Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/a080fc-543e-4f61-8fc7-e337bfe0279b/1/CRX548KQJHXCTNRcaSmRvHH_ZkM.mft
File: CRX548KQJHXCTNRcaSmRvHH_ZkM.mft (raw, json)
Hash identifier: 1CH6mMfLqWSDn9m77DCQ3db9gmRW8VhNP798GwwSsF0=
Subject key identifier: C6:D5:44:08:A0:9A:D2:92:4C:FE:8B:B7:84:28:F9:E2:62:B4:BD:12
Authority key identifier: 09:15:F9:E3:C2:90:24:75:C2:4C:D4:5C:69:29:91:BC:71:FF:66:43
Certificate issuer: /CN=0915f9e3c2902475c24cd45c692991bc71ff6643
Certificate serial: 0198D5BBA0C2DA0D3C465855F5297E3BDB15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CRX548KQJHXCTNRcaSmRvHH_ZkM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/a080fc-543e-4f61-8fc7-e337bfe0279b/1/CRX548KQJHXCTNRcaSmRvHH_ZkM.mft
Manifest number: 17
Signing time: Sat 23 Aug 2025 07:01:39 +0000
Manifest this update: Sat 23 Aug 2025 07:01:39 +0000
Manifest next update: Sun 24 Aug 2025 07:01:39 +0000
Files and hashes: 1: CRX548KQJHXCTNRcaSmRvHH_ZkM.crl (hash: l6mt4/yEwZW6FFCtWbyVlC0/t9hYnnMkyb00ge+FNxU=)
2: feLtnRMkzU1rqe5DPxi47-2h3dM.roa (hash: x685XsSKo/9+h/ObOY3HT9WaSelNcUDDImrGBWSa8eI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/a080fc-543e-4f61-8fc7-e337bfe0279b/1/CRX548KQJHXCTNRcaSmRvHH_ZkM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/a080fc-543e-4f61-8fc7-e337bfe0279b/1/CRX548KQJHXCTNRcaSmRvHH_ZkM.mft
rsync://rpki.ripe.net/repository/DEFAULT/CRX548KQJHXCTNRcaSmRvHH_ZkM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:a0:c2:da:0d:3c:46:58:55:f5:29:7e:3b:db:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0915f9e3c2902475c24cd45c692991bc71ff6643
Validity
Not Before: Aug 23 07:01:39 2025 GMT
Not After : Aug 24 07:01:39 2025 GMT
Subject: CN=c6d54408a09ad2924cfe8bb78428f9e262b4bd12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:0f:c2:5e:27:c0:d2:1b:62:ca:8a:22:6b:ec:
81:6d:61:48:06:e6:be:fe:73:da:73:b2:2b:f6:f3:
af:9c:02:10:b8:62:6c:87:f0:f0:7e:cf:85:0f:22:
87:97:7d:10:cb:9e:41:cb:42:e9:bd:e2:4c:e9:c3:
40:6c:cd:57:2f:9d:8c:52:05:c7:12:9e:66:ac:da:
34:c9:3d:2a:36:05:e9:a3:7d:16:fd:61:f2:e9:1f:
90:a0:2b:0d:95:15:1e:8c:ff:0f:9a:13:77:06:dd:
6e:1d:5b:94:e3:96:fa:20:12:b5:c0:82:eb:bd:2e:
f9:02:5a:08:bc:c4:84:3a:6c:3d:0e:34:26:99:2a:
f2:ae:5f:18:fa:58:36:2d:7d:7c:ed:0d:23:f0:53:
ac:7e:b5:47:6c:2d:c1:bc:1b:db:60:dc:94:02:d5:
93:8f:6e:41:75:9c:66:42:c8:09:68:ef:9b:75:e2:
ea:21:eb:83:8f:35:0a:c9:9d:82:87:ac:dd:75:85:
5a:8b:18:50:cc:fc:2d:df:39:b1:54:51:da:22:e4:
5d:b1:6d:f9:e1:64:27:9c:04:6d:80:2b:10:b4:09:
86:d0:a3:f2:8e:ea:b1:a1:7e:cb:b1:33:fd:51:94:
fc:bb:3c:ea:cc:ff:f4:ef:14:c0:d6:2f:4c:70:be:
04:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:D5:44:08:A0:9A:D2:92:4C:FE:8B:B7:84:28:F9:E2:62:B4:BD:12
X509v3 Authority Key Identifier:
keyid:09:15:F9:E3:C2:90:24:75:C2:4C:D4:5C:69:29:91:BC:71:FF:66:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CRX548KQJHXCTNRcaSmRvHH_ZkM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/a080fc-543e-4f61-8fc7-e337bfe0279b/1/CRX548KQJHXCTNRcaSmRvHH_ZkM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/a080fc-543e-4f61-8fc7-e337bfe0279b/1/CRX548KQJHXCTNRcaSmRvHH_ZkM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:65:f4:84:21:f5:68:18:d0:4a:1c:42:88:33:d2:fb:39:e9:
38:6d:47:6f:67:6c:c6:9b:80:9f:53:dc:e3:2e:b4:b3:53:81:
ab:72:e6:8f:8e:6c:1c:4f:f4:7c:d6:52:6b:20:42:9d:9e:57:
f7:e0:2b:3d:5a:b2:43:f1:e9:6f:8c:76:c9:2c:b3:0a:85:6b:
c2:37:f2:33:bf:32:3d:0f:ed:00:c9:87:e2:17:64:b7:09:a4:
c8:cb:00:92:05:aa:a2:88:e8:32:52:04:fc:ba:f2:a8:32:13:
8e:82:7c:09:30:45:30:40:13:0e:88:c5:a9:74:fb:37:0c:b4:
b2:08:4d:32:49:ec:c6:d7:28:84:41:73:7b:de:6b:56:2a:0a:
09:f4:8e:71:07:71:bf:d7:c2:54:68:58:ea:be:d2:40:cd:4c:
37:53:9c:6b:9d:0f:56:7a:cd:d5:66:97:a5:f6:88:8a:4e:ce:
0a:f5:c5:05:bd:63:bd:d7:9a:e4:20:44:9d:1b:06:ed:9b:6d:
c5:f8:b8:4f:8a:cc:ca:ca:74:47:31:91:89:d8:e1:c9:ea:ef:
37:d7:47:2b:d2:ef:b3:80:82:13:aa:c9:b2:2f:a1:45:fd:74:
87:24:08:d4:a1:8f:98:69:e5:b9:fa:83:35:2e:fa:8a:06:cb:
c6:7b:6f:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:28:26 2025 by rpki-client