Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/ffacee-09cc-41cb-9362-02f3013d91a9/1/639rU_mItXcyDvKJM4Cl6oJLauQ.mft
File: 639rU_mItXcyDvKJM4Cl6oJLauQ.mft (raw, json)
Hash identifier: t4G8iCsAbJMm/I/sVuY0aaYZ+7xAQLrNOFNTCxlC/Es=
Subject key identifier: 98:04:6E:60:C8:E2:32:DB:B6:D7:DF:D2:88:90:7C:74:59:0A:DF:B9
Authority key identifier: EB:7F:6B:53:F9:88:B5:77:32:0E:F2:89:33:80:A5:EA:82:4B:6A:E4
Certificate issuer: /CN=eb7f6b53f988b577320ef2893380a5ea824b6ae4
Certificate serial: 0198D4737065EC0D3B6F6874970B7138E550
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/639rU_mItXcyDvKJM4Cl6oJLauQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/ffacee-09cc-41cb-9362-02f3013d91a9/1/639rU_mItXcyDvKJM4Cl6oJLauQ.mft
Manifest number: 1646
Signing time: Sat 23 Aug 2025 01:03:11 +0000
Manifest this update: Sat 23 Aug 2025 01:03:11 +0000
Manifest next update: Sun 24 Aug 2025 01:03:11 +0000
Files and hashes: 1: 639rU_mItXcyDvKJM4Cl6oJLauQ.crl (hash: 8nP+qeUHQHIvvMbOHXG2wfgqaR6ehgt6AxCJM+V/+Ms=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/ffacee-09cc-41cb-9362-02f3013d91a9/1/639rU_mItXcyDvKJM4Cl6oJLauQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/ffacee-09cc-41cb-9362-02f3013d91a9/1/639rU_mItXcyDvKJM4Cl6oJLauQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/639rU_mItXcyDvKJM4Cl6oJLauQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:73:70:65:ec:0d:3b:6f:68:74:97:0b:71:38:e5:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb7f6b53f988b577320ef2893380a5ea824b6ae4
Validity
Not Before: Aug 23 01:03:11 2025 GMT
Not After : Aug 24 01:03:11 2025 GMT
Subject: CN=98046e60c8e232dbb6d7dfd288907c74590adfb9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:ab:28:71:8c:c2:c8:db:69:7e:f3:47:de:a3:
1e:24:52:6e:bf:84:dc:f0:21:63:d9:0f:f6:ae:ca:
81:ae:b8:93:22:c7:af:ce:ad:2e:bb:80:98:ba:1f:
1e:bc:d2:9a:26:1f:8d:df:dc:24:74:3a:05:ae:11:
bf:4f:2d:df:bf:d7:d5:8a:38:1a:4a:a3:44:81:2b:
fa:93:8f:54:99:43:02:c5:04:ff:94:79:55:11:d8:
0d:87:2c:e2:46:4b:7b:c8:7e:b9:5d:a4:ae:d1:a1:
7f:7c:be:ca:e3:fc:83:7d:92:b6:3b:b1:8a:92:70:
9d:c7:a9:5d:c9:7c:07:54:5d:2a:da:0d:0b:eb:39:
8a:1b:a7:86:46:f7:ac:4d:33:bc:f5:41:12:a4:1d:
95:c5:dc:c3:52:ef:5d:6c:28:50:cb:86:02:46:56:
56:48:4f:cd:8c:3e:9b:74:3a:35:19:6d:1c:49:7a:
26:f1:82:da:8b:ee:ee:63:51:8b:16:19:4c:ed:45:
e1:35:c8:23:37:5d:3d:d8:a8:58:c5:4f:d6:57:ed:
49:41:4e:a1:b0:a4:b1:af:af:c3:6f:d5:79:97:39:
da:46:6d:a8:7c:cb:46:59:4c:77:97:37:d5:2b:f8:
b7:62:9a:00:b8:fb:be:78:4b:7a:43:18:93:dd:ed:
35:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:04:6E:60:C8:E2:32:DB:B6:D7:DF:D2:88:90:7C:74:59:0A:DF:B9
X509v3 Authority Key Identifier:
keyid:EB:7F:6B:53:F9:88:B5:77:32:0E:F2:89:33:80:A5:EA:82:4B:6A:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/639rU_mItXcyDvKJM4Cl6oJLauQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/ffacee-09cc-41cb-9362-02f3013d91a9/1/639rU_mItXcyDvKJM4Cl6oJLauQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/ffacee-09cc-41cb-9362-02f3013d91a9/1/639rU_mItXcyDvKJM4Cl6oJLauQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cf:ae:2f:31:8b:e2:a5:00:58:5c:e7:cd:11:a7:b9:75:94:81:
ee:58:79:26:be:e1:1a:b8:be:40:35:7f:77:2d:8d:ea:d8:98:
8e:f7:56:d5:56:2e:29:32:35:ab:b2:dd:d2:2d:37:bc:cc:1d:
db:3b:72:cd:d0:c7:fa:ed:0e:cf:89:3d:d9:91:15:0a:57:16:
9a:b7:df:54:70:83:a9:61:05:b4:6b:94:e1:28:46:5a:19:c0:
51:da:16:d0:46:c2:db:37:fc:82:9e:e1:1e:4c:80:0d:96:7a:
39:c1:b1:e0:2c:d0:ce:af:b3:5b:7d:5d:a1:28:bb:b8:4a:3c:
46:3a:09:6c:f4:b8:b4:08:74:f2:e6:09:f5:85:7c:1c:d5:6c:
6f:d5:85:69:1b:26:30:72:fe:90:d6:24:25:5f:6b:d8:54:fe:
59:14:04:c7:38:41:e6:9a:96:89:9a:d1:1b:b7:05:c1:82:a5:
ac:fb:d3:31:39:46:f6:37:24:e4:62:9b:79:b9:5a:a9:5c:c0:
a7:bc:1f:71:98:23:3d:32:1f:ff:16:21:a5:72:ad:85:43:52:
a8:47:79:3c:00:4b:d8:7e:05:ca:b8:25:8e:fc:e3:70:25:17:
cd:c7:35:5d:91:e6:0e:03:49:62:43:b4:2c:a1:f1:7e:38:2e:
be:97:e9:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:20:25 2025 by rpki-client