Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/e14d91-ef0f-4edc-afe5-6a9fbc5dc6c8/1/Cf2KNbULa2WhDAQ5c5lulrD1rV0.mft
File: Cf2KNbULa2WhDAQ5c5lulrD1rV0.mft (raw, json)
Hash identifier: 67GP0zi55c+1vAZN5S+A+q14K6GPVMwowW7mQrb2QH4=
Subject key identifier: B6:65:F8:79:DB:C7:35:9C:56:6D:AB:44:20:57:1A:3E:B1:2A:E6:82
Authority key identifier: 09:FD:8A:35:B5:0B:6B:65:A1:0C:04:39:73:99:6E:96:B0:F5:AD:5D
Certificate issuer: /CN=09fd8a35b50b6b65a10c043973996e96b0f5ad5d
Certificate serial: 019922FAC122B16B7904437FF7271E58D337
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cf2KNbULa2WhDAQ5c5lulrD1rV0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/e14d91-ef0f-4edc-afe5-6a9fbc5dc6c8/1/Cf2KNbULa2WhDAQ5c5lulrD1rV0.mft
Manifest number: 1671
Signing time: Sun 07 Sep 2025 07:01:22 +0000
Manifest this update: Sun 07 Sep 2025 07:01:22 +0000
Manifest next update: Mon 08 Sep 2025 07:01:22 +0000
Files and hashes: 1: Cf2KNbULa2WhDAQ5c5lulrD1rV0.crl (hash: MpfsJZxJyq1fxy0D2ry1nUSIA5XjUs1op/W7bie4wF0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/e14d91-ef0f-4edc-afe5-6a9fbc5dc6c8/1/Cf2KNbULa2WhDAQ5c5lulrD1rV0.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/e14d91-ef0f-4edc-afe5-6a9fbc5dc6c8/1/Cf2KNbULa2WhDAQ5c5lulrD1rV0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Cf2KNbULa2WhDAQ5c5lulrD1rV0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:fa:c1:22:b1:6b:79:04:43:7f:f7:27:1e:58:d3:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09fd8a35b50b6b65a10c043973996e96b0f5ad5d
Validity
Not Before: Sep 7 07:01:22 2025 GMT
Not After : Sep 8 07:01:22 2025 GMT
Subject: CN=b665f879dbc7359c566dab4420571a3eb12ae682
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:25:38:ba:8d:68:bf:44:fd:e1:db:c8:92:f9:
c6:df:4c:43:09:13:38:7d:ca:4f:63:60:86:aa:0c:
1c:19:f0:ee:52:df:69:f6:a7:ec:5a:52:7a:7e:08:
45:06:ce:00:92:04:69:80:f7:8e:e6:82:db:4a:1d:
73:34:90:4e:3e:31:a5:dc:57:45:95:56:f5:a5:30:
a2:66:96:19:b5:76:fc:e9:38:18:8e:af:7d:42:da:
84:0f:ea:20:15:c8:56:99:30:61:65:55:c2:33:f0:
c8:66:71:79:9a:ae:11:13:09:a0:ad:74:26:0d:43:
e8:92:31:77:b0:ea:e9:a5:fb:b0:68:bd:b5:48:c6:
60:3a:55:6e:f3:dd:4a:2c:e3:24:ca:6a:85:d5:57:
b5:68:94:4c:5b:dd:07:4f:43:1a:7e:38:ff:e0:36:
e3:60:10:f9:6c:b4:d1:b8:fa:64:dc:6a:e6:e4:7e:
6c:17:b9:98:f8:49:52:7d:8d:1e:30:0b:05:14:8b:
6d:2a:d8:45:16:39:11:0e:88:38:ba:23:d9:94:f9:
b2:e6:bc:a5:3d:38:ef:c8:32:15:88:43:12:c7:b6:
73:cd:df:18:64:9e:fc:a3:cd:a9:be:7a:4d:c0:ec:
86:45:72:80:84:6b:42:df:41:5f:6a:b7:e0:1a:38:
a9:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:65:F8:79:DB:C7:35:9C:56:6D:AB:44:20:57:1A:3E:B1:2A:E6:82
X509v3 Authority Key Identifier:
keyid:09:FD:8A:35:B5:0B:6B:65:A1:0C:04:39:73:99:6E:96:B0:F5:AD:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cf2KNbULa2WhDAQ5c5lulrD1rV0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/e14d91-ef0f-4edc-afe5-6a9fbc5dc6c8/1/Cf2KNbULa2WhDAQ5c5lulrD1rV0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/e14d91-ef0f-4edc-afe5-6a9fbc5dc6c8/1/Cf2KNbULa2WhDAQ5c5lulrD1rV0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:73:5a:db:9e:c8:f7:16:b6:23:b4:8e:dd:79:50:19:e8:59:
0f:51:23:4f:33:3c:cd:02:a6:3b:75:64:2a:6f:98:62:32:68:
5a:f5:cd:9a:bd:7f:e8:87:c7:05:35:4d:14:8a:4c:f8:b8:a7:
ae:ea:19:7c:4f:6a:13:c3:08:e0:2a:e6:3c:08:ed:86:73:59:
08:78:96:a5:32:44:4e:87:8b:cd:64:b3:4d:78:2a:44:c5:dd:
73:de:8d:c1:fc:82:ab:9c:48:c8:1f:d1:03:58:3c:5e:3b:da:
18:78:b5:8f:49:5a:d4:80:da:ee:0f:47:10:2f:84:d3:f6:e5:
b2:c2:ee:66:58:ff:b9:41:8d:d1:c0:f9:c0:40:28:b3:30:58:
d1:44:ea:44:2a:fc:8c:70:10:f5:88:60:16:32:7f:e6:98:c6:
53:ce:b9:98:42:49:04:34:e8:95:fa:72:bf:0f:13:50:12:ad:
9b:20:cd:3c:04:b9:dc:0f:eb:29:54:5a:ae:8d:c5:70:d7:ae:
54:73:fc:93:74:23:94:35:f6:b6:06:55:5d:c6:6a:db:68:ac:
49:e9:5e:bc:03:7d:01:a3:55:2c:d9:2d:cb:57:a7:76:51:b7:
be:56:ce:68:73:9e:16:72:22:e3:2d:16:52:08:db:c7:f9:22:
8a:6e:3d:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 14:47:34 2025 by rpki-client