Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/1e1a97-f276-4a51-b1b5-8c10909a485c/1/C52GCWpJEQz5v2cCQLUZMVtmq8s.mft
File: C52GCWpJEQz5v2cCQLUZMVtmq8s.mft (raw, json)
Hash identifier: f5WMua0zTmdd+tVdd+Stk6VQxq2oRooP7ZNrcGWC5rs=
Subject key identifier: 1A:6E:40:E0:FA:95:E4:12:4B:22:BA:3C:CB:D6:D9:81:29:45:60:3D
Authority key identifier: 0B:9D:86:09:6A:49:11:0C:F9:BF:67:02:40:B5:19:31:5B:66:AB:CB
Certificate issuer: /CN=0b9d86096a49110cf9bf670240b519315b66abcb
Certificate serial: 019873748018788245B19BE27AD6141C077C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C52GCWpJEQz5v2cCQLUZMVtmq8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/1e1a97-f276-4a51-b1b5-8c10909a485c/1/C52GCWpJEQz5v2cCQLUZMVtmq8s.mft
Manifest number: 1627
Signing time: Mon 04 Aug 2025 05:01:11 +0000
Manifest this update: Mon 04 Aug 2025 05:01:11 +0000
Manifest next update: Tue 05 Aug 2025 05:01:11 +0000
Files and hashes: 1: BnZ18m27JG41iStc-0bf7RUhMqc.roa (hash: 506prusX3qMZHHvl16GjdziNik+Zaiptx5uE6D2elAc=)
2: C52GCWpJEQz5v2cCQLUZMVtmq8s.crl (hash: mZHdT9w4evh35ZmaKP6PixD11U8DNbzP915pKOCPnBQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/1e1a97-f276-4a51-b1b5-8c10909a485c/1/C52GCWpJEQz5v2cCQLUZMVtmq8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/1e1a97-f276-4a51-b1b5-8c10909a485c/1/C52GCWpJEQz5v2cCQLUZMVtmq8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/C52GCWpJEQz5v2cCQLUZMVtmq8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 05:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:74:80:18:78:82:45:b1:9b:e2:7a:d6:14:1c:07:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b9d86096a49110cf9bf670240b519315b66abcb
Validity
Not Before: Aug 4 05:01:11 2025 GMT
Not After : Aug 5 05:01:11 2025 GMT
Subject: CN=1a6e40e0fa95e4124b22ba3ccbd6d9812945603d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:4d:3e:a9:ea:75:7d:e0:d3:ee:3f:05:85:07:
5d:a6:ff:5b:a2:47:3c:3d:cc:14:f1:ff:50:3a:e8:
e4:11:a0:72:a1:ab:14:b2:d4:c7:6c:6f:87:e3:28:
33:85:04:0a:1a:3d:00:d0:7f:88:81:9b:86:3a:48:
b4:b7:7c:f9:e3:c3:9d:ec:9f:a6:59:3b:4d:5a:b9:
e9:17:d1:4a:50:bb:0e:a1:e0:aa:f4:6d:fc:67:2b:
0a:75:a1:93:7c:8a:0f:28:78:6c:06:7e:0d:4e:0a:
44:8d:72:e0:5a:68:60:6c:14:4a:38:94:5b:df:47:
ef:6b:77:f1:1d:5d:7b:d2:0e:ff:d6:12:c2:fe:d4:
04:7b:88:46:a1:4a:51:1c:a8:53:16:05:da:08:db:
c1:2b:2b:83:b5:1d:9a:f7:65:ca:3c:23:cd:65:f4:
ef:8b:67:8a:1a:fc:b1:06:b4:cb:df:da:50:24:c0:
83:a8:95:09:b2:14:2c:e4:05:f4:ee:36:f9:f8:55:
4f:85:3a:6a:ce:22:00:ed:3d:ec:44:46:29:ff:4e:
05:46:a4:c4:fc:9b:c7:b3:48:37:e5:c1:8a:90:86:
37:8a:2a:8e:8b:55:16:52:ce:b7:1b:86:86:e8:a5:
27:1e:1b:fb:4b:c0:a6:96:78:37:87:19:e6:6e:92:
58:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:6E:40:E0:FA:95:E4:12:4B:22:BA:3C:CB:D6:D9:81:29:45:60:3D
X509v3 Authority Key Identifier:
keyid:0B:9D:86:09:6A:49:11:0C:F9:BF:67:02:40:B5:19:31:5B:66:AB:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C52GCWpJEQz5v2cCQLUZMVtmq8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/1e1a97-f276-4a51-b1b5-8c10909a485c/1/C52GCWpJEQz5v2cCQLUZMVtmq8s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/1e1a97-f276-4a51-b1b5-8c10909a485c/1/C52GCWpJEQz5v2cCQLUZMVtmq8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:b4:34:3e:f6:8f:8f:dd:a7:36:cf:1b:4e:bb:51:e6:84:eb:
f7:5a:94:a7:da:a7:2e:8b:95:4b:4d:3e:02:a6:df:c0:17:22:
8c:63:85:6d:2b:ce:2e:b9:35:0d:99:63:57:70:e0:38:26:7c:
96:1f:69:20:1e:d2:47:5d:79:67:ab:f1:d2:13:aa:9d:dc:e2:
20:01:da:2c:43:b9:83:51:d4:1e:2e:d6:a7:ba:17:69:a7:92:
af:b5:1f:7a:cc:9b:e1:81:8a:ec:cf:bf:e5:84:b9:31:c6:34:
3e:40:81:7d:15:14:47:d9:d9:5b:9e:3c:71:97:e5:29:2e:cc:
b2:66:54:d0:b9:c4:c2:87:b5:d1:1d:cc:82:a3:42:a8:f7:e3:
35:85:ec:23:f6:cb:fb:af:af:96:e5:64:06:89:32:6e:41:6d:
3e:78:17:ee:56:6b:b9:a6:15:51:f6:38:97:09:64:f9:4c:5a:
f4:45:e7:39:69:40:cf:36:12:e1:70:9f:fe:60:a7:8a:df:c1:
c3:34:5a:88:10:ea:0a:bd:49:b6:98:db:25:3e:fc:95:89:29:
cd:f7:2f:65:f5:f4:54:bd:60:89:33:34:bc:e6:e9:e6:4e:c0:
7d:b8:b4:f2:33:3c:f7:78:29:b9:28:4c:f0:20:14:f0:21:48:
86:7d:e6:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 15:36:20 2025 by rpki-client