Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/990513-f49c-45fb-a7bb-5f045688bb99/1/cCD5EV0ZQDH8XISfFau_2A4IYis.mft
File: cCD5EV0ZQDH8XISfFau_2A4IYis.mft (raw, json)
Hash identifier: 6IA/b30yuhkqUCI8l5shfOjPUthEgNg9UhDUZJJkxZI=
Subject key identifier: 6A:AC:1B:D5:FA:41:B7:80:F2:B5:A8:A4:22:28:48:18:25:28:80:BC
Authority key identifier: 70:20:F9:11:5D:19:40:31:FC:5C:84:9F:15:AB:BF:D8:0E:08:62:2B
Certificate issuer: /CN=7020f9115d194031fc5c849f15abbfd80e08622b
Certificate serial: 0198548D981D682AF04C9A0D5C13E51FEFA3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cCD5EV0ZQDH8XISfFau_2A4IYis.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/990513-f49c-45fb-a7bb-5f045688bb99/1/cCD5EV0ZQDH8XISfFau_2A4IYis.mft
Manifest number: 0F91
Signing time: Tue 29 Jul 2025 05:00:22 +0000
Manifest this update: Tue 29 Jul 2025 05:00:22 +0000
Manifest next update: Wed 30 Jul 2025 05:00:22 +0000
Files and hashes: 1: cCD5EV0ZQDH8XISfFau_2A4IYis.crl (hash: 7q4x2dYQDpWeqzu71jyaM3JDfMrfR7JtqcUam2Z7uvk=)
2: qVT8jOoIg3NQ7grXFr4I7SQu8PY.roa (hash: OKj4yzwEJbloQV+D0rgvNOZHy8KXLKDzSxRsqanfakg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/990513-f49c-45fb-a7bb-5f045688bb99/1/cCD5EV0ZQDH8XISfFau_2A4IYis.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/990513-f49c-45fb-a7bb-5f045688bb99/1/cCD5EV0ZQDH8XISfFau_2A4IYis.mft
rsync://rpki.ripe.net/repository/DEFAULT/cCD5EV0ZQDH8XISfFau_2A4IYis.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 23:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:54:8d:98:1d:68:2a:f0:4c:9a:0d:5c:13:e5:1f:ef:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7020f9115d194031fc5c849f15abbfd80e08622b
Validity
Not Before: Jul 29 05:00:22 2025 GMT
Not After : Jul 30 05:00:22 2025 GMT
Subject: CN=6aac1bd5fa41b780f2b5a8a422284818252880bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:c5:54:9f:8e:24:e6:b6:f8:72:ea:b6:a5:d2:
12:18:e2:f8:95:cc:00:ad:98:13:d4:0e:4e:f5:e5:
08:dd:e1:e6:18:a9:86:e7:48:f5:51:0e:b5:e7:be:
32:55:9f:4b:df:0a:a0:c8:5e:68:5b:7e:7e:04:2d:
13:fe:a2:07:4b:44:ad:f4:2f:7d:b6:95:91:3c:55:
37:72:66:7e:e5:be:5c:74:1e:63:a6:0d:c1:20:e5:
a7:41:48:11:18:b1:e2:b1:8b:3c:d3:db:22:3a:ec:
c3:69:75:64:0f:73:25:08:23:7a:cf:bf:2b:be:0f:
8b:e0:63:35:fc:36:11:a5:08:d8:da:c0:ea:d3:5b:
b1:b0:5e:5c:69:72:7e:3d:25:ff:08:be:fd:55:b0:
e8:b7:2c:51:8b:05:e0:24:86:69:9b:d7:6e:8c:74:
73:aa:6d:f0:5e:89:e3:ae:30:98:92:ce:ab:35:a5:
0a:30:d6:f7:eb:be:88:5d:80:d8:1c:75:a9:b5:9a:
50:62:ae:cb:8e:cb:10:59:66:43:68:62:97:0b:19:
3f:9d:ec:d6:9c:29:fb:6e:37:16:a4:73:88:65:eb:
34:db:6d:7a:07:00:ab:8c:67:26:db:dc:b6:0e:26:
b1:df:92:8d:ec:ff:76:ae:2d:fc:df:1a:c6:d8:e0:
87:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:AC:1B:D5:FA:41:B7:80:F2:B5:A8:A4:22:28:48:18:25:28:80:BC
X509v3 Authority Key Identifier:
keyid:70:20:F9:11:5D:19:40:31:FC:5C:84:9F:15:AB:BF:D8:0E:08:62:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cCD5EV0ZQDH8XISfFau_2A4IYis.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/990513-f49c-45fb-a7bb-5f045688bb99/1/cCD5EV0ZQDH8XISfFau_2A4IYis.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/990513-f49c-45fb-a7bb-5f045688bb99/1/cCD5EV0ZQDH8XISfFau_2A4IYis.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:aa:40:79:f2:54:74:0e:60:a5:1a:b0:7a:d1:d5:7a:68:6d:
64:c8:22:2f:8c:9e:ab:15:b7:8a:52:92:83:69:e7:ec:95:91:
58:85:ad:63:9a:5a:fe:2d:b5:55:9c:47:34:63:60:c3:ba:ee:
d0:50:dd:67:ae:3f:0d:88:b6:cc:06:78:07:7c:e1:a6:b7:fe:
24:7d:e8:c9:3f:1b:fb:9c:4d:4b:5b:c5:0d:05:64:be:6e:a6:
fc:2b:e9:80:c7:06:9c:4a:83:5d:82:c6:a4:c7:51:22:4b:75:
ae:79:f7:a6:76:0f:56:20:15:cb:ac:64:8f:39:42:4d:6a:69:
d0:2d:1c:23:1f:bd:89:f1:40:a4:da:63:62:28:d4:21:cd:ec:
1c:83:fb:e0:c7:32:85:ef:87:e7:45:76:57:56:b5:db:74:62:
3f:b5:21:f0:94:d3:23:21:a7:fd:1f:31:f9:03:af:cd:ba:23:
b2:02:4b:93:cd:bc:3d:f8:38:97:1c:68:28:b8:69:b7:97:ca:
73:da:ab:f9:1f:ee:09:7e:60:61:5d:2e:c0:4c:99:a6:44:e3:
21:d7:37:07:1b:29:68:db:3b:ae:70:35:f5:76:f0:0a:96:c4:
af:ec:32:65:61:af:c7:3a:82:09:ba:df:d9:dc:42:f8:87:27:
e6:cd:50:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 07:29:06 2025 by rpki-client