Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/ce1677-d927-44c6-a909-3b2b51a5e3da/1/CL9ZiZt6yjCjx9Xbk7IS2YcJyJs.mft
File: CL9ZiZt6yjCjx9Xbk7IS2YcJyJs.mft (raw, json)
Hash identifier: jdPtNRSNiYgSUZKSVm9c9Ro8NQPOF6YEb2V//s1YTOg=
Subject key identifier: 41:E9:B9:31:EB:B2:43:0F:45:16:A1:6D:AF:69:05:FC:DF:63:DB:12
Authority key identifier: 08:BF:59:89:9B:7A:CA:30:A3:C7:D5:DB:93:B2:12:D9:87:09:C8:9B
Certificate issuer: /CN=08bf59899b7aca30a3c7d5db93b212d98709c89b
Certificate serial: 0198D5BC35FDD5B119DB88A1160DD30D29FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CL9ZiZt6yjCjx9Xbk7IS2YcJyJs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/ce1677-d927-44c6-a909-3b2b51a5e3da/1/CL9ZiZt6yjCjx9Xbk7IS2YcJyJs.mft
Manifest number: 1648
Signing time: Sat 23 Aug 2025 07:02:18 +0000
Manifest this update: Sat 23 Aug 2025 07:02:18 +0000
Manifest next update: Sun 24 Aug 2025 07:02:18 +0000
Files and hashes: 1: CL9ZiZt6yjCjx9Xbk7IS2YcJyJs.crl (hash: 13mDkIWRvFbpYkP1Jc+biP+XFuuh7W7EvX4sWLwrV4g=)
2: QBvaKUProLFwUadr8JLWlBh2UrE.roa (hash: xpxsGWmbgKM4U5yVDwdEgOHu1jns29KEhnZ49U4Y2OU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/ce1677-d927-44c6-a909-3b2b51a5e3da/1/CL9ZiZt6yjCjx9Xbk7IS2YcJyJs.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/ce1677-d927-44c6-a909-3b2b51a5e3da/1/CL9ZiZt6yjCjx9Xbk7IS2YcJyJs.mft
rsync://rpki.ripe.net/repository/DEFAULT/CL9ZiZt6yjCjx9Xbk7IS2YcJyJs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bc:35:fd:d5:b1:19:db:88:a1:16:0d:d3:0d:29:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08bf59899b7aca30a3c7d5db93b212d98709c89b
Validity
Not Before: Aug 23 07:02:18 2025 GMT
Not After : Aug 24 07:02:18 2025 GMT
Subject: CN=41e9b931ebb2430f4516a16daf6905fcdf63db12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:1f:17:dd:cf:a3:f7:7a:77:9b:ca:88:80:cd:
47:f3:b1:2a:e7:63:a1:05:6d:bc:21:e4:cd:c0:3a:
d5:67:dd:96:37:17:0e:ea:01:18:c5:b0:b5:8e:fe:
2f:ec:86:ae:d5:01:9e:13:61:e2:63:24:3b:d9:df:
a3:a5:d9:94:b1:21:83:62:ef:b4:a8:3b:ff:a8:1a:
a9:cd:27:18:01:80:4a:79:79:ea:6e:db:f1:3f:e1:
96:ad:36:fd:ea:b6:ee:2e:c9:60:90:90:e4:64:98:
3e:c2:cf:10:f5:2b:6f:ba:5e:7b:b8:31:27:13:69:
07:d9:3f:d3:f5:56:1c:94:a6:85:15:f2:e5:b7:0c:
04:91:f1:1b:bb:66:ac:87:1a:d6:2c:b1:42:66:1a:
6b:1b:0a:56:67:48:ce:bc:21:f7:d2:3d:6e:ea:1d:
cd:7e:e2:4b:cf:04:93:97:07:91:8d:14:37:42:18:
47:cd:c7:a4:b1:11:99:13:ac:a9:7f:ca:d3:db:c4:
2b:b5:36:dd:50:7c:7f:b9:98:de:e6:12:8e:97:9a:
ee:d1:a5:fa:1d:e6:9b:8d:83:35:2a:8b:6a:ad:cf:
40:19:c8:f5:92:1e:4d:5c:1f:cb:8c:f9:0c:2b:b6:
2f:67:c2:54:04:93:30:94:26:df:14:a3:51:68:d5:
31:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:E9:B9:31:EB:B2:43:0F:45:16:A1:6D:AF:69:05:FC:DF:63:DB:12
X509v3 Authority Key Identifier:
keyid:08:BF:59:89:9B:7A:CA:30:A3:C7:D5:DB:93:B2:12:D9:87:09:C8:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CL9ZiZt6yjCjx9Xbk7IS2YcJyJs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/ce1677-d927-44c6-a909-3b2b51a5e3da/1/CL9ZiZt6yjCjx9Xbk7IS2YcJyJs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/ce1677-d927-44c6-a909-3b2b51a5e3da/1/CL9ZiZt6yjCjx9Xbk7IS2YcJyJs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:7f:64:66:57:1b:a7:11:0b:8f:68:88:f7:b0:32:76:c6:f2:
ad:c0:fa:33:55:c7:7d:d0:97:99:d0:13:0f:63:d2:fe:cc:03:
7c:85:df:b4:c3:12:2c:35:19:ad:16:f5:a9:cf:d6:e3:a8:d6:
33:5e:60:28:f2:94:8f:5f:9a:3d:1f:83:db:7c:20:3e:5e:a9:
94:c6:0e:cc:ac:b7:6b:97:d9:92:cb:08:1e:d0:0d:ec:aa:62:
c2:c1:59:0d:74:33:9c:83:71:c3:8a:02:48:ef:b4:e6:41:b1:
1a:68:68:92:17:90:83:bb:d1:af:ac:b9:21:91:63:9a:95:65:
6a:88:b3:27:0f:c1:ef:45:f9:17:0a:8d:e0:b0:81:2d:c3:57:
dc:c1:db:a3:45:1e:2d:f1:78:11:80:73:a7:32:41:3b:cf:19:
de:6a:d1:a2:f2:84:02:cd:7e:25:86:54:0a:68:04:e3:63:57:
7e:ac:1a:35:14:83:d1:d0:a4:f5:5c:70:1e:b7:02:f5:a8:f9:
14:5d:84:4a:77:b5:5c:30:3d:3c:b2:ac:f6:f5:fe:c0:01:47:
97:83:d8:2e:d3:73:3c:96:e3:d8:97:e4:59:84:f4:13:e5:2d:
51:77:5d:67:f4:39:43:54:1a:a8:99:a6:51:4a:59:c0:eb:32:
de:d5:3c:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:28:16 2025 by rpki-client