Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/8c33c2-6f72-41b6-a9e4-09f73c354e7c/1/CdCil56bZlLWG5Ad1VoZKNv9z20.mft
File: CdCil56bZlLWG5Ad1VoZKNv9z20.mft (raw, json)
Hash identifier: PhOsBTMdKlxzLYW2XKjFQMouusUSYi61S4TZDMz6PnA=
Subject key identifier: 2B:2C:72:BB:1B:3A:E2:9B:97:FD:34:5B:2C:1C:E0:47:49:14:1E:6A
Authority key identifier: 09:D0:A2:97:9E:9B:66:52:D6:1B:90:1D:D5:5A:19:28:DB:FD:CF:6D
Certificate issuer: /CN=09d0a2979e9b6652d61b901dd55a1928dbfdcf6d
Certificate serial: 01988EEB31C729CCB2A05828017250F09E06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CdCil56bZlLWG5Ad1VoZKNv9z20.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/8c33c2-6f72-41b6-a9e4-09f73c354e7c/1/CdCil56bZlLWG5Ad1VoZKNv9z20.mft
Manifest number: 1629
Signing time: Sat 09 Aug 2025 13:00:35 +0000
Manifest this update: Sat 09 Aug 2025 13:00:35 +0000
Manifest next update: Sun 10 Aug 2025 13:00:35 +0000
Files and hashes: 1: 1OOgCvrkMSPlJGXfwud-L77F8RQ.roa (hash: OfGMkg4R8dFeR/FCs55Nk0J17chraeTKhOgexIz+stY=)
2: CdCil56bZlLWG5Ad1VoZKNv9z20.crl (hash: DPyxAC4tTl6IvVAlI3LhS4M7C05mv/6LU4sQ569PFtU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/8c33c2-6f72-41b6-a9e4-09f73c354e7c/1/CdCil56bZlLWG5Ad1VoZKNv9z20.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/8c33c2-6f72-41b6-a9e4-09f73c354e7c/1/CdCil56bZlLWG5Ad1VoZKNv9z20.mft
rsync://rpki.ripe.net/repository/DEFAULT/CdCil56bZlLWG5Ad1VoZKNv9z20.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 05:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8e:eb:31:c7:29:cc:b2:a0:58:28:01:72:50:f0:9e:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09d0a2979e9b6652d61b901dd55a1928dbfdcf6d
Validity
Not Before: Aug 9 13:00:35 2025 GMT
Not After : Aug 10 13:00:35 2025 GMT
Subject: CN=2b2c72bb1b3ae29b97fd345b2c1ce04749141e6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:7e:02:27:3a:58:67:24:d6:af:42:1f:7a:ac:
36:b5:fe:55:71:c9:41:8c:92:4c:3b:e4:5c:28:60:
78:de:94:95:a5:cf:25:70:c0:d5:65:af:d8:da:0e:
bf:cc:91:df:5b:b9:32:24:e0:05:37:72:85:0a:2b:
f6:b9:9e:99:4d:ef:a1:cc:14:73:67:81:d4:b2:a0:
c0:92:af:a3:fd:34:5c:81:d7:c2:32:d3:7f:69:e9:
2a:3a:0b:ed:2e:c9:55:e9:47:7c:48:e0:17:8e:60:
13:44:82:43:24:c5:b2:79:8a:d5:8b:6a:7e:d4:34:
66:f2:b8:27:44:b6:c9:41:4f:7a:0f:21:b2:be:7b:
5e:fa:80:df:14:cd:d5:ec:87:90:82:ae:1b:b0:ef:
4a:6a:92:2e:41:26:08:06:2e:e7:13:49:c3:de:14:
2d:77:49:e2:e4:62:b0:80:97:79:79:5d:97:85:31:
47:4b:0c:4f:d1:07:d1:f3:b4:69:1a:c0:89:b9:3c:
21:f3:46:48:fc:60:d9:10:b8:ff:56:75:70:ec:95:
53:8c:d6:e3:d2:9f:25:8d:72:56:dd:16:61:07:ac:
8c:4d:aa:ef:fc:59:2a:ed:b0:0d:72:58:de:09:68:
d8:dc:b6:6e:59:59:78:35:81:ae:7d:8b:38:4f:a5:
13:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:2C:72:BB:1B:3A:E2:9B:97:FD:34:5B:2C:1C:E0:47:49:14:1E:6A
X509v3 Authority Key Identifier:
keyid:09:D0:A2:97:9E:9B:66:52:D6:1B:90:1D:D5:5A:19:28:DB:FD:CF:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CdCil56bZlLWG5Ad1VoZKNv9z20.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/8c33c2-6f72-41b6-a9e4-09f73c354e7c/1/CdCil56bZlLWG5Ad1VoZKNv9z20.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/8c33c2-6f72-41b6-a9e4-09f73c354e7c/1/CdCil56bZlLWG5Ad1VoZKNv9z20.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:de:8b:90:d6:62:aa:60:a3:01:fb:4e:ce:40:22:63:25:fb:
9a:05:08:1c:46:cf:9b:57:fb:76:3b:c4:59:b5:1c:72:ad:3c:
d2:1b:82:08:65:da:3c:6c:e6:e7:a3:62:7b:4a:47:40:0e:4a:
c8:be:82:d3:bf:fe:90:c9:f9:e6:4c:db:1e:f3:cd:f7:84:7a:
15:73:4a:84:96:65:4c:72:b1:78:e6:a9:c2:d0:ae:50:e7:f2:
5f:2d:ad:de:84:a3:fe:78:9d:f3:6b:ec:30:e0:c0:e1:8c:b2:
e4:a4:cc:3e:5e:e2:83:ec:5f:0d:8f:33:92:0b:9b:54:d4:6a:
ab:0b:82:9a:58:24:2d:02:63:b0:96:ab:b2:c6:ea:7c:47:1b:
39:1c:3c:fa:6f:48:ab:7f:ea:44:a9:13:53:7a:f8:70:55:72:
85:99:ec:f0:de:1c:70:be:12:45:d4:48:1f:3a:5b:a7:62:c4:
a7:b5:a0:f2:15:2a:e4:3f:70:a5:92:3b:1f:e5:d7:cb:79:77:
3f:dc:9e:cc:d5:85:d5:24:a3:a2:d9:cf:38:89:95:af:5b:5a:
bf:ba:e6:5b:6f:4e:fd:be:b6:85:64:6e:e2:76:9d:84:a0:84:
34:46:fd:79:f4:ac:19:66:9d:3f:b4:60:2a:d9:c8:63:37:c3:
e6:b1:cf:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 14:35:14 2025 by rpki-client