Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/2135e3-593f-4cdb-af55-c6f4ee872364/1/cVYaucXzkpItp8rhgMMwc2XwI4Y.mft
File: cVYaucXzkpItp8rhgMMwc2XwI4Y.mft (raw, json)
Hash identifier: x9ydFVXopwsziH1gp3bjPpSqzMJrYOWomctaxG5+E0M=
Subject key identifier: 0E:D7:0A:C4:4C:DD:7F:FC:30:38:1C:95:61:F3:29:D0:F7:29:AD:8E
Authority key identifier: 71:56:1A:B9:C5:F3:92:92:2D:A7:CA:E1:80:C3:30:73:65:F0:23:86
Certificate issuer: /CN=71561ab9c5f392922da7cae180c3307365f02386
Certificate serial: 019923A038E2066015EE9E8A720A3185FA1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cVYaucXzkpItp8rhgMMwc2XwI4Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/2135e3-593f-4cdb-af55-c6f4ee872364/1/cVYaucXzkpItp8rhgMMwc2XwI4Y.mft
Manifest number: 0FA3
Signing time: Sun 07 Sep 2025 10:02:06 +0000
Manifest this update: Sun 07 Sep 2025 10:02:06 +0000
Manifest next update: Mon 08 Sep 2025 10:02:06 +0000
Files and hashes: 1: cVYaucXzkpItp8rhgMMwc2XwI4Y.crl (hash: 5fg2+zr49gOYZx2iJcYvH2uw/XlHBI4c/IXjeRZL/xU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/2135e3-593f-4cdb-af55-c6f4ee872364/1/cVYaucXzkpItp8rhgMMwc2XwI4Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/2135e3-593f-4cdb-af55-c6f4ee872364/1/cVYaucXzkpItp8rhgMMwc2XwI4Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/cVYaucXzkpItp8rhgMMwc2XwI4Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:a0:38:e2:06:60:15:ee:9e:8a:72:0a:31:85:fa:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71561ab9c5f392922da7cae180c3307365f02386
Validity
Not Before: Sep 7 10:02:06 2025 GMT
Not After : Sep 8 10:02:06 2025 GMT
Subject: CN=0ed70ac44cdd7ffc30381c9561f329d0f729ad8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:36:5d:38:d0:79:32:37:4a:f9:0d:75:24:d0:
e7:7f:cb:64:52:69:11:41:73:9e:38:1f:0d:d6:47:
c5:db:a1:0b:48:47:31:4c:36:b5:e8:fa:2f:0c:66:
5b:1c:c7:3b:c0:0d:32:6c:b0:48:a7:77:a1:97:b9:
de:66:a1:35:b7:e0:3d:99:e9:ee:9e:f2:30:ca:da:
10:97:d0:f6:c6:ae:ac:d9:12:df:88:f1:c0:b0:1e:
0f:ba:4e:b6:c6:62:23:00:0f:cc:26:71:bd:02:af:
fb:f8:a8:1e:70:5a:b6:44:e8:58:28:e6:06:cf:dd:
63:22:f0:c5:92:50:f3:f1:8b:83:e9:86:2c:12:18:
d0:d4:e9:c7:9d:0a:d0:52:e4:23:fa:eb:00:79:86:
41:57:49:13:df:5b:9a:81:29:e1:32:97:cf:ba:f0:
6d:86:17:6c:34:e9:95:17:e5:3a:c2:1e:c2:50:0c:
81:67:9e:f8:ad:36:7d:80:ae:7a:2e:8b:97:08:9f:
d9:72:c5:d1:61:82:59:e8:97:47:00:db:1e:69:0a:
62:0d:30:58:e2:94:d8:f7:2c:7b:76:99:fe:a7:6c:
89:5e:cb:b3:bb:d9:c3:81:66:18:04:da:3d:b6:70:
67:39:52:15:0f:68:a5:4a:b6:ad:cf:87:9f:d2:f0:
58:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:D7:0A:C4:4C:DD:7F:FC:30:38:1C:95:61:F3:29:D0:F7:29:AD:8E
X509v3 Authority Key Identifier:
keyid:71:56:1A:B9:C5:F3:92:92:2D:A7:CA:E1:80:C3:30:73:65:F0:23:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cVYaucXzkpItp8rhgMMwc2XwI4Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/2135e3-593f-4cdb-af55-c6f4ee872364/1/cVYaucXzkpItp8rhgMMwc2XwI4Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/2135e3-593f-4cdb-af55-c6f4ee872364/1/cVYaucXzkpItp8rhgMMwc2XwI4Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:fd:c3:b4:1c:a3:4f:24:4d:a6:3f:b9:92:a2:99:34:7c:74:
cc:cb:bf:00:a9:dc:0c:aa:c2:25:7a:2a:fb:6e:69:cf:80:30:
96:93:3b:de:79:26:5d:92:2e:0a:63:3f:ea:c5:f1:a1:3f:e1:
b3:95:f7:35:16:76:a3:43:0c:6e:fe:ff:6c:ab:9f:bd:3c:28:
b2:7a:a6:c5:7b:e7:d1:3c:c4:b2:a0:41:f7:81:81:1d:0b:c2:
e6:f7:f9:46:e8:d5:00:34:93:df:0b:8e:67:c9:87:83:d6:40:
47:58:08:76:ba:a7:7c:af:05:9c:56:0c:eb:c4:f5:b7:17:7c:
d2:b2:8d:45:41:d7:03:9d:db:ca:80:43:8f:18:d5:59:31:36:
1c:23:45:8b:f4:30:75:75:26:96:ba:b8:7f:fb:a3:15:cd:7d:
3f:9a:a0:ae:97:78:47:94:59:92:2f:93:64:2b:b6:70:6a:ac:
9b:ab:c4:b9:0c:40:e0:1e:c8:5d:6b:4f:11:af:5d:11:fd:12:
9f:93:1d:6c:d5:a2:c9:4f:f9:fe:f8:d1:ac:0a:0d:ee:8a:1e:
ad:e2:29:53:19:c3:ce:c3:62:6d:03:9d:6e:22:06:27:a5:14:
10:ee:b4:13:74:31:ae:78:3e:c1:f8:d9:39:56:9a:aa:55:3e:
9a:60:f9:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:20:39 2025 by rpki-client