Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/bcb6eb-e262-4d69-80fb-59b0fc913d36/1/cC9OAJQ3AMCJfeetvPztXRC_LgE.mft
File: cC9OAJQ3AMCJfeetvPztXRC_LgE.mft (raw, json)
Hash identifier: z13kM+iTx/PSKmDy0kry0fxzkA1K5BAHSBcuuP30T0o=
Subject key identifier: A0:5E:6C:90:28:D3:79:51:A9:14:A4:01:F8:98:45:27:E2:0A:E2:0E
Authority key identifier: 70:2F:4E:00:94:37:00:C0:89:7D:E7:AD:BC:FC:ED:5D:10:BF:2E:01
Certificate issuer: /CN=702f4e00943700c0897de7adbcfced5d10bf2e01
Certificate serial: 019894B709655C047FE743BBE6335AC17265
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cC9OAJQ3AMCJfeetvPztXRC_LgE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/bcb6eb-e262-4d69-80fb-59b0fc913d36/1/cC9OAJQ3AMCJfeetvPztXRC_LgE.mft
Manifest number: 1628
Signing time: Sun 10 Aug 2025 16:01:20 +0000
Manifest this update: Sun 10 Aug 2025 16:01:20 +0000
Manifest next update: Mon 11 Aug 2025 16:01:20 +0000
Files and hashes: 1: RHNggBb1TucAzNCR_Nr4pg_wiTI.roa (hash: gVu159ZiRDG0Y/9P6fbJjRdg/qCz0CZogXW7oBMzxmM=)
2: cC9OAJQ3AMCJfeetvPztXRC_LgE.crl (hash: l4SIaq7xy273eHWG86WUmHciej+inTz1nZHDZTFvjcc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/bcb6eb-e262-4d69-80fb-59b0fc913d36/1/cC9OAJQ3AMCJfeetvPztXRC_LgE.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/bcb6eb-e262-4d69-80fb-59b0fc913d36/1/cC9OAJQ3AMCJfeetvPztXRC_LgE.mft
rsync://rpki.ripe.net/repository/DEFAULT/cC9OAJQ3AMCJfeetvPztXRC_LgE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 16:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:94:b7:09:65:5c:04:7f:e7:43:bb:e6:33:5a:c1:72:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=702f4e00943700c0897de7adbcfced5d10bf2e01
Validity
Not Before: Aug 10 16:01:20 2025 GMT
Not After : Aug 11 16:01:20 2025 GMT
Subject: CN=a05e6c9028d37951a914a401f8984527e20ae20e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:0b:4c:a5:55:fc:45:be:fe:f6:ca:1e:92:2b:
0f:92:f7:16:8f:98:d9:a0:2c:88:e0:8a:93:8d:ec:
7b:4f:62:8b:ac:5e:17:e5:35:d2:a8:47:29:15:23:
d8:47:1a:84:ec:77:8f:f6:4f:a6:32:7d:5d:29:7b:
ef:c6:15:aa:82:e3:2a:7c:86:2e:b3:0c:46:c4:6a:
df:fa:72:e1:59:a2:1b:f2:34:bb:95:69:60:dd:be:
3f:30:81:73:c8:55:72:8e:3d:ec:5e:f1:49:59:7a:
99:29:af:c8:ae:38:64:05:f6:16:d2:24:bb:36:29:
02:78:30:21:e6:06:6c:b5:79:b9:a4:0d:56:b6:23:
bc:2f:d0:28:31:76:5e:50:b4:85:10:39:77:e7:5b:
05:2c:28:03:ff:da:92:d9:83:c8:ef:b3:3a:10:da:
d1:2a:e9:38:6a:5b:dc:c4:d4:b4:62:49:0e:30:5e:
86:79:35:40:58:97:95:72:e3:1e:3b:a0:e3:9e:6b:
c9:85:4f:f9:5b:61:e5:c4:92:f3:d0:41:12:60:55:
f7:e1:88:4a:9c:fc:96:0c:62:2d:71:5a:ef:3d:ab:
77:3b:b7:9c:81:fe:92:b1:14:4e:41:e2:9f:5b:43:
19:a8:42:25:58:68:b9:de:3d:99:e0:d7:1e:99:ca:
58:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:5E:6C:90:28:D3:79:51:A9:14:A4:01:F8:98:45:27:E2:0A:E2:0E
X509v3 Authority Key Identifier:
keyid:70:2F:4E:00:94:37:00:C0:89:7D:E7:AD:BC:FC:ED:5D:10:BF:2E:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cC9OAJQ3AMCJfeetvPztXRC_LgE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/bcb6eb-e262-4d69-80fb-59b0fc913d36/1/cC9OAJQ3AMCJfeetvPztXRC_LgE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/bcb6eb-e262-4d69-80fb-59b0fc913d36/1/cC9OAJQ3AMCJfeetvPztXRC_LgE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:9e:4c:82:c8:0a:b7:85:9f:83:89:8d:c4:39:f4:01:98:61:
e4:69:de:db:7b:1f:13:c9:cd:ee:7e:36:ce:27:bd:a0:53:b5:
7e:0b:52:28:5d:3a:f7:13:96:7d:ba:bb:b1:e6:75:af:2c:ff:
74:74:76:43:26:4f:43:66:97:30:11:4d:24:e1:59:e5:00:5a:
ac:7c:dc:1c:e2:29:7d:67:93:57:f0:89:6f:e0:ea:eb:b3:6c:
a5:9f:be:a3:96:0b:41:48:4e:2f:24:5a:e1:e6:74:5c:2e:62:
d2:93:96:e5:0d:82:07:08:52:47:76:25:85:66:62:ff:91:90:
4b:a8:cb:38:f7:94:f5:22:75:f8:5a:94:43:23:82:51:3e:15:
86:5c:bd:9b:dc:c5:30:38:b3:29:4e:d8:d4:77:f7:dd:69:be:
c5:c5:bc:48:94:8a:30:4b:df:31:4d:9b:6b:f0:ef:15:a9:48:
66:9a:a3:56:ea:2d:97:7f:4c:3c:e8:3d:1a:c8:cb:6e:11:ac:
c7:3e:b4:0b:d6:e3:64:e1:c6:e5:4a:06:26:20:04:df:43:fd:
a7:aa:08:8d:f9:50:40:ed:bc:bd:41:53:b6:8b:a7:6b:34:62:
4b:83:30:ce:7e:ca:0b:a1:00:bc:10:ad:dd:36:31:7d:79:5f:
38:1b:c2:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 18:12:11 2025 by rpki-client