Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/2c708b-b6e2-4def-a2d9-b31011137a57/1/4tccU1qnoKzpP62r22WD-ISmxiY.mft
File: 4tccU1qnoKzpP62r22WD-ISmxiY.mft (raw, json)
Hash identifier: gVknAmBvQ6JJgiE4mqma7Zd1XpMrTt/TAdi5Qxy4Fqc=
Subject key identifier: 1F:10:E1:B7:4A:B0:03:9E:14:27:5E:A9:B7:AF:9C:A9:F7:5F:8D:48
Authority key identifier: E2:D7:1C:53:5A:A7:A0:AC:E9:3F:AD:AB:DB:65:83:F8:84:A6:C6:26
Certificate issuer: /CN=e2d71c535aa7a0ace93fadabdb6583f884a6c626
Certificate serial: 0198D660C39D2E0F2A40645F89B9BF1E7B58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4tccU1qnoKzpP62r22WD-ISmxiY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/2c708b-b6e2-4def-a2d9-b31011137a57/1/4tccU1qnoKzpP62r22WD-ISmxiY.mft
Manifest number: 0723
Signing time: Sat 23 Aug 2025 10:02:02 +0000
Manifest this update: Sat 23 Aug 2025 10:02:02 +0000
Manifest next update: Sun 24 Aug 2025 10:02:02 +0000
Files and hashes: 1: 4tccU1qnoKzpP62r22WD-ISmxiY.crl (hash: 6vwffObynwiK1MgovmORQq+baXWX7gh+vYHX23VLbOg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/2c708b-b6e2-4def-a2d9-b31011137a57/1/4tccU1qnoKzpP62r22WD-ISmxiY.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/2c708b-b6e2-4def-a2d9-b31011137a57/1/4tccU1qnoKzpP62r22WD-ISmxiY.mft
rsync://rpki.ripe.net/repository/DEFAULT/4tccU1qnoKzpP62r22WD-ISmxiY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:c3:9d:2e:0f:2a:40:64:5f:89:b9:bf:1e:7b:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2d71c535aa7a0ace93fadabdb6583f884a6c626
Validity
Not Before: Aug 23 10:02:02 2025 GMT
Not After : Aug 24 10:02:02 2025 GMT
Subject: CN=1f10e1b74ab0039e14275ea9b7af9ca9f75f8d48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:8f:3f:3c:e9:1f:a7:ed:7b:fb:7b:56:31:fc:
d4:c4:db:f6:15:0d:51:b9:1b:ad:b0:b5:c4:9d:c6:
13:a5:e7:da:a6:11:d0:d7:7c:80:f5:6e:6e:22:19:
5a:f6:75:ab:2e:8e:82:f3:bf:8e:91:dc:44:42:b2:
4e:60:27:c6:64:ac:21:c0:7f:1e:2a:f7:1d:90:c6:
b5:32:6a:30:06:b0:35:4b:b1:04:a7:be:2b:ea:aa:
65:51:6b:f1:e3:84:09:49:ce:ed:8c:4c:6c:db:f1:
45:25:c4:ad:74:5a:f6:52:06:98:fa:6d:5f:cb:ed:
75:52:96:ec:f1:aa:9a:0f:df:51:93:2f:02:ad:00:
0b:74:78:f3:d6:db:b5:97:a6:2b:5f:a2:e8:ae:0d:
63:10:8d:34:38:dc:e5:3a:7f:59:19:cf:8d:95:4f:
c8:3d:f1:23:2b:f8:5d:60:38:50:11:d1:a5:af:b1:
c4:79:fc:ba:51:44:71:41:a7:6a:f1:b7:87:9c:8e:
ff:99:de:76:00:09:a6:d9:5c:b1:c8:f7:79:3d:1b:
de:38:ed:f4:61:22:49:83:a3:ca:a1:7c:b3:44:23:
06:55:a0:5e:c7:fd:14:e2:97:75:ac:b9:90:a3:24:
df:63:8e:da:d8:ac:cc:a0:19:4a:82:e0:e4:7e:23:
37:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:10:E1:B7:4A:B0:03:9E:14:27:5E:A9:B7:AF:9C:A9:F7:5F:8D:48
X509v3 Authority Key Identifier:
keyid:E2:D7:1C:53:5A:A7:A0:AC:E9:3F:AD:AB:DB:65:83:F8:84:A6:C6:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4tccU1qnoKzpP62r22WD-ISmxiY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/2c708b-b6e2-4def-a2d9-b31011137a57/1/4tccU1qnoKzpP62r22WD-ISmxiY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/2c708b-b6e2-4def-a2d9-b31011137a57/1/4tccU1qnoKzpP62r22WD-ISmxiY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:9f:6b:3f:6a:74:e9:4b:62:9d:14:49:9e:5f:f6:32:b1:d8:
ec:8f:4a:c0:c6:54:fa:66:08:25:82:06:b7:ad:13:35:64:5d:
16:cb:6d:21:d6:a8:26:26:08:ae:59:48:b0:eb:97:f1:30:8d:
ca:29:3b:eb:71:b9:52:b3:5e:e5:80:d0:72:ae:46:21:06:b0:
52:eb:de:5a:c0:1e:60:49:50:34:17:ae:e4:52:98:4e:c1:25:
07:b1:74:85:c7:16:5c:41:9a:c9:38:da:d3:47:85:13:28:21:
97:19:94:71:eb:c7:f5:49:b2:be:46:5e:38:a5:f4:b5:55:1d:
bc:e3:97:0c:85:59:9d:c3:8f:7d:3c:37:7f:17:3f:a9:f8:53:
a9:06:75:91:c6:3f:28:40:05:fe:52:ff:ba:f0:ee:39:9b:fc:
c2:f4:aa:7f:22:d0:02:49:c1:25:00:3d:be:f1:bf:69:a1:c4:
b0:77:84:82:53:1d:58:0d:37:58:a3:04:46:00:1a:db:05:ee:
ec:e4:68:5f:cb:2f:d9:98:d8:ea:e8:d6:65:c8:9e:3d:6a:6b:
ee:33:10:57:d1:7d:fb:6c:0e:65:8e:23:87:ca:89:55:bd:5b:
77:b8:e9:3d:95:5b:d8:81:ba:48:53:43:b4:fd:80:f9:23:01:
e5:77:76:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:28:49 2025 by rpki-client