +0000
Manifest next update: Sun 10 Aug 2025 04:02:32 +0000
Files and hashes: 1: CU6hz0_cNHXB8o1hHB8Y_gJ8EJg.crl (hash: W3j/K1Q+gQrzBichJ+SfxzxXtuALH5xdRNbHyVsHFO4=)
2: tsQCK0at0tvh2TQxSMohTv0qJJo.roa (hash: 6ge8utmi5hP9DNzFySVDCcGypw9lo+O2IamCCwk3yDs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/eae3d7-eee8-421e-80d9-982cce868ffa/1/CU6hz0_cNHXB8o1hHB8Y_gJ8EJg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/eae3d7-eee8-421e-80d9-982cce868ffa/1/CU6hz0_cNHXB8o1hHB8Y_gJ8EJg.mft
rsync://rpki.ripe.net/repository/DEFAULT/CU6hz0_cNHXB8o1hHB8Y_gJ8EJg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 04:02:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8c:fe:9b:4c:be:d5:a7:4f:ea:42:31:9c:c0:12:2d:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=094ea1cf4fdc3475c1f28d611c1f18fe027c1098
Validity
Not Before: Aug 9 04:02:32 2025 GMT
Not After : Aug 10 04:02:32 2025 GMT
Subject: CN=c06c29f17098162ec0d2d421f2c104ff36c7125c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:07:bc:ec:bb:fa:fa:17:09:79:eb:09:d7:c7:
d1:9c:03:b4:20:09:e6:6b:7d:88:71:0b:01:c7:ae:
3f:ac:24:38:76:c5:06:e4:0c:d9:8e:dc:be:55:bc:
c9:0b:2c:99:e2:39:e4:bd:c3:d5:5c:f2:ae:21:c6:
a1:b0:3b:fb:2a:c3:82:ab:f7:cb:71:9d:79:ee:42:
73:a4:65:22:cb:bf:8d:78:dd:56:43:18:ab:fb:d3:
d8:ea:28:e6:a2:79:35:5c:5d:72:14:f2:77:a1:e1:
b6:ca:3d:a7:ee:08:80:f2:80:c5:3e:23:24:95:31:
6a:d0:60:5f:52:5e:08:02:1d:eb:78:c6:4a:fb:ed:
71:6b:bb:3b:5d:b0:28:42:c5:e6:16:4b:4b:d4:bc:
11:d0:f5:d2:ef:d5:95:6a:55:6a:93:66:64:b2:ed:
2d:e4:1e:2d:4f:16:d2:71:0e:2d:2f:f0:18:11:75:
23:7c:e4:bb:e8:2b:a1:14:ce:1b:7f:9f:b2:b0:58:
75:c5:27:a1:5f:b7:fc:ff:64:f0:d2:6c:66:1f:7e:
f6:44:ea:d2:d1:8e:e2:ac:53:10:a3:1a:5e:71:1d:
ef:3a:49:e7:0b:7a:50:0b:d5:1e:61:47:b6:4f:cb:
d1:36:39:08:db:25:21:d7:b3:48:2f:cf:2c:90:64:
a8:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:6C:29:F1:70:98:16:2E:C0:D2:D4:21:F2:C1:04:FF:36:C7:12:5C
X509v3 Authority Key Identifier:
keyid:09:4E:A1:CF:4F:DC:34:75:C1:F2:8D:61:1C:1F:18:FE:02:7C:10:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CU6hz0_cNHXB8o1hHB8Y_gJ8EJg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/eae3d7-eee8-421e-80d9-982cce868ffa/1/CU6hz0_cNHXB8o1hHB8Y_gJ8EJg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/eae3d7-eee8-421e-80d9-982cce868ffa/1/CU6hz0_cNHXB8o1hHB8Y_gJ8EJg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:19:c1:f7:f1:e9:03:cd:fb:69:d9:4f:12:c9:db:a1:3e:bb:
58:fe:25:b8:79:d2:a7:90:5b:26:30:56:24:89:50:8f:63:b0:
16:8d:89:e7:36:5d:b8:92:a1:95:bd:4a:c8:4d:8d:f0:55:aa:
59:64:19:2c:5f:30:11:69:84:53:08:38:a9:e6:6b:8c:08:0e:
d6:ce:2f:23:f1:c7:6b:07:be:ea:bb:7a:e4:ff:02:96:37:27:
ea:59:f7:ce:5c:5e:18:96:1d:63:2c:d1:5f:93:bd:88:09:f4:
19:e5:c3:07:d2:9b:47:da:3a:89:f9:e4:1e:56:6e:3c:d7:41:
5a:5f:70:70:b6:c3:19:4a:72:fd:fe:1a:20:e3:8b:d5:c0:f2:
83:a1:e0:90:25:da:cb:3a:a0:7f:19:cc:e9:96:ff:1f:8a:e6:
f2:ea:13:16:4e:07:ec:b4:39:12:d1:2c:1e:b6:ae:55:ee:6a:
cf:52:5e:d9:bb:71:32:45:31:42:4f:52:66:77:c7:41:82:ce:
83:6f:bd:5f:7c:bc:0f:23:b6:1c:ce:62:c8:c7:97:7b:ef:c5:
64:75:60:15:d5:d8:28:db:48:ce:ba:7a:d1:c6:1b:3f:f9:4d:
80:73:33:96:ea:88:35:54:b5:5f:f1:bc:b2:41:0e:0d:14:fb:
2d:93:73:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 10:32:52 2025 by rpki-client