Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/a600f5-9428-485c-b42e-64de34f1f464/1/ctG1y2-wQjmGhx7wHmY_Nlzg2JU.mft
File: ctG1y2-wQjmGhx7wHmY_Nlzg2JU.mft (raw, json)
Hash identifier: v6JwEEAhWVk9QS9mi9/vhC6xwLbF/tr3L/Cgn2owS9M=
Subject key identifier: 84:FE:64:F2:07:DB:32:20:A3:AB:2D:5B:11:1A:E8:FF:1F:75:19:1E
Authority key identifier: 72:D1:B5:CB:6F:B0:42:39:86:87:1E:F0:1E:66:3F:36:5C:E0:D8:95
Certificate issuer: /CN=72d1b5cb6fb0423986871ef01e663f365ce0d895
Certificate serial: 01989034BA884BAB1DF3AD2C45AFE6A74E54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ctG1y2-wQjmGhx7wHmY_Nlzg2JU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/a600f5-9428-485c-b42e-64de34f1f464/1/ctG1y2-wQjmGhx7wHmY_Nlzg2JU.mft
Manifest number: 1626
Signing time: Sat 09 Aug 2025 19:00:31 +0000
Manifest this update: Sat 09 Aug 2025 19:00:31 +0000
Manifest next update: Sun 10 Aug 2025 19:00:31 +0000
Files and hashes: 1: HdvygVOruYbTXwlr1NLClydlYqo.roa (hash: sMi8mYGDSncYX0REgUe1LpnyiMZD3xdRzWB6T1gaSas=)
2: ctG1y2-wQjmGhx7wHmY_Nlzg2JU.crl (hash: TX0fIO6b1VZqYcecqAq/lRqF35DP3S0Qf9iS6boOrUs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/a600f5-9428-485c-b42e-64de34f1f464/1/ctG1y2-wQjmGhx7wHmY_Nlzg2JU.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/a600f5-9428-485c-b42e-64de34f1f464/1/ctG1y2-wQjmGhx7wHmY_Nlzg2JU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ctG1y2-wQjmGhx7wHmY_Nlzg2JU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 19:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:90:34:ba:88:4b:ab:1d:f3:ad:2c:45:af:e6:a7:4e:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72d1b5cb6fb0423986871ef01e663f365ce0d895
Validity
Not Before: Aug 9 19:00:31 2025 GMT
Not After : Aug 10 19:00:31 2025 GMT
Subject: CN=84fe64f207db3220a3ab2d5b111ae8ff1f75191e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:36:79:3c:9c:3d:32:ab:86:c4:81:7b:f4:dd:
d2:26:d3:9a:1f:c1:2e:fd:14:9c:aa:d0:ad:4d:92:
a1:89:9d:47:a3:ac:1c:13:dd:44:5e:1d:1d:24:43:
99:89:7e:db:ed:2b:d6:e1:91:7b:19:08:0f:d9:a2:
25:31:08:40:ca:e3:f2:af:61:4e:b9:f9:43:29:7d:
cd:1a:85:24:f9:b0:6f:ee:36:14:b6:f9:78:cb:e7:
6e:da:df:86:8b:73:de:4e:44:06:a0:c3:71:08:20:
f0:37:c0:7d:86:bf:f6:39:bf:f4:65:ed:c4:56:9f:
c3:53:64:26:d6:74:e7:dd:5f:ee:36:e2:23:1a:fb:
a5:82:b9:52:42:24:44:3c:db:a7:8e:7d:4c:a5:77:
e5:3f:05:85:e4:3f:6a:87:73:94:21:22:d0:88:be:
4a:43:bc:70:53:05:35:71:69:37:ca:f7:53:b3:28:
01:39:03:81:4f:03:4c:5a:25:be:2b:f2:a4:3f:7a:
bc:c6:74:1e:83:7b:c3:24:41:29:c6:74:7c:2c:45:
7e:79:0c:19:aa:f0:33:49:03:88:e1:30:1f:56:d8:
fe:be:f1:28:62:fc:ae:ea:55:14:37:a8:61:2f:82:
d2:6c:21:88:bc:fe:51:e7:35:d2:67:a8:b7:32:37:
4e:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:FE:64:F2:07:DB:32:20:A3:AB:2D:5B:11:1A:E8:FF:1F:75:19:1E
X509v3 Authority Key Identifier:
keyid:72:D1:B5:CB:6F:B0:42:39:86:87:1E:F0:1E:66:3F:36:5C:E0:D8:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ctG1y2-wQjmGhx7wHmY_Nlzg2JU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/a600f5-9428-485c-b42e-64de34f1f464/1/ctG1y2-wQjmGhx7wHmY_Nlzg2JU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/a600f5-9428-485c-b42e-64de34f1f464/1/ctG1y2-wQjmGhx7wHmY_Nlzg2JU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:1f:ef:cc:41:1a:8f:f8:0a:fb:fe:6c:da:07:ea:e5:aa:91:
3e:f6:48:9e:1e:b9:be:1a:e6:ab:42:45:45:28:3d:75:7a:af:
39:db:49:83:fb:b8:5c:02:23:07:1c:b8:64:70:50:71:0f:7c:
26:3f:1a:46:94:61:ac:37:57:2a:d1:f0:37:80:b7:04:9b:11:
12:7a:db:25:e6:59:d5:1f:66:e5:9a:28:c7:82:e8:89:02:2d:
53:ea:ea:68:1c:a4:ad:59:cc:0f:7f:03:26:7b:20:8e:d7:e4:
07:62:8d:df:94:d7:b4:03:8d:f8:05:8c:22:d0:97:3c:c2:67:
2b:98:89:be:93:c5:1b:68:81:3e:29:16:76:33:37:dc:93:39:
37:55:ed:b9:59:1a:71:27:03:e8:59:90:45:1f:c9:cc:bd:47:
cf:54:a7:b7:3c:57:b2:cb:60:78:be:19:d4:47:42:bd:de:22:
b7:6e:3f:f5:97:b7:f2:f2:92:7b:f3:b2:38:72:1f:ce:3d:69:
1e:9c:44:8e:a5:47:bf:f3:a8:be:b0:4a:73:b6:46:24:ad:ca:
a7:92:46:fa:a0:e3:c1:6a:19:6f:f0:b2:fa:73:09:f6:2d:70:
5a:ad:68:82:8d:a1:d4:d2:eb:cf:49:ae:2f:f0:7e:11:8f:79:
46:c0:36:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 05:33:37 2025 by rpki-client