Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/16eb03-414a-4852-81da-db261aa46f21/1/Mk2diwUEVVZ2uRjuOR3BU6mH44o.mft
File: Mk2diwUEVVZ2uRjuOR3BU6mH44o.mft (raw, json)
Hash identifier: LM5ENBZCfNt2VzUmSHA4g3nzHRGPkOJpQ3Jjnqp+iGg=
Subject key identifier: D1:3B:36:43:B2:06:AE:B3:D7:95:28:BA:33:C8:AA:BA:35:A7:D0:68
Authority key identifier: 32:4D:9D:8B:05:04:55:56:76:B9:18:EE:39:1D:C1:53:A9:87:E3:8A
Certificate issuer: /CN=324d9d8b0504555676b918ee391dc153a987e38a
Certificate serial: 0198D66040995C1C35FA3A5339B2CBFF6E29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mk2diwUEVVZ2uRjuOR3BU6mH44o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/16eb03-414a-4852-81da-db261aa46f21/1/Mk2diwUEVVZ2uRjuOR3BU6mH44o.mft
Manifest number: 106E
Signing time: Sat 23 Aug 2025 10:01:28 +0000
Manifest this update: Sat 23 Aug 2025 10:01:28 +0000
Manifest next update: Sun 24 Aug 2025 10:01:28 +0000
Files and hashes: 1: Mk2diwUEVVZ2uRjuOR3BU6mH44o.crl (hash: SJIGaUzzT6HhWZ+jaH2xg8URk10ET//cwMSNxTEambQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/16eb03-414a-4852-81da-db261aa46f21/1/Mk2diwUEVVZ2uRjuOR3BU6mH44o.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/16eb03-414a-4852-81da-db261aa46f21/1/Mk2diwUEVVZ2uRjuOR3BU6mH44o.mft
rsync://rpki.ripe.net/repository/DEFAULT/Mk2diwUEVVZ2uRjuOR3BU6mH44o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:40:99:5c:1c:35:fa:3a:53:39:b2:cb:ff:6e:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=324d9d8b0504555676b918ee391dc153a987e38a
Validity
Not Before: Aug 23 10:01:28 2025 GMT
Not After : Aug 24 10:01:28 2025 GMT
Subject: CN=d13b3643b206aeb3d79528ba33c8aaba35a7d068
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:b1:f9:bd:17:cb:ba:7a:d9:b2:d9:06:8b:e8:
a4:09:96:80:c7:81:04:52:e6:9a:ee:e1:4f:3d:c0:
35:81:2e:89:13:03:e1:e4:30:ac:f0:d2:54:60:5e:
96:36:e6:ef:e5:c6:cc:53:95:4f:88:ac:17:16:e0:
3a:0d:7c:1a:49:fd:c4:02:72:b2:d4:12:9d:0a:22:
e5:9e:9a:ca:8a:6e:67:fd:73:e5:6a:f8:79:5b:75:
e9:b0:6f:c6:da:56:20:09:80:7f:23:48:2e:a8:9b:
9e:a3:8f:03:88:94:c2:77:66:f4:ec:bd:96:d7:c8:
5b:ba:5e:a5:83:c4:32:85:fd:21:78:a1:67:f6:30:
ae:d1:53:77:5e:70:a7:61:f5:51:3b:d0:d6:9d:d7:
d2:7a:e4:b7:9d:df:79:51:14:b9:07:ae:f1:4c:c9:
e0:8f:a6:a1:41:6f:10:dc:a9:a6:07:64:54:89:e5:
00:2a:84:d2:16:1d:24:55:89:11:25:21:c3:29:4c:
49:3f:ad:e9:55:6d:ec:f0:30:08:04:20:87:b0:1e:
68:4f:06:cf:13:ee:c4:9e:0e:48:7c:5f:03:e9:72:
04:fd:75:59:1f:50:c2:f3:43:13:d3:48:87:68:c1:
06:54:34:79:b8:6f:50:f7:66:54:74:f6:63:88:bc:
32:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:3B:36:43:B2:06:AE:B3:D7:95:28:BA:33:C8:AA:BA:35:A7:D0:68
X509v3 Authority Key Identifier:
keyid:32:4D:9D:8B:05:04:55:56:76:B9:18:EE:39:1D:C1:53:A9:87:E3:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mk2diwUEVVZ2uRjuOR3BU6mH44o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/16eb03-414a-4852-81da-db261aa46f21/1/Mk2diwUEVVZ2uRjuOR3BU6mH44o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/16eb03-414a-4852-81da-db261aa46f21/1/Mk2diwUEVVZ2uRjuOR3BU6mH44o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:64:7b:e7:1c:b9:cc:fe:9f:b8:a6:4b:69:e1:5b:25:8d:b1:
00:4c:5a:5a:19:04:28:be:bb:15:71:be:87:01:d9:44:66:cc:
ef:d0:fb:a1:7f:05:d5:c5:93:46:5b:e4:af:84:1a:3d:97:15:
99:ee:02:74:ac:3b:03:9a:bc:fa:82:44:52:ad:be:08:a6:ab:
38:41:8f:fd:a9:2c:41:2e:c9:0a:59:d6:8f:55:1a:6f:4e:43:
1d:31:26:b8:cb:ba:6d:5f:2d:65:ce:f4:fe:57:b8:71:e7:80:
e8:17:63:7f:3e:19:66:36:10:72:bf:c5:8d:1b:3a:f9:d4:5c:
fe:c5:92:9d:a6:16:71:b8:2c:c9:33:67:3b:a0:fe:b7:c0:90:
04:19:6f:c6:cc:69:f1:26:0d:57:e7:e5:b7:11:51:70:30:b4:
4d:9e:8f:db:df:69:4a:3b:5e:30:10:71:f4:76:77:45:8f:08:
a6:8a:b8:ea:8a:52:c7:cf:11:ac:8b:55:24:8f:1e:19:57:4c:
ca:ba:4d:f4:37:b2:67:17:c4:8d:3e:48:0f:e3:ae:81:6e:72:
2f:c4:6d:10:bd:2f:b5:67:30:12:ae:c7:52:5a:3f:66:2f:a4:
88:ad:e3:80:32:95:fc:e0:3f:13:3a:71:66:ad:f2:3b:9b:79:
8b:24:46:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:22:51 2025 by rpki-client