Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/cc8a53-02d9-4a1f-907e-3b86a3d00fe9/1/c1ZV3Gd50JX8sIthq-uGsM2Zp4w.mft
File: c1ZV3Gd50JX8sIthq-uGsM2Zp4w.mft (raw, json)
Hash identifier: BimuxDQLCPzJjzghKGlRGzT/sxDSvpuAvytLPD027kY=
Subject key identifier: 82:3D:89:EB:ED:28:18:F0:56:30:B7:1D:E6:8B:62:1D:66:EC:82:2B
Authority key identifier: 73:56:55:DC:67:79:D0:95:FC:B0:8B:61:AB:EB:86:B0:CD:99:A7:8C
Certificate issuer: /CN=735655dc6779d095fcb08b61abeb86b0cd99a78c
Certificate serial: 0197B77C95DA7A07E4E0CB6F793CAF1487AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c1ZV3Gd50JX8sIthq-uGsM2Zp4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/cc8a53-02d9-4a1f-907e-3b86a3d00fe9/1/c1ZV3Gd50JX8sIthq-uGsM2Zp4w.mft
Manifest number: 0A6A
Signing time: Sat 28 Jun 2025 17:01:24 +0000
Manifest this update: Sat 28 Jun 2025 17:01:24 +0000
Manifest next update: Sun 29 Jun 2025 17:01:24 +0000
Files and hashes: 1: c1ZV3Gd50JX8sIthq-uGsM2Zp4w.crl (hash: P1gWFNfcHQ5DUj3GIdL/0S9YNP7JISmiZujKzOoDrlk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/cc8a53-02d9-4a1f-907e-3b86a3d00fe9/1/c1ZV3Gd50JX8sIthq-uGsM2Zp4w.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/cc8a53-02d9-4a1f-907e-3b86a3d00fe9/1/c1ZV3Gd50JX8sIthq-uGsM2Zp4w.mft
rsync://rpki.ripe.net/repository/DEFAULT/c1ZV3Gd50JX8sIthq-uGsM2Zp4w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:95:da:7a:07:e4:e0:cb:6f:79:3c:af:14:87:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=735655dc6779d095fcb08b61abeb86b0cd99a78c
Validity
Not Before: Jun 28 17:01:24 2025 GMT
Not After : Jun 29 17:01:24 2025 GMT
Subject: CN=823d89ebed2818f05630b71de68b621d66ec822b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:84:5a:00:d4:c4:3b:b5:fb:5d:f2:d9:a7:7d:
c2:22:fc:fb:25:f8:c4:37:30:24:7a:0e:ef:ce:34:
c3:07:1c:a1:59:08:3f:80:55:ac:dc:73:8a:26:00:
4e:db:10:e4:0f:1d:40:93:17:e6:0d:37:63:91:43:
28:97:8a:9c:e0:3f:13:5a:be:5e:ea:ee:a3:8b:c7:
4d:9d:04:79:d3:0f:59:6f:84:47:63:2e:49:7f:04:
e2:bd:85:25:56:25:91:8e:21:24:0e:e9:c8:e1:43:
78:07:30:d4:40:0a:32:b8:76:32:ba:55:c4:62:d3:
a4:61:d0:a8:fc:67:d0:15:9d:9b:06:f4:00:ea:49:
1f:de:1c:86:b3:20:48:75:71:a8:24:a0:e3:a4:e1:
8a:1d:f3:e9:ff:6f:14:1b:41:f4:e1:e5:a2:ac:23:
e7:60:99:da:e6:14:66:38:a4:b1:0d:dd:70:c5:7d:
ad:49:3d:95:de:c5:37:54:a8:b7:74:60:69:f2:e7:
a8:5f:d6:d1:78:77:4a:87:9e:5b:7e:af:1f:e9:ae:
49:aa:71:96:76:81:cf:92:42:ee:80:5b:ba:6a:c1:
9b:74:79:3b:8f:ca:b2:e1:e5:33:56:2a:85:55:ef:
e6:c9:bb:1f:7e:07:c4:d3:ce:3c:5d:03:2c:2f:8d:
00:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:3D:89:EB:ED:28:18:F0:56:30:B7:1D:E6:8B:62:1D:66:EC:82:2B
X509v3 Authority Key Identifier:
keyid:73:56:55:DC:67:79:D0:95:FC:B0:8B:61:AB:EB:86:B0:CD:99:A7:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1ZV3Gd50JX8sIthq-uGsM2Zp4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/cc8a53-02d9-4a1f-907e-3b86a3d00fe9/1/c1ZV3Gd50JX8sIthq-uGsM2Zp4w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/cc8a53-02d9-4a1f-907e-3b86a3d00fe9/1/c1ZV3Gd50JX8sIthq-uGsM2Zp4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:fe:bf:21:d9:da:76:90:9a:f5:b1:55:b5:40:73:c7:95:bc:
d5:21:32:a6:7d:35:66:ed:25:3b:94:79:f3:3b:4d:4f:50:25:
cc:04:f9:65:f3:c6:a9:1f:ac:ef:81:23:fc:a0:73:1c:96:4d:
0f:0d:65:34:26:ca:6f:73:1b:30:63:d6:95:94:15:35:38:a1:
92:aa:52:c0:65:7b:fd:94:32:04:ee:00:10:61:92:c4:9b:07:
8a:a0:ec:60:9d:12:0d:f2:d0:30:77:5c:a6:c0:fc:58:69:c8:
04:2c:d3:12:28:78:10:11:05:79:f6:bb:f4:85:93:8c:17:27:
b2:87:1d:03:c0:72:fb:92:2d:4f:2e:fa:6f:18:c1:f8:55:51:
3d:ae:75:d1:ab:dd:3b:a0:23:55:b2:8c:8b:6c:4e:ac:8b:fd:
72:14:0b:cc:34:6e:b4:a1:dd:f3:0c:48:92:74:10:e4:29:06:
e9:ee:e9:2e:7e:82:b7:c8:86:6f:5c:06:a2:39:f4:bc:42:e1:
b0:3e:38:88:b8:d0:ca:87:46:cb:e2:d5:5a:78:7a:be:c2:79:
5e:d9:5f:53:e0:2f:c8:95:a6:12:67:3c:ac:5f:e3:be:fe:49:
aa:34:6a:c1:80:03:30:04:a9:86:9c:9d:00:2d:a9:dc:45:81:
cd:00:73:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:18:29 2025 by rpki-client