Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/5f83c4-640d-4ff3-9cf4-60627e115269/1/CAGEeJFIcaqw4cADbTYm661uIMw.mft
File: CAGEeJFIcaqw4cADbTYm661uIMw.mft (raw, json)
Hash identifier: idnbX9zbKaGmmk1YVlSy6Tzcbwg+bFsnmKvk2ewIRSo=
Subject key identifier: BD:AF:46:2E:0E:AC:84:48:15:C9:AA:85:E9:F8:7D:D2:DF:8D:27:02
Authority key identifier: 08:01:84:78:91:48:71:AA:B0:E1:C0:03:6D:36:26:EB:AD:6E:20:CC
Certificate issuer: /CN=08018478914871aab0e1c0036d3626ebad6e20cc
Certificate serial: 01987450ED9568D9ADEC78415C3D2A59C4F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CAGEeJFIcaqw4cADbTYm661uIMw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/5f83c4-640d-4ff3-9cf4-60627e115269/1/CAGEeJFIcaqw4cADbTYm661uIMw.mft
Manifest number: 1252
Signing time: Mon 04 Aug 2025 09:01:57 +0000
Manifest this update: Mon 04 Aug 2025 09:01:57 +0000
Manifest next update: Tue 05 Aug 2025 09:01:57 +0000
Files and hashes: 1: 6EDyve1AwD6Dr7yLTuNbN-Xy4o4.roa (hash: Emdh1wPq8o8m6XW7TGUMCluD0dAa1SuqkmrugOmuj5g=)
2: B6w_Bpuc6_z55rNlhPmO1YuLCzo.roa (hash: gyaIKII6sdza0Xvl0rqRN4WgM4TU/WIjbt0SjsyjCnk=)
3: CAGEeJFIcaqw4cADbTYm661uIMw.crl (hash: ZJ1NwX81cq82SfoJXBrpsYfc5MNYuAJleZj2wZCJncE=)
4: LbY04jClTnB29OPcKu4Bkiugyi0.roa (hash: hepXeBmznAcYftZ3FnIy8dUsak3JCi9NiUxbjUAx2gk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/5f83c4-640d-4ff3-9cf4-60627e115269/1/CAGEeJFIcaqw4cADbTYm661uIMw.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/5f83c4-640d-4ff3-9cf4-60627e115269/1/CAGEeJFIcaqw4cADbTYm661uIMw.mft
rsync://rpki.ripe.net/repository/DEFAULT/CAGEeJFIcaqw4cADbTYm661uIMw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:50:ed:95:68:d9:ad:ec:78:41:5c:3d:2a:59:c4:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08018478914871aab0e1c0036d3626ebad6e20cc
Validity
Not Before: Aug 4 09:01:57 2025 GMT
Not After : Aug 5 09:01:57 2025 GMT
Subject: CN=bdaf462e0eac844815c9aa85e9f87dd2df8d2702
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:d4:c7:b3:90:87:d1:18:c5:bd:5d:ea:28:09:
6b:40:f7:3f:0c:18:c3:c8:73:8a:24:3a:25:a8:d1:
3f:6a:9d:53:46:4c:6b:84:34:49:b8:ba:e0:9b:cf:
a8:c2:46:78:f9:a7:b8:92:2a:d9:ae:ce:b7:4a:c5:
9f:9f:45:51:a4:5e:df:3a:b6:69:bf:cf:54:6c:72:
80:2f:ba:72:64:7a:6a:2d:aa:67:21:9e:6a:48:3f:
9e:f3:ed:af:9d:30:65:e2:14:f0:7e:26:1f:1c:2d:
7d:79:ba:1c:2d:11:16:a3:58:22:df:ae:ed:11:1d:
66:5d:30:6f:f2:9e:04:17:4e:5d:cc:40:69:09:0b:
2d:19:4b:6e:38:4b:49:e0:c1:e5:0b:4f:3c:79:3e:
b4:38:98:19:17:6d:2b:e1:f8:7c:61:44:b0:8a:ac:
fe:cf:30:8c:dc:fd:3b:28:b9:8c:49:42:5f:0c:fe:
a9:08:18:a8:5a:f8:93:b4:e0:83:9a:e9:6a:00:0c:
33:e8:b6:71:40:8d:c3:dd:c1:87:18:7c:0d:2b:81:
77:68:31:d0:39:c0:79:a3:9f:c9:a1:c3:c2:9d:41:
7d:eb:21:f4:5e:52:e8:56:ab:36:76:58:c7:1c:e3:
bc:65:24:8d:21:73:d0:71:82:ea:9b:06:31:41:38:
1c:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:AF:46:2E:0E:AC:84:48:15:C9:AA:85:E9:F8:7D:D2:DF:8D:27:02
X509v3 Authority Key Identifier:
keyid:08:01:84:78:91:48:71:AA:B0:E1:C0:03:6D:36:26:EB:AD:6E:20:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CAGEeJFIcaqw4cADbTYm661uIMw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/5f83c4-640d-4ff3-9cf4-60627e115269/1/CAGEeJFIcaqw4cADbTYm661uIMw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/5f83c4-640d-4ff3-9cf4-60627e115269/1/CAGEeJFIcaqw4cADbTYm661uIMw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:3a:48:57:15:fe:e1:54:79:0a:9f:40:23:13:21:23:aa:54:
ea:3e:48:b3:6e:24:71:2a:86:6b:73:9a:bb:7d:eb:16:93:6f:
ab:b2:4a:3a:e7:84:b4:f4:d0:53:90:89:20:79:04:d6:c8:55:
ca:af:04:77:78:f3:89:eb:6d:7d:28:d0:86:ea:b2:85:50:1b:
ab:c2:00:cb:e6:9d:63:27:a9:fd:20:6e:d1:37:35:df:27:f8:
b3:7e:9b:61:ac:a4:7c:6d:d0:dc:47:99:2f:eb:3c:df:91:12:
f1:aa:cf:13:33:e7:19:95:36:a7:9a:c5:11:4d:ec:ff:6c:f9:
21:84:c8:f9:23:35:67:08:29:d2:aa:8c:f9:7f:9c:a3:a3:eb:
ac:d0:0e:a8:36:de:9e:d6:e0:2e:7a:31:df:ce:f1:9e:77:1e:
31:ee:cb:cb:5c:77:12:d5:b9:7f:23:55:de:b1:2f:06:5f:21:
79:a8:ca:0f:ea:fb:f3:77:4c:e3:99:21:74:e8:9f:b9:0a:9d:
b9:91:ae:99:77:7c:12:e1:42:9c:da:bd:ba:d3:9c:ee:17:96:
db:8b:20:18:33:79:31:8a:00:1e:19:77:c7:d0:5e:23:4d:8b:
df:6c:f4:44:1d:23:35:05:4a:bc:81:0c:13:4b:b1:f6:80:f9:
5b:b7:a6:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:01:31 2025 by rpki-client