Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/014f47-628b-4fb8-b344-a409e22a243e/1/cKdpKcviHO3ZTAErpYuwtvEpci4.mft
File: cKdpKcviHO3ZTAErpYuwtvEpci4.mft (raw, json)
Hash identifier: D8NA8wREWi7Q/TA5d+7655OXamPx+Wu50nOrW6SXwnI=
Subject key identifier: A1:FE:51:66:3D:6C:1A:41:C1:62:DE:1D:FB:67:19:A5:DB:FC:16:E0
Authority key identifier: 70:A7:69:29:CB:E2:1C:ED:D9:4C:01:2B:A5:8B:B0:B6:F1:29:72:2E
Certificate issuer: /CN=70a76929cbe21cedd94c012ba58bb0b6f129722e
Certificate serial: 01987C77FD4678CEFD18E177BD9651AD1AE2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cKdpKcviHO3ZTAErpYuwtvEpci4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/014f47-628b-4fb8-b344-a409e22a243e/1/cKdpKcviHO3ZTAErpYuwtvEpci4.mft
Manifest number: 161A
Signing time: Tue 05 Aug 2025 23:01:35 +0000
Manifest this update: Tue 05 Aug 2025 23:01:35 +0000
Manifest next update: Wed 06 Aug 2025 23:01:35 +0000
Files and hashes: 1: cKdpKcviHO3ZTAErpYuwtvEpci4.crl (hash: EmcfqNALiTW/FC71Q2bKkrvdr5GsjGpZt5w8xqCBCGA=)
2: inuScwE1S9lEULUDFOPt0YYBMRU.roa (hash: hvD+jjYBAY5jZaJA8u8QgEl8M7kubkCEj9ntL0iNAX4=)
3: jP0oG4-lTwdPgvwQsai3xzsKBUA.roa (hash: cwxrU32A7FjEaD6Xb0+naWkVMI0iVDnV1C3ohgsG2Sc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/014f47-628b-4fb8-b344-a409e22a243e/1/cKdpKcviHO3ZTAErpYuwtvEpci4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/014f47-628b-4fb8-b344-a409e22a243e/1/cKdpKcviHO3ZTAErpYuwtvEpci4.mft
rsync://rpki.ripe.net/repository/DEFAULT/cKdpKcviHO3ZTAErpYuwtvEpci4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 23:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7c:77:fd:46:78:ce:fd:18:e1:77:bd:96:51:ad:1a:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70a76929cbe21cedd94c012ba58bb0b6f129722e
Validity
Not Before: Aug 5 23:01:35 2025 GMT
Not After : Aug 6 23:01:35 2025 GMT
Subject: CN=a1fe51663d6c1a41c162de1dfb6719a5dbfc16e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:78:1f:01:b5:f9:80:06:fe:a6:8c:38:7a:a9:
e7:bf:48:c9:ba:f1:93:07:44:ec:fa:9a:77:ba:22:
d2:53:0f:f1:9e:4d:85:fb:25:16:8c:be:19:94:1f:
fb:41:43:c8:c9:7a:33:8a:62:7f:60:fb:a3:a2:68:
95:38:b7:b4:38:51:cc:f7:17:a1:55:81:f3:7a:f0:
4f:a6:db:ee:0f:68:b1:21:75:ea:17:d4:5c:82:46:
75:fd:f7:87:9f:2c:1b:10:bb:f5:bb:81:5c:a0:f3:
0e:cd:e0:ba:41:d1:3a:05:68:a8:14:2b:58:d1:15:
c3:08:db:99:ad:3a:ed:f6:5f:32:ec:86:59:d9:3b:
d2:53:83:b0:c3:6e:fd:7f:d6:51:29:d9:ea:40:aa:
21:56:aa:5f:48:8d:0f:1a:a5:a7:46:13:4c:06:41:
3c:42:d8:f5:a1:52:38:16:1a:9c:18:95:b9:b2:76:
44:de:41:49:eb:6a:ac:f9:d4:e0:ed:ec:56:a2:5f:
a5:6d:4a:04:ab:31:9b:68:9e:7a:cd:c2:15:f3:20:
1e:fc:bd:48:f7:99:73:d7:d0:b8:cf:4a:9d:ac:ab:
38:bc:a7:f3:1b:6a:53:f7:61:a5:6c:c2:86:32:24:
aa:84:db:16:18:cb:7a:e8:27:34:71:fa:4f:19:cc:
32:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:FE:51:66:3D:6C:1A:41:C1:62:DE:1D:FB:67:19:A5:DB:FC:16:E0
X509v3 Authority Key Identifier:
keyid:70:A7:69:29:CB:E2:1C:ED:D9:4C:01:2B:A5:8B:B0:B6:F1:29:72:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cKdpKcviHO3ZTAErpYuwtvEpci4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/014f47-628b-4fb8-b344-a409e22a243e/1/cKdpKcviHO3ZTAErpYuwtvEpci4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/014f47-628b-4fb8-b344-a409e22a243e/1/cKdpKcviHO3ZTAErpYuwtvEpci4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:da:0c:71:7d:77:4f:b9:b6:62:31:c4:00:50:20:ce:90:ec:
70:b7:ba:85:e4:d3:0e:bb:51:6d:5e:7c:cf:be:2c:d8:f7:28:
87:92:ca:7f:c4:7b:40:28:a8:7f:b9:28:c0:2c:c1:47:86:78:
0d:d3:96:38:6a:77:4c:27:df:e2:1b:c3:55:d3:e3:ce:0a:3e:
f9:16:99:54:10:99:fe:0f:d6:7b:18:b9:1d:6f:d5:90:33:c3:
40:54:25:5b:2d:ce:53:7c:31:e5:5e:48:ae:79:6f:d6:46:46:
93:c6:20:11:70:70:8d:3f:89:3e:e8:4b:4a:14:d6:1d:92:26:
51:3c:e7:e4:b4:1b:6c:1c:76:0d:4e:d5:cc:a2:7a:3f:3b:da:
6d:c8:dd:92:13:b7:70:62:2d:76:b2:3d:cf:d0:8a:df:a7:a9:
cf:74:92:87:b0:8f:49:15:40:a2:71:10:d4:ac:95:e7:bf:b1:
a1:a0:d2:ea:dc:f5:c0:d5:b6:48:93:cb:4b:9a:7c:06:da:e0:
e5:5e:50:bf:91:46:46:70:10:f3:b6:92:78:40:18:17:fc:13:
35:6a:a6:e8:6d:40:3e:5a:a5:f3:25:04:21:b5:10:b9:84:c9:
02:7c:5d:f7:a6:9e:af:56:87:87:1d:bf:ac:d5:03:b7:cd:aa:
ae:ee:41:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 10:02:28 2025 by rpki-client