Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/62c002-b94c-423b-b4eb-e792cc2fd07e/1/CdlD-dXHWx9QVk8tHdBRF4jrCvw.mft
File: CdlD-dXHWx9QVk8tHdBRF4jrCvw.mft (raw, json)
Hash identifier: /ynH8Iiu64Bz984xUXaCXhaqxV2lW2BQx8Dzrh6iFfk=
Subject key identifier: F3:E4:07:89:99:7D:40:06:7D:CC:01:D3:5B:B6:EF:83:D9:40:95:6A
Authority key identifier: 09:D9:43:F9:D5:C7:5B:1F:50:56:4F:2D:1D:D0:51:17:88:EB:0A:FC
Certificate issuer: /CN=09d943f9d5c75b1f50564f2d1dd0511788eb0afc
Certificate serial: 0198D54EA8BF2C6A01FF36E2BAF6CF731957
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CdlD-dXHWx9QVk8tHdBRF4jrCvw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/62c002-b94c-423b-b4eb-e792cc2fd07e/1/CdlD-dXHWx9QVk8tHdBRF4jrCvw.mft
Manifest number: 21
Signing time: Sat 23 Aug 2025 05:02:38 +0000
Manifest this update: Sat 23 Aug 2025 05:02:38 +0000
Manifest next update: Sun 24 Aug 2025 05:02:38 +0000
Files and hashes: 1: CdlD-dXHWx9QVk8tHdBRF4jrCvw.crl (hash: c+LB3Qp7Wt0KLlFJvZIpBrU1cOIvsqZGvQhGdajwhgU=)
2: mIMZrEW18-_5KGhaxhfyAse2jaU.roa (hash: 6Qvzu2ngRsyEUpj0qpA3Dkp0CWaU4iSnWXbsJngfWw4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/62c002-b94c-423b-b4eb-e792cc2fd07e/1/CdlD-dXHWx9QVk8tHdBRF4jrCvw.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/62c002-b94c-423b-b4eb-e792cc2fd07e/1/CdlD-dXHWx9QVk8tHdBRF4jrCvw.mft
rsync://rpki.ripe.net/repository/DEFAULT/CdlD-dXHWx9QVk8tHdBRF4jrCvw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:a8:bf:2c:6a:01:ff:36:e2:ba:f6:cf:73:19:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09d943f9d5c75b1f50564f2d1dd0511788eb0afc
Validity
Not Before: Aug 23 05:02:38 2025 GMT
Not After : Aug 24 05:02:38 2025 GMT
Subject: CN=f3e40789997d40067dcc01d35bb6ef83d940956a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:e3:9d:48:5e:da:aa:26:78:b5:c7:f2:4e:f5:
85:b3:59:74:0e:18:c4:b9:40:54:4a:07:4a:64:62:
03:a3:af:27:d4:6a:09:16:01:25:54:c4:4f:82:c3:
30:ab:30:f5:90:97:c9:40:3b:48:58:de:32:08:58:
c1:0d:aa:c8:90:e2:3f:34:71:8f:37:6c:a2:83:c2:
02:84:ea:d9:f1:ac:5c:5c:90:51:6a:51:0c:98:5d:
1c:87:cd:02:db:88:00:52:34:09:83:f5:a1:02:fe:
08:ed:0c:cd:87:ce:02:02:90:1a:3d:07:1f:bb:2f:
4c:05:26:15:a4:df:a4:ea:70:30:4e:64:39:39:17:
14:c3:93:4a:af:72:41:1e:ec:b6:82:c6:c7:a0:11:
54:39:43:74:ca:88:07:6e:f7:e3:43:34:d6:c4:d1:
b8:72:79:9d:6a:a8:46:57:ae:96:2f:2e:23:a0:8b:
bf:5d:bc:ae:6e:12:60:58:d2:58:bc:d7:f0:23:97:
de:25:9c:da:60:1b:c4:f9:a3:81:c1:66:f1:9f:52:
24:7d:02:16:a7:54:92:2a:5b:1c:26:ab:30:51:26:
fe:fe:aa:59:b6:a7:9d:eb:33:90:87:2e:97:eb:e5:
a4:5c:89:8a:43:5a:74:a7:fe:70:ef:65:44:03:91:
55:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:E4:07:89:99:7D:40:06:7D:CC:01:D3:5B:B6:EF:83:D9:40:95:6A
X509v3 Authority Key Identifier:
keyid:09:D9:43:F9:D5:C7:5B:1F:50:56:4F:2D:1D:D0:51:17:88:EB:0A:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CdlD-dXHWx9QVk8tHdBRF4jrCvw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/62c002-b94c-423b-b4eb-e792cc2fd07e/1/CdlD-dXHWx9QVk8tHdBRF4jrCvw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/62c002-b94c-423b-b4eb-e792cc2fd07e/1/CdlD-dXHWx9QVk8tHdBRF4jrCvw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:df:b0:fd:63:e6:f6:c1:68:95:bb:94:13:87:b9:16:0f:6e:
25:76:0e:91:bf:60:65:34:83:c7:00:9e:57:65:f9:68:9a:93:
0f:2e:7c:98:98:88:ab:cc:8c:55:0e:0e:52:ab:a5:9d:4a:bc:
b9:4b:3f:8e:82:ef:ca:df:96:17:98:cd:99:70:67:cb:8c:4f:
38:62:48:3f:4f:50:31:25:27:4b:f5:2c:c6:eb:2a:93:f3:d4:
b4:8f:8f:49:38:6e:1a:8a:c7:78:c8:c3:65:7c:58:f3:84:55:
9e:a9:79:7d:a6:5e:7a:9a:ab:56:00:f1:d6:8a:dd:a0:85:db:
a5:c0:c6:5d:f4:57:66:9f:38:98:10:24:61:8f:28:b4:89:3b:
8f:b3:b8:1d:09:ed:cb:01:14:57:e2:69:56:78:53:68:09:5d:
2c:1a:6f:fd:95:5a:21:d1:6a:41:5a:1c:36:dc:54:70:e5:e6:
3c:0f:39:65:ee:9e:59:0e:85:3f:8f:96:f8:72:9c:da:c5:7c:
a8:3e:b2:9a:ff:fb:54:6e:3e:9b:9e:0a:bf:d7:f9:d6:82:d0:
60:32:c1:b8:91:b1:d5:03:9b:49:10:9b:81:9f:5c:ed:62:a7:
95:f8:58:e3:cb:94:05:36:a5:6c:7a:eb:5b:85:6d:7b:bc:7f:
ae:92:85:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:51:21 2025 by rpki-client