Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/cb5183-d8d8-4425-b0ed-c2097031ed4b/1/at5urfJFy3ply0wF09VLzSYKB18.mft
File: at5urfJFy3ply0wF09VLzSYKB18.mft (raw, json)
Hash identifier: bE5YF+19spcVLMzNUJM/fX5us9pBc8I4Jsv3YkLtde4=
Subject key identifier: 30:71:53:31:6E:13:87:E9:A1:F0:B1:F9:69:EF:27:C3:87:4E:84:F5
Authority key identifier: 6A:DE:6E:AD:F2:45:CB:7A:65:CB:4C:05:D3:D5:4B:CD:26:0A:07:5F
Certificate issuer: /CN=6ade6eadf245cb7a65cb4c05d3d54bcd260a075f
Certificate serial: 0198D5BBDD643EB79066721D83804F22A685
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/at5urfJFy3ply0wF09VLzSYKB18.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/cb5183-d8d8-4425-b0ed-c2097031ed4b/1/at5urfJFy3ply0wF09VLzSYKB18.mft
Manifest number: 0398
Signing time: Sat 23 Aug 2025 07:01:55 +0000
Manifest this update: Sat 23 Aug 2025 07:01:55 +0000
Manifest next update: Sun 24 Aug 2025 07:01:55 +0000
Files and hashes: 1: at5urfJFy3ply0wF09VLzSYKB18.crl (hash: d0w9DxTBSpMWW5bYMaP0W0FsQ0pFL/F9WawtEBq3g0M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/cb5183-d8d8-4425-b0ed-c2097031ed4b/1/at5urfJFy3ply0wF09VLzSYKB18.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/cb5183-d8d8-4425-b0ed-c2097031ed4b/1/at5urfJFy3ply0wF09VLzSYKB18.mft
rsync://rpki.ripe.net/repository/DEFAULT/at5urfJFy3ply0wF09VLzSYKB18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:dd:64:3e:b7:90:66:72:1d:83:80:4f:22:a6:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ade6eadf245cb7a65cb4c05d3d54bcd260a075f
Validity
Not Before: Aug 23 07:01:55 2025 GMT
Not After : Aug 24 07:01:55 2025 GMT
Subject: CN=307153316e1387e9a1f0b1f969ef27c3874e84f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:aa:1c:5f:a2:ec:95:5d:e5:77:81:5d:22:3f:
e0:88:d7:3d:44:ad:74:58:49:a2:e6:23:a8:0a:37:
8c:88:58:3e:35:06:15:bc:ec:ec:43:d5:76:6d:75:
a6:50:94:cd:bd:e5:f6:20:28:b7:a4:f8:9d:2a:bd:
f2:b7:df:fe:3e:af:4b:27:f9:25:53:7e:77:8c:87:
ed:c6:ce:37:bd:9b:4f:95:e7:55:67:fa:12:cd:5c:
fa:58:d5:9a:db:53:47:09:5b:60:f2:2c:0d:c8:1c:
3c:0f:9f:21:79:7e:43:f4:45:96:7e:38:ba:74:8e:
d7:a4:65:6f:3c:5d:ba:78:1f:da:31:0b:aa:6c:b5:
8c:b2:4c:fe:7a:5b:d8:a9:a9:e3:8f:e1:53:d2:31:
68:4e:42:f2:3b:9f:f5:bb:c7:6b:a8:bb:f1:46:3e:
eb:0d:bd:e3:ad:84:25:1e:75:4e:09:ef:44:4f:f7:
c0:22:02:3d:0b:b1:47:58:97:a0:f4:e3:a2:9e:ab:
95:10:0e:5b:d9:08:6a:e1:3a:2c:5e:90:cc:03:84:
fd:39:e1:de:07:4a:b9:de:fd:c6:04:63:08:b7:e5:
1b:45:a4:49:41:75:72:e3:46:c2:8f:13:be:e5:8a:
9f:c1:6c:5f:9c:b1:47:c0:7f:ff:6b:6d:e0:a8:c4:
9d:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:71:53:31:6E:13:87:E9:A1:F0:B1:F9:69:EF:27:C3:87:4E:84:F5
X509v3 Authority Key Identifier:
keyid:6A:DE:6E:AD:F2:45:CB:7A:65:CB:4C:05:D3:D5:4B:CD:26:0A:07:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/at5urfJFy3ply0wF09VLzSYKB18.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/cb5183-d8d8-4425-b0ed-c2097031ed4b/1/at5urfJFy3ply0wF09VLzSYKB18.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/cb5183-d8d8-4425-b0ed-c2097031ed4b/1/at5urfJFy3ply0wF09VLzSYKB18.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:0d:6d:ae:93:5a:63:df:ab:16:25:42:4b:28:f7:e5:0b:14:
e3:3b:f7:14:2f:ef:87:5f:19:6b:63:07:67:f1:9d:d1:8e:49:
cd:92:a2:36:56:57:b7:54:ac:56:a3:84:40:17:90:ac:d5:56:
fd:e4:e7:d2:24:35:08:7a:2e:bc:43:57:54:cb:7e:10:a4:83:
4b:bd:f2:8c:8c:f5:4d:eb:d2:79:22:73:1e:02:8f:6d:09:7c:
51:73:03:18:58:da:bd:37:6d:67:e6:f9:91:18:51:b7:c1:84:
9f:67:a0:ab:45:64:ed:65:11:cb:01:94:34:50:9e:73:91:72:
a1:bb:80:d7:af:60:87:fe:6b:26:5a:a4:a7:ce:db:18:7f:e9:
fa:eb:e3:ca:e3:23:c1:5a:4b:02:53:8a:30:64:21:13:25:70:
79:67:6e:fd:7f:85:ec:5a:ca:b3:5a:cd:94:18:9f:b5:53:e2:
78:42:40:21:7a:ae:5f:23:e7:ab:c6:bf:ce:50:81:52:3b:cc:
fc:d8:92:5f:a8:f0:30:8c:b9:98:7e:50:48:5d:cb:47:92:13:
aa:e1:f0:4d:e8:ed:8e:fd:39:88:74:59:53:03:f0:fe:4a:11:
74:76:be:b2:7c:d1:c7:6c:4d:9f:a1:d7:a0:da:cf:30:56:90:
cf:15:d0:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:38:22 2025 by rpki-client