Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/2684fb-1edb-4142-b2b6-f090d91dcbf8/1/Cnu83lfYWz-xqty6nJl3Xhnu7z4.mft
File: Cnu83lfYWz-xqty6nJl3Xhnu7z4.mft (raw, json)
Hash identifier: 8SlLNCVDc8LE3QLZU403Nis39qq9bHaz6Z93pgAnQbM=
Subject key identifier: 43:27:FD:C2:78:E9:E0:51:9F:44:0B:52:45:E0:80:C4:12:ED:4C:DA
Authority key identifier: 0A:7B:BC:DE:57:D8:5B:3F:B1:AA:DC:BA:9C:99:77:5E:19:EE:EF:3E
Certificate issuer: /CN=0a7bbcde57d85b3fb1aadcba9c99775e19eeef3e
Certificate serial: 01984B5488018B6E7C2AA9C921F78A8BAEA0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cnu83lfYWz-xqty6nJl3Xhnu7z4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/2684fb-1edb-4142-b2b6-f090d91dcbf8/1/Cnu83lfYWz-xqty6nJl3Xhnu7z4.mft
Manifest number: 0619
Signing time: Sun 27 Jul 2025 10:01:27 +0000
Manifest this update: Sun 27 Jul 2025 10:01:27 +0000
Manifest next update: Mon 28 Jul 2025 10:01:27 +0000
Files and hashes: 1: Cnu83lfYWz-xqty6nJl3Xhnu7z4.crl (hash: qoqnyJSj43z4Y0h0XmDYFuL4jSXaMHr4s+dVhu/6HF4=)
2: F9XGZi-RuqVcSe1fpzN4q7qIdc4.roa (hash: f6T7R08rHMZ0z6ganX/KnRpxEiznu3aFpX2FIokh414=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/2684fb-1edb-4142-b2b6-f090d91dcbf8/1/Cnu83lfYWz-xqty6nJl3Xhnu7z4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/2684fb-1edb-4142-b2b6-f090d91dcbf8/1/Cnu83lfYWz-xqty6nJl3Xhnu7z4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Cnu83lfYWz-xqty6nJl3Xhnu7z4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4b:54:88:01:8b:6e:7c:2a:a9:c9:21:f7:8a:8b:ae:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a7bbcde57d85b3fb1aadcba9c99775e19eeef3e
Validity
Not Before: Jul 27 10:01:27 2025 GMT
Not After : Jul 28 10:01:27 2025 GMT
Subject: CN=4327fdc278e9e0519f440b5245e080c412ed4cda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:f5:09:5d:d2:14:07:f0:b1:83:5b:03:22:7b:
7e:15:4b:eb:d9:65:a4:9e:05:e5:a9:d9:ca:2f:e4:
1d:22:d7:82:23:6e:62:0b:be:b3:f1:9f:7c:e1:82:
a1:71:1a:18:fa:ce:73:98:d3:3f:2f:e3:67:54:6d:
7c:99:0d:c0:be:0c:d9:c6:6a:90:73:9b:3e:3a:d7:
6e:3a:4c:fe:07:11:25:33:98:86:23:83:a5:c3:80:
79:6d:2b:1d:5a:9c:6c:3d:31:af:75:4f:7d:69:e2:
34:10:b0:7f:a6:f8:a2:60:3b:96:ff:4e:bc:ba:90:
92:ae:83:6f:0c:10:f2:33:ad:84:53:64:6e:cd:7a:
23:0c:c1:c5:01:9e:dc:af:12:ce:45:d5:46:06:57:
5e:77:90:1c:98:f6:b1:bd:f2:2c:70:96:42:bd:8d:
24:08:fe:b3:90:10:d7:8d:19:fa:63:86:1c:a2:25:
c0:cf:b1:72:e9:13:ed:20:07:5f:c3:6b:c5:01:d7:
a0:7c:b7:04:44:19:35:b3:ba:29:20:80:03:7b:35:
4c:fe:0e:e7:13:ec:f3:3a:23:a4:d1:23:28:03:70:
25:9e:1c:56:6f:f0:a0:14:bc:92:b8:1c:88:54:32:
8f:67:b4:26:c1:88:39:58:51:f6:81:3d:24:2d:5b:
1a:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:27:FD:C2:78:E9:E0:51:9F:44:0B:52:45:E0:80:C4:12:ED:4C:DA
X509v3 Authority Key Identifier:
keyid:0A:7B:BC:DE:57:D8:5B:3F:B1:AA:DC:BA:9C:99:77:5E:19:EE:EF:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cnu83lfYWz-xqty6nJl3Xhnu7z4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/2684fb-1edb-4142-b2b6-f090d91dcbf8/1/Cnu83lfYWz-xqty6nJl3Xhnu7z4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/2684fb-1edb-4142-b2b6-f090d91dcbf8/1/Cnu83lfYWz-xqty6nJl3Xhnu7z4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:b1:57:65:e3:71:04:67:84:9d:1e:01:e6:d1:43:51:24:6a:
07:da:83:dc:bb:60:98:4e:65:d2:dd:6a:81:66:ca:06:94:7f:
c5:26:ff:46:25:0b:01:e2:4a:bf:f3:16:9d:fc:86:57:30:90:
3d:80:fc:9c:1b:65:5b:e4:4a:d6:2d:4c:f8:a9:43:ce:3c:6f:
ec:30:32:dc:d0:4c:21:a4:a7:29:39:c3:5c:e3:70:65:68:d6:
e9:97:3f:24:9d:07:99:24:6a:20:4c:82:74:2d:5c:c1:12:59:
68:31:1d:f0:a7:e9:36:5c:92:f9:a2:c5:3c:5a:03:5f:b4:b7:
ca:62:ec:17:5f:91:1f:23:ac:02:44:83:72:83:91:4a:76:d1:
20:cd:78:e1:ce:81:54:e8:ba:33:91:47:7f:47:e0:52:97:3d:
e1:46:b7:b0:4f:75:2a:25:77:77:b1:43:33:13:f2:ed:9d:0d:
c4:dc:53:c9:67:33:2b:39:41:86:0f:61:2b:a8:a9:57:24:31:
62:9d:dc:75:68:bc:16:1d:f8:88:32:c5:71:89:98:25:4c:52:
9e:fb:57:e9:49:4a:59:06:50:8f:19:44:d6:6b:78:85:c5:41:
5a:34:56:42:8b:62:36:ad:97:cc:3d:09:9e:07:b7:46:1e:50:
5a:93:e0:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 11:56:37 2025 by rpki-client