
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/6fd3ef-d558-4e70-a214-52aefb6568ae/1/cLqzJoCFMIofjVcIS52qHr-V4Nw.mft
File: cLqzJoCFMIofjVcIS52qHr-V4Nw.mft (raw, json)
Hash identifier: qcD0Tz4EkOahHfZ+H1LHcBB173W4WU1f9Qsl/VrK5h8=
Subject key identifier: CD:19:C5:C8:77:D5:E5:C7:94:11:37:EC:E7:56:A0:18:67:04:C0:B5
Authority key identifier: 70:BA:B3:26:80:85:30:8A:1F:8D:57:08:4B:9D:AA:1E:BF:95:E0:DC
Certificate issuer: /CN=70bab3268085308a1f8d57084b9daa1ebf95e0dc
Certificate serial: 0198D660AB4026DFACFFD72A7C724EAA73A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cLqzJoCFMIofjVcIS52qHr-V4Nw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/6fd3ef-d558-4e70-a214-52aefb6568ae/1/cLqzJoCFMIofjVcIS52qHr-V4Nw.mft
Manifest number: 1644
Signing time: Sat 23 Aug 2025 10:01:56 +0000
Manifest this update: Sat 23 Aug 2025 10:01:56 +0000
Manifest next update: Sun 24 Aug 2025 10:01:56 +0000
Files and hashes: 1: cLqzJoCFMIofjVcIS52qHr-V4Nw.crl (hash: 0PdP6QNRmy9p+PmSsqnDeoUcLfVQFOvMLfd1ckiqJ8E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/6fd3ef-d558-4e70-a214-52aefb6568ae/1/cLqzJoCFMIofjVcIS52qHr-V4Nw.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/6fd3ef-d558-4e70-a214-52aefb6568ae/1/cLqzJoCFMIofjVcIS52qHr-V4Nw.mft
rsync://rpki.ripe.net/repository/DEFAULT/cLqzJoCFMIofjVcIS52qHr-V4Nw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:ab:40:26:df:ac:ff:d7:2a:7c:72:4e:aa:73:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70bab3268085308a1f8d57084b9daa1ebf95e0dc
Validity
Not Before: Aug 23 10:01:56 2025 GMT
Not After : Aug 24 10:01:56 2025 GMT
Subject: CN=cd19c5c877d5e5c7941137ece756a0186704c0b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:2d:5f:ea:9a:ed:af:a2:2a:ad:95:59:dd:02:
d4:af:ce:7c:2f:4d:4b:63:95:6a:7b:f4:26:63:74:
8a:cc:15:9c:74:6a:f0:77:4f:4c:c3:b5:9d:1d:77:
68:c6:ef:9d:30:ef:c7:35:bc:a0:b6:8c:ba:9b:85:
eb:2c:80:96:59:3b:69:75:40:2b:1c:f2:36:c5:a6:
5e:23:3b:fa:49:88:23:20:fd:40:db:4c:c7:b9:68:
18:3e:a3:37:d5:38:89:6e:2c:d1:22:37:2e:cd:54:
24:f5:11:51:7d:66:4b:a4:6f:24:78:f0:ad:b6:74:
35:49:ad:3b:5a:92:d4:ff:a7:4f:89:77:b9:4c:79:
8e:7c:5d:66:1f:59:4a:c1:e4:5e:1e:8f:7a:d1:9e:
4b:97:0b:b8:b2:95:38:65:3a:c7:99:78:56:7c:e8:
ae:35:e7:f0:ec:64:97:7f:3e:7c:81:df:ae:13:ea:
92:d8:42:b4:a6:27:bf:0f:d9:09:41:1f:c1:57:f5:
4e:2a:9f:53:17:e1:19:93:9a:48:6a:20:db:5b:1b:
49:9c:ad:0b:dc:19:16:21:9d:f9:57:0e:16:a1:a1:
2a:96:6e:6f:48:db:5a:37:57:80:1b:59:c5:44:f7:
71:3b:d6:88:61:cf:7e:ad:96:fd:8e:3f:4c:51:23:
00:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:19:C5:C8:77:D5:E5:C7:94:11:37:EC:E7:56:A0:18:67:04:C0:B5
X509v3 Authority Key Identifier:
keyid:70:BA:B3:26:80:85:30:8A:1F:8D:57:08:4B:9D:AA:1E:BF:95:E0:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cLqzJoCFMIofjVcIS52qHr-V4Nw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/6fd3ef-d558-4e70-a214-52aefb6568ae/1/cLqzJoCFMIofjVcIS52qHr-V4Nw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/6fd3ef-d558-4e70-a214-52aefb6568ae/1/cLqzJoCFMIofjVcIS52qHr-V4Nw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:95:35:a8:40:7b:b3:d8:cc:49:28:e7:e5:f5:09:e6:2a:25:
57:ec:fd:f6:d6:bf:e7:93:f6:2e:b1:53:bd:aa:b0:1e:48:3e:
39:df:0b:51:5f:4f:d6:e6:3a:48:5e:f2:b5:80:98:c4:7f:8e:
7a:ee:c0:50:91:06:3b:42:57:1e:a0:a4:7b:0e:b3:df:86:f4:
ec:86:8d:ef:35:9a:b6:b7:bb:4e:bc:ba:91:48:c6:ff:da:37:
61:27:39:ae:83:36:64:29:1b:3a:8d:31:ff:f2:f8:10:a9:ba:
9f:38:20:de:c4:cd:78:73:bd:11:f7:1a:b7:90:49:72:9b:39:
95:63:49:e7:29:47:74:7d:d2:48:17:c9:21:87:9e:dc:97:d2:
a5:64:7d:df:a5:79:97:77:37:c5:65:1a:e7:68:d8:7d:8d:d7:
94:2c:25:38:61:af:a0:ab:02:79:06:c3:d0:f8:43:93:66:74:
6e:22:91:1c:c4:3a:0c:f0:0a:a4:2f:f5:5e:f6:0a:aa:05:ef:
b4:ee:34:be:51:7a:87:1c:71:a9:c0:64:67:19:a4:64:37:5e:
f5:78:66:e9:9d:c9:4f:fe:d9:af:52:be:94:21:c7:a0:ec:02:
3a:f2:89:dc:ea:db:93:62:00:bf:d6:54:3e:09:a8:3c:0d:25:
69:81:92:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:01:14 2025 by rpki-client