Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/dfc110-7924-49a9-8564-0bebfcbde1f3/1/c21yTiOe-38ve-pSap4MXn_Im74.mft
File: c21yTiOe-38ve-pSap4MXn_Im74.mft (raw, json)
Hash identifier: 6jGFLu2cJNlzyRqr5gBiOH06EmZNziy7rPdJY8r6u8Y=
Subject key identifier: 9D:28:A8:08:BF:5F:A1:DB:87:E1:D9:A4:CC:09:B0:E6:AC:71:22:9C
Authority key identifier: 73:6D:72:4E:23:9E:FB:7F:2F:7B:EA:52:6A:9E:0C:5E:7F:C8:9B:BE
Certificate issuer: /CN=736d724e239efb7f2f7bea526a9e0c5e7fc89bbe
Certificate serial: 0198D5BBB9E0EF342E2BE29C4E6115F04F59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c21yTiOe-38ve-pSap4MXn_Im74.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/dfc110-7924-49a9-8564-0bebfcbde1f3/1/c21yTiOe-38ve-pSap4MXn_Im74.mft
Manifest number: 1648
Signing time: Sat 23 Aug 2025 07:01:46 +0000
Manifest this update: Sat 23 Aug 2025 07:01:46 +0000
Manifest next update: Sun 24 Aug 2025 07:01:46 +0000
Files and hashes: 1: 1fA5PORVd3jPdWz7xA5f_vnyxD0.roa (hash: ykI4OL9fWsgYZNYcziWcElBypDNzSjFchoDv23Mnzrs=)
2: c21yTiOe-38ve-pSap4MXn_Im74.crl (hash: h4BRCDxsnwOUy3ETj6hQ5u3Jb0p75mWofiXZ2Obgz8U=)
3: uy61Z_8RU66-jPuUHYoqaPIOhik.roa (hash: L9o3XCU/iUGm+BZYXWE1H2NgYx1sjgSieqKtDG+tWqs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/dfc110-7924-49a9-8564-0bebfcbde1f3/1/c21yTiOe-38ve-pSap4MXn_Im74.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/dfc110-7924-49a9-8564-0bebfcbde1f3/1/c21yTiOe-38ve-pSap4MXn_Im74.mft
rsync://rpki.ripe.net/repository/DEFAULT/c21yTiOe-38ve-pSap4MXn_Im74.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:b9:e0:ef:34:2e:2b:e2:9c:4e:61:15:f0:4f:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=736d724e239efb7f2f7bea526a9e0c5e7fc89bbe
Validity
Not Before: Aug 23 07:01:46 2025 GMT
Not After : Aug 24 07:01:46 2025 GMT
Subject: CN=9d28a808bf5fa1db87e1d9a4cc09b0e6ac71229c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:e6:1d:0c:9e:b4:43:c2:7a:b0:99:7a:fb:56:
c2:aa:ef:ae:e6:c6:5e:7c:63:50:b3:72:79:76:68:
ca:3f:ee:d6:80:0e:aa:e2:62:70:4c:54:c8:1b:6f:
6a:5b:8c:1a:31:6a:81:e7:c1:a3:00:e7:58:e5:b1:
2e:8b:0b:2d:29:ec:8c:74:c9:52:64:5c:35:0a:61:
8b:81:ec:a6:21:21:34:19:f1:de:04:5f:54:4b:fa:
3b:05:20:88:75:09:65:dd:eb:21:05:70:aa:f0:f5:
70:c6:34:e8:58:fe:32:3f:07:27:75:75:8c:3c:4f:
02:d5:e6:24:0e:fd:24:6a:b4:97:02:06:6f:ac:28:
80:d5:9d:64:2b:ac:72:7e:34:37:cf:08:e7:c1:02:
bc:e5:22:6c:d3:8b:75:2f:f8:03:bc:a3:b1:e1:01:
30:58:80:8f:f8:db:f1:18:58:2d:51:2c:7a:cc:46:
97:15:fb:2a:3b:54:fc:1a:7e:26:12:9e:f0:b1:00:
a4:84:a1:49:f4:d8:46:27:94:9e:0e:9a:e1:c1:cb:
73:e1:4b:0b:64:d2:93:7c:7c:bc:3d:16:1d:31:63:
96:e5:16:b1:7d:5e:c4:70:ca:d1:f6:a9:27:30:ba:
69:c3:9c:d6:57:9c:a9:ea:09:6f:a2:06:e4:db:94:
f3:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:28:A8:08:BF:5F:A1:DB:87:E1:D9:A4:CC:09:B0:E6:AC:71:22:9C
X509v3 Authority Key Identifier:
keyid:73:6D:72:4E:23:9E:FB:7F:2F:7B:EA:52:6A:9E:0C:5E:7F:C8:9B:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c21yTiOe-38ve-pSap4MXn_Im74.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/dfc110-7924-49a9-8564-0bebfcbde1f3/1/c21yTiOe-38ve-pSap4MXn_Im74.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/dfc110-7924-49a9-8564-0bebfcbde1f3/1/c21yTiOe-38ve-pSap4MXn_Im74.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:fc:0c:72:97:28:81:5e:d7:1e:49:8b:35:9e:e6:61:ab:be:
81:ec:6d:ae:3d:cf:db:0c:ee:f6:0e:a8:f1:86:ae:c7:a5:a5:
24:ac:6a:3d:0a:35:be:ca:59:96:b0:7a:3d:ec:a9:27:16:e6:
43:b0:71:a4:db:0a:8f:2c:61:c5:aa:b1:39:71:56:38:24:89:
ad:d9:4b:2c:0b:18:91:8b:d8:94:ed:db:55:7b:b3:51:43:34:
3f:ce:95:bb:3b:85:a1:61:d7:16:ce:c6:f3:5b:f8:cb:df:b8:
ca:0f:df:97:7f:15:1c:9a:d2:1d:85:98:ab:52:79:35:db:09:
94:ab:a7:57:41:ca:d8:69:cc:aa:3f:a0:49:5d:0f:50:38:31:
da:39:09:06:31:81:26:34:df:91:09:16:35:12:06:f1:ac:ed:
20:dd:cc:0c:72:63:b1:d6:90:80:f8:9a:ad:b8:64:ee:87:cb:
69:43:d2:75:be:77:c8:43:36:c4:e6:b6:f0:af:27:4c:02:72:
f3:c0:c9:e2:66:6d:45:9a:75:80:64:2c:af:5f:2b:31:60:ee:
68:0f:12:5b:87:fc:c8:ab:1c:70:7a:8a:45:0e:89:d2:a5:23:
34:31:3f:76:a1:c7:35:1c:db:ec:46:a2:85:5e:28:44:18:65:
27:40:9a:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:51:36 2025 by rpki-client