Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/83e14b-9a4a-40c6-a1a0-b5c9d7e565a9/1/_C71HmsUo-6_tImOD6gTq2eIUTY.mft
File: _C71HmsUo-6_tImOD6gTq2eIUTY.mft (raw, json)
Hash identifier: NkmaKnTyYTswTYRc0CaqrazViLB+gEf8o50iD96+HJk=
Subject key identifier: C1:9B:FF:7D:C1:8D:71:BA:C2:DE:1E:D5:2F:DC:A5:91:2F:56:DC:71
Authority key identifier: FC:2E:F5:1E:6B:14:A3:EE:BF:B4:89:8E:0F:A8:13:AB:67:88:51:36
Certificate issuer: /CN=fc2ef51e6b14a3eebfb4898e0fa813ab67885136
Certificate serial: 0198D473E7C1A6E3ADB816CFFBD8A84924EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_C71HmsUo-6_tImOD6gTq2eIUTY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/83e14b-9a4a-40c6-a1a0-b5c9d7e565a9/1/_C71HmsUo-6_tImOD6gTq2eIUTY.mft
Manifest number: 0DA9
Signing time: Sat 23 Aug 2025 01:03:42 +0000
Manifest this update: Sat 23 Aug 2025 01:03:42 +0000
Manifest next update: Sun 24 Aug 2025 01:03:42 +0000
Files and hashes: 1: _C71HmsUo-6_tImOD6gTq2eIUTY.crl (hash: E4DgESZOGqf9nV2XQqk9W4QBqMjMOz75T7jBG0semFA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/83e14b-9a4a-40c6-a1a0-b5c9d7e565a9/1/_C71HmsUo-6_tImOD6gTq2eIUTY.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/83e14b-9a4a-40c6-a1a0-b5c9d7e565a9/1/_C71HmsUo-6_tImOD6gTq2eIUTY.mft
rsync://rpki.ripe.net/repository/DEFAULT/_C71HmsUo-6_tImOD6gTq2eIUTY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:73:e7:c1:a6:e3:ad:b8:16:cf:fb:d8:a8:49:24:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc2ef51e6b14a3eebfb4898e0fa813ab67885136
Validity
Not Before: Aug 23 01:03:42 2025 GMT
Not After : Aug 24 01:03:42 2025 GMT
Subject: CN=c19bff7dc18d71bac2de1ed52fdca5912f56dc71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:17:34:29:c6:b6:7d:08:1d:36:0b:60:bf:ba:
49:13:de:06:21:a0:0d:40:a3:5f:35:e8:cf:6a:85:
35:dd:ed:7d:88:19:5f:02:c1:bb:61:60:c6:5e:80:
3a:76:4f:50:eb:4f:a8:26:c1:8a:1e:e9:ff:7c:80:
1f:35:4e:90:a5:12:fc:be:7b:3b:4e:1b:30:f6:3a:
d7:17:75:ef:bb:ae:65:78:8c:40:01:b2:06:e8:81:
ac:84:ef:fa:4f:e2:6d:1f:5a:d2:b6:1b:ed:4c:15:
13:cb:35:a8:68:2a:9b:b7:eb:7e:6f:28:0d:4d:a0:
b6:02:bd:b7:c4:15:43:d4:e3:10:d2:0f:7b:f5:85:
ad:fa:e6:dc:2f:47:15:21:fa:7d:17:d5:90:9d:2c:
ee:e4:5a:04:f0:18:61:aa:af:ae:6f:e1:13:99:48:
8e:71:fe:8b:1e:48:92:f0:9b:c3:d1:03:09:40:5f:
58:71:4e:2c:4d:86:2a:8a:91:88:d3:46:ee:e7:1a:
23:3a:4e:24:a3:c2:8f:c5:6e:3d:4d:6b:ad:e1:bb:
b2:fc:11:01:49:24:ca:b1:4e:1b:79:7a:ca:5d:db:
4a:3e:e5:61:0f:92:d2:26:d4:07:6f:70:2f:fe:48:
33:2a:36:44:7b:7d:a6:98:9e:de:a9:3c:87:dc:2d:
55:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:9B:FF:7D:C1:8D:71:BA:C2:DE:1E:D5:2F:DC:A5:91:2F:56:DC:71
X509v3 Authority Key Identifier:
keyid:FC:2E:F5:1E:6B:14:A3:EE:BF:B4:89:8E:0F:A8:13:AB:67:88:51:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_C71HmsUo-6_tImOD6gTq2eIUTY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/83e14b-9a4a-40c6-a1a0-b5c9d7e565a9/1/_C71HmsUo-6_tImOD6gTq2eIUTY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/83e14b-9a4a-40c6-a1a0-b5c9d7e565a9/1/_C71HmsUo-6_tImOD6gTq2eIUTY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:ea:db:a3:05:01:85:37:ce:a3:a8:66:16:f9:ce:8f:af:df:
a6:9f:0b:01:83:48:c2:b8:9a:2a:f2:ce:30:ba:fa:96:ad:3c:
08:ac:f0:22:d9:1b:c1:16:a1:46:20:1d:06:8d:fe:3c:6f:d5:
b3:ee:f1:13:93:0e:72:f6:56:5e:d6:1b:df:0f:61:cc:f7:0f:
08:62:bb:14:80:4f:ea:d2:5d:da:24:a5:85:3a:be:04:78:ab:
cd:8b:06:4a:90:22:62:54:3f:ca:90:b8:c8:b1:28:47:65:ad:
a1:5c:b8:54:44:ad:5f:87:fb:65:5b:9b:e2:8c:c5:45:1c:2a:
84:e2:9c:63:e9:97:c7:9d:70:73:9a:91:88:c1:83:e7:f6:b7:
a8:51:1f:dc:cf:e1:d3:80:41:33:ed:27:0d:09:ee:6e:3c:e6:
6a:38:a7:66:3d:67:43:84:3e:2e:cb:b9:23:91:c5:b1:69:0c:
09:f5:dc:73:34:30:42:9a:05:bf:13:c9:fa:be:81:cd:af:74:
d1:99:42:62:42:f6:d6:27:f6:f9:5a:70:10:e2:53:b3:d3:6c:
56:c5:1f:3c:7b:b2:c7:75:ca:f6:5c:f8:54:ae:7b:1b:94:76:
02:3a:0a:9d:a3:92:07:c9:8f:29:7f:ac:0d:4a:a4:69:fa:ed:
01:a9:3d:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:18:42 2025 by rpki-client