Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/a35540-aa58-4a3c-ab45-bc2d17fe8beb/1/cc2ljxUk2CM2224M8qKf-vLaifg.mft
File: cc2ljxUk2CM2224M8qKf-vLaifg.mft (raw, json)
Hash identifier: MHfLDV6ZmqshuMrBvvIPaRJZVP5lb1J0TvDBeU29JHI=
Subject key identifier: 84:11:94:93:1D:BD:A1:13:03:6D:06:1A:E8:31:1E:41:08:E6:B0:BB
Authority key identifier: 71:CD:A5:8F:15:24:D8:23:36:DB:6E:0C:F2:A2:9F:FA:F2:DA:89:F8
Certificate issuer: /CN=71cda58f1524d82336db6e0cf2a29ffaf2da89f8
Certificate serial: 0198D6602629497D34C7FFDD474C734FF777
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cc2ljxUk2CM2224M8qKf-vLaifg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/a35540-aa58-4a3c-ab45-bc2d17fe8beb/1/cc2ljxUk2CM2224M8qKf-vLaifg.mft
Manifest number: 0E65
Signing time: Sat 23 Aug 2025 10:01:22 +0000
Manifest this update: Sat 23 Aug 2025 10:01:22 +0000
Manifest next update: Sun 24 Aug 2025 10:01:22 +0000
Files and hashes: 1: cc2ljxUk2CM2224M8qKf-vLaifg.crl (hash: fRNE8Ojph1OP2l6YuEfGhsxzcPx/LSQyd/JnZ3mSUMw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/a35540-aa58-4a3c-ab45-bc2d17fe8beb/1/cc2ljxUk2CM2224M8qKf-vLaifg.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/a35540-aa58-4a3c-ab45-bc2d17fe8beb/1/cc2ljxUk2CM2224M8qKf-vLaifg.mft
rsync://rpki.ripe.net/repository/DEFAULT/cc2ljxUk2CM2224M8qKf-vLaifg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:26:29:49:7d:34:c7:ff:dd:47:4c:73:4f:f7:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71cda58f1524d82336db6e0cf2a29ffaf2da89f8
Validity
Not Before: Aug 23 10:01:22 2025 GMT
Not After : Aug 24 10:01:22 2025 GMT
Subject: CN=841194931dbda113036d061ae8311e4108e6b0bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:c6:e8:d1:c5:4c:4f:c0:9c:59:f2:f5:47:d9:
ec:c3:2c:1c:1b:fe:6e:5a:78:f9:18:b8:69:6d:f3:
a3:8d:2e:05:c5:2e:e7:33:0c:8c:5f:8f:36:e1:25:
14:cc:ec:d0:33:45:d2:c1:4c:32:81:69:65:a8:28:
f4:11:f1:a5:b1:75:c7:20:4c:7a:c7:a0:f5:2e:b8:
07:28:84:bc:97:7c:a3:7b:87:eb:44:20:1d:b2:a4:
c2:d2:76:a3:23:14:6d:f3:d6:eb:6f:2b:34:14:c4:
37:fd:ae:56:c6:61:16:bb:fc:e9:76:2c:e6:a8:6f:
66:3a:0a:97:a1:cb:a7:2e:8a:9c:91:bf:aa:80:fc:
f4:35:1f:5e:4c:5b:b3:17:6f:6f:fc:1c:df:e4:43:
cc:5f:d0:6b:ae:eb:34:88:db:b2:d0:20:49:82:b6:
2d:2f:fd:c3:bd:ed:0c:3e:38:77:6f:e0:c1:26:cf:
9f:0f:7c:1a:48:04:6c:52:d6:3a:76:3e:f7:94:58:
74:53:05:fe:85:55:02:e8:e8:ed:e7:57:d0:cc:ef:
31:f7:53:eb:82:78:0c:c7:11:33:c2:37:c4:d1:d7:
35:e7:09:4d:39:2c:ef:9e:c9:4f:c1:7c:93:89:db:
e1:57:8d:c8:1e:a4:ae:77:e8:83:26:c7:3e:7b:f4:
59:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:11:94:93:1D:BD:A1:13:03:6D:06:1A:E8:31:1E:41:08:E6:B0:BB
X509v3 Authority Key Identifier:
keyid:71:CD:A5:8F:15:24:D8:23:36:DB:6E:0C:F2:A2:9F:FA:F2:DA:89:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc2ljxUk2CM2224M8qKf-vLaifg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a35540-aa58-4a3c-ab45-bc2d17fe8beb/1/cc2ljxUk2CM2224M8qKf-vLaifg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a35540-aa58-4a3c-ab45-bc2d17fe8beb/1/cc2ljxUk2CM2224M8qKf-vLaifg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:bf:8c:8c:74:70:ff:8b:ec:b7:09:d6:80:6f:c9:a3:e8:43:
3b:75:ba:f9:8b:05:71:fd:46:4b:b5:bc:5f:c1:8f:bb:9e:9f:
f2:95:48:da:b3:4e:fb:6e:d9:ab:69:66:9d:e5:3d:9b:b2:ca:
4d:cf:a7:d7:8c:67:7d:cf:e4:72:51:b8:4d:23:4d:dd:9e:5d:
90:e2:4e:c3:ff:8b:16:8d:51:29:d2:a7:e8:00:0c:68:ae:11:
f7:1e:cd:b9:fe:27:c6:bd:90:73:aa:bf:f5:ce:2f:d3:75:fc:
05:c0:42:20:5d:00:de:c7:e8:4e:5f:0a:8e:83:09:d7:f8:d2:
3f:49:ca:67:88:f3:1e:54:af:2f:e7:ce:a8:7a:6d:a9:1a:ff:
19:a9:fb:79:11:48:44:0f:c7:ae:39:2d:94:9e:9e:62:8a:59:
a1:d3:9e:1b:d5:67:74:df:06:e9:99:79:34:b6:82:da:4c:d2:
0f:ab:f0:58:5b:3a:99:c3:ce:8e:bd:1a:e7:66:0b:64:b8:10:
5e:54:21:0a:cb:6e:fb:72:85:b2:f6:0c:09:5b:c7:aa:8e:24:
54:ef:e5:1c:d7:bb:9a:33:66:ba:05:2d:04:49:c3:d1:ac:06:
d5:20:5c:7b:b2:f4:27:f5:91:bb:08:ff:8e:f9:bc:19:f3:91:
92:90:09:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:11:18 2025 by rpki-client