Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/00ce0b-4413-458b-b71f-5dceb9ecc2b7/1/s55fOI3DSRpMlUe7V4ji_k9Q0DY.mft
File: s55fOI3DSRpMlUe7V4ji_k9Q0DY.mft (raw, json)
Hash identifier: D2TX1eSOwlh3dOHLak1Lg8zPpzkjAyW4CC6z32GigRQ=
Subject key identifier: 96:5F:9D:A6:06:29:E2:36:FF:48:24:E8:EF:5F:21:5D:06:1E:6E:EE
Authority key identifier: B3:9E:5F:38:8D:C3:49:1A:4C:95:47:BB:57:88:E2:FE:4F:50:D0:36
Certificate issuer: /CN=b39e5f388dc3491a4c9547bb5788e2fe4f50d036
Certificate serial: 0198D7062F4B34B5FDB3DA7FF070DFEA8835
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s55fOI3DSRpMlUe7V4ji_k9Q0DY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/00ce0b-4413-458b-b71f-5dceb9ecc2b7/1/s55fOI3DSRpMlUe7V4ji_k9Q0DY.mft
Manifest number: 0C68
Signing time: Sat 23 Aug 2025 13:02:43 +0000
Manifest this update: Sat 23 Aug 2025 13:02:43 +0000
Manifest next update: Sun 24 Aug 2025 13:02:43 +0000
Files and hashes: 1: s55fOI3DSRpMlUe7V4ji_k9Q0DY.crl (hash: xl/W4sERvwuQgSRUeTBweuFmX4AOr6DrEgmgqULJb2Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/00ce0b-4413-458b-b71f-5dceb9ecc2b7/1/s55fOI3DSRpMlUe7V4ji_k9Q0DY.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/00ce0b-4413-458b-b71f-5dceb9ecc2b7/1/s55fOI3DSRpMlUe7V4ji_k9Q0DY.mft
rsync://rpki.ripe.net/repository/DEFAULT/s55fOI3DSRpMlUe7V4ji_k9Q0DY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 13:02:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:06:2f:4b:34:b5:fd:b3:da:7f:f0:70:df:ea:88:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b39e5f388dc3491a4c9547bb5788e2fe4f50d036
Validity
Not Before: Aug 23 13:02:43 2025 GMT
Not After : Aug 24 13:02:43 2025 GMT
Subject: CN=965f9da60629e236ff4824e8ef5f215d061e6eee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:a2:a3:b8:df:c7:06:5a:58:9c:d8:77:2d:ef:
96:86:50:e1:17:2b:65:7a:e8:ac:f0:0f:ba:04:50:
a4:2f:af:cd:76:c8:34:44:e9:af:56:36:ad:53:5b:
dc:1d:e5:22:ee:60:b5:f3:a1:2a:da:93:7b:dd:d8:
3e:4b:bb:21:ce:e1:c7:6e:23:c6:4c:b6:d2:5f:02:
16:5a:65:a1:85:b7:db:9a:d1:81:83:85:cf:32:e8:
9b:24:5f:7b:87:1a:2d:54:d7:30:03:5b:bd:2d:9e:
e5:f1:53:ba:4f:85:02:eb:23:94:76:92:37:fd:13:
69:73:01:8e:94:25:c3:b7:f0:55:94:66:c5:f8:82:
c9:af:8d:81:1e:d7:7d:7c:72:68:c3:a4:46:a0:b3:
e7:f7:ac:e5:11:a7:52:63:de:c2:92:71:21:eb:41:
36:7c:f6:fc:d5:d9:dc:db:25:4d:dc:fb:04:71:e6:
d6:87:e0:f2:69:a3:66:fd:94:be:ef:70:a9:ee:05:
01:1a:9b:d4:86:ee:bc:83:a7:a9:f0:07:d3:d4:f7:
4a:fd:51:f4:d9:63:1d:fe:de:72:af:f1:c7:0f:ee:
04:99:2c:3e:13:ec:b8:9e:2d:c0:76:11:9a:2e:6f:
1d:92:2d:b1:81:8e:4d:1a:d6:5e:af:de:00:36:28:
7d:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:5F:9D:A6:06:29:E2:36:FF:48:24:E8:EF:5F:21:5D:06:1E:6E:EE
X509v3 Authority Key Identifier:
keyid:B3:9E:5F:38:8D:C3:49:1A:4C:95:47:BB:57:88:E2:FE:4F:50:D0:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s55fOI3DSRpMlUe7V4ji_k9Q0DY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/00ce0b-4413-458b-b71f-5dceb9ecc2b7/1/s55fOI3DSRpMlUe7V4ji_k9Q0DY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/00ce0b-4413-458b-b71f-5dceb9ecc2b7/1/s55fOI3DSRpMlUe7V4ji_k9Q0DY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:39:91:c7:bf:06:9b:e0:bf:86:01:b6:46:23:31:57:0d:cb:
37:a7:58:89:25:8d:6a:e8:15:e4:7d:ff:42:8e:17:22:ee:6b:
de:be:fa:b7:8c:a4:3f:ac:86:14:c8:a6:81:6c:64:62:b4:02:
30:4a:6d:46:af:64:b6:12:50:bb:81:08:63:77:5c:58:1e:22:
72:df:f5:bd:4b:e2:fb:9e:fe:fe:92:6f:91:d4:ca:35:cb:74:
35:ce:3a:4d:fc:08:28:ca:6d:ea:3f:55:7b:22:42:ac:d7:be:
ad:01:c1:2d:c7:d7:87:48:0e:f0:8b:4d:cd:a4:a7:e4:20:de:
ab:80:b2:bc:22:13:79:4d:b9:ae:aa:f2:00:c3:39:20:e4:2c:
4d:11:ac:52:4f:77:a1:99:10:40:0c:89:d8:f5:58:68:19:00:
dc:82:dc:8b:c6:04:0a:68:a0:2f:74:4b:31:d1:15:68:84:9d:
14:08:13:a6:7f:26:e5:b8:8a:ad:d6:c8:3c:76:c2:af:e8:11:
84:26:9b:18:d2:62:6b:e1:ec:da:f6:41:cf:0a:59:fd:e4:5d:
c3:7c:a8:b8:a9:bc:dd:e6:c3:8c:0f:b7:c6:ec:82:3e:2f:4d:
0c:96:02:6c:56:79:cd:4b:fa:f6:e9:7d:d8:8e:b9:6d:00:84:
d4:b6:c0:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 22:34:09 2025 by rpki-client