
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/9c7695-90e2-4825-9d85-ac0f95d8ef20/1/CuenjWwPepgBOXu51SmocVlcgEc.mft
File: CuenjWwPepgBOXu51SmocVlcgEc.mft (raw, json)
Hash identifier: 6qtSHtopEm4buaZZ9Xd5qoWjE4v6CvkhNiBhQdjq13o=
Subject key identifier: AB:77:9D:00:C3:CE:AC:BA:6E:B7:6C:2A:3F:FD:D0:7C:A3:DF:EE:CB
Authority key identifier: 0A:E7:A7:8D:6C:0F:7A:98:01:39:7B:B9:D5:29:A8:71:59:5C:80:47
Certificate issuer: /CN=0ae7a78d6c0f7a9801397bb9d529a871595c8047
Certificate serial: 01988B7CFC2B5E0EE44B02FD0D8701252F3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CuenjWwPepgBOXu51SmocVlcgEc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/9c7695-90e2-4825-9d85-ac0f95d8ef20/1/CuenjWwPepgBOXu51SmocVlcgEc.mft
Manifest number: 07A8
Signing time: Fri 08 Aug 2025 21:01:20 +0000
Manifest this update: Fri 08 Aug 2025 21:01:20 +0000
Manifest next update: Sat 09 Aug 2025 21:01:20 +0000
Files and hashes: 1: CuenjWwPepgBOXu51SmocVlcgEc.crl (hash: V+NqA7LNN2NSNN1DOFOkYsPiq6UJDokncZ/C18YGKK4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/9c7695-90e2-4825-9d85-ac0f95d8ef20/1/CuenjWwPepgBOXu51SmocVlcgEc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/9c7695-90e2-4825-9d85-ac0f95d8ef20/1/CuenjWwPepgBOXu51SmocVlcgEc.mft
rsync://rpki.ripe.net/repository/DEFAULT/CuenjWwPepgBOXu51SmocVlcgEc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 20:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8b:7c:fc:2b:5e:0e:e4:4b:02:fd:0d:87:01:25:2f:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ae7a78d6c0f7a9801397bb9d529a871595c8047
Validity
Not Before: Aug 8 21:01:20 2025 GMT
Not After : Aug 9 21:01:20 2025 GMT
Subject: CN=ab779d00c3ceacba6eb76c2a3ffdd07ca3dfeecb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:92:51:f4:06:df:5c:d9:b7:1c:7c:7c:4d:0c:
93:4f:14:d6:07:98:dd:09:c6:f8:0e:25:ef:6b:c7:
e4:be:14:7c:39:13:c5:a6:45:22:ab:4d:b0:56:5c:
8a:34:78:d6:ca:c9:be:1c:cb:3b:be:4f:c2:fb:14:
8f:5f:66:3a:fa:fc:d8:ae:3a:f9:30:63:75:c5:68:
e1:31:e5:12:2f:1f:9b:4b:a6:a5:d4:84:4b:ff:c2:
a2:ee:0a:f0:cb:2a:71:02:07:88:e0:e3:31:c6:d0:
7e:d5:b4:c0:2d:9e:34:8a:b1:c0:8b:fa:18:f4:ef:
63:1f:6c:30:a8:68:77:a1:fa:10:c0:a4:7b:19:c2:
86:60:4c:02:04:0f:86:17:d1:f3:bc:e0:32:c1:c7:
fa:79:9f:a4:a3:f0:62:fe:63:5a:66:74:ff:e5:ce:
f7:c4:0f:a3:78:1f:c2:de:28:9d:c3:0f:eb:31:66:
a3:d1:f9:5f:93:c3:8b:82:68:4f:81:12:72:fe:9c:
8d:e2:b0:fe:0b:22:8b:85:3f:f7:b7:39:13:47:08:
1d:d3:80:d2:b0:7c:dc:d1:54:7c:dd:f4:3f:d7:ef:
c8:fb:87:bf:e8:2c:6b:d3:bf:86:fa:47:97:f0:09:
c2:32:0d:aa:76:18:79:94:2d:57:7a:5c:ff:9d:9b:
fa:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:77:9D:00:C3:CE:AC:BA:6E:B7:6C:2A:3F:FD:D0:7C:A3:DF:EE:CB
X509v3 Authority Key Identifier:
keyid:0A:E7:A7:8D:6C:0F:7A:98:01:39:7B:B9:D5:29:A8:71:59:5C:80:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CuenjWwPepgBOXu51SmocVlcgEc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/9c7695-90e2-4825-9d85-ac0f95d8ef20/1/CuenjWwPepgBOXu51SmocVlcgEc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/9c7695-90e2-4825-9d85-ac0f95d8ef20/1/CuenjWwPepgBOXu51SmocVlcgEc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:bd:63:03:e5:0d:d4:0a:2f:97:d9:71:b8:b2:72:f3:ef:1f:
cf:8c:19:e6:a4:95:00:ae:81:68:c3:6a:49:1c:7d:84:20:a9:
19:e3:47:14:a2:95:bb:98:ac:9e:2f:b6:bd:9f:c0:1f:9a:dd:
87:3d:54:58:50:9b:8b:d5:1c:70:5b:eb:d4:30:cb:a6:8b:40:
a3:f2:7b:a2:bc:cd:6b:f4:f5:0d:bd:13:1a:87:5d:a8:a6:01:
90:87:55:df:8b:91:f5:6c:0c:bc:c6:63:cc:26:03:b2:3d:2e:
27:88:4b:e4:c2:71:6e:20:39:72:33:dd:71:83:97:2b:aa:82:
15:2a:96:76:00:c3:d8:2a:f0:2a:70:69:e0:cc:cc:d9:e7:2a:
75:95:45:f5:ad:09:72:d8:c7:b6:77:27:35:9e:7b:1d:a1:5d:
89:09:9d:53:bd:4d:75:fc:d6:e9:f6:d4:63:ec:b3:ee:aa:24:
e6:b6:72:be:1f:29:ae:b7:8a:80:f4:af:a0:f4:f4:45:e3:1b:
67:2d:5c:a1:8a:1d:38:18:a7:dc:37:22:b0:f3:b5:b7:37:82:
02:d5:af:35:55:62:09:3a:d8:cc:07:d3:9c:cf:24:79:cb:64:
8b:02:08:13:ab:9c:c9:2a:48:cd:e9:51:43:22:23:91:41:55:
d2:aa:14:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 01:03:19 2025 by rpki-client