Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/5c079d-d57e-4cd7-a365-556e22099b71/1/m263eIMkLPw4ZQB4iNCt7-s-cYs.mft
File: m263eIMkLPw4ZQB4iNCt7-s-cYs.mft (raw, json)
Hash identifier: otz+kxgD6fT/9MRGpDjaiukhzupvhQbiPS45r0lP5IM=
Subject key identifier: A8:6C:50:3B:3B:E9:4D:22:E1:86:5A:DE:40:AB:9F:63:27:7E:F5:42
Authority key identifier: 9B:6E:B7:78:83:24:2C:FC:38:65:00:78:88:D0:AD:EF:EB:3E:71:8B
Certificate issuer: /CN=9b6eb77883242cfc3865007888d0adefeb3e718b
Certificate serial: 0198D58373B060FCB42F0018D0C91A7940B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m263eIMkLPw4ZQB4iNCt7-s-cYs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/5c079d-d57e-4cd7-a365-556e22099b71/1/m263eIMkLPw4ZQB4iNCt7-s-cYs.mft
Manifest number: 0338
Signing time: Sat 23 Aug 2025 06:00:18 +0000
Manifest this update: Sat 23 Aug 2025 06:00:18 +0000
Manifest next update: Sun 24 Aug 2025 06:00:18 +0000
Files and hashes: 1: m263eIMkLPw4ZQB4iNCt7-s-cYs.crl (hash: OKY6QuPw/vUB/hWTZeTA06WXS/0EQ5zPpV+qsgx6R5Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/5c079d-d57e-4cd7-a365-556e22099b71/1/m263eIMkLPw4ZQB4iNCt7-s-cYs.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/5c079d-d57e-4cd7-a365-556e22099b71/1/m263eIMkLPw4ZQB4iNCt7-s-cYs.mft
rsync://rpki.ripe.net/repository/DEFAULT/m263eIMkLPw4ZQB4iNCt7-s-cYs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:73:b0:60:fc:b4:2f:00:18:d0:c9:1a:79:40:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b6eb77883242cfc3865007888d0adefeb3e718b
Validity
Not Before: Aug 23 06:00:18 2025 GMT
Not After : Aug 24 06:00:18 2025 GMT
Subject: CN=a86c503b3be94d22e1865ade40ab9f63277ef542
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:81:5a:e5:c3:84:a3:95:49:fd:22:99:b9:36:
09:70:16:3b:df:8b:f5:3b:74:9b:7c:7b:eb:14:bd:
06:6e:e4:8a:91:df:b4:ff:4e:f4:07:4c:d4:b8:a7:
7d:db:9f:04:43:95:a7:f8:76:63:de:f4:d6:df:77:
0c:90:d9:31:f9:f0:c7:00:bc:3c:ef:a7:56:e3:14:
f6:8c:57:8e:21:ba:74:30:c3:94:2a:d2:98:2d:7b:
a5:81:d6:ca:6d:e7:8d:5d:5b:fa:bc:1b:7c:19:33:
bd:54:4a:3d:63:6d:63:ad:9e:16:ce:e0:94:ba:54:
61:43:2a:28:d8:3d:fd:a1:ec:d9:3c:4a:ae:3f:25:
8e:17:cf:86:c7:3f:ee:96:a1:ac:97:3e:54:fe:5c:
fe:02:95:97:cc:f4:30:08:08:6d:8d:65:62:ab:8a:
73:fa:20:45:b9:9e:70:b5:18:14:b1:cd:f3:6c:9c:
99:ee:73:89:b3:04:7e:57:71:c2:71:35:ed:9e:b7:
eb:24:1f:b8:11:a6:27:5f:97:50:ea:d3:f8:ba:26:
d7:53:3b:27:28:14:9b:15:fc:88:09:7c:7d:9a:b4:
bc:5c:1f:c2:6f:42:91:6f:e1:d8:eb:f1:ff:7d:f1:
ee:ae:bb:74:e5:78:86:10:7b:39:9a:16:1e:f5:df:
1f:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:6C:50:3B:3B:E9:4D:22:E1:86:5A:DE:40:AB:9F:63:27:7E:F5:42
X509v3 Authority Key Identifier:
keyid:9B:6E:B7:78:83:24:2C:FC:38:65:00:78:88:D0:AD:EF:EB:3E:71:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m263eIMkLPw4ZQB4iNCt7-s-cYs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/5c079d-d57e-4cd7-a365-556e22099b71/1/m263eIMkLPw4ZQB4iNCt7-s-cYs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/5c079d-d57e-4cd7-a365-556e22099b71/1/m263eIMkLPw4ZQB4iNCt7-s-cYs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:83:42:bb:cd:b0:5b:6c:a3:a2:dd:c5:7d:16:a1:e1:da:f0:
45:66:74:bf:98:89:29:2d:2f:0e:ab:62:e3:d7:5c:f5:df:1a:
9b:3c:a6:7e:14:ca:58:82:5c:08:7c:15:1b:98:02:5c:b9:7a:
15:0a:ef:8b:42:45:e0:f6:21:2c:95:ee:f7:21:f1:ec:68:82:
6b:92:db:b7:24:21:ad:57:18:4c:f0:c8:35:86:aa:60:88:f6:
8f:ea:71:b0:aa:f3:3d:d6:c2:13:5b:00:a2:68:9f:96:77:21:
02:25:d9:57:ce:64:c0:ad:95:e9:4e:63:8b:0e:1c:31:3f:12:
37:af:4e:7c:79:b0:10:9a:63:8e:f9:5d:ed:94:cc:d4:fb:bc:
3b:2d:b4:fe:55:21:33:7b:5c:32:01:96:e2:b4:12:f3:eb:10:
d1:64:a7:e2:36:d1:a6:1b:a7:32:4d:bf:ef:f0:af:64:f7:0e:
36:bf:a8:75:97:4d:01:21:92:a0:7b:2f:ab:e2:d1:56:6a:31:
6c:81:28:bc:77:28:7d:ca:a4:28:44:63:91:00:9c:40:c0:63:
ff:8d:fb:0c:a2:57:0a:37:bf:d2:a5:17:20:a2:f1:22:9d:a4:
2c:b1:ee:a9:df:5a:6b:5e:08:7a:bc:16:bb:ce:b6:ae:8a:27:
c9:39:23:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:32:56 2025 by rpki-client