Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/d0abd0-b114-4e3a-ae59-e21763c672fa/1/cGdFrZI1PaioDLLg0inWjC71PbI.mft
File: cGdFrZI1PaioDLLg0inWjC71PbI.mft (raw, json)
Hash identifier: Gynj7I30yoaxIjxKUU2Bp4ODuWs7epHdGfPclgX0avs=
Subject key identifier: 64:68:12:A4:DC:54:D6:D8:5B:25:6B:7C:AA:01:8C:BC:C0:0E:DB:53
Authority key identifier: 70:67:45:AD:92:35:3D:A8:A8:0C:B2:E0:D2:29:D6:8C:2E:F5:3D:B2
Certificate issuer: /CN=706745ad92353da8a80cb2e0d229d68c2ef53db2
Certificate serial: 01987298C7F91218737514CC50322F1D43DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cGdFrZI1PaioDLLg0inWjC71PbI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/d0abd0-b114-4e3a-ae59-e21763c672fa/1/cGdFrZI1PaioDLLg0inWjC71PbI.mft
Manifest number: 69
Signing time: Mon 04 Aug 2025 01:01:11 +0000
Manifest this update: Mon 04 Aug 2025 01:01:11 +0000
Manifest next update: Tue 05 Aug 2025 01:01:11 +0000
Files and hashes: 1: cGdFrZI1PaioDLLg0inWjC71PbI.crl (hash: Qai3erEBERuyx3jWzZzo71VnUOl4p5F+T6njcrnH9qA=)
2: l3EQEBZnleFof5yb88UhTSSdRTM.roa (hash: UQRjHQuRnFXbfdwyx6MJct5Sj+7na+HTqU/QptK8INI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/d0abd0-b114-4e3a-ae59-e21763c672fa/1/cGdFrZI1PaioDLLg0inWjC71PbI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/d0abd0-b114-4e3a-ae59-e21763c672fa/1/cGdFrZI1PaioDLLg0inWjC71PbI.mft
rsync://rpki.ripe.net/repository/DEFAULT/cGdFrZI1PaioDLLg0inWjC71PbI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 01:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:72:98:c7:f9:12:18:73:75:14:cc:50:32:2f:1d:43:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=706745ad92353da8a80cb2e0d229d68c2ef53db2
Validity
Not Before: Aug 4 01:01:11 2025 GMT
Not After : Aug 5 01:01:11 2025 GMT
Subject: CN=646812a4dc54d6d85b256b7caa018cbcc00edb53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:f4:85:e1:2b:72:89:c9:e6:f3:fa:ce:8f:3d:
0f:c0:0f:5d:0e:3a:f2:55:47:84:22:08:44:2f:98:
4f:cf:6a:e4:cf:c3:33:64:04:c1:9d:22:4f:df:c2:
59:76:c2:a9:92:4f:41:9c:a6:a4:17:ed:62:a3:9f:
d9:1b:46:6c:1b:e0:82:b5:bf:60:c8:6f:6e:3e:8d:
d7:24:50:d1:ad:c8:96:09:d8:29:d2:2b:7e:99:e5:
26:59:21:50:5d:cd:c1:72:ff:5b:c2:16:a0:37:42:
2e:73:a9:02:ed:60:e3:46:57:e6:dd:9b:e6:69:62:
cd:2f:2e:56:57:bd:fb:1c:c5:ea:c0:32:2a:34:e2:
77:bf:9f:0c:58:58:c9:70:08:15:e6:21:0c:5c:f8:
84:99:0c:67:14:8a:c8:35:72:70:b0:26:6c:f0:46:
28:01:e9:c0:e4:53:14:46:5f:4b:9e:20:fa:cc:58:
ea:9e:14:38:63:15:b4:d6:4e:b1:cb:36:b0:4c:06:
98:5f:38:58:47:e1:b8:dc:6a:1a:88:1e:1c:50:b6:
f4:d2:52:ea:79:a5:4b:9d:3a:8b:79:34:6f:b1:e8:
d1:94:25:98:01:74:b8:85:05:08:4d:77:2c:46:21:
ff:13:f6:10:c8:f7:69:ba:18:35:56:46:2c:77:3a:
d5:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:68:12:A4:DC:54:D6:D8:5B:25:6B:7C:AA:01:8C:BC:C0:0E:DB:53
X509v3 Authority Key Identifier:
keyid:70:67:45:AD:92:35:3D:A8:A8:0C:B2:E0:D2:29:D6:8C:2E:F5:3D:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cGdFrZI1PaioDLLg0inWjC71PbI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/d0abd0-b114-4e3a-ae59-e21763c672fa/1/cGdFrZI1PaioDLLg0inWjC71PbI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/d0abd0-b114-4e3a-ae59-e21763c672fa/1/cGdFrZI1PaioDLLg0inWjC71PbI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:8b:2d:7f:39:0b:f4:f9:46:3d:9f:44:bc:f5:db:a3:3e:d0:
6d:81:0e:dd:e9:64:1e:c1:84:f9:ea:cc:a4:78:81:21:ed:4b:
b3:e8:6e:7a:cf:85:97:5a:66:9b:3c:26:a2:a7:54:e9:0c:a4:
25:a1:4e:57:ce:c5:74:4a:67:dc:a8:d2:5d:35:df:fd:f6:b1:
4c:4f:36:11:d6:54:3f:49:81:14:17:42:40:f0:24:3c:8e:a9:
ed:cc:af:df:7b:53:a3:35:3c:1d:9b:64:c6:a8:23:09:f2:de:
a4:9f:76:85:44:0b:b9:5b:4c:81:cd:d8:a4:41:2d:0c:9f:11:
fa:40:53:d2:5a:2e:42:09:1a:3d:1a:2f:c8:5b:e8:e5:19:97:
df:6b:26:00:fe:b6:6a:f8:1e:14:c7:4d:5a:b8:70:cc:ad:30:
fe:b7:1c:59:ad:46:fa:1b:48:ae:4f:40:13:0d:c7:70:6c:1d:
0a:dc:0d:6f:84:9a:66:d2:20:a5:bd:42:41:b2:76:86:a2:ce:
6c:95:4a:e6:37:7b:74:ee:f4:5c:91:9b:b5:91:f6:5e:69:61:
9d:4a:c6:ef:9a:74:20:cc:63:65:05:a8:2d:1e:09:d0:c6:20:
cf:28:86:8f:84:1f:ee:84:33:41:36:1f:54:f5:0a:83:ed:9d:
7c:c2:e2:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:22:01 2025 by rpki-client