Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/05910b-25d8-413d-ac58-824c77f891c9/1/cNbQfLZOoOgZ46Cyngk_5Bljspo.mft
File: cNbQfLZOoOgZ46Cyngk_5Bljspo.mft (raw, json)
Hash identifier: SslLmP3URC3LJZ1zEyOQIGBIJgGmKLsNkGK8zFhLu/A=
Subject key identifier: A7:B7:53:96:18:C5:9F:C6:EE:71:AB:B0:B4:9C:36:5B:4F:55:24:97
Authority key identifier: 70:D6:D0:7C:B6:4E:A0:E8:19:E3:A0:B2:9E:09:3F:E4:19:63:B2:9A
Certificate issuer: /CN=70d6d07cb64ea0e819e3a0b29e093fe41963b29a
Certificate serial: 0198D515C087F9679515CD800394843BF3BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cNbQfLZOoOgZ46Cyngk_5Bljspo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/05910b-25d8-413d-ac58-824c77f891c9/1/cNbQfLZOoOgZ46Cyngk_5Bljspo.mft
Manifest number: 1646
Signing time: Sat 23 Aug 2025 04:00:29 +0000
Manifest this update: Sat 23 Aug 2025 04:00:29 +0000
Manifest next update: Sun 24 Aug 2025 04:00:29 +0000
Files and hashes: 1: cNbQfLZOoOgZ46Cyngk_5Bljspo.crl (hash: GxB6oVjT8zq/le7TpnIS1XoTZA/0Q3pbcnaHGlL/7Gk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/05910b-25d8-413d-ac58-824c77f891c9/1/cNbQfLZOoOgZ46Cyngk_5Bljspo.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/05910b-25d8-413d-ac58-824c77f891c9/1/cNbQfLZOoOgZ46Cyngk_5Bljspo.mft
rsync://rpki.ripe.net/repository/DEFAULT/cNbQfLZOoOgZ46Cyngk_5Bljspo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:15:c0:87:f9:67:95:15:cd:80:03:94:84:3b:f3:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70d6d07cb64ea0e819e3a0b29e093fe41963b29a
Validity
Not Before: Aug 23 04:00:29 2025 GMT
Not After : Aug 24 04:00:29 2025 GMT
Subject: CN=a7b7539618c59fc6ee71abb0b49c365b4f552497
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:bc:11:b6:ea:62:0b:62:2a:8f:c6:53:c3:d9:
bb:57:e6:ec:1f:79:60:2d:c4:44:12:d5:85:5d:ad:
5c:e1:0c:74:12:40:72:5d:7c:9e:3d:7c:30:cd:58:
59:6c:ad:d3:63:f9:c9:6a:2c:82:5c:a0:93:16:52:
16:07:7e:da:32:07:f5:21:d4:45:9c:42:82:4b:f8:
61:7c:f4:a4:4c:f7:2c:52:91:bb:97:d3:1f:e9:f7:
f3:06:b3:52:db:7a:51:31:96:08:a3:95:64:8e:ca:
f3:84:25:6f:66:08:aa:5a:c4:83:a5:f0:5d:a8:44:
28:31:c0:30:f8:b8:b8:7a:5c:75:a0:d3:fc:46:be:
41:b1:cb:3a:fa:89:a6:8b:b4:5a:93:b7:f4:33:9a:
e8:08:1d:c8:d1:c1:cc:bc:a7:2e:7a:fa:6e:3c:bc:
cc:b6:72:de:77:8a:32:3d:9c:67:a7:56:ab:97:ef:
71:25:2b:9f:fc:71:cf:ec:31:70:a1:24:67:68:95:
89:ca:73:3e:61:e1:a7:75:5f:ec:a2:01:07:ce:8d:
63:bb:e8:5b:0b:99:11:1d:9e:cc:c0:cb:6e:6d:cf:
95:9f:03:8f:30:3b:dc:02:62:fe:04:17:22:09:03:
c2:2f:e6:54:99:ab:5c:91:d2:50:51:36:01:58:8a:
cb:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:B7:53:96:18:C5:9F:C6:EE:71:AB:B0:B4:9C:36:5B:4F:55:24:97
X509v3 Authority Key Identifier:
keyid:70:D6:D0:7C:B6:4E:A0:E8:19:E3:A0:B2:9E:09:3F:E4:19:63:B2:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cNbQfLZOoOgZ46Cyngk_5Bljspo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/05910b-25d8-413d-ac58-824c77f891c9/1/cNbQfLZOoOgZ46Cyngk_5Bljspo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/05910b-25d8-413d-ac58-824c77f891c9/1/cNbQfLZOoOgZ46Cyngk_5Bljspo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:b1:5a:f8:fc:c6:93:0f:94:59:1f:8c:3b:9c:65:97:ae:00:
11:4d:81:71:a9:b4:d4:83:0e:3d:af:44:67:51:7c:e4:4c:57:
cf:54:e5:6f:87:84:1c:99:b2:45:dd:c0:f9:49:54:cc:0e:34:
72:8c:68:dc:fd:28:06:65:16:5a:cc:f3:c7:2d:24:dc:77:4d:
8b:04:b2:4d:12:0e:53:07:e3:76:e7:aa:b8:c5:13:8c:33:98:
07:d1:e1:24:63:09:48:af:b0:e5:b1:28:90:af:8e:48:2d:7a:
24:e5:81:d9:16:0c:d5:37:3d:db:0b:9b:7c:b1:9d:d6:38:ae:
8a:2b:4e:cc:43:46:2f:c4:43:1f:3e:df:f1:76:d0:29:3a:b3:
5c:17:42:87:e6:c7:df:27:28:cb:3b:f9:05:48:08:40:5c:e0:
5d:3d:ec:3e:34:74:48:2f:8a:b2:02:52:b5:c1:77:ac:99:38:
8e:1b:6d:5c:6e:75:8f:8d:48:a7:0a:b2:fc:e8:e8:64:24:fc:
04:25:3c:8d:1f:35:83:96:75:17:53:a0:e3:b1:21:1e:e4:ee:
74:4f:42:b9:60:30:a6:85:3a:a5:79:90:41:44:5f:a2:50:4b:
aa:22:4d:2f:5a:a3:31:e3:61:23:97:fd:b7:1e:a9:92:99:f6:
de:de:c2:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 09:40:47 2025 by rpki-client