Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/dee8b9-c300-45eb-89e1-80699529cceb/1/cRcdWnbTurk3KszJJz66ffHFnPI.mft
File: cRcdWnbTurk3KszJJz66ffHFnPI.mft (raw, json)
Hash identifier: ZbLrRjv/mW2KmMvDd6Iscj1ziRVdrMHuY5CqDk1wGJQ=
Subject key identifier: 5E:DE:10:A9:43:E2:2C:DA:AC:D1:02:CE:8D:2F:6A:B5:E2:9F:0D:D4
Authority key identifier: 71:17:1D:5A:76:D3:BA:B9:37:2A:CC:C9:27:3E:BA:7D:F1:C5:9C:F2
Certificate issuer: /CN=71171d5a76d3bab9372accc9273eba7df1c59cf2
Certificate serial: 0198D65F8249FB2581A31964A05C74BC7A92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cRcdWnbTurk3KszJJz66ffHFnPI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/dee8b9-c300-45eb-89e1-80699529cceb/1/cRcdWnbTurk3KszJJz66ffHFnPI.mft
Manifest number: 1647
Signing time: Sat 23 Aug 2025 10:00:40 +0000
Manifest this update: Sat 23 Aug 2025 10:00:40 +0000
Manifest next update: Sun 24 Aug 2025 10:00:40 +0000
Files and hashes: 1: cRcdWnbTurk3KszJJz66ffHFnPI.crl (hash: mnpkcAFnDy/6uskl7bOloX6ou+yz/rTmBei4SvCQmCY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/dee8b9-c300-45eb-89e1-80699529cceb/1/cRcdWnbTurk3KszJJz66ffHFnPI.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/dee8b9-c300-45eb-89e1-80699529cceb/1/cRcdWnbTurk3KszJJz66ffHFnPI.mft
rsync://rpki.ripe.net/repository/DEFAULT/cRcdWnbTurk3KszJJz66ffHFnPI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:82:49:fb:25:81:a3:19:64:a0:5c:74:bc:7a:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71171d5a76d3bab9372accc9273eba7df1c59cf2
Validity
Not Before: Aug 23 10:00:40 2025 GMT
Not After : Aug 24 10:00:40 2025 GMT
Subject: CN=5ede10a943e22cdaacd102ce8d2f6ab5e29f0dd4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:8a:1e:8e:30:af:bd:a6:c6:61:36:25:a2:16:
5c:40:f6:98:3a:4e:1b:78:bb:76:28:0a:3c:f8:19:
27:9a:e4:8a:97:1d:31:82:e8:8b:08:4d:07:4e:41:
78:d8:f9:00:08:9e:d2:ee:3e:90:4b:80:63:5d:3a:
d8:25:0a:13:f4:3b:d0:d8:6f:f7:54:7b:fc:0e:dd:
0e:28:0f:83:9e:d3:67:ff:95:41:10:0e:48:4c:4b:
e3:86:f2:6e:89:5e:d6:54:e4:32:02:6f:3f:2e:e7:
34:dd:ee:b8:9f:28:bd:e7:02:5a:db:b9:83:e5:c7:
90:e7:81:16:30:a4:e5:e5:ab:63:de:11:f6:4c:ef:
23:0c:4a:07:73:e7:db:6d:83:95:d0:96:93:ac:26:
7e:bf:b6:e0:b3:de:4d:74:b1:25:92:28:15:5e:26:
87:90:53:9a:9b:9b:07:47:b5:1a:06:4c:61:53:a6:
6a:ff:5f:50:fd:91:1a:bf:73:2d:d3:07:82:65:4f:
e5:9c:0f:8e:ea:50:8e:e1:45:8e:dc:f6:a3:75:77:
dc:06:a2:36:bd:ec:17:ea:2f:4e:32:86:66:e0:53:
0e:56:24:4e:a6:0f:9d:eb:46:1d:5c:b6:93:3b:b2:
ef:1b:fa:de:bc:99:55:76:85:4a:00:7f:e6:71:a4:
5c:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:DE:10:A9:43:E2:2C:DA:AC:D1:02:CE:8D:2F:6A:B5:E2:9F:0D:D4
X509v3 Authority Key Identifier:
keyid:71:17:1D:5A:76:D3:BA:B9:37:2A:CC:C9:27:3E:BA:7D:F1:C5:9C:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cRcdWnbTurk3KszJJz66ffHFnPI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/dee8b9-c300-45eb-89e1-80699529cceb/1/cRcdWnbTurk3KszJJz66ffHFnPI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/dee8b9-c300-45eb-89e1-80699529cceb/1/cRcdWnbTurk3KszJJz66ffHFnPI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:f4:db:54:71:13:0b:59:fe:83:f9:9c:97:72:2f:44:5f:fa:
92:e1:a5:8a:0b:55:31:5a:8b:7a:df:91:64:e8:28:e1:51:4f:
ec:03:31:f9:7f:6c:a1:44:a4:6c:ec:93:8d:5b:5a:aa:39:85:
33:07:ab:0c:36:a9:fa:67:d1:7b:70:b0:81:22:8e:d3:56:7c:
be:cd:ba:1a:91:10:91:fc:07:e6:2a:54:55:85:86:62:df:85:
cc:70:89:60:8f:b2:78:56:5c:ff:e4:d2:e5:f3:43:74:16:58:
b8:50:e5:38:93:55:ac:ce:95:07:79:73:6d:cc:3c:23:8c:cc:
f7:75:c5:15:f4:13:50:36:d9:11:eb:2a:fd:6c:c3:cf:83:cc:
6f:83:e2:09:3f:91:a7:d5:ba:81:30:9d:42:de:5d:5c:75:9d:
fa:32:29:c1:6b:47:1e:48:bb:f8:69:ce:9f:d6:8f:19:60:fc:
1f:df:eb:6b:8d:99:58:ed:d4:c3:2b:d5:72:54:c6:30:34:51:
4d:c9:c9:e3:aa:61:74:6a:37:83:0c:a1:41:1d:fc:98:b4:bf:
f9:16:75:07:ad:4b:98:f2:46:e7:89:ac:1c:be:c8:bc:5b:34:
cb:70:2f:66:f5:5c:62:3c:7c:e7:19:7e:2f:b9:b3:94:c4:99:
c3:83:5c:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 20:10:40 2025 by rpki-client