Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/67a63a-1a03-4822-ac9e-3d4205f5e2d3/1/a_CO0PpuGTufOlC_cmtB0MMpspc.mft
File: a_CO0PpuGTufOlC_cmtB0MMpspc.mft (raw, json)
Hash identifier: Xlh/K+H822TnQmsGXHAZHtbJOVbh4lClapPMSMtCZsA=
Subject key identifier: 79:2B:3B:CE:4F:34:24:D9:D5:FB:97:C5:17:DA:58:AF:7E:34:FE:41
Authority key identifier: 6B:F0:8E:D0:FA:6E:19:3B:9F:3A:50:BF:72:6B:41:D0:C3:29:B2:97
Certificate issuer: /CN=6bf08ed0fa6e193b9f3a50bf726b41d0c329b297
Certificate serial: 01984708B4771A616B6484757467CE477479
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a_CO0PpuGTufOlC_cmtB0MMpspc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/67a63a-1a03-4822-ac9e-3d4205f5e2d3/1/a_CO0PpuGTufOlC_cmtB0MMpspc.mft
Manifest number: 01EF
Signing time: Sat 26 Jul 2025 14:00:09 +0000
Manifest this update: Sat 26 Jul 2025 14:00:09 +0000
Manifest next update: Sun 27 Jul 2025 14:00:09 +0000
Files and hashes: 1: a_CO0PpuGTufOlC_cmtB0MMpspc.crl (hash: RGIUuq7G9BHccu5cJ5KNnaQAqtQKcqbWQXdkGSftXeg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/67a63a-1a03-4822-ac9e-3d4205f5e2d3/1/a_CO0PpuGTufOlC_cmtB0MMpspc.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/67a63a-1a03-4822-ac9e-3d4205f5e2d3/1/a_CO0PpuGTufOlC_cmtB0MMpspc.mft
rsync://rpki.ripe.net/repository/DEFAULT/a_CO0PpuGTufOlC_cmtB0MMpspc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:47:08:b4:77:1a:61:6b:64:84:75:74:67:ce:47:74:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6bf08ed0fa6e193b9f3a50bf726b41d0c329b297
Validity
Not Before: Jul 26 14:00:09 2025 GMT
Not After : Jul 27 14:00:09 2025 GMT
Subject: CN=792b3bce4f3424d9d5fb97c517da58af7e34fe41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:ce:5b:62:19:1b:67:e6:cf:9c:1f:a3:ec:8b:
3c:b0:96:38:ab:52:06:9b:5a:57:43:43:aa:da:a8:
3b:41:4b:61:a1:86:f7:63:75:c7:7d:1b:19:88:37:
62:76:e6:33:32:87:28:d3:d3:87:e4:07:a1:c3:c3:
46:74:77:8f:73:74:06:d2:32:65:0f:fb:36:1b:9f:
ca:af:b7:97:c4:08:9b:c8:e2:b7:f6:59:90:3a:b1:
44:3e:18:b0:3b:b8:a5:9d:d0:70:ff:bd:61:a8:34:
e3:4a:cc:61:5d:ba:13:28:e0:f2:45:6b:e4:09:49:
26:2c:9b:13:f7:4d:11:5a:c2:a6:33:63:07:03:b1:
b6:33:18:67:40:15:e4:e2:43:54:81:01:04:fc:20:
ec:94:88:0f:8a:96:cc:03:59:ee:d2:16:f9:c7:d3:
00:58:a7:82:99:a7:15:fa:f1:f7:f5:70:33:e1:4f:
78:99:c4:cf:8d:04:81:d6:c7:d2:88:7b:86:14:ef:
86:2a:38:e2:b0:66:7f:f1:f2:c5:e7:6c:7e:a5:f5:
8a:3d:90:f5:f4:c0:21:04:cf:f9:70:18:fd:39:1d:
f5:1b:83:94:1c:5d:d9:db:3f:d9:4e:1d:f0:e8:ba:
5d:0b:e7:45:4f:3b:2e:08:95:e2:7d:29:cd:92:18:
e0:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:2B:3B:CE:4F:34:24:D9:D5:FB:97:C5:17:DA:58:AF:7E:34:FE:41
X509v3 Authority Key Identifier:
keyid:6B:F0:8E:D0:FA:6E:19:3B:9F:3A:50:BF:72:6B:41:D0:C3:29:B2:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a_CO0PpuGTufOlC_cmtB0MMpspc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/67a63a-1a03-4822-ac9e-3d4205f5e2d3/1/a_CO0PpuGTufOlC_cmtB0MMpspc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/67a63a-1a03-4822-ac9e-3d4205f5e2d3/1/a_CO0PpuGTufOlC_cmtB0MMpspc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:dd:22:b9:b8:56:e1:c0:59:30:a6:09:d4:c9:73:b4:df:da:
c4:99:0e:9a:42:8f:9f:36:99:c7:f8:a5:7a:85:bc:b3:4a:25:
75:44:c9:bb:f6:8a:b9:ec:c4:12:e4:c9:94:46:c4:86:03:df:
44:ae:6e:d3:b1:d5:18:4e:fa:e6:f9:60:6d:80:ba:b6:44:a9:
18:b0:b3:3f:09:d9:59:e9:d3:3b:f9:74:f5:67:15:0f:a3:06:
87:80:91:d4:7f:68:d3:1c:89:50:be:3e:b4:b5:8e:c7:9e:07:
76:35:74:b5:29:77:1d:7f:f4:70:56:e7:46:22:c0:08:0e:b4:
f5:36:16:ee:fe:c8:41:28:f9:fa:76:9f:d5:1c:07:62:66:d2:
c3:48:7d:08:9a:e3:bf:87:e7:88:d2:5b:0a:6a:58:c0:f1:a1:
66:11:24:03:ed:39:50:b4:a3:95:a7:4c:a7:44:f7:b5:4e:1b:
39:c1:af:00:ea:f7:96:e0:28:0e:2b:4d:5a:bd:d6:34:65:2e:
2b:40:8c:90:e9:65:dc:b8:4b:bc:f5:bc:d1:6c:c7:83:63:67:
8c:3a:6e:b8:10:c0:22:6d:bc:38:9d:b9:1b:1c:bf:ef:b3:fa:
78:de:2e:3a:35:c1:aa:ba:d1:f6:5c:0e:79:62:f4:5a:a4:07:
f8:23:28:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 20:27:24 2025 by rpki-client