Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/7d8a1a-095e-4186-95e0-082b68b2c02a/1/CXn1N7Cevq3fmHh0nR-IdTxUDHU.mft
File: CXn1N7Cevq3fmHh0nR-IdTxUDHU.mft (raw, json)
Hash identifier: XOXT1/9MPwkpiLQMrVW8M/1jvVkemoodL5S8qHrhGVk=
Subject key identifier: A4:E8:86:D8:E9:9D:F0:FD:2B:B1:E8:C8:F3:5F:90:36:35:62:65:E8
Authority key identifier: 09:79:F5:37:B0:9E:BE:AD:DF:98:78:74:9D:1F:88:75:3C:54:0C:75
Certificate issuer: /CN=0979f537b09ebeaddf9878749d1f88753c540c75
Certificate serial: 0198D54E016B7891557B51F5DFBD431BF8C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXn1N7Cevq3fmHh0nR-IdTxUDHU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/7d8a1a-095e-4186-95e0-082b68b2c02a/1/CXn1N7Cevq3fmHh0nR-IdTxUDHU.mft
Manifest number: 1646
Signing time: Sat 23 Aug 2025 05:01:55 +0000
Manifest this update: Sat 23 Aug 2025 05:01:55 +0000
Manifest next update: Sun 24 Aug 2025 05:01:55 +0000
Files and hashes: 1: CXn1N7Cevq3fmHh0nR-IdTxUDHU.crl (hash: 3qSWPU05Os6ALvkIzbd5YtJrinZ7+YxtXFuBf+BCVK0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/7d8a1a-095e-4186-95e0-082b68b2c02a/1/CXn1N7Cevq3fmHh0nR-IdTxUDHU.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/7d8a1a-095e-4186-95e0-082b68b2c02a/1/CXn1N7Cevq3fmHh0nR-IdTxUDHU.mft
rsync://rpki.ripe.net/repository/DEFAULT/CXn1N7Cevq3fmHh0nR-IdTxUDHU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:01:6b:78:91:55:7b:51:f5:df:bd:43:1b:f8:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0979f537b09ebeaddf9878749d1f88753c540c75
Validity
Not Before: Aug 23 05:01:55 2025 GMT
Not After : Aug 24 05:01:55 2025 GMT
Subject: CN=a4e886d8e99df0fd2bb1e8c8f35f9036356265e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:a3:d9:68:92:6a:04:ee:f2:63:49:c7:50:34:
52:21:b0:87:91:13:0a:c8:e1:dd:49:93:40:f4:70:
89:6e:66:e3:7e:d3:5c:56:73:e5:71:88:df:ef:39:
39:22:1e:6a:68:f6:4c:f5:67:df:da:59:e7:49:6a:
3e:e0:76:74:f5:9f:34:8b:6f:24:7b:94:ac:86:37:
93:1c:c8:46:e4:68:93:4c:23:c7:ad:30:01:5a:15:
cd:e5:90:54:e2:8e:16:01:9a:af:6b:b0:f4:4c:ef:
49:2d:7d:0c:16:93:21:e1:8b:84:6a:c2:22:cd:30:
67:73:46:36:4a:56:43:4a:59:9a:53:2b:a9:f0:35:
7e:02:42:b9:7a:d7:72:60:14:6b:e6:81:eb:04:6a:
38:89:b2:71:4c:4c:f8:08:2e:53:9b:98:3c:b8:d6:
bd:12:dd:54:b5:7c:5f:71:be:dc:64:e5:ba:4d:76:
80:c0:4a:47:1e:f5:c9:3f:ff:4c:8a:34:62:53:74:
ee:04:a3:98:fd:8b:2e:bd:31:34:2d:c7:ce:65:b1:
1f:06:d6:99:8a:b8:ab:80:02:18:02:4e:04:76:cc:
e5:7b:2f:31:78:e5:8b:d9:01:4d:02:c1:5e:49:9e:
ce:bb:4e:e1:43:48:ed:bb:5d:5d:3d:5f:06:d0:05:
ec:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:E8:86:D8:E9:9D:F0:FD:2B:B1:E8:C8:F3:5F:90:36:35:62:65:E8
X509v3 Authority Key Identifier:
keyid:09:79:F5:37:B0:9E:BE:AD:DF:98:78:74:9D:1F:88:75:3C:54:0C:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXn1N7Cevq3fmHh0nR-IdTxUDHU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/7d8a1a-095e-4186-95e0-082b68b2c02a/1/CXn1N7Cevq3fmHh0nR-IdTxUDHU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/7d8a1a-095e-4186-95e0-082b68b2c02a/1/CXn1N7Cevq3fmHh0nR-IdTxUDHU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:5a:8e:bf:52:68:c9:09:dc:d9:fd:a0:45:8f:75:52:1b:35:
3d:a3:a9:66:53:4d:56:81:a1:24:fe:40:80:20:34:cb:f2:e0:
b8:8e:49:32:9c:76:7e:6f:e3:6c:c7:98:7c:24:22:82:05:fd:
ce:08:7f:e4:29:b9:f9:84:a9:6b:cd:bb:bc:50:33:2e:43:63:
b7:c3:c9:1e:8e:10:fb:18:87:1f:8a:7c:26:e3:1a:9a:05:55:
6e:55:9a:1a:52:b9:a7:0a:6a:cc:f7:2a:c4:1b:de:e0:69:82:
8d:9c:18:fd:bb:3e:72:fc:f0:6a:d0:89:c2:96:21:b1:16:7b:
14:f2:05:01:b6:eb:78:03:63:db:ee:e7:f7:f9:09:bf:d8:f0:
b6:75:0d:d8:45:2b:0f:1d:8b:77:61:15:f4:6e:6d:7a:62:78:
ba:dc:dc:5b:17:63:10:94:9d:ad:00:2b:57:5a:7b:74:c3:82:
c0:ac:a7:28:2d:df:de:59:2a:28:3f:fd:c3:ce:66:98:67:65:
b4:3f:04:30:0c:80:e9:6f:fc:84:7b:02:97:79:b1:92:ad:4b:
be:7a:85:95:37:78:1f:6e:c9:a2:2d:57:ba:7f:23:65:aa:ce:
eb:f0:bf:18:f9:fa:f1:fb:0e:fb:df:1a:22:b2:a6:8b:7a:f0:
ea:9c:77:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:39:14 2025 by rpki-client