Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/95ea48-c3ed-4e47-bd12-6cdecd4db8b5/1/CPLrj7Auh-cYQzeyRa-Z4xM-9SQ.mft
File: CPLrj7Auh-cYQzeyRa-Z4xM-9SQ.mft (raw, json)
Hash identifier: jiojtA4YEK6rgQNWcvLmOSPKkQLwe92nMtSepKIaDUw=
Subject key identifier: EA:13:B3:3A:4A:A9:14:EC:C1:0C:65:60:44:78:52:AE:E1:37:93:87
Authority key identifier: 08:F2:EB:8F:B0:2E:87:E7:18:43:37:B2:45:AF:99:E3:13:3E:F5:24
Certificate issuer: /CN=08f2eb8fb02e87e7184337b245af99e3133ef524
Certificate serial: 0199228D2113E340CC462334D6FA9A6A23A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CPLrj7Auh-cYQzeyRa-Z4xM-9SQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/95ea48-c3ed-4e47-bd12-6cdecd4db8b5/1/CPLrj7Auh-cYQzeyRa-Z4xM-9SQ.mft
Manifest number: 166F
Signing time: Sun 07 Sep 2025 05:01:38 +0000
Manifest this update: Sun 07 Sep 2025 05:01:38 +0000
Manifest next update: Mon 08 Sep 2025 05:01:38 +0000
Files and hashes: 1: CPLrj7Auh-cYQzeyRa-Z4xM-9SQ.crl (hash: qMdHVTr+4FrnnZF57xRj6G9IkxNkFPiaaV7jh46VkpA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/95ea48-c3ed-4e47-bd12-6cdecd4db8b5/1/CPLrj7Auh-cYQzeyRa-Z4xM-9SQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/95ea48-c3ed-4e47-bd12-6cdecd4db8b5/1/CPLrj7Auh-cYQzeyRa-Z4xM-9SQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/CPLrj7Auh-cYQzeyRa-Z4xM-9SQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:01:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:8d:21:13:e3:40:cc:46:23:34:d6:fa:9a:6a:23:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08f2eb8fb02e87e7184337b245af99e3133ef524
Validity
Not Before: Sep 7 05:01:38 2025 GMT
Not After : Sep 8 05:01:38 2025 GMT
Subject: CN=ea13b33a4aa914ecc10c6560447852aee1379387
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:c0:8e:36:26:f4:bc:d2:cd:d6:b1:4e:de:63:
ac:a1:59:e0:9f:6c:56:34:44:68:01:67:bd:0f:69:
fa:3a:e0:e0:31:6a:5b:94:0f:33:8d:8e:a5:4d:09:
9b:22:a1:3e:0b:61:e1:bb:71:eb:7f:5c:a9:7c:ba:
a1:ca:00:c4:83:04:f3:34:ad:83:33:ba:22:31:a3:
5d:ad:f7:23:a9:eb:3b:37:88:9c:b1:eb:18:71:1b:
34:cd:9e:27:6e:b4:a3:e7:b9:92:a0:9f:64:97:53:
bf:61:06:17:7c:fa:aa:2e:7f:37:2d:87:51:5f:7d:
d3:45:02:f7:f3:d6:30:b0:32:c0:74:d2:3a:bc:63:
23:07:7b:3d:c1:32:f8:6b:8a:e7:83:fd:34:98:24:
32:86:06:f2:3f:cc:c4:4e:2f:44:b2:39:95:24:fe:
bf:e0:3c:02:2f:b3:56:1c:96:27:66:8b:25:2a:5d:
f0:3c:77:b9:1e:2c:69:88:8c:4f:ba:0c:9a:71:91:
4b:e2:a0:29:c2:cd:5a:56:49:51:32:5a:07:ad:8e:
9c:52:fa:ee:ab:c2:b8:66:22:bc:99:0d:39:44:cf:
2d:d5:ea:57:f9:60:03:84:bb:aa:b6:d7:75:1b:48:
b0:82:2d:01:ed:4b:42:a8:af:86:26:9b:81:3b:79:
b5:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:13:B3:3A:4A:A9:14:EC:C1:0C:65:60:44:78:52:AE:E1:37:93:87
X509v3 Authority Key Identifier:
keyid:08:F2:EB:8F:B0:2E:87:E7:18:43:37:B2:45:AF:99:E3:13:3E:F5:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CPLrj7Auh-cYQzeyRa-Z4xM-9SQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/95ea48-c3ed-4e47-bd12-6cdecd4db8b5/1/CPLrj7Auh-cYQzeyRa-Z4xM-9SQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/95ea48-c3ed-4e47-bd12-6cdecd4db8b5/1/CPLrj7Auh-cYQzeyRa-Z4xM-9SQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:26:1a:07:f7:22:75:41:5d:bc:42:e8:26:f2:c8:62:ed:54:
9b:d1:19:b5:89:fc:ca:c9:08:0f:4e:8b:14:1b:45:0f:e4:0a:
10:60:07:f0:b1:26:71:ff:61:01:01:9d:27:e9:bb:91:04:cf:
c9:81:22:f1:43:6f:bb:18:e4:5b:26:9c:9f:9a:97:01:09:87:
fb:0d:3f:fa:c6:db:4c:55:5b:9a:10:23:a9:a7:90:ae:34:fc:
82:22:4d:2d:0f:a7:44:09:43:a3:ed:01:54:fe:0b:b5:f7:23:
6a:bc:6a:c4:a6:35:50:b8:54:b3:a8:03:a3:ed:d6:df:c6:9e:
3b:9a:2b:33:67:84:84:16:89:73:da:24:d5:10:39:f8:36:fb:
ad:79:0f:20:0e:4b:d3:46:16:c3:4f:1b:e1:88:a8:8b:01:46:
4c:18:35:dd:96:4a:23:56:f7:91:4b:36:da:92:d6:4a:e4:87:
f3:14:85:5c:c2:50:d9:34:94:f9:11:95:d7:1d:11:83:f4:92:
2b:82:a7:33:23:df:cc:5b:3d:32:bb:60:f7:10:1b:97:e1:58:
97:55:8e:a9:9a:7a:92:ff:27:e6:1d:e3:69:69:45:f0:71:83:
e0:3f:05:5e:f2:be:de:1c:f5:41:da:77:59:60:7e:26:39:81:
df:fa:5e:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 13:46:42 2025 by rpki-client