Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/fd6aa5-0cc3-40a1-9a2f-888363aa284c/1/C76Su2YDQIrN9Fe_7FhcW5PTJdk.mft
File: C76Su2YDQIrN9Fe_7FhcW5PTJdk.mft (raw, json)
Hash identifier: N3qdggCFvqM6NDl6f82IIVOWk4K48qU97bXkoQUNDSw=
Subject key identifier: B0:0E:56:74:38:D6:07:F3:51:A0:D1:67:13:47:60:F6:75:05:52:BC
Authority key identifier: 0B:BE:92:BB:66:03:40:8A:CD:F4:57:BF:EC:58:5C:5B:93:D3:25:D9
Certificate issuer: /CN=0bbe92bb6603408acdf457bfec585c5b93d325d9
Certificate serial: 01984964FCB619A4A5340E9A7E208320F2AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C76Su2YDQIrN9Fe_7FhcW5PTJdk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/fd6aa5-0cc3-40a1-9a2f-888363aa284c/1/C76Su2YDQIrN9Fe_7FhcW5PTJdk.mft
Manifest number: 158E
Signing time: Sun 27 Jul 2025 01:00:11 +0000
Manifest this update: Sun 27 Jul 2025 01:00:11 +0000
Manifest next update: Mon 28 Jul 2025 01:00:11 +0000
Files and hashes: 1: C76Su2YDQIrN9Fe_7FhcW5PTJdk.crl (hash: Jb5AVTbSl30DNX4ZdaDAOdAeOGnKusalT78jFIznGjw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/fd6aa5-0cc3-40a1-9a2f-888363aa284c/1/C76Su2YDQIrN9Fe_7FhcW5PTJdk.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/fd6aa5-0cc3-40a1-9a2f-888363aa284c/1/C76Su2YDQIrN9Fe_7FhcW5PTJdk.mft
rsync://rpki.ripe.net/repository/DEFAULT/C76Su2YDQIrN9Fe_7FhcW5PTJdk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:64:fc:b6:19:a4:a5:34:0e:9a:7e:20:83:20:f2:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bbe92bb6603408acdf457bfec585c5b93d325d9
Validity
Not Before: Jul 27 01:00:11 2025 GMT
Not After : Jul 28 01:00:11 2025 GMT
Subject: CN=b00e567438d607f351a0d167134760f6750552bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:ad:fb:bd:9d:99:f8:ad:bb:39:0c:6d:a8:19:
a1:a0:54:47:d5:57:6d:ae:d1:7d:41:11:21:52:b7:
93:88:01:ab:77:21:e6:bd:48:13:66:50:be:e4:13:
81:c1:15:12:e5:42:77:ae:42:d1:ce:6f:89:0b:5e:
7f:a0:ac:3f:e6:81:a6:5f:fd:18:1e:7b:0f:e5:47:
b5:85:b6:da:5a:5a:c0:10:a6:ac:90:0f:a6:66:7b:
42:40:2d:dc:7d:ab:07:b6:6f:6b:26:c9:66:b4:62:
13:62:9c:be:5d:cf:05:39:ce:6e:9b:5a:0e:a8:cc:
20:14:ae:be:68:ed:56:26:76:71:6d:93:8c:58:62:
2b:fd:eb:5b:96:82:07:6e:bc:d4:39:e5:64:61:da:
55:28:5d:11:06:e6:ce:20:94:48:ed:d3:a0:19:35:
07:26:12:90:d8:b1:0b:89:dd:21:52:a1:cb:fb:4d:
a8:69:21:0b:6b:3d:84:93:56:cc:3f:a6:53:c9:8d:
b1:cf:53:eb:e7:2a:fd:87:10:ef:97:5a:7c:a1:0f:
13:8e:5e:9d:b4:6d:e6:09:31:39:5e:48:93:d3:7b:
1c:04:7f:26:d8:82:23:72:23:dc:64:17:b3:61:d5:
b2:64:96:ba:fa:9f:1b:d1:a6:7c:e3:61:74:c1:3f:
63:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:0E:56:74:38:D6:07:F3:51:A0:D1:67:13:47:60:F6:75:05:52:BC
X509v3 Authority Key Identifier:
keyid:0B:BE:92:BB:66:03:40:8A:CD:F4:57:BF:EC:58:5C:5B:93:D3:25:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C76Su2YDQIrN9Fe_7FhcW5PTJdk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/fd6aa5-0cc3-40a1-9a2f-888363aa284c/1/C76Su2YDQIrN9Fe_7FhcW5PTJdk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/fd6aa5-0cc3-40a1-9a2f-888363aa284c/1/C76Su2YDQIrN9Fe_7FhcW5PTJdk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:90:1f:e2:ed:ed:9d:c9:02:1a:0b:e0:00:6d:e5:10:af:0d:
b3:e3:78:97:e0:df:71:80:dc:f9:1c:1d:0e:ef:36:2e:7a:01:
d5:63:7f:d1:47:2a:31:d8:69:c6:73:54:8f:1e:79:d6:bb:19:
fe:12:b4:97:6f:74:f0:df:81:87:db:39:57:3c:81:8e:ec:a2:
ff:10:f1:25:93:2a:9a:30:d2:ed:8e:01:bc:16:42:1b:b5:1d:
c3:79:44:92:eb:ff:c0:c0:13:62:ba:59:8b:76:ea:cd:bf:05:
af:8c:7c:2a:72:49:70:46:0e:30:99:bf:84:a0:e5:e0:f2:a6:
1d:e5:fd:c1:58:69:d4:aa:e9:6b:c3:20:76:23:54:48:0d:8a:
26:67:9a:80:c0:85:b2:f5:b7:4a:18:63:9d:5f:c3:aa:f3:91:
e9:b6:d7:e1:3a:1b:ed:40:72:ac:db:51:58:4e:8b:63:ec:da:
34:69:0e:0d:63:68:3f:f9:c0:e0:5e:60:d5:23:99:5c:d9:83:
66:d1:1b:80:c0:90:9c:f5:b7:82:fa:0b:0b:b5:0d:a7:35:5d:
b9:e9:d7:37:cf:f6:ea:6e:f1:81:07:cb:f7:ea:ec:50:32:8a:
79:33:b1:66:f4:23:c7:2a:02:c7:07:0a:12:ee:75:4b:b1:e9:
12:06:7f:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 05:08:39 2025 by rpki-client