Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/fec08f-92cb-4e4f-96cc-170ed230d5f8/1/ClCzt81M47FFt1O_cXmpVczSkl0.mft
File: ClCzt81M47FFt1O_cXmpVczSkl0.mft (raw, json)
Hash identifier: 0v0wHLDPe6MGu3mDBTq80CC9hh7Jy6lNULOwLbK2EzU=
Subject key identifier: 85:FE:74:7F:6E:65:11:D0:0B:66:48:F1:0C:BC:3C:70:E3:3A:A4:39
Authority key identifier: 0A:50:B3:B7:CD:4C:E3:B1:45:B7:53:BF:71:79:A9:55:CC:D2:92:5D
Certificate issuer: /CN=0a50b3b7cd4ce3b145b753bf7179a955ccd2925d
Certificate serial: 01984A77B8051538DFEDD5B4A6A7E763FF37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ClCzt81M47FFt1O_cXmpVczSkl0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/fec08f-92cb-4e4f-96cc-170ed230d5f8/1/ClCzt81M47FFt1O_cXmpVczSkl0.mft
Manifest number: 0650
Signing time: Sun 27 Jul 2025 06:00:16 +0000
Manifest this update: Sun 27 Jul 2025 06:00:16 +0000
Manifest next update: Mon 28 Jul 2025 06:00:16 +0000
Files and hashes: 1: ClCzt81M47FFt1O_cXmpVczSkl0.crl (hash: c08SSIjQGq6NHK3B57aqdtzLuv/7RnsTgJwmQGwgSxk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/fec08f-92cb-4e4f-96cc-170ed230d5f8/1/ClCzt81M47FFt1O_cXmpVczSkl0.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/fec08f-92cb-4e4f-96cc-170ed230d5f8/1/ClCzt81M47FFt1O_cXmpVczSkl0.mft
rsync://rpki.ripe.net/repository/DEFAULT/ClCzt81M47FFt1O_cXmpVczSkl0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:77:b8:05:15:38:df:ed:d5:b4:a6:a7:e7:63:ff:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a50b3b7cd4ce3b145b753bf7179a955ccd2925d
Validity
Not Before: Jul 27 06:00:16 2025 GMT
Not After : Jul 28 06:00:16 2025 GMT
Subject: CN=85fe747f6e6511d00b6648f10cbc3c70e33aa439
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:cf:6b:bb:5b:ba:d4:5b:49:61:e9:26:a9:d8:
df:19:fc:e0:be:a0:70:6e:42:06:26:00:94:d6:ce:
f1:27:f8:d0:01:b1:64:17:01:63:56:78:93:9a:c6:
fb:89:9b:87:ed:59:51:ad:31:e6:c0:07:8f:bd:6b:
17:e6:22:e7:80:26:07:4e:e1:2d:30:ef:0d:f7:3a:
40:ba:2b:ba:bf:34:ab:33:94:39:89:44:7d:21:29:
96:68:75:2a:87:c2:e8:6a:49:28:68:27:54:90:6c:
b5:19:44:69:90:b6:bd:05:d9:71:ea:48:52:76:a2:
b1:7d:d0:49:ba:c3:ce:6d:dd:83:59:f4:0f:27:03:
f1:bc:17:16:e4:60:f9:bb:bd:21:c5:1c:d7:bd:68:
cd:ae:94:ea:97:e4:07:24:bb:63:bb:1f:56:92:96:
68:8e:16:a6:dc:7e:f9:2c:c4:70:9d:8a:31:e4:9d:
e2:16:d9:98:9f:c4:9f:5f:5c:8e:91:dd:14:a8:5f:
fd:3d:34:01:55:27:2c:e6:28:91:59:ee:a6:37:30:
60:7e:f4:bd:90:7e:e0:4e:71:91:c0:b2:ea:07:b9:
a0:80:6b:6d:9f:ed:49:78:93:fa:8b:c7:c1:1a:ab:
5a:0e:af:6c:bf:8d:a8:9d:77:a8:61:8c:1a:63:4c:
9a:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:FE:74:7F:6E:65:11:D0:0B:66:48:F1:0C:BC:3C:70:E3:3A:A4:39
X509v3 Authority Key Identifier:
keyid:0A:50:B3:B7:CD:4C:E3:B1:45:B7:53:BF:71:79:A9:55:CC:D2:92:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ClCzt81M47FFt1O_cXmpVczSkl0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/fec08f-92cb-4e4f-96cc-170ed230d5f8/1/ClCzt81M47FFt1O_cXmpVczSkl0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/fec08f-92cb-4e4f-96cc-170ed230d5f8/1/ClCzt81M47FFt1O_cXmpVczSkl0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:46:e1:a4:b5:c9:df:3a:d9:d3:e0:49:95:07:b7:09:ea:80:
3f:01:ee:56:c0:1b:25:c4:0f:ac:4e:0c:08:8c:7e:a0:7c:44:
4c:97:e2:46:6e:87:55:a8:f9:cb:90:0f:05:81:cb:dd:7b:73:
66:41:99:f9:91:3b:5d:31:ce:6a:db:47:dd:92:d8:ed:ae:b2:
46:ce:bd:4f:c0:44:26:d0:a5:02:6f:bd:95:3b:0a:6a:03:ff:
0d:35:c2:3e:05:18:e6:f3:94:1d:55:92:51:5a:fe:f6:18:2b:
a7:73:d5:ef:7f:0d:73:5d:67:cc:5b:a1:80:e1:5f:ad:45:ae:
a2:40:97:e9:f8:69:df:4e:de:ac:6f:74:b3:f7:62:7f:6c:64:
a3:67:d5:4a:53:a2:60:57:00:85:07:6f:00:99:c9:9a:bf:cb:
c3:ce:b2:31:05:14:48:a1:ac:d0:f8:da:4c:a5:e3:24:fe:fb:
cd:45:92:9f:4d:9f:0e:07:9e:fb:db:4d:23:ef:f1:c7:ac:04:
0a:c5:27:a7:e0:57:f7:f4:de:19:b4:9f:ca:66:31:e1:9a:50:
22:4c:6c:07:b4:a9:2f:89:9b:a4:8b:ee:50:9f:e5:5e:9a:d1:
6e:24:7b:78:42:7d:b4:b5:57:54:d1:0c:81:79:0f:83:d4:4c:
ec:a6:8b:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 08:41:42 2025 by rpki-client