Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/5be5cb-95e6-40fd-8f03-aad0e790ed01/1/cuPi7kA09cpTDneayFdJVgVId24.mft
File: cuPi7kA09cpTDneayFdJVgVId24.mft (raw, json)
Hash identifier: y0oXFRkyrQat1OsMoZTs5vg6X5S8xOeG3TtkmX6mU2s=
Subject key identifier: 80:0D:D1:4B:70:2A:E3:D0:AA:E9:6D:2C:19:68:90:7C:1D:D5:7D:81
Authority key identifier: 72:E3:E2:EE:40:34:F5:CA:53:0E:77:9A:C8:57:49:56:05:48:77:6E
Certificate issuer: /CN=72e3e2ee4034f5ca530e779ac85749560548776e
Certificate serial: 0198D62984B3E328EAFEA0ADF32FD4064BFF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cuPi7kA09cpTDneayFdJVgVId24.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/5be5cb-95e6-40fd-8f03-aad0e790ed01/1/cuPi7kA09cpTDneayFdJVgVId24.mft
Manifest number: 02
Signing time: Sat 23 Aug 2025 09:01:41 +0000
Manifest this update: Sat 23 Aug 2025 09:01:41 +0000
Manifest next update: Sun 24 Aug 2025 09:01:41 +0000
Files and hashes: 1: cuPi7kA09cpTDneayFdJVgVId24.crl (hash: SciBmBjXgTiTIUW7+DhrURWEKmL1jYzTaqmUDxgiyEY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/5be5cb-95e6-40fd-8f03-aad0e790ed01/1/cuPi7kA09cpTDneayFdJVgVId24.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/5be5cb-95e6-40fd-8f03-aad0e790ed01/1/cuPi7kA09cpTDneayFdJVgVId24.mft
rsync://rpki.ripe.net/repository/DEFAULT/cuPi7kA09cpTDneayFdJVgVId24.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:29:84:b3:e3:28:ea:fe:a0:ad:f3:2f:d4:06:4b:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72e3e2ee4034f5ca530e779ac85749560548776e
Validity
Not Before: Aug 23 09:01:41 2025 GMT
Not After : Aug 24 09:01:41 2025 GMT
Subject: CN=800dd14b702ae3d0aae96d2c1968907c1dd57d81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:ae:b1:ae:f0:67:82:c9:e4:32:2a:1d:9b:86:
e0:f7:b6:78:a8:34:f6:4d:8e:66:1b:92:b4:92:df:
55:69:d1:31:9d:80:2d:b8:a8:d8:96:23:c1:29:0c:
4d:bb:ab:91:a3:f4:04:b3:18:2a:47:5f:72:e9:85:
c1:e5:a0:8d:18:d0:f5:f4:5e:97:e3:5b:db:09:43:
f2:6e:6d:1b:41:07:97:bc:92:40:22:b2:63:57:ed:
17:c1:3d:28:02:4d:c9:d0:46:0e:82:16:1b:30:c0:
b1:b7:49:7f:6f:a2:4f:c9:aa:73:60:51:32:d2:0a:
45:7d:70:ba:6a:09:17:c8:3e:3f:64:aa:52:3e:f8:
63:41:3b:b1:8e:cb:3a:0b:7b:84:ae:64:92:56:f8:
7e:08:da:ac:28:05:f9:3c:df:16:c2:ff:c3:35:f7:
eb:db:36:f5:60:16:42:c4:ca:4a:61:f7:88:fb:98:
76:71:b1:35:89:07:36:3c:64:60:81:00:c0:46:a2:
70:11:f1:32:4a:1f:1a:a6:3a:ff:c9:4f:db:2c:1d:
ba:6a:13:17:41:31:10:43:56:07:03:b7:b3:87:da:
8e:39:ed:e7:8d:a4:08:81:36:e7:f2:67:03:c9:b0:
86:2a:cd:5e:0e:4b:a4:c8:05:1b:14:c4:49:a9:6e:
a4:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:0D:D1:4B:70:2A:E3:D0:AA:E9:6D:2C:19:68:90:7C:1D:D5:7D:81
X509v3 Authority Key Identifier:
keyid:72:E3:E2:EE:40:34:F5:CA:53:0E:77:9A:C8:57:49:56:05:48:77:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cuPi7kA09cpTDneayFdJVgVId24.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/5be5cb-95e6-40fd-8f03-aad0e790ed01/1/cuPi7kA09cpTDneayFdJVgVId24.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/5be5cb-95e6-40fd-8f03-aad0e790ed01/1/cuPi7kA09cpTDneayFdJVgVId24.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:dd:55:39:00:9a:c4:f7:37:b2:45:f0:fb:0f:7b:47:e3:60:
b8:de:e0:1b:d9:c9:8a:b6:f6:42:90:f9:93:23:23:dc:72:3a:
f2:aa:da:b7:12:c7:04:5c:0a:69:07:af:56:71:04:7b:a7:32:
da:9c:01:43:e7:72:19:7d:40:5a:dd:be:f7:e5:0e:58:c7:1f:
0d:a1:40:09:a2:1d:b5:26:a0:de:ea:57:3c:00:24:32:2a:11:
20:25:92:87:cf:b9:ac:52:80:d2:40:a7:b9:3c:cb:17:ae:87:
5e:c0:14:25:a2:d0:a8:f7:6d:63:66:46:55:8e:5e:9d:78:da:
62:ce:41:87:6d:09:9f:e4:64:9b:fa:c1:0b:53:f7:4b:1b:a2:
6d:b1:d3:20:44:09:75:a3:53:69:90:90:cb:b3:00:94:dd:69:
0d:3c:4a:75:56:b1:b7:7b:b0:8f:a5:fc:8e:77:68:71:33:f3:
9e:fa:03:0f:cd:66:04:19:54:b6:33:fd:a2:24:cb:cf:39:46:
6a:8b:07:89:ab:1b:fd:48:23:a5:e6:75:82:8b:a3:a8:94:d3:
e8:0c:c7:0e:7e:d5:d8:2c:0c:76:d6:51:f6:30:9f:40:82:6f:
ba:c8:e1:e3:05:b1:59:bf:a9:2a:0f:a0:0b:18:98:31:81:dd:
fa:f4:a0:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:14:36 2025 by rpki-client