Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/95ea48-c3ed-4e47-bd12-6cdecd4db8b5/1/CPLrj7Auh-cYQzeyRa-Z4xM-9SQ.mft
File: CPLrj7Auh-cYQzeyRa-Z4xM-9SQ.mft (raw, json)
Hash identifier: iv2nlB2HObltRLrVY7S+cjHpoH9fXVtA40S/PymP3S0=
Subject key identifier: 74:E2:2D:E0:71:23:92:85:A9:3A:D6:BB:BF:1B:22:C2:E8:44:B1:FE
Authority key identifier: 08:F2:EB:8F:B0:2E:87:E7:18:43:37:B2:45:AF:99:E3:13:3E:F5:24
Certificate issuer: /CN=08f2eb8fb02e87e7184337b245af99e3133ef524
Certificate serial: 0198D54EABDEB93E04DA4EE4C74064E1EA56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CPLrj7Auh-cYQzeyRa-Z4xM-9SQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/95ea48-c3ed-4e47-bd12-6cdecd4db8b5/1/CPLrj7Auh-cYQzeyRa-Z4xM-9SQ.mft
Manifest number: 1647
Signing time: Sat 23 Aug 2025 05:02:39 +0000
Manifest this update: Sat 23 Aug 2025 05:02:39 +0000
Manifest next update: Sun 24 Aug 2025 05:02:39 +0000
Files and hashes: 1: CPLrj7Auh-cYQzeyRa-Z4xM-9SQ.crl (hash: l635kaiyNUioUZ8AFAXFxPmF7fDg40GPo/x55LdhrzE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/95ea48-c3ed-4e47-bd12-6cdecd4db8b5/1/CPLrj7Auh-cYQzeyRa-Z4xM-9SQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/95ea48-c3ed-4e47-bd12-6cdecd4db8b5/1/CPLrj7Auh-cYQzeyRa-Z4xM-9SQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/CPLrj7Auh-cYQzeyRa-Z4xM-9SQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:ab:de:b9:3e:04:da:4e:e4:c7:40:64:e1:ea:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08f2eb8fb02e87e7184337b245af99e3133ef524
Validity
Not Before: Aug 23 05:02:39 2025 GMT
Not After : Aug 24 05:02:39 2025 GMT
Subject: CN=74e22de071239285a93ad6bbbf1b22c2e844b1fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:a7:dd:2c:ae:00:6a:85:c8:5c:10:ba:e8:da:
0d:cc:88:b4:41:1a:bd:22:fa:53:b8:be:cf:c9:21:
3f:17:2f:2e:8f:be:48:cd:af:64:a4:0f:10:a8:31:
4c:db:62:b3:66:4d:32:34:03:68:c4:44:01:45:bc:
37:f9:0c:b7:1f:99:ec:02:e0:b5:41:fe:64:85:a3:
0b:15:86:e2:4c:ac:95:d5:b0:5c:aa:cd:bb:a8:fd:
6a:1c:dd:af:f5:b9:97:1e:09:f4:3f:e3:e7:9e:e6:
c4:64:63:e9:6b:3f:2e:ee:d6:79:ba:f5:41:78:2f:
f2:30:3c:73:6f:57:75:be:76:9e:fa:79:f9:f6:2e:
53:9d:58:3c:67:fd:c8:cd:03:c9:02:9c:71:67:46:
57:20:3d:34:a9:81:a9:36:7e:16:d1:3b:40:36:91:
4b:6f:c7:ef:dc:86:24:03:4a:c2:3f:5e:2e:ba:84:
6b:18:1d:38:30:d3:14:11:dd:b9:4d:89:f8:1f:d5:
38:2b:8f:39:be:c9:0d:84:b3:42:74:6b:68:d5:ae:
ad:1f:22:29:8b:5f:31:ab:0f:80:1f:a6:a6:9c:dd:
89:6b:dd:b0:e4:37:9f:20:e1:64:88:46:13:6a:b2:
06:59:d7:28:47:dd:21:62:2b:16:af:7e:c9:52:66:
eb:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:E2:2D:E0:71:23:92:85:A9:3A:D6:BB:BF:1B:22:C2:E8:44:B1:FE
X509v3 Authority Key Identifier:
