Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/397dfe-dc98-4584-8585-4d1d37dc81b4/1/Cj4I7z11S8avqR-mwQAg9YUFwWE.mft
File: Cj4I7z11S8avqR-mwQAg9YUFwWE.mft (raw, json)
Hash identifier: +7BTP3qrII9vJzz3HRU5XDISd/tlKghbqFmHzRSTBPQ=
Subject key identifier: CC:7A:E5:01:3E:CA:4C:8D:82:D0:06:2E:77:50:C1:E2:17:23:37:6D
Authority key identifier: 0A:3E:08:EF:3D:75:4B:C6:AF:A9:1F:A6:C1:00:20:F5:85:05:C1:61
Certificate issuer: /CN=0a3e08ef3d754bc6afa91fa6c10020f58505c161
Certificate serial: 019881688584FC5A25986578FDB22B83C356
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cj4I7z11S8avqR-mwQAg9YUFwWE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/397dfe-dc98-4584-8585-4d1d37dc81b4/1/Cj4I7z11S8avqR-mwQAg9YUFwWE.mft
Manifest number: 02A4
Signing time: Wed 06 Aug 2025 22:02:47 +0000
Manifest this update: Wed 06 Aug 2025 22:02:47 +0000
Manifest next update: Thu 07 Aug 2025 22:02:47 +0000
Files and hashes: 1: Cj4I7z11S8avqR-mwQAg9YUFwWE.crl (hash: FF2tkEqLQ7u1xrSm3iWVXdyLf29xNrnXdVVrsjYhD2k=)
2: GD1XX0gIhAQoOwhwNDnnnOJQSOc.roa (hash: Nxtxf8oqzQUGj2GQkzH5yxankBttLPUcZ16qJnjJRXY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/397dfe-dc98-4584-8585-4d1d37dc81b4/1/Cj4I7z11S8avqR-mwQAg9YUFwWE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/397dfe-dc98-4584-8585-4d1d37dc81b4/1/Cj4I7z11S8avqR-mwQAg9YUFwWE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Cj4I7z11S8avqR-mwQAg9YUFwWE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 20:46:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:81:68:85:84:fc:5a:25:98:65:78:fd:b2:2b:83:c3:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a3e08ef3d754bc6afa91fa6c10020f58505c161
Validity
Not Before: Aug 6 22:02:47 2025 GMT
Not After : Aug 7 22:02:47 2025 GMT
Subject: CN=cc7ae5013eca4c8d82d0062e7750c1e21723376d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:e3:43:f3:27:22:07:8f:91:b2:84:74:e5:cf:
cd:a2:55:a4:e9:14:58:be:0e:81:cd:c3:34:b9:b3:
6b:a3:d5:ba:65:f7:a3:bb:94:db:c5:0b:c3:2e:7f:
bc:4d:d3:b0:34:2b:05:a4:2f:f9:52:c1:4d:81:78:
40:f1:ab:7f:f0:e6:ce:5f:6c:a9:ed:8b:7f:e4:b8:
35:d6:01:e0:6a:45:2a:9b:30:fb:e5:b7:ae:9a:61:
a1:ed:0e:8e:1f:83:51:95:a8:b1:4a:42:66:5b:31:
f2:a8:96:a2:c9:c4:cb:8c:74:ce:31:af:c6:d5:a1:
80:41:25:2b:e7:39:bf:75:38:39:57:96:96:87:5d:
6a:10:b4:27:dc:9a:d9:ef:24:03:a6:3b:90:23:fa:
87:37:70:79:61:17:7c:06:4f:02:70:cb:a0:10:21:
e8:7d:1b:8f:4a:d8:52:2a:a1:3a:84:4f:35:04:02:
ef:87:a9:46:10:50:dc:b7:b0:f5:1d:e0:bf:b2:db:
b5:35:aa:b2:01:dd:62:8f:9a:fb:45:4f:3e:b3:d1:
b6:c8:d4:67:a5:63:8a:ec:84:cb:8c:e7:42:b9:80:
fa:f2:01:e7:3d:b2:c9:ab:4d:37:36:7b:3e:4c:3d:
88:4a:79:01:6a:2e:8f:f0:95:7b:e2:20:dc:51:ab:
50:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:7A:E5:01:3E:CA:4C:8D:82:D0:06:2E:77:50:C1:E2:17:23:37:6D
X509v3 Authority Key Identifier:
keyid:0A:3E:08:EF:3D:75:4B:C6:AF:A9:1F:A6:C1:00:20:F5:85:05:C1:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cj4I7z11S8avqR-mwQAg9YUFwWE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/397dfe-dc98-4584-8585-4d1d37dc81b4/1/Cj4I7z11S8avqR-mwQAg9YUFwWE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/397dfe-dc98-4584-8585-4d1d37dc81b4/1/Cj4I7z11S8avqR-mwQAg9YUFwWE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:60:aa:f5:a4:41:b0:9e:07:55:89:15:8f:c2:37:0b:3d:e5:
8f:49:8f:e0:f7:a3:4c:a2:cb:c4:3b:ba:3f:2c:74:4e:10:f1:
06:7f:5b:7a:b9:29:4f:6d:2b:65:d7:4a:66:ee:02:47:97:f3:
3d:ad:0b:47:a8:8c:ac:d3:a0:d0:de:cd:51:98:ea:93:c8:30:
71:84:b2:57:d5:bf:17:27:6b:53:49:01:99:65:48:d1:f9:c2:
27:95:40:e0:f1:04:6c:d4:61:f6:63:5f:ae:69:ad:61:32:8f:
e9:19:9a:6d:25:8c:fe:bd:93:4a:2f:2a:52:84:73:ee:1b:05:
0a:61:5d:5f:0f:df:19:5c:35:b8:f4:dc:c7:9c:8d:8f:eb:a5:
2e:8a:6a:f5:3c:c0:26:9f:6b:07:1a:9b:99:75:a4:10:83:3d:
fb:23:eb:ce:ae:7f:b2:98:86:c6:c9:90:22:ee:ae:77:3d:83:
56:65:66:ed:bf:97:2c:60:de:d3:2a:19:70:85:57:cb:f1:31:
3e:cd:cf:29:0d:be:f7:90:63:fe:7f:75:7f:11:0e:a6:e5:06:
ca:d1:51:ac:3b:28:b2:7d:b8:72:9c:b2:70:86:07:87:37:40:
2c:c2:66:5b:53:cd:66:55:5c:de:03:b3:ec:41:83:7e:2a:35:
1a:bf:4c:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 01:21:37 2025 by rpki-client