Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/6ac73a-6b5f-4232-9b8c-305e33ef8b29/1/CLFH055Du3X596_0XnvyuDUw-HQ.mft
File: CLFH055Du3X596_0XnvyuDUw-HQ.mft (raw, json)
Hash identifier: JwNLvoH+4+udlQTDO+Kow7EMZmaaNm3SoG43ANpmnW8=
Subject key identifier: 64:0B:3A:7C:07:E7:D2:45:33:F8:75:82:E7:95:67:CA:AD:C5:34:26
Authority key identifier: 08:B1:47:D3:9E:43:BB:75:F9:F7:AF:F4:5E:7B:F2:B8:35:30:F8:74
Certificate issuer: /CN=08b147d39e43bb75f9f7aff45e7bf2b83530f874
Certificate serial: 01984709185FA1E7B6D4A70C026F142FE397
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CLFH055Du3X596_0XnvyuDUw-HQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/6ac73a-6b5f-4232-9b8c-305e33ef8b29/1/CLFH055Du3X596_0XnvyuDUw-HQ.mft
Manifest number: 0365
Signing time: Sat 26 Jul 2025 14:00:34 +0000
Manifest this update: Sat 26 Jul 2025 14:00:34 +0000
Manifest next update: Sun 27 Jul 2025 14:00:34 +0000
Files and hashes: 1: 7SbxWOq-MRP5ULWQ2099XB6fnsw.roa (hash: 5+GTdZJjZ/hGlJyiza+hMgn0Xvc9DgVXyOpbY9SRSSQ=)
2: CLFH055Du3X596_0XnvyuDUw-HQ.crl (hash: HE7vJYon9lFgBHRKg7l9OhN38zGUP9BeMqCSWCT+XnI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/6ac73a-6b5f-4232-9b8c-305e33ef8b29/1/CLFH055Du3X596_0XnvyuDUw-HQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/6ac73a-6b5f-4232-9b8c-305e33ef8b29/1/CLFH055Du3X596_0XnvyuDUw-HQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/CLFH055Du3X596_0XnvyuDUw-HQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 14:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:47:09:18:5f:a1:e7:b6:d4:a7:0c:02:6f:14:2f:e3:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08b147d39e43bb75f9f7aff45e7bf2b83530f874
Validity
Not Before: Jul 26 14:00:34 2025 GMT
Not After : Jul 27 14:00:34 2025 GMT
Subject: CN=640b3a7c07e7d24533f87582e79567caadc53426
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:9c:35:dd:b9:f5:05:75:ad:c0:77:b4:9f:c3:
c1:f8:6b:20:b9:f6:d2:40:b8:52:75:2c:b3:a6:1f:
0f:fa:a2:73:2f:b7:62:ee:00:fb:74:4d:2b:15:69:
91:7e:ce:1b:4f:2e:12:68:0d:3e:68:cd:1f:63:c3:
e9:f1:1a:bb:aa:93:53:f4:c7:3f:72:ac:2e:f3:c2:
5f:06:a5:e5:65:f8:43:02:4f:5b:1f:f5:02:00:64:
83:ab:8a:3a:0d:39:f2:bb:30:01:0f:7e:a9:e0:04:
b5:d5:b7:ff:d5:2d:39:e6:9c:f7:56:f0:b1:5a:d1:
e1:0d:6f:18:83:72:f8:b4:e7:a0:99:ac:2e:95:13:
80:0f:d6:92:16:53:5c:b9:91:41:8a:80:34:08:fc:
b6:e1:11:ff:d9:0f:a3:dc:df:83:a0:59:b4:a3:4d:
43:58:ea:29:f7:f9:a0:74:c3:aa:7b:98:87:a4:2d:
c5:24:e3:e0:14:ae:71:cb:08:1f:da:48:93:6d:f7:
83:ec:e8:76:7f:f2:15:5d:fd:0b:9e:87:1d:aa:59:
08:0e:aa:b1:10:f7:1e:e0:53:73:1e:5d:b2:36:5e:
31:af:2f:7b:ab:aa:3d:0c:3c:a0:94:3f:9c:75:e3:
77:3d:f1:a5:cf:a8:9c:79:67:87:1d:45:53:70:d5:
85:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:0B:3A:7C:07:E7:D2:45:33:F8:75:82:E7:95:67:CA:AD:C5:34:26
X509v3 Authority Key Identifier:
keyid:08:B1:47:D3:9E:43:BB:75:F9:F7:AF:F4:5E:7B:F2:B8:35:30:F8:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CLFH055Du3X596_0XnvyuDUw-HQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/6ac73a-6b5f-4232-9b8c-305e33ef8b29/1/CLFH055Du3X596_0XnvyuDUw-HQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/6ac73a-6b5f-4232-9b8c-305e33ef8b29/1/CLFH055Du3X596_0XnvyuDUw-HQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:5b:69:94:8e:3f:11:0f:60:7f:2d:ae:dd:a1:2a:2d:52:41:
38:b3:7f:8b:88:59:7b:7e:c3:85:c6:62:ba:23:82:28:ef:38:
03:02:7f:87:78:1b:be:ff:32:c6:14:94:bf:55:8a:33:31:2b:
d0:c7:c5:e2:ea:b6:05:18:f6:35:9e:2c:66:35:5f:f7:d0:84:
15:9b:21:51:fd:b3:82:38:95:73:c7:9e:2e:76:cd:f0:3e:f4:
34:d3:2a:06:4b:6a:76:47:2e:96:e6:ec:65:a2:49:a4:d6:a1:
4a:10:e2:5e:90:14:36:cb:48:f2:9a:ba:7e:a7:56:88:7f:20:
a5:ab:6d:ed:f5:3e:59:32:99:a2:7a:59:5f:c6:90:37:16:4e:
61:2d:87:69:4f:73:16:65:22:e6:a1:a0:81:54:ec:b0:c7:e5:
c9:f5:94:ca:42:02:6f:2c:e7:2d:89:fa:c7:a6:3c:7c:a0:bd:
94:41:c6:f7:f1:b5:e9:3c:83:40:09:1a:44:b7:e6:6e:24:a5:
98:85:7a:49:e7:3e:d0:e2:6d:59:6f:0d:c8:59:ab:da:98:2f:
b6:bd:3a:d9:81:8e:e9:fd:23:7f:f3:dc:bc:f7:c7:d5:27:60:
59:30:bf:9c:2a:86:28:bf:e6:ba:f7:9c:43:7f:32:bd:59:49:
29:60:3a:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 23:45:29 2025 by rpki-client