Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/585e61-9a49-45a9-91f7-df8adad897bf/1/C2kIfO9gA1jvmMHJfaByNN_Q4Dc.mft
File: C2kIfO9gA1jvmMHJfaByNN_Q4Dc.mft (raw, json)
Hash identifier: o2uaL6wdQzrV0dzEXkdfqIytRNuibMzD4bq/gwFLYuA=
Subject key identifier: 33:E9:BE:D4:82:D2:19:57:7F:8A:D5:B5:80:3C:EF:E1:67:FC:E7:23
Authority key identifier: 0B:69:08:7C:EF:60:03:58:EF:98:C1:C9:7D:A0:72:34:DF:D0:E0:37
Certificate issuer: /CN=0b69087cef600358ef98c1c97da07234dfd0e037
Certificate serial: 019874F4A93285728057A538DAA0C6C004E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C2kIfO9gA1jvmMHJfaByNN_Q4Dc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/585e61-9a49-45a9-91f7-df8adad897bf/1/C2kIfO9gA1jvmMHJfaByNN_Q4Dc.mft
Manifest number: 88
Signing time: Mon 04 Aug 2025 12:00:47 +0000
Manifest this update: Mon 04 Aug 2025 12:00:47 +0000
Manifest next update: Tue 05 Aug 2025 12:00:47 +0000
Files and hashes: 1: B9IzXLL2ixuUY8NCctMry3Z9SSY.roa (hash: LgY0TUvH+7Vh/0iBbmvFVKw12ZRzdi35NQADfuagyL0=)
2: C2kIfO9gA1jvmMHJfaByNN_Q4Dc.crl (hash: qcGC401HWkhCzP34rC5LhN2Eebw2YWtxhIZ87qvGZbk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/585e61-9a49-45a9-91f7-df8adad897bf/1/C2kIfO9gA1jvmMHJfaByNN_Q4Dc.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/585e61-9a49-45a9-91f7-df8adad897bf/1/C2kIfO9gA1jvmMHJfaByNN_Q4Dc.mft
rsync://rpki.ripe.net/repository/DEFAULT/C2kIfO9gA1jvmMHJfaByNN_Q4Dc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 12:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:f4:a9:32:85:72:80:57:a5:38:da:a0:c6:c0:04:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b69087cef600358ef98c1c97da07234dfd0e037
Validity
Not Before: Aug 4 12:00:47 2025 GMT
Not After : Aug 5 12:00:47 2025 GMT
Subject: CN=33e9bed482d219577f8ad5b5803cefe167fce723
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:9c:14:f3:f4:7c:52:7e:d7:0e:18:23:4f:e0:
6b:08:27:3b:aa:72:dd:6d:48:bf:07:4d:4b:06:4e:
40:31:2a:c1:85:ba:c8:56:17:8f:a3:a5:e5:ba:39:
46:a3:9b:d6:5b:d1:fc:c3:6e:e8:58:bd:dc:45:0c:
0f:0e:c9:6a:69:fb:da:69:52:8f:91:77:c2:6e:29:
3c:ab:96:e9:3f:54:99:3b:dd:aa:0c:5c:c3:9e:e2:
05:cc:64:89:17:46:28:29:99:6e:5b:16:ec:52:82:
c6:8a:94:d4:fd:8b:8f:88:2f:98:0c:57:f6:85:0b:
ab:bb:21:16:4e:59:da:49:80:60:bc:20:f7:c6:61:
dc:11:06:8e:da:8e:19:94:7e:06:2e:7c:24:07:e1:
9d:23:95:f6:d9:18:96:53:8d:8f:82:6a:0f:e2:bb:
12:03:22:d0:11:18:60:67:d7:e8:9f:f5:67:29:e4:
e5:99:4c:a8:e1:1c:44:ea:1a:2e:db:50:47:63:20:
bd:b0:ac:cb:05:f4:66:c7:a5:54:ab:81:16:08:18:
84:85:09:6b:68:f1:2d:0d:28:98:92:35:3e:da:e6:
0c:d8:89:c7:13:f5:41:ae:37:4f:52:90:5c:2c:a8:
9f:42:c8:36:a2:81:32:a0:1e:96:30:c3:17:04:2f:
5f:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:E9:BE:D4:82:D2:19:57:7F:8A:D5:B5:80:3C:EF:E1:67:FC:E7:23
X509v3 Authority Key Identifier:
keyid:0B:69:08:7C:EF:60:03:58:EF:98:C1:C9:7D:A0:72:34:DF:D0:E0:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C2kIfO9gA1jvmMHJfaByNN_Q4Dc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/585e61-9a49-45a9-91f7-df8adad897bf/1/C2kIfO9gA1jvmMHJfaByNN_Q4Dc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/585e61-9a49-45a9-91f7-df8adad897bf/1/C2kIfO9gA1jvmMHJfaByNN_Q4Dc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:0f:0e:e0:70:ad:26:4d:07:e3:53:00:d0:7b:91:68:b2:90:
46:e8:1b:f5:f2:37:4c:e7:f9:4b:ed:9c:00:ec:1d:53:0b:92:
6a:2c:4a:4c:46:81:10:3b:49:e0:05:ce:33:5d:f2:4d:8d:4a:
d9:25:aa:88:9b:4a:7d:a6:98:93:14:06:29:64:2d:a3:08:6d:
d2:d0:4a:0f:da:46:3b:96:79:a9:b2:1f:94:ba:a5:bc:f1:84:
f8:6b:f2:ae:01:75:c8:26:95:d0:8f:3e:98:c3:7a:0b:23:75:
e6:81:57:b0:10:8e:24:61:94:0a:9a:8d:bc:d7:c7:a5:9e:bc:
f0:bf:8c:57:ef:7c:06:7a:0d:e1:1c:ff:ce:51:f2:00:4c:ce:
6f:43:b3:8b:57:76:e4:04:d5:12:e3:f9:78:99:86:cb:bf:c1:
a7:b6:01:98:84:0d:fe:3c:80:e6:13:b6:80:18:51:e7:4e:33:
9f:df:84:52:1e:70:96:4e:70:d2:3f:8c:c3:8d:4d:f0:d6:95:
10:72:26:ee:94:79:9f:d3:60:ae:d8:c1:4a:4a:31:7a:93:f9:
3a:9c:03:d4:0f:c7:83:3f:e2:14:2d:fa:35:c4:17:f3:3f:16:
32:42:26:44:44:87:58:b4:a2:57:29:4a:8c:e3:7d:d3:c6:7c:
1f:a3:3f:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 21:31:12 2025 by rpki-client