Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/b361ef-5f69-4bcb-983c-21128027255d/1/95d69YDIUMyL-QZJ-b2opqSL85Y.mft
File: 95d69YDIUMyL-QZJ-b2opqSL85Y.mft (raw, json)
Hash identifier: 4VjFn61tah43imzbqhBulfXB5kbQ3CEFmdMbbS3G3BE=
Subject key identifier: 4A:89:B2:1B:3A:80:2D:88:FA:DB:95:46:7A:C5:19:55:70:16:A2:01
Authority key identifier: F7:97:7A:F5:80:C8:50:CC:8B:F9:06:49:F9:BD:A8:A6:A4:8B:F3:96
Certificate issuer: /CN=f7977af580c850cc8bf90649f9bda8a6a48bf396
Certificate serial: 0198529F7B745624DD0C8E14C0755FBD82B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/95d69YDIUMyL-QZJ-b2opqSL85Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/b361ef-5f69-4bcb-983c-21128027255d/1/95d69YDIUMyL-QZJ-b2opqSL85Y.mft
Manifest number: 0C89
Signing time: Mon 28 Jul 2025 20:00:40 +0000
Manifest this update: Mon 28 Jul 2025 20:00:40 +0000
Manifest next update: Tue 29 Jul 2025 20:00:40 +0000
Files and hashes: 1: 95d69YDIUMyL-QZJ-b2opqSL85Y.crl (hash: TlqSrCJRXh6BMqyEWKu4YOw8hAhSyrPRTeEDVpsIa/c=)
2: cmLjyeJCay-rIpV13cL4nS3umqA.roa (hash: zv80BsoFgYMaUhk2eqxE9kG1WrpCEraiiqsDzPaa4r8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/b361ef-5f69-4bcb-983c-21128027255d/1/95d69YDIUMyL-QZJ-b2opqSL85Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/b361ef-5f69-4bcb-983c-21128027255d/1/95d69YDIUMyL-QZJ-b2opqSL85Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/95d69YDIUMyL-QZJ-b2opqSL85Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 20:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:52:9f:7b:74:56:24:dd:0c:8e:14:c0:75:5f:bd:82:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f7977af580c850cc8bf90649f9bda8a6a48bf396
Validity
Not Before: Jul 28 20:00:40 2025 GMT
Not After : Jul 29 20:00:40 2025 GMT
Subject: CN=4a89b21b3a802d88fadb95467ac519557016a201
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:0d:03:a8:59:8e:d5:6b:1b:d8:16:19:6f:e9:
d5:c3:20:2e:d5:ea:eb:f5:aa:80:f4:27:c0:4e:e3:
c7:a2:8b:f5:be:28:9f:30:36:3b:14:d8:d6:a8:9e:
75:44:1f:b4:e2:d7:71:5c:17:58:f4:29:0e:b3:33:
a0:aa:04:78:b0:a0:90:74:f6:87:b8:6f:c6:21:86:
cc:97:7d:cd:48:15:96:a5:6c:34:fd:97:47:3d:2f:
b3:fe:ec:a5:60:89:12:fa:4b:20:12:65:1c:76:1b:
ed:d2:67:d3:20:00:66:99:f0:33:13:32:d5:7b:69:
5c:61:38:ac:5e:56:c2:df:c8:a2:a3:63:0b:bd:3c:
da:61:9e:be:33:b7:09:4a:9b:66:59:01:17:b4:cc:
13:49:f8:be:f3:a9:6f:90:74:ab:d4:26:7d:34:94:
16:99:65:4a:d2:0c:e8:56:c0:65:b6:ce:98:65:56:
2b:46:7f:5f:2c:ec:98:1e:f4:5f:15:e3:30:7a:d9:
e7:86:ca:f0:bf:30:53:98:43:eb:e8:00:ed:a0:06:
ac:9c:64:0f:b8:82:e5:86:0e:23:53:53:7d:02:d5:
af:6c:c6:de:39:fe:72:5e:b8:d1:d5:24:e3:d0:89:
07:29:e6:8d:7d:0d:e7:fe:79:83:c9:c6:79:52:d7:
b2:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:89:B2:1B:3A:80:2D:88:FA:DB:95:46:7A:C5:19:55:70:16:A2:01
X509v3 Authority Key Identifier:
keyid:F7:97:7A:F5:80:C8:50:CC:8B:F9:06:49:F9:BD:A8:A6:A4:8B:F3:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/95d69YDIUMyL-QZJ-b2opqSL85Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/b361ef-5f69-4bcb-983c-21128027255d/1/95d69YDIUMyL-QZJ-b2opqSL85Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/b361ef-5f69-4bcb-983c-21128027255d/1/95d69YDIUMyL-QZJ-b2opqSL85Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:07:06:c6:39:cf:87:37:ad:b6:62:55:b8:72:af:30:1f:f1:
0d:00:9e:10:f4:66:2b:45:38:43:0c:ca:d1:7e:98:a5:fc:03:
a7:2f:62:5a:de:ab:69:40:10:1a:a1:d9:a4:24:23:17:dd:06:
c8:76:49:31:3b:b4:24:5f:53:31:4f:fe:54:c8:31:4f:19:d7:
35:7f:2d:eb:f9:99:95:f7:1c:03:e0:1f:5b:fb:09:50:c7:2d:
5d:33:f5:5f:42:2c:2b:ff:78:c0:47:40:10:91:1c:2e:94:39:
3e:90:d4:ee:4c:02:83:59:d1:2a:72:11:0b:31:8c:3f:d4:52:
64:44:ab:0f:52:d5:9b:ed:82:55:6c:36:20:22:80:4c:52:6f:
42:5e:b4:f3:b5:36:eb:be:6b:8a:ad:82:12:6d:0d:c9:8f:a6:
27:72:e8:dc:10:35:2e:23:6f:84:9d:3b:99:80:ed:24:fe:76:
46:9d:fd:86:a2:9b:ed:f2:5b:0d:17:23:eb:cd:92:15:3a:8f:
15:cd:4d:6e:a2:cd:1f:c2:31:85:07:c3:a6:c0:1d:3b:8a:33:
13:4c:b3:e9:71:2e:4f:11:e0:6c:be:6a:30:c9:fb:d7:c5:48:
b8:a6:f4:a2:25:b1:a1:3e:e3:1f:96:93:b9:08:51:1b:a5:3c:
3f:2d:a1:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 04:38:34 2025 by rpki-client