Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/a1aef4-9dca-4bc1-a9e7-876b55643d07/1/c63mtioyesxAP-7D4asctt4tXgw.mft
File: c63mtioyesxAP-7D4asctt4tXgw.mft (raw, json)
Hash identifier: y/yX2AS1ORx9vuatrNL4MPBIJXntc3GfSLI15mMkQ5k=
Subject key identifier: 5D:1A:A7:71:DA:43:06:A3:5C:26:4B:5D:23:4C:06:CC:24:CD:95:DD
Authority key identifier: 73:AD:E6:B6:2A:32:7A:CC:40:3F:EE:C3:E1:AB:1C:B6:DE:2D:5E:0C
Certificate issuer: /CN=73ade6b62a327acc403feec3e1ab1cb6de2d5e0c
Certificate serial: 01984965BA79D51FA7A48C8EBA227AECE259
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c63mtioyesxAP-7D4asctt4tXgw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/a1aef4-9dca-4bc1-a9e7-876b55643d07/1/c63mtioyesxAP-7D4asctt4tXgw.mft
Manifest number: 0FC8
Signing time: Sun 27 Jul 2025 01:01:00 +0000
Manifest this update: Sun 27 Jul 2025 01:01:00 +0000
Manifest next update: Mon 28 Jul 2025 01:01:00 +0000
Files and hashes: 1: c63mtioyesxAP-7D4asctt4tXgw.crl (hash: qhZyDuZpP7cNVplgsg7bFkoA+l5lWjj8fz2gHYAHIqs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/a1aef4-9dca-4bc1-a9e7-876b55643d07/1/c63mtioyesxAP-7D4asctt4tXgw.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/a1aef4-9dca-4bc1-a9e7-876b55643d07/1/c63mtioyesxAP-7D4asctt4tXgw.mft
rsync://rpki.ripe.net/repository/DEFAULT/c63mtioyesxAP-7D4asctt4tXgw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:65:ba:79:d5:1f:a7:a4:8c:8e:ba:22:7a:ec:e2:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73ade6b62a327acc403feec3e1ab1cb6de2d5e0c
Validity
Not Before: Jul 27 01:01:00 2025 GMT
Not After : Jul 28 01:01:00 2025 GMT
Subject: CN=5d1aa771da4306a35c264b5d234c06cc24cd95dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:33:28:13:46:d4:88:2d:1f:eb:4f:d7:c8:53:
90:f3:79:be:b7:8b:08:65:0d:e2:e6:b1:24:f0:3a:
3b:ea:aa:ce:e2:1c:8a:9f:a2:4e:80:41:9c:19:17:
5d:f8:0b:ac:8c:5f:10:b7:e9:0c:b8:a3:a8:04:f7:
dd:c0:68:13:da:ef:fe:be:6d:06:bb:62:2c:95:db:
cf:6b:21:19:8c:56:3b:67:3f:e5:c6:23:b2:7d:9e:
f3:1a:6c:7e:c8:8e:d6:d5:b4:56:36:05:e9:9f:f0:
c2:c7:ef:4a:40:dd:6b:51:b7:3f:d8:93:26:14:07:
06:26:9c:91:d1:db:78:27:6c:72:b4:31:68:3a:69:
58:4d:52:46:77:61:c5:3c:ca:c4:f9:24:fc:ff:70:
38:0a:e1:1d:6e:dd:e6:5d:a8:5d:70:21:a8:b2:79:
da:42:74:cb:bf:ac:d4:75:8d:6c:57:19:49:28:2d:
ff:ca:4f:6b:e3:91:38:42:6e:ed:7b:4a:2b:d8:4c:
ab:c4:e5:1b:32:6a:9d:e9:a7:a5:2f:25:84:c7:a1:
da:dd:d8:00:c2:7f:8c:0f:4e:95:f3:9f:50:5f:ee:
fc:08:a9:a6:85:49:5e:19:61:11:c5:f6:2f:28:cc:
3c:96:f2:c1:d5:fa:7c:e2:04:f6:f4:68:75:b3:2a:
c0:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:1A:A7:71:DA:43:06:A3:5C:26:4B:5D:23:4C:06:CC:24:CD:95:DD
X509v3 Authority Key Identifier:
keyid:73:AD:E6:B6:2A:32:7A:CC:40:3F:EE:C3:E1:AB:1C:B6:DE:2D:5E:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c63mtioyesxAP-7D4asctt4tXgw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/a1aef4-9dca-4bc1-a9e7-876b55643d07/1/c63mtioyesxAP-7D4asctt4tXgw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/a1aef4-9dca-4bc1-a9e7-876b55643d07/1/c63mtioyesxAP-7D4asctt4tXgw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:85:91:69:45:d4:48:f2:3b:ec:39:6b:2d:a9:ac:fa:45:bd:
98:62:3e:59:d2:72:15:11:89:94:88:54:fa:d4:3c:d4:69:fa:
98:97:27:96:b5:df:61:12:a5:ee:02:44:de:ab:f0:62:5b:f0:
3d:bf:78:ff:8d:cc:60:21:44:2b:a3:36:3c:9a:d1:13:6f:c9:
77:a0:29:f8:f2:3c:b0:67:54:ca:5f:1f:77:c3:e8:06:9a:8d:
90:c6:4b:83:ef:dc:99:59:a6:48:ac:fc:70:7b:b7:30:8a:83:
e7:68:19:11:db:5f:cf:bd:40:46:26:fd:f6:83:23:69:d5:14:
48:0a:5d:68:f4:3e:22:30:26:b1:02:b7:2e:a0:6f:74:c4:96:
01:89:6e:2c:fb:81:d3:a0:38:85:3f:4d:86:a5:a0:aa:ff:22:
52:aa:e5:15:a1:d5:52:30:97:ed:a3:9a:b0:9c:23:ea:8c:4a:
01:b6:70:1d:3f:9a:35:35:90:b5:23:bc:00:31:30:22:12:09:
a7:e0:d1:4f:4d:46:1d:19:7c:37:7a:c5:9e:e9:55:80:9a:d7:
9e:74:a3:f6:99:41:88:fb:19:9a:4d:0b:12:28:4a:34:0a:53:
b2:8e:56:47:f9:32:59:58:31:74:74:6e:bb:24:86:56:4e:f1:
ec:be:b7:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 07:49:03 2025 by rpki-client