Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/16c890-17e7-4a51-a387-3e8df3310232/1/CLPrX7O6dlbhE1eDSCnuyvRBIS4.mft
File: CLPrX7O6dlbhE1eDSCnuyvRBIS4.mft (raw, json)
Hash identifier: fRCe2tXycZfxuDB+VV5qIgxyCI5xJzuTkGwikysTLoQ=
Subject key identifier: 0D:61:A0:36:DD:EC:90:15:50:E9:AB:79:F5:9A:2F:26:46:13:B6:02
Authority key identifier: 08:B3:EB:5F:B3:BA:76:56:E1:13:57:83:48:29:EE:CA:F4:41:21:2E
Certificate issuer: /CN=08b3eb5fb3ba7656e11357834829eecaf441212e
Certificate serial: 01984B534953E06D22A8C07DDC949FD2DBA0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CLPrX7O6dlbhE1eDSCnuyvRBIS4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/16c890-17e7-4a51-a387-3e8df3310232/1/CLPrX7O6dlbhE1eDSCnuyvRBIS4.mft
Manifest number: 0243
Signing time: Sun 27 Jul 2025 10:00:06 +0000
Manifest this update: Sun 27 Jul 2025 10:00:06 +0000
Manifest next update: Mon 28 Jul 2025 10:00:06 +0000
Files and hashes: 1: CLPrX7O6dlbhE1eDSCnuyvRBIS4.crl (hash: K1m1iuY08lbiGRUsi/xNbqnXIX96/drcKZfCRmCjTnE=)
2: Dx843zJfB2RQ1tXw_6blL8VsbDw.roa (hash: Wk3Kg6R2i9DDoDfgR64ME8g+dDPZ0Euba0eJlCA1nOk=)
3: Eqq1hxnObNRaQRziaWuuBD1-O8o.roa (hash: jq17ziTa438haUw4I3TgAJRiuoEa3mnBNSNTDtlyTb8=)
4: baeYMpQTf1prfSgvYpiSJyiA86o.roa (hash: K1aC88mjEbBLbQ7U4e/CSJaIjpQ51Z65KxdLka02ark=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/16c890-17e7-4a51-a387-3e8df3310232/1/CLPrX7O6dlbhE1eDSCnuyvRBIS4.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/16c890-17e7-4a51-a387-3e8df3310232/1/CLPrX7O6dlbhE1eDSCnuyvRBIS4.mft
rsync://rpki.ripe.net/repository/DEFAULT/CLPrX7O6dlbhE1eDSCnuyvRBIS4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4b:53:49:53:e0:6d:22:a8:c0:7d:dc:94:9f:d2:db:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08b3eb5fb3ba7656e11357834829eecaf441212e
Validity
Not Before: Jul 27 10:00:06 2025 GMT
Not After : Jul 28 10:00:06 2025 GMT
Subject: CN=0d61a036ddec901550e9ab79f59a2f264613b602
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:f4:a3:1a:e2:4c:4e:6d:16:34:d6:e0:8e:2d:
12:ed:fd:c6:ba:07:05:32:fc:35:50:a5:11:51:ab:
a9:d3:b8:2b:71:e1:98:7f:a7:01:86:0c:a2:92:2b:
1a:4a:52:e8:44:15:4d:0b:f0:c9:bf:97:f0:72:85:
20:3a:53:1a:e6:1b:56:24:5e:65:ff:5a:11:e4:f2:
98:93:9b:52:e3:51:18:65:a5:56:52:38:3a:cc:f8:
7a:84:cd:17:8f:30:71:c2:2d:b2:8b:44:8c:22:8f:
4e:92:25:a7:61:7d:a0:13:ce:43:c5:61:18:6e:0c:
77:4e:bb:64:28:76:43:79:36:fc:33:8b:ac:10:e7:
47:9e:70:6b:d7:e3:98:4a:1e:f5:49:9a:54:df:80:
3e:74:35:9a:20:ad:da:35:6a:08:35:c5:30:fb:22:
18:af:ca:45:ea:97:06:7e:c5:5b:bd:a8:e1:c7:54:
cb:2d:74:1f:91:4d:1d:84:1c:b2:b6:cc:fb:0a:0d:
fc:6c:01:ef:78:7d:87:81:61:a5:f8:f3:4c:97:82:
56:66:4a:1e:43:f5:40:91:d7:09:09:87:76:84:eb:
84:05:c3:dd:94:e8:9e:90:3b:f2:ec:52:d2:37:dc:
65:5d:82:6f:d8:cf:7c:e7:02:ae:ca:16:3f:30:a0:
9d:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:61:A0:36:DD:EC:90:15:50:E9:AB:79:F5:9A:2F:26:46:13:B6:02
X509v3 Authority Key Identifier:
keyid:08:B3:EB:5F:B3:BA:76:56:E1:13:57:83:48:29:EE:CA:F4:41:21:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CLPrX7O6dlbhE1eDSCnuyvRBIS4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/16c890-17e7-4a51-a387-3e8df3310232/1/CLPrX7O6dlbhE1eDSCnuyvRBIS4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/16c890-17e7-4a51-a387-3e8df3310232/1/CLPrX7O6dlbhE1eDSCnuyvRBIS4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:de:58:21:e4:a8:5e:35:fd:cd:c9:b6:b8:63:52:43:8f:42:
c3:91:1e:11:a6:9b:59:27:72:b0:7f:b6:70:0d:b2:3c:55:c1:
e0:f8:c7:a8:eb:28:69:61:36:29:df:74:d7:a3:0f:81:52:a4:
14:49:aa:7e:54:61:08:74:c1:6a:83:01:61:50:64:ef:42:27:
6c:02:bb:b4:4f:db:44:b7:df:a3:23:11:19:70:b4:a3:93:c3:
97:d0:39:4a:9f:57:ec:91:ba:33:8f:45:6c:e5:5d:7c:7f:30:
65:ed:66:9f:c4:69:7c:08:42:c2:99:cb:4b:30:77:31:94:a8:
5f:45:a1:e7:d2:7c:8c:4e:e4:f6:a4:c2:ea:7e:e2:0e:7e:d7:
91:34:57:16:b5:2d:26:f5:2f:54:88:c7:5b:41:ff:67:65:64:
36:a3:9d:e9:5a:5c:8b:05:f8:cb:e9:67:76:07:3b:ac:46:fb:
ad:d6:cf:ed:f2:73:a1:85:aa:8e:c6:b4:54:88:2c:6b:eb:c6:
bd:ca:17:83:1b:19:c9:41:d7:20:c7:14:ff:5e:58:ca:76:9a:
8a:db:65:53:2f:ea:2e:7b:62:4b:77:21:cf:a8:e8:93:fd:16:
3a:56:bc:b3:24:ab:1f:70:9a:b1:91:0b:90:90:09:8c:a0:a6:
01:60:d9:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 12:05:30 2025 by rpki-client