Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/88178a-7f51-4365-aae2-fe50650e1be4/1/s7XiG4Rbsd36uziIgCwZpiJ3OAI.mft
File: s7XiG4Rbsd36uziIgCwZpiJ3OAI.mft (raw, json)
Hash identifier: xVbYbqF3sqLyh8HkBoEAPuX7cFe1lYAH3Ou6b6POvW4=
Subject key identifier: 0B:B9:C4:BE:AB:81:11:1B:BE:AA:69:75:54:34:C8:4F:31:7E:6B:C0
Authority key identifier: B3:B5:E2:1B:84:5B:B1:DD:FA:BB:38:88:80:2C:19:A6:22:77:38:02
Certificate issuer: /CN=b3b5e21b845bb1ddfabb3888802c19a622773802
Certificate serial: 0198D660ED2054BC02316F2B4A993F0D52D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s7XiG4Rbsd36uziIgCwZpiJ3OAI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/88178a-7f51-4365-aae2-fe50650e1be4/1/s7XiG4Rbsd36uziIgCwZpiJ3OAI.mft
Manifest number: 1647
Signing time: Sat 23 Aug 2025 10:02:12 +0000
Manifest this update: Sat 23 Aug 2025 10:02:12 +0000
Manifest next update: Sun 24 Aug 2025 10:02:12 +0000
Files and hashes: 1: s7XiG4Rbsd36uziIgCwZpiJ3OAI.crl (hash: CjLyLi34wZ7+KVS3Q1g7Sx735q4bjnma4mzsGvRD5gU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/88178a-7f51-4365-aae2-fe50650e1be4/1/s7XiG4Rbsd36uziIgCwZpiJ3OAI.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/88178a-7f51-4365-aae2-fe50650e1be4/1/s7XiG4Rbsd36uziIgCwZpiJ3OAI.mft
rsync://rpki.ripe.net/repository/DEFAULT/s7XiG4Rbsd36uziIgCwZpiJ3OAI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:ed:20:54:bc:02:31:6f:2b:4a:99:3f:0d:52:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3b5e21b845bb1ddfabb3888802c19a622773802
Validity
Not Before: Aug 23 10:02:12 2025 GMT
Not After : Aug 24 10:02:12 2025 GMT
Subject: CN=0bb9c4beab81111bbeaa69755434c84f317e6bc0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:dc:af:14:fb:ba:05:00:d0:77:18:60:7c:ac:
36:c1:c0:ff:71:5b:61:ea:d1:49:17:d1:42:a4:ca:
fb:9e:62:ab:76:10:04:23:0a:dc:4c:d5:d2:cf:77:
14:01:11:36:74:bc:da:17:a4:f7:98:20:6a:aa:82:
fb:10:67:8d:f0:46:ca:c4:ca:d0:13:0a:3b:e3:5a:
0b:42:e7:c0:45:f1:4d:5a:08:6a:8d:fe:4c:40:a6:
4f:5d:e3:86:eb:b0:5d:04:f7:b9:ac:46:a0:3d:dc:
46:a8:6b:25:81:41:95:d5:47:f4:80:0d:9b:8f:70:
9a:47:e4:a0:a5:df:9d:00:e3:f5:3e:6a:9a:5e:a6:
d2:23:c9:f5:cf:bf:d5:bd:fc:fe:b0:da:21:ed:7f:
6b:e4:8b:27:e0:a8:91:85:66:3e:5f:f5:1b:8f:b7:
13:3c:fe:b5:88:b7:c5:68:f6:8e:26:e1:b9:83:49:
19:a0:6e:e3:8c:da:43:67:47:48:68:37:81:71:dd:
f4:fe:95:e9:46:b2:28:84:b4:ff:f9:ad:ce:bf:13:
c2:16:4b:f9:02:7c:10:a7:d9:ef:c5:a7:c6:f3:42:
f4:3b:57:52:fc:96:9f:50:35:e9:1e:e4:ba:59:50:
d8:1b:7b:9f:bd:86:7f:d9:22:23:0a:34:c6:e4:c9:
34:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:B9:C4:BE:AB:81:11:1B:BE:AA:69:75:54:34:C8:4F:31:7E:6B:C0
X509v3 Authority Key Identifier:
keyid:B3:B5:E2:1B:84:5B:B1:DD:FA:BB:38:88:80:2C:19:A6:22:77:38:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s7XiG4Rbsd36uziIgCwZpiJ3OAI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/88178a-7f51-4365-aae2-fe50650e1be4/1/s7XiG4Rbsd36uziIgCwZpiJ3OAI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/88178a-7f51-4365-aae2-fe50650e1be4/1/s7XiG4Rbsd36uziIgCwZpiJ3OAI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:a8:7c:ee:60:21:bb:73:fb:57:47:20:6b:58:be:19:68:a1:
98:ae:bc:c0:8b:d6:8a:b9:6c:fd:c8:24:80:67:bb:6b:89:c5:
d4:cb:53:9a:0e:fa:dc:f0:79:56:a1:6e:f8:cd:10:a5:94:06:
9e:bd:4a:b9:a3:d5:2e:91:2e:2f:50:d5:70:34:a2:6b:f6:aa:
5b:8d:d4:a6:e2:83:c5:1e:2e:52:21:a2:48:bf:de:4e:51:e2:
18:34:cf:64:67:4d:5a:93:88:cf:23:62:40:c3:34:0b:86:02:
0d:f1:ad:fa:8d:0f:19:bf:c6:64:28:1d:a7:9b:96:e4:da:cf:
12:58:a4:31:13:76:9c:28:2f:ee:e9:01:c4:cd:5a:58:d7:14:
f8:68:50:85:5b:3a:1f:18:7f:ee:1d:16:05:8f:15:82:ed:fb:
12:03:47:b1:53:53:a8:80:10:97:41:40:3f:d6:45:34:89:bf:
ce:50:24:05:2b:47:63:52:22:58:d0:39:05:92:3c:35:f0:ee:
9e:08:d8:20:f2:c5:2b:03:df:c4:36:67:56:1f:60:62:e3:b2:
b0:dd:81:f3:05:39:e2:1a:58:da:bc:46:bf:4b:8f:3f:f1:11:
8b:fb:b6:11:8c:d6:94:a3:33:01:c4:95:76:25:30:2f:52:ac:
e8:d6:0a:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:27:12 2025 by rpki-client