Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/6bc0c8-1ad7-46ed-8ec2-c74cc54a7e85/1/RAWGxUYUuW7bhHCVJKM0sxyZmf0.mft
File: RAWGxUYUuW7bhHCVJKM0sxyZmf0.mft (raw, json)
Hash identifier: X7YYqxjhvNT668Co0F1wSysTWF3s9uUWI9do6Qq4Vp4=
Subject key identifier: F7:A6:F5:97:72:7C:10:62:CA:33:87:20:D3:96:1D:2E:50:D6:5A:4D
Authority key identifier: 44:05:86:C5:46:14:B9:6E:DB:84:70:95:24:A3:34:B3:1C:99:99:FD
Certificate issuer: /CN=440586c54614b96edb84709524a334b31c9999fd
Certificate serial: 0198D660F9E0782DDAA9AD862AC027A75B03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RAWGxUYUuW7bhHCVJKM0sxyZmf0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/6bc0c8-1ad7-46ed-8ec2-c74cc54a7e85/1/RAWGxUYUuW7bhHCVJKM0sxyZmf0.mft
Manifest number: 0952
Signing time: Sat 23 Aug 2025 10:02:16 +0000
Manifest this update: Sat 23 Aug 2025 10:02:16 +0000
Manifest next update: Sun 24 Aug 2025 10:02:16 +0000
Files and hashes: 1: RAWGxUYUuW7bhHCVJKM0sxyZmf0.crl (hash: YyOr6Y2NQpDHQ8hmdYxuTVY0SaiZj3uKycY2Zkritv0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/6bc0c8-1ad7-46ed-8ec2-c74cc54a7e85/1/RAWGxUYUuW7bhHCVJKM0sxyZmf0.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/6bc0c8-1ad7-46ed-8ec2-c74cc54a7e85/1/RAWGxUYUuW7bhHCVJKM0sxyZmf0.mft
rsync://rpki.ripe.net/repository/DEFAULT/RAWGxUYUuW7bhHCVJKM0sxyZmf0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:02:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:f9:e0:78:2d:da:a9:ad:86:2a:c0:27:a7:5b:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=440586c54614b96edb84709524a334b31c9999fd
Validity
Not Before: Aug 23 10:02:16 2025 GMT
Not After : Aug 24 10:02:16 2025 GMT
Subject: CN=f7a6f597727c1062ca338720d3961d2e50d65a4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:33:65:73:e8:bd:25:cc:33:5e:de:a3:98:fc:
37:a9:53:c3:4d:26:3d:e6:76:00:40:68:f9:d2:54:
ea:02:77:13:aa:25:3c:ff:ac:bc:3e:a7:53:ab:2d:
c1:fc:d4:54:89:dc:92:b6:fd:3f:6f:66:d7:02:02:
6e:15:8a:8e:d6:06:df:9c:2f:36:96:fb:66:27:0a:
ef:38:64:64:fc:ad:44:08:ad:4e:d0:82:d3:5d:2a:
34:a6:08:c6:22:fe:cf:af:c7:df:71:6c:37:94:2f:
54:6a:fd:06:82:67:d0:99:5f:e5:58:98:92:44:8c:
ce:f3:9e:e3:42:d2:9a:bf:db:81:9b:bf:14:65:f3:
f2:f0:91:3b:e6:98:b7:9d:63:90:d9:7a:8e:e8:3a:
fc:05:7d:f1:0e:6d:9b:6e:28:f1:27:8f:52:be:0b:
a0:45:0f:4d:74:27:36:2d:ea:b1:43:a6:cc:ef:b4:
d5:d7:44:43:dc:c9:d2:96:81:8c:0e:e6:ce:40:e5:
46:1a:57:29:d2:b7:2d:b5:ab:d3:0b:e5:c1:f5:43:
19:b6:08:33:90:2e:e0:fb:9d:20:b2:3d:52:d6:39:
62:c2:83:f2:ef:43:5a:07:b4:8b:1b:64:d0:21:f1:
e1:64:3f:7e:31:b1:b4:c4:77:56:43:52:39:ed:0a:
e9:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:A6:F5:97:72:7C:10:62:CA:33:87:20:D3:96:1D:2E:50:D6:5A:4D
X509v3 Authority Key Identifier:
keyid:44:05:86:C5:46:14:B9:6E:DB:84:70:95:24:A3:34:B3:1C:99:99:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RAWGxUYUuW7bhHCVJKM0sxyZmf0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/6bc0c8-1ad7-46ed-8ec2-c74cc54a7e85/1/RAWGxUYUuW7bhHCVJKM0sxyZmf0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/6bc0c8-1ad7-46ed-8ec2-c74cc54a7e85/1/RAWGxUYUuW7bhHCVJKM0sxyZmf0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:88:4d:09:62:44:11:22:bb:ec:77:d2:c6:5b:f9:e3:ec:e8:
5b:68:08:7f:57:af:61:60:6b:fa:89:4b:6f:ac:b1:40:81:5e:
71:5a:9a:ab:c0:69:ff:2b:a0:ec:38:6c:24:ed:9b:19:d4:dc:
52:05:04:d5:fe:7d:77:e7:f8:c4:e2:2e:31:d0:88:26:50:78:
0b:29:30:fb:86:54:51:28:2a:0c:00:a0:cb:43:98:06:38:0c:
80:96:ff:85:9d:9d:2a:44:40:4c:75:dd:b1:6d:25:6a:c9:77:
08:f6:7d:14:3b:21:1c:a7:91:9c:34:4c:35:38:db:92:46:e1:
74:89:56:83:97:36:ec:e6:f3:08:c8:5a:d9:91:54:79:81:72:
68:7c:49:b3:4f:c6:de:f0:0f:70:0d:1d:5a:26:ee:64:99:ad:
cb:77:de:d8:d3:da:84:68:a6:d8:6a:9d:f1:aa:84:bf:a4:1d:
ea:32:72:66:ce:16:a6:60:67:3b:3d:3d:b1:65:29:93:6e:f6:
ca:5f:ef:4b:2a:50:62:ba:6c:a4:e0:dd:f4:26:7d:76:45:11:
80:20:7f:a9:8d:bd:8f:b1:ca:f4:bc:91:73:a6:f9:a8:65:fc:
92:5b:c3:7c:2a:35:60:32:67:b5:8a:da:37:d1:d2:fc:3d:c6:
49:f6:01:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:11:19 2025 by rpki-client