Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/d7a5eb-d188-4aa2-bca5-fa59dc2a463b/1/crsdyZa54KP6ZjLPgHp8IFCUnEY.mft
File: crsdyZa54KP6ZjLPgHp8IFCUnEY.mft (raw, json)
Hash identifier: lUiVKJGO+39aQE9g0QxPKgJ+YXz+D8ZL5PTlWhDXVJc=
Subject key identifier: 08:80:E3:C1:F3:45:45:41:0A:2C:BF:21:39:1D:3E:3C:42:5B:2B:7A
Authority key identifier: 72:BB:1D:C9:96:B9:E0:A3:FA:66:32:CF:80:7A:7C:20:50:94:9C:46
Certificate issuer: /CN=72bb1dc996b9e0a3fa6632cf807a7c2050949c46
Certificate serial: 0198D7A92204A61BDCD3AE3E659346D8BC7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/crsdyZa54KP6ZjLPgHp8IFCUnEY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/d7a5eb-d188-4aa2-bca5-fa59dc2a463b/1/crsdyZa54KP6ZjLPgHp8IFCUnEY.mft
Manifest number: 0939
Signing time: Sat 23 Aug 2025 16:00:42 +0000
Manifest this update: Sat 23 Aug 2025 16:00:42 +0000
Manifest next update: Sun 24 Aug 2025 16:00:42 +0000
Files and hashes: 1: crsdyZa54KP6ZjLPgHp8IFCUnEY.crl (hash: NXc3g4UfloRB5OlED3PUKwQ6EAhj0XWCnj/m3wcwpp0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/d7a5eb-d188-4aa2-bca5-fa59dc2a463b/1/crsdyZa54KP6ZjLPgHp8IFCUnEY.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/d7a5eb-d188-4aa2-bca5-fa59dc2a463b/1/crsdyZa54KP6ZjLPgHp8IFCUnEY.mft
rsync://rpki.ripe.net/repository/DEFAULT/crsdyZa54KP6ZjLPgHp8IFCUnEY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:50:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:a9:22:04:a6:1b:dc:d3:ae:3e:65:93:46:d8:bc:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72bb1dc996b9e0a3fa6632cf807a7c2050949c46
Validity
Not Before: Aug 23 16:00:42 2025 GMT
Not After : Aug 24 16:00:42 2025 GMT
Subject: CN=0880e3c1f34545410a2cbf21391d3e3c425b2b7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:76:17:9a:cc:33:8e:d9:29:65:23:46:5a:c9:
36:25:6d:d7:de:df:af:91:a8:32:5e:64:65:66:04:
10:45:30:ee:7d:c4:06:e3:7a:8a:b6:9c:fe:70:76:
5f:be:eb:bc:cb:22:9f:39:f6:59:60:16:60:7c:64:
ca:0d:88:91:9f:b9:e2:7c:7f:17:59:0b:b3:d3:f1:
0b:7c:b0:6c:a8:03:68:d5:3a:ca:2f:4b:b8:a8:83:
5f:d6:dc:67:b9:43:0d:6f:c6:63:30:f1:8d:12:cf:
e2:00:6b:c8:4d:3a:ae:5d:94:b3:94:63:87:60:7c:
19:6e:53:22:a5:79:3c:a6:d5:61:9f:36:ea:da:0d:
b1:1a:49:26:7c:67:bc:4a:e1:c5:0b:95:81:f3:e0:
d2:3c:81:c0:95:dd:f4:22:0b:5f:78:8b:33:d2:da:
51:ff:43:37:68:ea:55:b9:c8:71:07:90:cc:19:d8:
48:16:2e:02:3c:47:ec:4f:86:c4:e6:38:d0:bf:e0:
e5:34:e8:46:1b:53:8b:d1:60:e5:3f:68:2d:5e:b3:
65:9b:40:d4:90:ff:6d:3e:8c:85:6c:ca:c5:9f:48:
fa:1b:8c:51:6b:16:41:9e:4d:d2:4c:e3:09:89:9d:
64:6f:ee:f0:2e:7c:d5:98:3d:de:04:c7:82:19:35:
3a:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:80:E3:C1:F3:45:45:41:0A:2C:BF:21:39:1D:3E:3C:42:5B:2B:7A
X509v3 Authority Key Identifier:
keyid:72:BB:1D:C9:96:B9:E0:A3:FA:66:32:CF:80:7A:7C:20:50:94:9C:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/crsdyZa54KP6ZjLPgHp8IFCUnEY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/d7a5eb-d188-4aa2-bca5-fa59dc2a463b/1/crsdyZa54KP6ZjLPgHp8IFCUnEY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/d7a5eb-d188-4aa2-bca5-fa59dc2a463b/1/crsdyZa54KP6ZjLPgHp8IFCUnEY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bf:5e:99:83:88:45:68:24:d2:d1:5e:5d:0c:53:b1:5a:37:20:
dc:5b:48:9c:2f:34:fa:9d:57:7d:b4:47:be:ed:06:e4:35:08:
c0:f1:cb:4a:24:e2:13:be:53:62:46:3e:11:05:8e:34:b8:d4:
c6:a2:7f:76:52:a6:cd:5d:11:e5:e7:c5:a6:57:68:29:95:c5:
ac:b2:18:4f:9b:fc:f5:ff:a6:d1:7e:7a:9a:06:2e:9f:40:56:
f3:78:da:9c:c0:70:e0:81:c8:fa:f6:81:ec:6f:95:b2:40:c6:
c3:a5:c7:50:b5:04:5e:17:95:c5:12:f2:60:92:c2:cf:c1:88:
09:c0:db:8a:3e:31:36:e0:bf:10:ee:07:0c:fc:84:43:7e:d8:
3a:ba:87:35:02:92:c3:55:b7:3d:d1:c4:a8:d4:c9:99:a5:f7:
da:d1:45:fb:9b:84:df:fe:3a:5c:3a:b2:e6:20:2f:83:22:48:
be:88:be:06:59:49:91:dd:10:d2:e0:b4:4b:b3:dc:cf:21:0e:
77:43:2b:5a:06:10:c8:ba:14:bd:db:fa:67:81:49:26:5e:ba:
49:70:8d:90:3a:5e:5d:1d:23:cb:de:68:ad:2b:24:92:45:6a:
ef:91:fe:76:c3:ce:fb:f2:b6:f7:e3:78:f9:01:6b:b3:57:e0:
66:77:84:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:46:23 2025 by rpki-client