Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/5776a3-06dd-4980-8f6f-d3e3c78e7c44/1/Cl7G4GYNtvYluXi-DV7nHC3NRlo.mft
File: Cl7G4GYNtvYluXi-DV7nHC3NRlo.mft (raw, json)
Hash identifier: u73z7b9qa6pkcqzlKc4XFvyPz3LXGyGvTQczRuvQPK4=
Subject key identifier: 05:7C:4A:06:09:2C:1F:9A:C5:C7:2A:3F:3F:65:47:96:02:97:68:24
Authority key identifier: 0A:5E:C6:E0:66:0D:B6:F6:25:B9:78:BE:0D:5E:E7:1C:2D:CD:46:5A
Certificate issuer: /CN=0a5ec6e0660db6f625b978be0d5ee71c2dcd465a
Certificate serial: 01987373DD7ED600FB9C93E9D219BEE19CE5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cl7G4GYNtvYluXi-DV7nHC3NRlo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/5776a3-06dd-4980-8f6f-d3e3c78e7c44/1/Cl7G4GYNtvYluXi-DV7nHC3NRlo.mft
Manifest number: 1617
Signing time: Mon 04 Aug 2025 05:00:29 +0000
Manifest this update: Mon 04 Aug 2025 05:00:29 +0000
Manifest next update: Tue 05 Aug 2025 05:00:29 +0000
Files and hashes: 1: Cl7G4GYNtvYluXi-DV7nHC3NRlo.crl (hash: 45LnU3Bliq1nyAZt9FUJfkCMdBVptR7be8AI3uL9Wec=)
2: oMIi1pEOv1jeJYH_D8-bsx7eN14.roa (hash: L6yUeA60s1oezRJ3/Hwo53eHZ4mzV9eSXG/AVf/FB4E=)
3: ylHfNJxivzSDEST10fWDem7vKnQ.roa (hash: A5nWEbRO5hkEAdJU6Q2r7yPo+a47nvfcEeJhbXc7xME=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/5776a3-06dd-4980-8f6f-d3e3c78e7c44/1/Cl7G4GYNtvYluXi-DV7nHC3NRlo.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/5776a3-06dd-4980-8f6f-d3e3c78e7c44/1/Cl7G4GYNtvYluXi-DV7nHC3NRlo.mft
rsync://rpki.ripe.net/repository/DEFAULT/Cl7G4GYNtvYluXi-DV7nHC3NRlo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:73:dd:7e:d6:00:fb:9c:93:e9:d2:19:be:e1:9c:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a5ec6e0660db6f625b978be0d5ee71c2dcd465a
Validity
Not Before: Aug 4 05:00:29 2025 GMT
Not After : Aug 5 05:00:29 2025 GMT
Subject: CN=057c4a06092c1f9ac5c72a3f3f65479602976824
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:c9:f6:15:de:9d:a9:7f:08:1a:51:10:21:76:
04:2a:6c:93:3c:56:36:3a:e6:3e:eb:f2:84:15:56:
34:54:e6:17:f5:b2:a8:81:7e:83:82:37:22:9d:ba:
8b:62:75:c4:8f:13:03:05:92:6d:27:63:cd:97:86:
cf:5b:42:60:19:9f:8d:62:80:2c:3a:1c:0c:e7:de:
5e:c0:76:d8:de:b3:f9:a1:da:6c:34:6f:cd:59:5c:
f4:95:c5:08:f3:0b:32:bc:a9:4f:71:ce:ad:3a:e1:
5e:35:0e:38:7d:54:ea:af:8e:09:b6:01:78:14:49:
80:08:39:ee:55:76:37:d4:88:5c:41:7f:7c:3b:b4:
dc:75:37:2c:35:81:88:2b:e4:be:e5:86:19:f4:23:
9d:67:8b:9a:4c:47:b3:20:2b:25:05:20:06:46:d7:
6f:0e:fb:8d:bf:1f:58:3c:b5:64:6e:2f:f5:ca:c0:
a5:37:21:ea:fc:69:3c:0b:07:55:5e:b8:3f:8f:e0:
14:5d:56:cc:e4:46:37:f4:98:5f:93:a7:56:f7:93:
34:64:07:89:b4:15:9c:64:7a:a8:08:04:6d:8d:5b:
52:39:ce:c9:6b:97:98:2b:aa:62:ba:61:6c:8f:a6:
b0:20:e2:bf:9e:b2:f2:08:35:e1:0b:30:7f:aa:ff:
7f:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:7C:4A:06:09:2C:1F:9A:C5:C7:2A:3F:3F:65:47:96:02:97:68:24
X509v3 Authority Key Identifier:
keyid:0A:5E:C6:E0:66:0D:B6:F6:25:B9:78:BE:0D:5E:E7:1C:2D:CD:46:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cl7G4GYNtvYluXi-DV7nHC3NRlo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/5776a3-06dd-4980-8f6f-d3e3c78e7c44/1/Cl7G4GYNtvYluXi-DV7nHC3NRlo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/5776a3-06dd-4980-8f6f-d3e3c78e7c44/1/Cl7G4GYNtvYluXi-DV7nHC3NRlo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:25:a1:f7:70:22:79:13:07:24:fe:b7:be:5a:0d:cf:1d:ff:
6c:0d:d7:09:63:bf:cf:cf:ef:3c:aa:71:db:1d:50:63:11:e9:
53:4d:f4:08:b1:bf:1b:25:45:54:a7:2c:8b:18:be:26:11:6f:
cc:21:50:ac:ed:6f:47:90:25:25:3e:a5:42:0c:14:4e:c7:b4:
c7:db:e4:9e:09:96:e0:75:86:bb:4a:fe:8d:f8:7a:40:1d:27:
8e:94:23:cc:21:34:26:4d:19:01:51:3b:4a:48:07:3d:56:be:
08:1e:3c:15:4e:90:52:1d:29:1d:15:ed:9f:a1:39:68:be:ab:
76:4d:94:eb:e0:30:be:29:ce:ab:fa:57:bc:91:c8:ee:9d:6b:
9f:ef:82:ed:31:d4:31:6f:d2:8e:31:4a:c4:64:af:54:84:43:
39:9e:91:30:61:a7:fb:a8:fb:e6:fb:c9:06:93:e1:4b:72:7a:
a7:95:bd:93:ce:0a:fc:4d:1e:a8:90:8f:7e:cf:97:c3:8a:d7:
1a:3b:74:ee:ae:3a:78:b0:32:66:77:d7:d8:88:5f:5c:87:a6:
e3:89:9f:1b:b2:61:00:29:0a:0a:49:8d:4a:01:84:c6:eb:b9:
d0:d9:a8:19:40:56:34:15:96:00:05:f9:84:52:56:fb:30:11:
2e:66:3d:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:13:49 2025 by rpki-client