keyid:08:F2:EB:8F:B0:2E:87:E7:18:43:37:B2:45:AF:99:E3:13:3E:F5:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CPLrj7Auh-cYQzeyRa-Z4xM-9SQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/95ea48-c3ed-4e47-bd12-6cdecd4db8b5/1/CPLrj7Auh-cYQzeyRa-Z4xM-9SQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/95ea48-c3ed-4e47-bd12-6cdecd4db8b5/1/CPLrj7Auh-cYQzeyRa-Z4xM-9SQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:34:f9:c9:aa:9c:9f:c0:ea:d6:a8:2b:d1:20:3d:a8:cb:1f:
8f:d5:6f:db:ff:eb:6e:72:6a:94:f0:40:d5:65:c9:cf:26:e0:
83:2a:7e:3d:c1:e9:1c:c0:b9:f7:eb:f0:f5:e7:a5:21:30:a6:
18:92:29:9a:bb:44:eb:03:af:f1:d3:bd:94:e2:7f:b3:7b:9d:
d6:3e:dd:14:cd:d8:80:5a:7e:a2:a3:df:0d:a5:7c:94:ff:aa:
a1:d9:c0:dd:a5:56:8e:c9:a3:d1:bf:40:0b:98:55:4f:68:67:
ea:10:15:fd:14:da:d1:05:f8:3b:9f:d5:d8:42:ae:13:1a:c3:
d8:f9:df:e6:2b:71:7e:3a:8a:6e:62:4c:2f:39:4e:bf:84:d3:
a1:55:2c:09:c9:7a:e9:bb:14:0b:ea:19:26:57:1f:2f:86:41:
a5:c1:04:84:f5:28:55:63:05:01:72:52:6f:40:b4:09:78:e0:
e8:c4:4b:b1:9a:c9:6d:59:14:3f:14:d7:9f:0b:30:62:67:f6:
41:a3:f6:26:bc:f2:fd:96:e6:48:7c:50:af:89:ab:a7:cd:28:
01:50:b7:f7:1f:14:1c:e7:f7:25:05:94:97:ef:d5:24:7e:39:
59:42:8b:43:68:de:55:90:1d:ff:3a:95:68:56:60:1e:a6:66:
b1:d4:67:d4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVTqveuT4E2k7kx0Bk4epWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA4ZjJlYjhmYjAyZTg3ZTcxODQzMzdiMjQ1YWY5OWUzMTMz
ZWY1MjQwHhcNMjUwODIzMDUwMjM5WhcNMjUwODI0MDUwMjM5WjAzMTEwLwYDVQQD
Eyg3NGUyMmRlMDcxMjM5Mjg1YTkzYWQ2YmJiZjFiMjJjMmU4NDRiMWZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi6fdLK4AaoXIXBC66NoNzIi0QRq9
IvpTuL7PySE/Fy8uj75Iza9kpA8QqDFM22KzZk0yNANoxEQBRbw3+Qy3H5nsAuC1
Qf5khaMLFYbiTKyV1bBcqs27qP1qHN2v9bmXHgn0P+PnnubEZGPpaz8u7tZ5uvVB
eC/yMDxzb1d1vnae+nn59i5TnVg8Z/3IzQPJApxxZ0ZXID00qYGpNn4W0TtANpFL
b8fv3IYkA0rCP14uuoRrGB04MNMUEd25TYn4H9U4K485vskNhLNCdGto1a6tHyIp
i18xqw+AH6amnN2Ja92w5DefIOFkiEYTarIGWdcoR90hYisWr37JUmbrhwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHTiLeBxI5KFqTrWu78bIsLoRLH+MB8GA1UdIwQY
MBaAFAjy64+wLofnGEM3skWvmeMTPvUkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ1BMcmo3QXVoLWNZUXpleVJhLVo0eE0tOVNRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC85NWVhNDgtYzNlZC00ZTQ3LWJkMTIt
NmNkZWNkNGRiOGI1LzEvQ1BMcmo3QXVoLWNZUXpleVJhLVo0eE0tOVNRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NC85NWVhNDgtYzNlZC00ZTQ3LWJkMTItNmNkZWNkNGRiOGI1
LzEvQ1BMcmo3QXVoLWNZUXpleVJhLVo0eE0tOVNRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMjT5yaqc
n8Dq1qgr0SA9qMsfj9Vv2//rbnJqlPBA1WXJzybggyp+PcHpHMC59+vw9eelITCm
GJIpmrtE6wOv8dO9lOJ/s3ud1j7dFM3YgFp+oqPfDaV8lP+qodnA3aVWjsmj0b9A
C5hVT2hn6hAV/RTa0QX4O5/V2EKuExrD2Pnf5itxfjqKbmJMLzlOv4TToVUsCcl6
6bsUC+oZJlcfL4ZBpcEEhPUoVWMFAXJSb0C0CXjg6MRLsZrJbVkUPxTXnwswYmf2
QaP2Jrzy/ZbmSHxQr4mrp80oAVC39x8UHOf3JQWUl+/VJH45WUKLQ2jeVZAd/zqV
aFZgHqZmsdRn1A==
-----END CERTIFICATE-----
Generated at Sat Aug 23 13:32:16 2025 by rpki-client