Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/4c43b9-ae82-4919-987d-93c6facf13c9/1/d6TN722YqQcT__52cRNId5pjKgo.mft
File: d6TN722YqQcT__52cRNId5pjKgo.mft (raw, json)
Hash identifier: HicrRTmd/OgUsa7lD5rhaAyNBxSQRt1ee1oX6AAC29U=
Subject key identifier: 01:3F:07:BB:C9:02:E1:2B:DE:20:7F:14:AE:2E:8E:C9:30:54:43:AD
Authority key identifier: 77:A4:CD:EF:6D:98:A9:07:13:FF:FE:76:71:13:48:77:9A:63:2A:0A
Certificate issuer: /CN=77a4cdef6d98a90713fffe76711348779a632a0a
Certificate serial: 0198D4A7EB01A0DB985D1491D2B19EDBE7E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d6TN722YqQcT__52cRNId5pjKgo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/4c43b9-ae82-4919-987d-93c6facf13c9/1/d6TN722YqQcT__52cRNId5pjKgo.mft
Manifest number: 1645
Signing time: Sat 23 Aug 2025 02:00:30 +0000
Manifest this update: Sat 23 Aug 2025 02:00:30 +0000
Manifest next update: Sun 24 Aug 2025 02:00:30 +0000
Files and hashes: 1: d6TN722YqQcT__52cRNId5pjKgo.crl (hash: CACQZoWLArscCm5sjKzUfU5TJApIQLJsAsNYfT2Qk6s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/4c43b9-ae82-4919-987d-93c6facf13c9/1/d6TN722YqQcT__52cRNId5pjKgo.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/4c43b9-ae82-4919-987d-93c6facf13c9/1/d6TN722YqQcT__52cRNId5pjKgo.mft
rsync://rpki.ripe.net/repository/DEFAULT/d6TN722YqQcT__52cRNId5pjKgo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:a7:eb:01:a0:db:98:5d:14:91:d2:b1:9e:db:e7:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77a4cdef6d98a90713fffe76711348779a632a0a
Validity
Not Before: Aug 23 02:00:30 2025 GMT
Not After : Aug 24 02:00:30 2025 GMT
Subject: CN=013f07bbc902e12bde207f14ae2e8ec9305443ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:9c:95:95:77:bb:e1:82:1a:f3:5b:c7:8e:fb:
6a:e7:09:c9:f0:b9:e0:c2:99:03:26:71:3f:e8:6d:
72:48:8f:24:78:a3:77:4e:52:c1:6f:08:50:b9:5c:
8a:e2:02:04:21:fc:5e:63:cd:6d:a5:26:08:6e:5a:
ef:85:d6:4c:0b:4c:4b:f9:e6:09:27:1a:f5:b2:03:
cf:9e:70:3e:c3:6f:63:8e:c9:a8:4c:b7:c1:0a:c1:
39:82:0c:e8:61:72:d7:b8:90:f2:b4:62:4f:65:49:
0d:77:04:1a:23:c7:82:e0:57:b0:38:79:0b:9a:c7:
6d:19:5c:fa:54:df:82:8a:44:6a:23:ef:2b:64:b6:
27:65:5f:9f:76:da:34:30:63:38:74:55:2f:5d:73:
ad:f1:a8:a0:7e:b0:1e:47:b3:e6:29:86:4c:91:e3:
00:c3:e6:ef:d0:20:05:e6:70:59:a5:2b:96:cc:8a:
3a:a4:30:5a:33:5c:0b:da:4e:6f:48:cc:b0:40:4a:
fa:09:f2:26:47:ca:62:58:59:44:87:43:ce:f7:fc:
15:5d:10:2a:09:a2:de:df:6b:42:e5:d8:02:5d:a6:
be:ac:49:61:a6:f1:45:ae:f8:ba:02:8b:1f:85:04:
9b:cd:6a:d6:b0:51:e5:fa:12:6a:4f:a3:68:a2:d6:
60:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:3F:07:BB:C9:02:E1:2B:DE:20:7F:14:AE:2E:8E:C9:30:54:43:AD
X509v3 Authority Key Identifier:
keyid:77:A4:CD:EF:6D:98:A9:07:13:FF:FE:76:71:13:48:77:9A:63:2A:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6TN722YqQcT__52cRNId5pjKgo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/4c43b9-ae82-4919-987d-93c6facf13c9/1/d6TN722YqQcT__52cRNId5pjKgo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/4c43b9-ae82-4919-987d-93c6facf13c9/1/d6TN722YqQcT__52cRNId5pjKgo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:82:4c:47:61:b9:bc:0b:4a:b4:04:bd:f2:3f:49:2b:37:65:
70:78:0e:b5:a0:51:2b:67:01:eb:91:27:b3:45:81:1d:41:e4:
cd:a6:bf:5e:22:42:ca:9b:d4:5c:1f:db:66:c4:a9:77:0e:b4:
95:71:08:f7:1a:e8:2d:8d:9c:04:72:71:1a:f5:cf:48:62:96:
93:63:a3:77:93:8f:6e:f7:ba:5a:a6:78:cf:d1:b8:f4:ff:32:
cd:6b:f6:2b:9f:c9:2c:69:be:48:5b:2f:78:be:7e:17:3c:66:
b7:9f:4a:4e:7e:0f:d9:a2:0a:0f:71:1d:43:e9:2c:1f:5f:2f:
dd:0e:fe:8b:d2:50:1f:05:f5:ae:7e:b1:b4:fb:25:df:81:cc:
77:ce:8a:a4:af:f9:d2:7f:66:1f:81:24:1d:59:a3:9a:2c:ce:
1a:5b:24:70:2c:da:86:94:58:a1:ce:0d:cd:6f:3c:b0:34:81:
2c:f4:4b:96:c8:f0:bf:bc:9c:88:18:73:85:94:02:60:c7:96:
50:30:84:36:b2:09:7d:e9:86:f5:83:20:a3:f7:a1:1c:39:b6:
cb:12:c0:59:a5:cc:58:4e:fb:5f:77:f3:a7:7f:4c:b0:33:07:
7f:b1:bd:09:0b:59:64:a6:55:20:dd:41:c7:c5:ab:79:09:61:
f3:3d:92:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:16:47 2025 by rpki-client