Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/a35540-aa58-4a3c-ab45-bc2d17fe8beb/1/cc2ljxUk2CM2224M8qKf-vLaifg.mft
File: cc2ljxUk2CM2224M8qKf-vLaifg.mft (raw, json)
Hash identifier: JQ/vuqVsTXxwfZ03nYWxEBd8Iwvxbvm6TZlc+SgLpt0=
Subject key identifier: 06:55:2F:17:7B:4A:03:F3:DA:B6:31:42:6D:02:DD:F7:E4:67:34:84
Authority key identifier: 71:CD:A5:8F:15:24:D8:23:36:DB:6E:0C:F2:A2:9F:FA:F2:DA:89:F8
Certificate issuer: /CN=71cda58f1524d82336db6e0cf2a29ffaf2da89f8
Certificate serial: 0199FBEA8C7F5E8967E12E6798C9A6EB9AF5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cc2ljxUk2CM2224M8qKf-vLaifg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/a35540-aa58-4a3c-ab45-bc2d17fe8beb/1/cc2ljxUk2CM2224M8qKf-vLaifg.mft
Manifest number: 0EFD
Signing time: Sun 19 Oct 2025 10:01:16 +0000
Manifest this update: Sun 19 Oct 2025 10:01:16 +0000
Manifest next update: Mon 20 Oct 2025 10:01:16 +0000
Files and hashes: 1: cc2ljxUk2CM2224M8qKf-vLaifg.crl (hash: NH5VzDhV5m+5UH5c4sYsLQL2yy/H1Ni8jbMNPwwd5Ek=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/a35540-aa58-4a3c-ab45-bc2d17fe8beb/1/cc2ljxUk2CM2224M8qKf-vLaifg.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/a35540-aa58-4a3c-ab45-bc2d17fe8beb/1/cc2ljxUk2CM2224M8qKf-vLaifg.mft
rsync://rpki.ripe.net/repository/DEFAULT/cc2ljxUk2CM2224M8qKf-vLaifg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ea:8c:7f:5e:89:67:e1:2e:67:98:c9:a6:eb:9a:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71cda58f1524d82336db6e0cf2a29ffaf2da89f8
Validity
Not Before: Oct 19 10:01:16 2025 GMT
Not After : Oct 20 10:01:16 2025 GMT
Subject: CN=06552f177b4a03f3dab631426d02ddf7e4673484
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:88:10:50:bc:54:b1:bd:99:1f:d5:ce:ab:19:
9b:0a:5c:08:62:1a:06:be:fd:d9:67:fd:36:e0:b0:
0c:9d:81:f8:4a:6e:cb:1d:13:f1:4d:7b:0a:19:4b:
fa:3e:fd:99:26:ed:7e:57:b5:e1:cb:91:32:8e:46:
75:d2:51:16:b1:db:07:5f:c9:46:54:5c:bc:20:c6:
a0:23:bf:7e:e4:b0:db:e9:a1:f2:bc:24:fa:de:fb:
6c:b0:c9:21:b0:a2:df:d7:2e:41:46:d6:6e:88:09:
42:3c:14:23:df:0d:10:95:55:78:cc:60:72:e6:ae:
b9:c9:ca:e3:51:4e:92:5a:e2:c3:58:75:fe:c4:09:
fe:42:b4:23:ae:75:8c:8c:b4:28:69:06:55:b6:f8:
2b:cd:d2:79:05:d4:86:20:f1:06:3d:3a:e8:43:8c:
46:4e:9e:8c:01:8f:2d:17:1d:29:4a:d3:b7:90:f0:
dc:dd:33:6c:41:42:d6:a0:15:07:26:25:f4:34:b5:
f1:65:ff:0c:fe:15:99:89:72:73:68:aa:b2:7c:de:
55:21:f7:ec:12:7c:25:67:d3:47:a8:3e:e9:51:34:
4a:fd:9f:51:6e:8f:d6:15:00:5a:30:7d:35:6a:13:
12:73:4e:b8:1b:1e:52:fb:0a:98:d2:9c:ab:c0:45:
c3:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:55:2F:17:7B:4A:03:F3:DA:B6:31:42:6D:02:DD:F7:E4:67:34:84
X509v3 Authority Key Identifier:
keyid:71:CD:A5:8F:15:24:D8:23:36:DB:6E:0C:F2:A2:9F:FA:F2:DA:89:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc2ljxUk2CM2224M8qKf-vLaifg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a35540-aa58-4a3c-ab45-bc2d17fe8beb/1/cc2ljxUk2CM2224M8qKf-vLaifg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a35540-aa58-4a3c-ab45-bc2d17fe8beb/1/cc2ljxUk2CM2224M8qKf-vLaifg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:84:c4:c5:50:48:9a:50:d8:3b:58:26:39:4c:97:0e:9e:b5:
5b:f1:20:2a:42:4a:4a:e9:2a:fd:60:84:ec:b7:bb:77:f1:92:
f0:5e:c1:d6:cf:45:e9:9e:32:c4:04:e8:c6:d9:0f:df:06:1d:
ce:0b:17:2a:08:b6:ce:c2:02:81:8f:0f:09:48:96:90:fd:f0:
35:c6:4f:fc:70:b1:9c:86:7a:64:ac:60:74:41:c5:16:37:49:
90:99:71:54:ab:02:1f:39:12:d3:28:f5:20:57:88:6e:79:f0:
ee:c3:2f:bb:03:18:c1:23:a5:24:d6:a8:83:5b:1c:c0:77:c7:
43:f6:09:36:0d:d0:40:9a:da:8c:2e:17:5e:f5:3e:28:82:b5:
44:ad:09:07:f3:e5:4c:e5:4a:31:23:17:8c:85:7d:1e:b0:5d:
e9:39:0f:48:4a:d6:78:ec:50:5e:82:97:4a:97:0e:52:2e:0b:
1b:5b:4c:f9:ca:6e:20:e7:d8:d7:85:ee:03:7a:d4:43:97:f1:
df:5c:59:a8:a6:35:51:a2:8e:3e:9e:fc:64:a3:2f:7c:e8:02:
e6:1a:9d:12:aa:0a:6e:48:c7:69:d8:08:09:32:76:d9:41:34:
23:91:59:7e:6a:31:23:80:2c:95:19:8f:f2:23:a1:d9:eb:ed:
01:1e:29:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 12:54:13 2025 by rpki-client