Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/c4d084-1b68-4da2-98c6-455d52f900c0/1/Cze9FDKYbXtbnG6Thl5UOrr08Ps.mft
File: Cze9FDKYbXtbnG6Thl5UOrr08Ps.mft (raw, json)
Hash identifier: XjtHv2MxMQ0QYKMplC3Pnptp7D9jqHvWJScVu7zs+GE=
Subject key identifier: 67:98:22:7E:6F:01:58:B2:7E:AD:8E:A8:7B:08:3B:EB:26:F2:DC:ED
Authority key identifier: 0B:37:BD:14:32:98:6D:7B:5B:9C:6E:93:86:5E:54:3A:BA:F4:F0:FB
Certificate issuer: /CN=0b37bd1432986d7b5b9c6e93865e543abaf4f0fb
Certificate serial: 019923A0D3DD0BA2EC18A4DF90BFB8985E2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cze9FDKYbXtbnG6Thl5UOrr08Ps.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/c4d084-1b68-4da2-98c6-455d52f900c0/1/Cze9FDKYbXtbnG6Thl5UOrr08Ps.mft
Manifest number: 0AAF
Signing time: Sun 07 Sep 2025 10:02:46 +0000
Manifest this update: Sun 07 Sep 2025 10:02:46 +0000
Manifest next update: Mon 08 Sep 2025 10:02:46 +0000
Files and hashes: 1: Cze9FDKYbXtbnG6Thl5UOrr08Ps.crl (hash: HbaIZQYct44UL7FjujeJeHw42vOHhQhcjIJPlXcTuIc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/c4d084-1b68-4da2-98c6-455d52f900c0/1/Cze9FDKYbXtbnG6Thl5UOrr08Ps.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/c4d084-1b68-4da2-98c6-455d52f900c0/1/Cze9FDKYbXtbnG6Thl5UOrr08Ps.mft
rsync://rpki.ripe.net/repository/DEFAULT/Cze9FDKYbXtbnG6Thl5UOrr08Ps.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:a0:d3:dd:0b:a2:ec:18:a4:df:90:bf:b8:98:5e:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b37bd1432986d7b5b9c6e93865e543abaf4f0fb
Validity
Not Before: Sep 7 10:02:46 2025 GMT
Not After : Sep 8 10:02:46 2025 GMT
Subject: CN=6798227e6f0158b27ead8ea87b083beb26f2dced
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:4c:c6:0f:e1:bf:74:1e:b8:ae:e1:69:6d:0c:
e0:dc:87:cb:00:af:8f:12:b7:6a:8c:32:94:93:84:
e0:78:fa:19:fc:e7:b3:95:2e:8f:ba:9b:46:87:a6:
21:b3:1d:a1:30:e1:aa:cd:a4:d7:66:b1:66:51:0a:
47:83:dd:34:77:c9:aa:66:19:e7:e2:60:1c:31:07:
c7:75:f1:97:5e:5b:0f:3b:c0:00:74:38:8d:e2:5e:
34:32:78:01:6f:f0:11:f0:46:b8:89:cb:93:b0:86:
5f:ac:3c:f5:18:48:ad:c4:35:9d:ec:5e:b3:92:55:
22:3d:1e:4e:1c:32:de:38:e5:e0:ca:75:f6:c3:bb:
27:a3:ca:51:66:e4:70:74:de:cc:56:ac:df:4a:16:
a9:c8:7e:01:6f:b2:3c:e0:75:65:f7:10:df:2a:bf:
ba:cd:71:79:99:eb:64:b8:93:70:37:63:91:c3:70:
1a:9a:ea:5a:51:ea:36:96:f6:b6:b2:f2:18:16:39:
e4:3b:86:c7:66:3b:4b:91:7b:1e:cf:27:67:ba:7c:
a4:cc:e8:70:e5:bb:e2:b1:0b:ae:32:8d:ef:4e:af:
fc:18:00:a3:37:63:3a:03:bc:62:70:f2:fa:b2:39:
e8:9e:98:28:0a:24:a0:f7:f5:d2:eb:b5:24:b0:bc:
cd:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:98:22:7E:6F:01:58:B2:7E:AD:8E:A8:7B:08:3B:EB:26:F2:DC:ED
X509v3 Authority Key Identifier:
keyid:0B:37:BD:14:32:98:6D:7B:5B:9C:6E:93:86:5E:54:3A:BA:F4:F0:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cze9FDKYbXtbnG6Thl5UOrr08Ps.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/c4d084-1b68-4da2-98c6-455d52f900c0/1/Cze9FDKYbXtbnG6Thl5UOrr08Ps.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/c4d084-1b68-4da2-98c6-455d52f900c0/1/Cze9FDKYbXtbnG6Thl5UOrr08Ps.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cb:a5:8d:27:c4:5a:08:6c:c0:6b:fe:0d:23:48:67:e9:8c:0d:
83:c8:12:92:ac:fa:6b:4a:d7:df:0d:6d:c0:0e:2b:9b:9c:4c:
5f:1f:d0:a4:ed:1e:e1:98:78:3f:a5:26:d2:2e:45:fc:39:92:
fe:6a:62:b3:b3:b4:a8:94:1c:d1:5f:12:f9:d2:39:03:80:08:
42:9b:93:a9:09:8e:a7:c4:46:7e:cf:2b:0e:fd:e9:a6:e6:6e:
0e:59:84:6d:8a:f4:87:b1:fa:3b:3a:a4:11:4d:a9:11:0e:27:
97:cf:6e:b7:c7:4a:98:2e:6e:91:43:2f:ee:6e:c6:92:88:3c:
86:f5:0a:1a:a4:20:65:e9:f1:78:10:d1:3f:2d:b8:f1:49:df:
55:26:53:1f:57:5c:ca:df:b4:8e:e6:a6:27:05:2e:d0:9a:4d:
b1:3c:7d:f2:f4:d4:25:1e:06:07:35:c3:e5:73:e4:27:28:72:
13:23:3e:95:62:9c:4f:8d:cf:df:2a:14:21:bb:66:77:71:ac:
21:38:24:2e:69:9d:19:cd:67:cd:23:a5:3d:b9:06:d3:a1:48:
1f:ea:f8:18:3b:a1:ee:5c:b3:fb:22:10:04:99:d5:d4:4d:ea:
c7:1a:d9:75:4d:5c:53:f6:9c:46:88:4d:d0:44:41:20:e5:65:
28:69:9e:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:21:23 2025 by rpki-client