Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/cab149-d567-48fc-ac9b-20b024c6fc2f/1/cTm2kHj5bKuvcYo5u1hniurBzMI.mft
File: cTm2kHj5bKuvcYo5u1hniurBzMI.mft (raw, json)
Hash identifier: ASICfe71e4S0ejwt5C3jZd7Jd/YGfOMhNIPrY5jp12w=
Subject key identifier: F3:22:9A:72:5B:78:D7:3E:18:92:71:CE:72:98:BF:A9:2C:8E:38:39
Authority key identifier: 71:39:B6:90:78:F9:6C:AB:AF:71:8A:39:BB:58:67:8A:EA:C1:CC:C2
Certificate issuer: /CN=7139b69078f96cabaf718a39bb58678aeac1ccc2
Certificate serial: 019874BDB3CABED6452B3E32641A081D9C97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cTm2kHj5bKuvcYo5u1hniurBzMI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/cab149-d567-48fc-ac9b-20b024c6fc2f/1/cTm2kHj5bKuvcYo5u1hniurBzMI.mft
Manifest number: 1012
Signing time: Mon 04 Aug 2025 11:00:46 +0000
Manifest this update: Mon 04 Aug 2025 11:00:46 +0000
Manifest next update: Tue 05 Aug 2025 11:00:46 +0000
Files and hashes: 1: PYsPgn9EIHR5AYha-d_1rxDJZs0.roa (hash: QRdgsHwd+qGrv8yp41/SIFOyI0EFbmqDBRqqwNJuLIY=)
2: cTm2kHj5bKuvcYo5u1hniurBzMI.crl (hash: aFLRyC8dkbTY8248+K/tjz51nIQVn3qZ7ePj3Lt59Hc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/cab149-d567-48fc-ac9b-20b024c6fc2f/1/cTm2kHj5bKuvcYo5u1hniurBzMI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/cab149-d567-48fc-ac9b-20b024c6fc2f/1/cTm2kHj5bKuvcYo5u1hniurBzMI.mft
rsync://rpki.ripe.net/repository/DEFAULT/cTm2kHj5bKuvcYo5u1hniurBzMI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 11:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:bd:b3:ca:be:d6:45:2b:3e:32:64:1a:08:1d:9c:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7139b69078f96cabaf718a39bb58678aeac1ccc2
Validity
Not Before: Aug 4 11:00:46 2025 GMT
Not After : Aug 5 11:00:46 2025 GMT
Subject: CN=f3229a725b78d73e189271ce7298bfa92c8e3839
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:b0:0c:04:34:f4:b1:02:3b:bb:2a:8d:de:89:
bc:d9:4b:8e:d5:9f:de:55:c0:7f:3a:13:0c:a5:7b:
3b:86:d3:94:87:f7:41:60:2f:05:2c:fa:f3:75:13:
9c:af:fe:85:ab:e1:73:c4:da:b0:05:f4:39:fa:21:
86:52:c1:9b:97:b6:7f:5c:1a:4e:7a:ba:c2:8f:d9:
11:8c:62:ba:36:9b:e0:3c:76:1f:ca:8e:53:d3:17:
9e:fd:72:ce:53:b4:ab:cd:dc:cc:71:b5:6a:d4:73:
be:2e:94:fa:9a:ad:3a:4d:63:c6:90:41:38:6f:2e:
67:40:c8:f1:54:80:03:84:78:2e:18:56:da:bb:63:
56:0e:ad:c6:9d:98:df:45:fd:3f:5b:5c:00:96:bf:
13:6a:0c:68:82:ac:5b:de:5c:ae:41:90:9b:80:d0:
dd:a2:a6:fe:2e:37:fd:f9:11:86:4f:2d:44:b4:5e:
63:fd:30:6a:4b:95:de:bb:26:a5:96:38:fd:86:c9:
f1:13:97:ad:65:f9:50:23:db:06:25:5b:15:c1:38:
87:c6:d6:b3:ac:47:09:97:27:14:ee:1a:62:11:38:
89:68:1e:20:ac:d5:a0:ce:62:a1:66:6f:56:11:ed:
f0:1a:f1:07:ed:0b:d7:2f:31:49:78:44:bb:f1:ca:
61:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:22:9A:72:5B:78:D7:3E:18:92:71:CE:72:98:BF:A9:2C:8E:38:39
X509v3 Authority Key Identifier:
keyid:71:39:B6:90:78:F9:6C:AB:AF:71:8A:39:BB:58:67:8A:EA:C1:CC:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cTm2kHj5bKuvcYo5u1hniurBzMI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/cab149-d567-48fc-ac9b-20b024c6fc2f/1/cTm2kHj5bKuvcYo5u1hniurBzMI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/cab149-d567-48fc-ac9b-20b024c6fc2f/1/cTm2kHj5bKuvcYo5u1hniurBzMI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:e7:19:7a:08:62:d5:b8:c3:ba:37:a6:d5:9a:1f:3e:c7:5b:
f3:00:55:a4:16:20:40:d6:42:07:72:7b:c7:b0:6a:57:b5:b5:
30:71:ca:ae:0d:e3:7a:36:28:7b:56:ce:f7:71:81:78:c0:6d:
9f:be:a8:88:4a:28:20:16:9b:80:a8:2d:cf:92:d1:e9:ee:a1:
dc:8c:ce:6c:dc:0a:f7:fa:81:bd:a0:14:9a:10:2e:5c:1e:78:
58:70:fc:bf:ba:12:6e:79:9e:e8:95:24:95:31:4b:9f:2f:6c:
34:f9:f6:a0:39:b9:ca:d1:93:ac:a8:1e:80:87:6b:b1:1d:e0:
95:15:bd:3e:f4:d1:43:4c:2d:21:76:29:f8:81:9b:bf:d9:15:
6d:1e:e1:2d:d9:f8:2d:d3:7e:89:78:30:b0:c3:95:4d:a4:17:
6c:1f:82:f5:b1:e0:4d:7e:45:7f:cf:1b:d1:4f:16:ea:5a:9c:
35:0a:96:3c:54:0e:29:88:4d:31:55:3d:13:08:eb:42:9d:da:
0f:b8:ee:86:43:63:63:44:e8:4f:64:ef:33:50:27:50:2d:b1:
29:ca:4e:e4:5b:48:26:19:c9:c4:b5:80:88:7d:5c:93:e9:97:
86:b6:89:b0:04:d9:d0:21:3b:83:01:00:e4:21:7c:82:46:bd:
0e:3e:41:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 18:54:42 2025 by rpki-client