Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/ca17f7-c593-474d-8cf0-538b47709956/1/cHjnVjWgncwD9iWoC_pVKyLjZiw.mft
File: cHjnVjWgncwD9iWoC_pVKyLjZiw.mft (raw, json)
Hash identifier: bHohxY/J1D7I79ruEuDREFUTsp6d/i1nl5+3Wfp7Ad4=
Subject key identifier: 82:A6:73:35:9E:94:2F:52:B6:18:84:1F:A5:1B:1B:A3:E0:3C:DD:37
Authority key identifier: 70:78:E7:56:35:A0:9D:CC:03:F6:25:A8:0B:FA:55:2B:22:E3:66:2C
Certificate issuer: /CN=7078e75635a09dcc03f625a80bfa552b22e3662c
Certificate serial: 0198733CF573CF01487E40216FF0CD426E8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cHjnVjWgncwD9iWoC_pVKyLjZiw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/ca17f7-c593-474d-8cf0-538b47709956/1/cHjnVjWgncwD9iWoC_pVKyLjZiw.mft
Manifest number: 0A55
Signing time: Mon 04 Aug 2025 04:00:31 +0000
Manifest this update: Mon 04 Aug 2025 04:00:31 +0000
Manifest next update: Tue 05 Aug 2025 04:00:31 +0000
Files and hashes: 1: cHjnVjWgncwD9iWoC_pVKyLjZiw.crl (hash: 19xLtKJYVjM7Uv9zMq+ZnVEILU/2m86J4dQcfabJoBw=)
2: iTTW-6mQkAe_ptbEUsV9bdJZhbM.roa (hash: IaZjtmRfbfeEiXlxoZz2N565FeKeU2Yttq1mO64u+IM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/ca17f7-c593-474d-8cf0-538b47709956/1/cHjnVjWgncwD9iWoC_pVKyLjZiw.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/ca17f7-c593-474d-8cf0-538b47709956/1/cHjnVjWgncwD9iWoC_pVKyLjZiw.mft
rsync://rpki.ripe.net/repository/DEFAULT/cHjnVjWgncwD9iWoC_pVKyLjZiw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:3c:f5:73:cf:01:48:7e:40:21:6f:f0:cd:42:6e:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7078e75635a09dcc03f625a80bfa552b22e3662c
Validity
Not Before: Aug 4 04:00:31 2025 GMT
Not After : Aug 5 04:00:31 2025 GMT
Subject: CN=82a673359e942f52b618841fa51b1ba3e03cdd37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:da:f0:fd:f0:22:cb:b8:dd:ed:ff:13:92:d6:
15:bd:a8:b3:a3:fb:3e:6a:29:72:12:7d:78:c8:4f:
dd:b5:fd:9c:e9:fd:50:1d:5f:2d:a5:b6:2e:c7:24:
07:e9:64:4b:a7:ca:0b:52:e2:bd:1a:2b:3a:72:b4:
38:55:71:c0:6d:2d:75:b2:4d:09:55:29:a3:a5:db:
1e:02:cb:14:33:e9:4e:45:04:66:74:1e:dd:37:76:
f6:c5:97:95:6f:75:2a:8a:f8:ad:a9:fd:8e:fa:f0:
35:e0:bf:91:77:00:41:ea:68:6e:8a:24:58:0e:ed:
f2:b2:c0:5a:3e:0d:91:c4:cc:d6:8c:29:96:52:ee:
8c:28:f2:dd:25:e0:38:cf:ac:9f:20:1c:fc:80:2d:
9e:f5:4a:6d:1f:45:98:2e:26:06:99:f1:5f:54:2e:
0b:bc:fb:4a:03:8e:e9:7e:73:48:e1:74:20:1f:a8:
48:4b:b6:39:ac:c5:96:0e:5c:0e:24:b3:30:06:7b:
79:e6:82:d1:c8:fd:d6:f6:e7:ef:5a:cc:24:cc:ba:
3c:02:43:31:dd:4a:52:8e:ce:13:21:7f:44:63:2e:
19:37:3a:70:e1:66:1e:f7:2a:2e:9c:3c:e0:80:3b:
b5:4d:cb:55:93:95:4c:3e:04:7e:c9:e2:b8:ad:b7:
bc:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:A6:73:35:9E:94:2F:52:B6:18:84:1F:A5:1B:1B:A3:E0:3C:DD:37
X509v3 Authority Key Identifier:
keyid:70:78:E7:56:35:A0:9D:CC:03:F6:25:A8:0B:FA:55:2B:22:E3:66:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cHjnVjWgncwD9iWoC_pVKyLjZiw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/ca17f7-c593-474d-8cf0-538b47709956/1/cHjnVjWgncwD9iWoC_pVKyLjZiw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/ca17f7-c593-474d-8cf0-538b47709956/1/cHjnVjWgncwD9iWoC_pVKyLjZiw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:ed:95:ca:fc:4d:3e:2e:bd:d7:28:f3:64:5b:0e:38:2e:e0:
64:d4:b0:c1:8a:53:90:82:93:a7:41:35:52:9d:12:0b:aa:49:
96:8f:67:23:bf:c5:31:27:15:91:56:0f:22:3b:ef:36:8c:18:
b4:b4:c4:77:53:7c:05:63:2e:a3:fd:d0:cf:b7:49:23:08:40:
56:60:2f:01:e6:cb:02:95:cb:61:19:b7:ca:f7:91:1d:e6:05:
71:9d:0c:b4:e8:16:88:c2:7b:c2:d4:0c:28:7d:45:83:6f:42:
18:ce:28:db:8b:14:d4:5b:b0:07:18:8d:36:d6:fd:9a:b3:5b:
23:ad:bb:70:9d:e3:f5:2c:01:d4:25:63:75:48:46:a8:27:36:
c8:87:61:29:50:69:a8:ed:67:25:ba:ba:66:9e:b3:90:68:f9:
c6:16:77:a0:76:a7:a3:2f:95:92:f3:51:bc:1c:78:66:91:b4:
f3:ac:1c:33:f7:44:f6:43:ce:09:67:3b:05:6a:8e:0a:b4:ff:
57:db:83:96:9f:0b:10:43:72:02:7e:2b:10:0f:ab:e3:0c:d5:
80:53:b4:51:23:7b:84:2c:69:18:c9:24:11:4c:5b:33:f4:a5:
92:4b:b8:11:29:f9:b8:cd:1c:34:02:c5:51:c0:18:d1:08:b4:
c7:e0:55:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:24:55 2025 by rpki-client