Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/365a98-b803-4fc6-97be-253ab7aac417/1/B9R7Icw7opzI-Kk1TzN_LVwwIVQ.mft
File: B9R7Icw7opzI-Kk1TzN_LVwwIVQ.mft (raw, json)
Hash identifier: i5M9PEbac4u21GS1EqTLadfhj+rGhSyQ1inYkH7gM6g=
Subject key identifier: 28:D6:4A:49:4D:43:E8:82:A5:C4:B2:96:9A:DC:15:4E:E0:E2:0B:07
Authority key identifier: 07:D4:7B:21:CC:3B:A2:9C:C8:F8:A9:35:4F:33:7F:2D:5C:30:21:54
Certificate issuer: /CN=07d47b21cc3ba29cc8f8a9354f337f2d5c302154
Certificate serial: 0198D54DE86B17362B17E79441CAFA89FCAC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B9R7Icw7opzI-Kk1TzN_LVwwIVQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/365a98-b803-4fc6-97be-253ab7aac417/1/B9R7Icw7opzI-Kk1TzN_LVwwIVQ.mft
Manifest number: 1647
Signing time: Sat 23 Aug 2025 05:01:49 +0000
Manifest this update: Sat 23 Aug 2025 05:01:49 +0000
Manifest next update: Sun 24 Aug 2025 05:01:49 +0000
Files and hashes: 1: B9R7Icw7opzI-Kk1TzN_LVwwIVQ.crl (hash: WB/dNatjyYeZciNyx1FxNYJHsloCiy6B4rIAAS3gOpQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/365a98-b803-4fc6-97be-253ab7aac417/1/B9R7Icw7opzI-Kk1TzN_LVwwIVQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/365a98-b803-4fc6-97be-253ab7aac417/1/B9R7Icw7opzI-Kk1TzN_LVwwIVQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/B9R7Icw7opzI-Kk1TzN_LVwwIVQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4d:e8:6b:17:36:2b:17:e7:94:41:ca:fa:89:fc:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07d47b21cc3ba29cc8f8a9354f337f2d5c302154
Validity
Not Before: Aug 23 05:01:49 2025 GMT
Not After : Aug 24 05:01:49 2025 GMT
Subject: CN=28d64a494d43e882a5c4b2969adc154ee0e20b07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:97:5a:ba:6a:be:66:8e:c6:5c:cc:a6:0e:24:
80:99:10:58:8f:7b:d3:e7:3a:ec:da:a4:83:92:b2:
54:36:81:40:51:96:45:b7:13:99:46:13:e6:77:4b:
cd:62:a6:12:92:54:7c:9c:ba:16:b9:88:c2:d8:12:
55:c3:b4:43:ea:89:42:29:f9:3b:d0:f0:c4:a8:92:
5b:93:36:5c:77:46:72:de:6b:de:77:7f:98:75:db:
d7:ad:4a:1f:0e:32:ef:20:e3:30:ea:d0:26:97:f3:
95:b8:a5:71:66:f7:e7:09:1c:6d:8c:26:ec:d1:f6:
38:30:6a:37:9d:2a:60:e6:82:01:a4:93:83:e2:ba:
84:ee:52:ab:d7:56:be:33:59:c7:f6:d4:06:70:5c:
2d:64:f0:33:2a:f7:d0:79:71:7f:09:d5:90:0d:4e:
4e:e3:b3:54:c1:14:72:4f:2c:24:56:aa:c8:25:d4:
7e:d7:f5:77:4c:f4:b1:cd:41:d6:7c:02:fa:35:4e:
56:3e:a0:79:f1:e6:0d:52:4f:6a:28:b5:ee:47:42:
d0:51:67:7c:20:94:2e:ea:6f:58:38:89:10:a0:62:
96:52:fd:37:91:34:f6:c3:84:12:20:e8:db:ca:77:
09:26:61:86:82:a5:dc:cf:81:d4:79:dc:77:89:d1:
ac:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:D6:4A:49:4D:43:E8:82:A5:C4:B2:96:9A:DC:15:4E:E0:E2:0B:07
X509v3 Authority Key Identifier:
keyid:07:D4:7B:21:CC:3B:A2:9C:C8:F8:A9:35:4F:33:7F:2D:5C:30:21:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B9R7Icw7opzI-Kk1TzN_LVwwIVQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/365a98-b803-4fc6-97be-253ab7aac417/1/B9R7Icw7opzI-Kk1TzN_LVwwIVQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/365a98-b803-4fc6-97be-253ab7aac417/1/B9R7Icw7opzI-Kk1TzN_LVwwIVQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:89:44:65:5f:4f:4f:1c:b7:31:9d:0a:34:3f:19:f8:c1:b2:
9b:a2:f8:cd:77:77:7f:d9:af:97:7d:7f:2e:58:bd:7b:ec:27:
32:6f:71:cb:05:c9:ea:fb:a8:f7:45:43:3f:02:eb:ed:50:97:
35:12:64:13:8d:e9:6d:ca:eb:4a:29:4b:5a:95:b0:4b:72:e6:
77:75:d4:5d:d4:76:3f:f4:83:45:ba:67:85:93:9a:5b:82:52:
6f:d4:71:87:cf:44:07:e5:c8:c5:c7:7b:bb:3d:1f:71:75:e2:
ed:01:88:97:cc:15:4d:18:2f:26:e0:00:2f:28:8d:35:fc:b6:
7e:e3:47:9a:b4:ef:21:98:80:9a:87:e2:3e:94:80:65:29:81:
d9:ce:10:78:94:49:3d:84:e3:de:0e:b3:c6:62:33:5a:7d:1d:
62:25:06:48:d0:69:4e:23:9b:b8:42:33:fa:aa:25:56:90:76:
1b:6a:8f:84:a2:d3:7c:3c:91:7d:bc:26:e3:02:6c:ef:5c:01:
11:5a:0a:a5:56:25:79:dc:55:a5:4e:fd:ec:b9:a8:06:98:33:
5e:48:51:39:d7:45:a7:54:eb:10:d8:1a:60:3a:b1:77:cb:6c:
fb:80:64:55:ad:89:b4:02:c9:cb:4d:b1:c9:71:dc:50:ad:db:
8b:03:46:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:45:36 2025 by rpki-client