Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/16c890-17e7-4a51-a387-3e8df3310232/1/CLPrX7O6dlbhE1eDSCnuyvRBIS4.mft
File: CLPrX7O6dlbhE1eDSCnuyvRBIS4.mft (raw, json)
Hash identifier: dGS7aYjwZw5A/ns6gc2jcr490Nv0NnLsvVmBs+R8SLc=
Subject key identifier: A1:95:6F:11:2A:9C:02:73:B6:5E:E0:E4:94:1A:1F:71:22:90:C0:50
Authority key identifier: 08:B3:EB:5F:B3:BA:76:56:E1:13:57:83:48:29:EE:CA:F4:41:21:2E
Certificate issuer: /CN=08b3eb5fb3ba7656e11357834829eecaf441212e
Certificate serial: 0197BA7E2C16410D99A640AD63BC217443C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CLPrX7O6dlbhE1eDSCnuyvRBIS4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/16c890-17e7-4a51-a387-3e8df3310232/1/CLPrX7O6dlbhE1eDSCnuyvRBIS4.mft
Manifest number: 01F8
Signing time: Sun 29 Jun 2025 07:02:00 +0000
Manifest this update: Sun 29 Jun 2025 07:02:00 +0000
Manifest next update: Mon 30 Jun 2025 07:02:00 +0000
Files and hashes: 1: CLPrX7O6dlbhE1eDSCnuyvRBIS4.crl (hash: WMf/GjCccgSO6/A5bb0YpMJIc8INrRXF4MBG5Ny2B5E=)
2: Dx843zJfB2RQ1tXw_6blL8VsbDw.roa (hash: Wk3Kg6R2i9DDoDfgR64ME8g+dDPZ0Euba0eJlCA1nOk=)
3: Eqq1hxnObNRaQRziaWuuBD1-O8o.roa (hash: jq17ziTa438haUw4I3TgAJRiuoEa3mnBNSNTDtlyTb8=)
4: baeYMpQTf1prfSgvYpiSJyiA86o.roa (hash: K1aC88mjEbBLbQ7U4e/CSJaIjpQ51Z65KxdLka02ark=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/16c890-17e7-4a51-a387-3e8df3310232/1/CLPrX7O6dlbhE1eDSCnuyvRBIS4.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/16c890-17e7-4a51-a387-3e8df3310232/1/CLPrX7O6dlbhE1eDSCnuyvRBIS4.mft
rsync://rpki.ripe.net/repository/DEFAULT/CLPrX7O6dlbhE1eDSCnuyvRBIS4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 04:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ba:7e:2c:16:41:0d:99:a6:40:ad:63:bc:21:74:43:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08b3eb5fb3ba7656e11357834829eecaf441212e
Validity
Not Before: Jun 29 07:02:00 2025 GMT
Not After : Jun 30 07:02:00 2025 GMT
Subject: CN=a1956f112a9c0273b65ee0e4941a1f712290c050
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:09:b2:25:c9:e0:cb:4e:79:6f:79:2a:0c:f5:
c7:23:2e:76:5b:74:bf:1a:d8:d2:b0:50:fb:7d:f9:
c5:3e:03:34:03:a9:07:a1:39:dc:fa:a8:19:37:56:
12:10:52:51:88:02:0c:02:0b:bb:e2:45:b2:9c:9e:
38:fe:88:39:9e:a6:e4:8e:72:67:c0:6f:ea:5f:bd:
fd:e3:39:df:dc:6a:2a:4d:49:65:8b:32:3e:5e:2e:
33:63:f7:b8:11:99:27:ca:04:c4:d1:c5:d1:b3:54:
7c:46:27:59:5d:84:e8:a5:52:05:ea:d0:f5:d4:fb:
a3:d7:3b:1a:5f:3d:d2:62:70:dd:1c:e3:7d:b3:28:
44:78:e0:5c:6d:02:8f:87:0c:fd:d6:57:e4:7f:90:
eb:93:bd:8c:32:c1:f2:4a:a0:c1:5c:51:69:a6:a9:
dd:37:4a:31:3f:ae:1d:2f:b6:33:76:30:5a:0c:bf:
1c:7f:db:4a:5c:2e:90:d0:41:0a:2b:c7:32:bd:b7:
3b:47:b1:eb:de:14:e6:a9:d5:5c:fc:6f:fb:f6:31:
4b:ad:cb:fe:6b:48:fb:26:df:b5:fa:d4:c7:18:7b:
e0:f6:be:4b:5c:89:ac:10:78:94:62:1b:22:47:52:
be:05:e4:c2:13:74:78:37:41:f4:15:41:ff:00:81:
e6:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:95:6F:11:2A:9C:02:73:B6:5E:E0:E4:94:1A:1F:71:22:90:C0:50
X509v3 Authority Key Identifier:
keyid:08:B3:EB:5F:B3:BA:76:56:E1:13:57:83:48:29:EE:CA:F4:41:21:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CLPrX7O6dlbhE1eDSCnuyvRBIS4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/16c890-17e7-4a51-a387-3e8df3310232/1/CLPrX7O6dlbhE1eDSCnuyvRBIS4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/16c890-17e7-4a51-a387-3e8df3310232/1/CLPrX7O6dlbhE1eDSCnuyvRBIS4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:9b:70:5c:8c:84:f2:86:d1:49:78:dc:95:4e:fa:77:e9:f1:
68:e1:66:53:fc:4e:e2:10:87:35:a1:1b:76:1d:f3:49:dd:b4:
28:b3:25:b6:bb:2b:42:a9:a6:c2:3a:ee:5d:b6:b1:11:c7:bf:
89:99:72:6d:98:46:d9:30:be:8b:08:21:d4:e9:2f:c0:d4:92:
a8:2a:33:15:41:f1:c0:4d:1e:e7:d3:88:cb:af:6d:0f:26:42:
36:11:e4:02:37:e2:72:58:86:d0:6a:2e:5e:be:2a:6a:df:df:
0e:a3:34:a1:3c:52:34:eb:6f:f3:a8:87:b3:29:f1:87:56:e7:
b8:ea:0f:48:6e:c5:29:9a:c2:13:fe:fd:e4:0d:5a:b9:00:cb:
f7:1a:2a:48:73:e1:17:08:53:c9:a4:9a:30:63:b9:fa:ad:35:
41:36:f8:2c:12:8a:af:dd:59:81:90:d8:03:28:ba:3b:a3:0d:
67:a2:1e:3a:c5:2d:a7:e3:60:bc:95:e4:87:c0:0e:93:44:73:
60:48:ff:06:62:69:84:e5:98:7b:71:ad:83:18:b5:ec:44:ab:
1f:66:8f:48:06:31:66:05:b2:5f:fc:ae:86:f8:2c:c0:10:9a:
22:41:e9:5b:2b:b3:5a:26:70:3b:a9:28:7d:34:89:a1:39:9c:
a7:c7:6a:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 14:47:03 2025 by rpki-client