Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/3b48d5-28da-4385-9395-284c82dec7c6/1/CaT39OTp5yw6M5P7XW6nQrwbTCg.mft
File: CaT39OTp5yw6M5P7XW6nQrwbTCg.mft (raw, json)
Hash identifier: 9GxEuYIKhfmFGuYKreJQPF+58pRO/6pSEdg5vqp4Okw=
Subject key identifier: B2:88:FA:06:35:C9:29:F7:A0:C0:55:23:CB:1C:93:DA:5A:F3:AE:8B
Authority key identifier: 09:A4:F7:F4:E4:E9:E7:2C:3A:33:93:FB:5D:6E:A7:42:BC:1B:4C:28
Certificate issuer: /CN=09a4f7f4e4e9e72c3a3393fb5d6ea742bc1b4c28
Certificate serial: 01987486C971E64BBC54967088731BAD9189
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CaT39OTp5yw6M5P7XW6nQrwbTCg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/3b48d5-28da-4385-9395-284c82dec7c6/1/CaT39OTp5yw6M5P7XW6nQrwbTCg.mft
Manifest number: 0FDA
Signing time: Mon 04 Aug 2025 10:00:47 +0000
Manifest this update: Mon 04 Aug 2025 10:00:47 +0000
Manifest next update: Tue 05 Aug 2025 10:00:47 +0000
Files and hashes: 1: CaT39OTp5yw6M5P7XW6nQrwbTCg.crl (hash: ZpR9okllP85H/IOyS32ifK9F6EktGPQLJgnH++HkWf4=)
2: JoXcYev6DySlst62DTDcDz1JN0Q.roa (hash: PRhyl4bdJivpbrgVw6w06UO6PZN+9+qwU0T6MPbrnFs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/3b48d5-28da-4385-9395-284c82dec7c6/1/CaT39OTp5yw6M5P7XW6nQrwbTCg.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/3b48d5-28da-4385-9395-284c82dec7c6/1/CaT39OTp5yw6M5P7XW6nQrwbTCg.mft
rsync://rpki.ripe.net/repository/DEFAULT/CaT39OTp5yw6M5P7XW6nQrwbTCg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 10:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:86:c9:71:e6:4b:bc:54:96:70:88:73:1b:ad:91:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09a4f7f4e4e9e72c3a3393fb5d6ea742bc1b4c28
Validity
Not Before: Aug 4 10:00:47 2025 GMT
Not After : Aug 5 10:00:47 2025 GMT
Subject: CN=b288fa0635c929f7a0c05523cb1c93da5af3ae8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:a0:92:d8:99:11:6a:c3:50:86:6b:84:35:ef:
e9:0e:e5:4d:03:9f:58:9f:f8:1e:84:e2:dd:c1:c7:
93:6a:d6:4d:1f:e4:55:a6:de:28:09:d4:e7:6b:c6:
b5:c4:1c:c0:cd:39:58:b2:25:7a:35:af:52:58:e8:
9c:af:52:99:ab:74:fe:b8:99:14:ce:4b:c0:9e:0d:
41:81:c3:4b:6e:ad:21:62:e5:1b:a1:f4:87:a9:4e:
0a:f9:6b:4e:6a:c7:93:d7:61:52:d9:7f:7d:10:ce:
ca:71:ac:e7:c3:06:5e:d0:33:37:21:fa:70:52:2e:
50:c2:3a:15:79:91:a8:28:f2:65:7e:81:1e:ab:c0:
2e:b9:68:5a:6f:51:0d:21:f8:f3:0d:b1:6a:76:2b:
e9:d8:ae:10:75:0e:06:5f:66:12:05:be:9e:22:88:
09:10:6b:a0:b2:ee:b2:21:cb:2e:0a:8e:df:b6:45:
ca:c7:c8:26:8c:27:e9:23:ac:e5:11:13:fb:50:ee:
58:0b:8b:b9:6c:4d:0f:fb:fe:65:dc:d0:30:51:1d:
45:91:1d:cb:9b:16:6c:85:d2:54:74:35:56:cc:3c:
1e:b0:bf:da:f7:bb:7e:c7:19:eb:2a:f9:3c:e1:cc:
30:f1:3e:af:66:3c:f5:cf:f0:f2:94:b2:ae:39:34:
93:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:88:FA:06:35:C9:29:F7:A0:C0:55:23:CB:1C:93:DA:5A:F3:AE:8B
X509v3 Authority Key Identifier:
keyid:09:A4:F7:F4:E4:E9:E7:2C:3A:33:93:FB:5D:6E:A7:42:BC:1B:4C:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CaT39OTp5yw6M5P7XW6nQrwbTCg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/3b48d5-28da-4385-9395-284c82dec7c6/1/CaT39OTp5yw6M5P7XW6nQrwbTCg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/3b48d5-28da-4385-9395-284c82dec7c6/1/CaT39OTp5yw6M5P7XW6nQrwbTCg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:d9:af:1d:59:77:59:30:2e:05:84:d3:3c:1b:dd:fd:14:85:
1f:45:0a:ed:00:c7:da:7d:de:6f:58:28:16:8a:da:89:ad:86:
3c:6b:5d:dc:25:a6:70:c2:0d:a9:d2:d8:1f:86:9b:95:f0:d4:
ee:be:0c:ef:8f:b8:6c:64:1d:a1:3a:07:2e:8f:6c:cf:99:6b:
0b:c6:d5:a9:7a:6b:30:76:b1:81:a8:74:5e:f6:23:ea:7f:ee:
34:38:eb:49:64:11:ff:00:ab:82:47:97:6a:9e:66:df:ae:88:
2e:a4:fa:69:13:4c:45:9a:7e:0c:00:60:f1:f8:07:82:20:23:
c5:a4:d9:8b:94:35:dc:e8:b4:f4:4a:b2:13:2e:d8:c2:04:7e:
6d:75:73:dc:97:18:55:dc:5c:1b:c1:ec:24:68:34:22:d0:e5:
d4:bf:c9:ea:47:b8:cd:9d:d0:9f:75:03:0e:af:3c:c3:e1:e0:
01:10:67:09:ee:4f:cd:04:46:a3:41:a2:0d:30:ab:b3:61:ff:
27:eb:1b:11:e9:95:bc:34:5e:50:2c:a1:f2:58:ee:83:46:13:
1a:ed:2c:1c:8d:2f:4c:ca:15:26:00:14:4b:e7:78:5b:d4:ae:
67:c7:d2:04:8d:53:80:f4:73:fe:25:0b:49:73:27:63:38:0d:
79:34:24:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 16:11:48 2025 by rpki-client