Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/be2083-ea7b-4454-873e-965fac977721/1/CLoC9plc7Oap_TR1vQsc8N2Fgm4.mft
File: CLoC9plc7Oap_TR1vQsc8N2Fgm4.mft (raw, json)
Hash identifier: MRLNxrvkJwVWVTwPHcyJKYQlbcu/Do5nuXJknC+QXTE=
Subject key identifier: DD:45:EF:E0:BF:9C:20:CC:45:19:54:1B:59:E8:D1:F4:05:5B:C9:5B
Authority key identifier: 08:BA:02:F6:99:5C:EC:E6:A9:FD:34:75:BD:0B:1C:F0:DD:85:82:6E
Certificate issuer: /CN=08ba02f6995cece6a9fd3475bd0b1cf0dd85826e
Certificate serial: 01991E7908DD36EBEDCCC717797BB08787B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CLoC9plc7Oap_TR1vQsc8N2Fgm4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/be2083-ea7b-4454-873e-965fac977721/1/CLoC9plc7Oap_TR1vQsc8N2Fgm4.mft
Manifest number: 1673
Signing time: Sat 06 Sep 2025 10:01:12 +0000
Manifest this update: Sat 06 Sep 2025 10:01:12 +0000
Manifest next update: Sun 07 Sep 2025 10:01:12 +0000
Files and hashes: 1: CLoC9plc7Oap_TR1vQsc8N2Fgm4.crl (hash: 1qECWrryLFA3oZG09XcEFY4q+hkojXQ2NHObaVwkOGw=)
2: xXBeI29eya94rPehpseNSugXOrU.roa (hash: xdHRa/hprzQEAOlWU9drCOQodom24Wp/yVhCxd9qLIo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/be2083-ea7b-4454-873e-965fac977721/1/CLoC9plc7Oap_TR1vQsc8N2Fgm4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/be2083-ea7b-4454-873e-965fac977721/1/CLoC9plc7Oap_TR1vQsc8N2Fgm4.mft
rsync://rpki.ripe.net/repository/DEFAULT/CLoC9plc7Oap_TR1vQsc8N2Fgm4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Sep 2025 02:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:1e:79:08:dd:36:eb:ed:cc:c7:17:79:7b:b0:87:87:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08ba02f6995cece6a9fd3475bd0b1cf0dd85826e
Validity
Not Before: Sep 6 10:01:12 2025 GMT
Not After : Sep 7 10:01:12 2025 GMT
Subject: CN=dd45efe0bf9c20cc4519541b59e8d1f4055bc95b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:2a:f8:27:55:9e:f0:f1:8e:34:5b:54:47:c6:
16:73:f7:c8:4d:f9:7c:f2:a7:37:dd:3f:e9:5b:94:
85:d0:1f:a6:0a:32:d1:8e:9c:3f:7e:be:e3:6c:34:
79:7d:56:9e:62:68:ec:08:00:51:9b:6a:4e:eb:9c:
cd:d3:d6:2a:5e:33:52:c0:7f:28:a6:9a:c8:cb:a4:
64:19:d8:5d:5d:43:5d:39:ab:3c:b6:98:f6:96:43:
28:03:88:8e:5a:7b:a8:83:8c:78:44:56:0e:57:f4:
ba:3d:49:7f:91:c6:74:96:24:eb:cf:1e:83:3f:c3:
48:5f:3f:7c:49:34:26:63:35:9d:76:1a:12:5c:7f:
1e:b4:0b:c2:af:ea:28:e3:d9:47:af:77:80:9c:5b:
8e:3d:f0:43:93:3a:db:dd:5a:fe:8d:bb:78:ba:77:
8e:a6:1e:55:79:79:d4:63:5f:5f:d5:3a:53:07:aa:
eb:f5:fb:d0:0b:36:80:69:5d:10:44:86:2c:3c:b6:
74:e1:c1:d9:da:75:59:ff:e3:2c:24:5b:2f:1d:63:
2d:8b:32:4e:73:47:32:4c:5e:4d:fb:f5:e7:9a:2c:
0c:20:9e:ae:00:c6:3d:fd:2f:75:44:a9:16:db:d8:
eb:91:a9:ad:e0:c8:37:6e:22:02:da:34:c5:61:bb:
40:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:45:EF:E0:BF:9C:20:CC:45:19:54:1B:59:E8:D1:F4:05:5B:C9:5B
X509v3 Authority Key Identifier:
keyid:08:BA:02:F6:99:5C:EC:E6:A9:FD:34:75:BD:0B:1C:F0:DD:85:82:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CLoC9plc7Oap_TR1vQsc8N2Fgm4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/be2083-ea7b-4454-873e-965fac977721/1/CLoC9plc7Oap_TR1vQsc8N2Fgm4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/be2083-ea7b-4454-873e-965fac977721/1/CLoC9plc7Oap_TR1vQsc8N2Fgm4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:8a:b3:1a:7f:a6:3d:ce:03:6f:39:0a:d8:8d:10:b3:34:92:
fe:81:2e:da:ea:08:3f:1c:5b:f6:ce:e4:23:10:39:01:ba:f4:
48:1c:5b:31:ed:f5:97:c2:26:e4:c3:40:83:18:96:56:97:52:
ce:d2:c9:0b:ac:b0:04:be:9d:91:dd:d0:17:80:8c:ef:d9:23:
d3:b7:ff:f8:19:3f:40:b8:23:dc:71:66:18:89:6a:5c:36:f7:
61:0c:24:90:d9:69:b4:3c:d3:5a:a0:91:03:bc:db:ba:f0:98:
9c:2c:d5:75:3e:d7:3d:78:77:c7:e0:60:93:f0:fa:d2:6d:5f:
59:97:cd:19:c2:9a:64:a0:59:95:e3:5e:3c:35:d7:96:f0:a0:
85:bd:d4:2a:d3:30:38:2a:51:a1:7e:a0:41:15:74:3f:a1:95:
76:e2:a2:9c:1f:98:8e:46:20:7b:59:30:70:f6:b2:42:c0:5b:
51:18:12:82:96:1a:0e:1b:ce:f0:e6:0f:ba:1e:7e:5a:2e:85:
14:36:ae:c6:ee:82:fa:36:7f:e3:0b:16:6b:02:66:ef:4b:23:
db:eb:ff:7d:32:b6:f4:ab:33:ea:f8:44:65:0c:b5:ad:06:fa:
73:57:0b:93:3c:00:50:3b:32:19:81:72:72:79:0c:b4:ac:02:
a0:5e:f3:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 6 11:45:55 2025 by rpki-client