Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/7d8a1a-095e-4186-95e0-082b68b2c02a/1/CXn1N7Cevq3fmHh0nR-IdTxUDHU.mft
File: CXn1N7Cevq3fmHh0nR-IdTxUDHU.mft (raw, json)
Hash identifier: dv2YVyuch10G05yw4xV6yBtjFttt5b7aPircPnAjsQ4=
Subject key identifier: 83:C1:62:15:B9:EF:9F:E4:8A:65:31:BC:24:AE:7F:02:95:9A:A6:16
Authority key identifier: 09:79:F5:37:B0:9E:BE:AD:DF:98:78:74:9D:1F:88:75:3C:54:0C:75
Certificate issuer: /CN=0979f537b09ebeaddf9878749d1f88753c540c75
Certificate serial: 019853E95DFFB017385EF32E56FC56323A8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXn1N7Cevq3fmHh0nR-IdTxUDHU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/7d8a1a-095e-4186-95e0-082b68b2c02a/1/CXn1N7Cevq3fmHh0nR-IdTxUDHU.mft
Manifest number: 1603
Signing time: Tue 29 Jul 2025 02:00:59 +0000
Manifest this update: Tue 29 Jul 2025 02:00:59 +0000
Manifest next update: Wed 30 Jul 2025 02:00:59 +0000
Files and hashes: 1: CXn1N7Cevq3fmHh0nR-IdTxUDHU.crl (hash: o5Ime5aEK9HUvh0e9zRDyMpgrtBkfOZTRX2GXoRwka4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/7d8a1a-095e-4186-95e0-082b68b2c02a/1/CXn1N7Cevq3fmHh0nR-IdTxUDHU.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/7d8a1a-095e-4186-95e0-082b68b2c02a/1/CXn1N7Cevq3fmHh0nR-IdTxUDHU.mft
rsync://rpki.ripe.net/repository/DEFAULT/CXn1N7Cevq3fmHh0nR-IdTxUDHU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 23:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:53:e9:5d:ff:b0:17:38:5e:f3:2e:56:fc:56:32:3a:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0979f537b09ebeaddf9878749d1f88753c540c75
Validity
Not Before: Jul 29 02:00:59 2025 GMT
Not After : Jul 30 02:00:59 2025 GMT
Subject: CN=83c16215b9ef9fe48a6531bc24ae7f02959aa616
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:58:f8:c0:d9:c9:a3:06:aa:8b:c1:24:36:3e:
43:d2:1f:93:d5:f4:66:0f:ac:c9:20:02:d2:31:8d:
4a:ed:59:2d:2c:c4:18:77:45:4c:e7:59:52:5a:36:
37:b0:43:18:ad:2c:e0:49:c7:38:61:89:83:d4:e1:
0b:75:32:8a:56:8b:f9:e7:d8:5f:b9:59:37:e9:64:
f3:8a:9a:cd:40:0e:c4:8b:99:01:df:0c:c7:1b:72:
c3:52:92:13:1f:67:63:36:3f:ae:54:de:6b:ff:87:
ec:b4:23:2e:7d:b8:77:11:76:2c:04:1f:fb:7b:62:
7d:06:07:fc:c6:d0:04:8c:3a:02:fd:68:f5:9f:7d:
fd:96:50:4f:13:94:07:dd:0c:29:e0:f6:ef:82:f5:
5e:0e:9c:3b:c5:69:ae:b0:ef:35:ba:d3:a0:ef:79:
fd:e3:92:3f:23:a2:f7:a6:5b:c7:2f:ec:7f:fc:2c:
06:17:7e:57:77:f3:77:b0:48:e1:3f:d0:34:e7:aa:
9e:6b:1d:d3:9c:ed:87:9c:d7:92:ee:53:c9:c1:e6:
af:ba:00:79:d4:c8:7d:c5:6f:c5:af:d2:6d:f2:48:
32:9e:c7:7d:55:2f:f5:71:3e:82:0c:02:62:32:a7:
de:14:4c:93:90:1d:c3:45:49:3e:23:c8:1c:e5:be:
f6:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:C1:62:15:B9:EF:9F:E4:8A:65:31:BC:24:AE:7F:02:95:9A:A6:16
X509v3 Authority Key Identifier:
keyid:09:79:F5:37:B0:9E:BE:AD:DF:98:78:74:9D:1F:88:75:3C:54:0C:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXn1N7Cevq3fmHh0nR-IdTxUDHU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/7d8a1a-095e-4186-95e0-082b68b2c02a/1/CXn1N7Cevq3fmHh0nR-IdTxUDHU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/7d8a1a-095e-4186-95e0-082b68b2c02a/1/CXn1N7Cevq3fmHh0nR-IdTxUDHU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:3c:03:cd:78:42:b7:b0:11:d6:6a:16:31:d1:28:2a:5c:29:
49:56:87:36:0d:c4:c2:b4:3e:e6:13:fa:3a:80:b5:2d:37:25:
a5:a3:34:9c:f1:4c:e8:f5:96:19:86:cf:a8:ec:f8:45:30:88:
bf:05:90:7c:5a:18:2a:5d:26:ce:88:39:33:ec:23:d3:5d:47:
8d:25:7d:83:a0:f8:88:08:30:0d:b1:7a:8b:8c:db:2d:ff:f2:
b8:dc:6f:33:80:6f:85:c7:18:df:12:22:39:de:b4:64:35:01:
04:a4:f1:d4:fe:b3:94:c7:d1:d0:f6:a7:de:de:7d:58:5e:bd:
98:fc:c6:6b:de:fc:29:4e:7f:8e:16:5f:7e:fb:82:6f:9a:7e:
dd:63:3b:1d:e9:b8:2b:e4:db:85:17:11:b6:de:f0:10:a9:b5:
10:c0:57:01:1f:8b:85:3a:34:20:d5:4c:88:c8:76:6c:90:f5:
ee:3f:8e:b3:ca:57:cc:90:77:2e:3d:3f:4c:2a:92:6d:b9:73:
8c:c5:14:fd:06:d6:5e:3b:ba:05:c3:81:ea:ed:19:bc:dd:f4:
84:31:1a:a4:9b:9c:1b:12:11:2f:41:d9:fc:34:30:19:13:9f:
06:02:b2:94:37:bd:5a:73:11:65:97:4f:bf:3e:f3:a0:8c:5f:
09:fc:1c:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 04:09:03 2025 by rpki-client