Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/e7277e-f8db-4e32-bddd-9815249aadef/1/MtYmm4lSBJZffsl_Gdi12ckwt40.mft
File: MtYmm4lSBJZffsl_Gdi12ckwt40.mft (raw, json)
Hash identifier: CNx+QBHOckmLAGRAQaN8Zhqclfkt/a2S6WbDNgsIEyg=
Subject key identifier: D1:C0:84:72:6E:2C:B0:13:D0:4B:E6:B6:B2:60:CF:6F:60:05:3E:F6
Authority key identifier: 32:D6:26:9B:89:52:04:96:5F:7E:C9:7F:19:D8:B5:D9:C9:30:B7:8D
Certificate issuer: /CN=32d6269b895204965f7ec97f19d8b5d9c930b78d
Certificate serial: 019875D2490A82B4CB6E0FCB9DAAC28B9727
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MtYmm4lSBJZffsl_Gdi12ckwt40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/e7277e-f8db-4e32-bddd-9815249aadef/1/MtYmm4lSBJZffsl_Gdi12ckwt40.mft
Manifest number: CC
Signing time: Mon 04 Aug 2025 16:02:52 +0000
Manifest this update: Mon 04 Aug 2025 16:02:52 +0000
Manifest next update: Tue 05 Aug 2025 16:02:52 +0000
Files and hashes: 1: MtYmm4lSBJZffsl_Gdi12ckwt40.crl (hash: MKI483TpnaTLx5yFIx0yQEFz6VQmexvzLXrwgp5jMeo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/e7277e-f8db-4e32-bddd-9815249aadef/1/MtYmm4lSBJZffsl_Gdi12ckwt40.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/e7277e-f8db-4e32-bddd-9815249aadef/1/MtYmm4lSBJZffsl_Gdi12ckwt40.mft
rsync://rpki.ripe.net/repository/DEFAULT/MtYmm4lSBJZffsl_Gdi12ckwt40.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 12:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:75:d2:49:0a:82:b4:cb:6e:0f:cb:9d:aa:c2:8b:97:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32d6269b895204965f7ec97f19d8b5d9c930b78d
Validity
Not Before: Aug 4 16:02:52 2025 GMT
Not After : Aug 5 16:02:52 2025 GMT
Subject: CN=d1c084726e2cb013d04be6b6b260cf6f60053ef6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:07:31:84:b0:40:70:38:58:9c:cd:4e:45:51:
75:0a:04:4c:83:4e:c9:0e:e7:68:e9:9e:3a:05:1b:
3f:03:a9:69:35:03:73:2a:48:6a:71:85:f4:20:5b:
31:0c:2f:97:4d:4a:c6:df:1e:c6:0e:91:3d:ac:26:
1d:2e:8e:56:93:5e:55:34:dd:c0:87:34:de:39:2c:
0c:82:08:00:bb:42:b5:d8:1e:a6:36:5c:8c:fa:11:
b4:0a:44:b1:26:d3:90:59:69:dc:fb:04:e8:2c:97:
95:0e:e3:a9:37:f2:d9:5c:d3:c0:2f:98:7a:e4:0c:
ca:9c:1b:48:33:be:da:5b:69:60:dc:c8:99:f1:6e:
38:98:83:82:66:3f:2f:5e:62:8e:29:d6:a7:73:20:
47:a8:e0:71:53:ca:28:24:af:09:a6:b4:4b:7c:a2:
12:9f:d9:59:7a:5b:fa:5e:30:61:c8:09:a8:44:95:
cb:1c:29:ea:c1:a2:52:39:be:4e:4e:a3:3a:b5:a0:
44:45:17:d7:8b:94:25:99:f5:5e:41:c3:29:e4:07:
b2:b1:4a:52:44:16:28:4c:d0:7f:61:af:e6:b3:53:
6e:d9:2c:08:87:a4:97:78:4c:71:3d:f1:b1:00:f8:
d0:1f:85:19:5d:d2:51:cb:99:9b:e4:82:64:d4:80:
ff:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:C0:84:72:6E:2C:B0:13:D0:4B:E6:B6:B2:60:CF:6F:60:05:3E:F6
X509v3 Authority Key Identifier:
keyid:32:D6:26:9B:89:52:04:96:5F:7E:C9:7F:19:D8:B5:D9:C9:30:B7:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MtYmm4lSBJZffsl_Gdi12ckwt40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/e7277e-f8db-4e32-bddd-9815249aadef/1/MtYmm4lSBJZffsl_Gdi12ckwt40.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/e7277e-f8db-4e32-bddd-9815249aadef/1/MtYmm4lSBJZffsl_Gdi12ckwt40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c1:a2:2b:76:d3:4c:7d:80:e6:86:db:da:d3:a3:31:27:36:17:
5b:39:8b:a5:12:2b:c8:77:b8:43:1d:c8:7a:6b:67:2f:c2:da:
95:3d:c1:e9:02:f8:f9:aa:54:db:c1:10:d2:d7:11:74:6a:15:
05:8f:db:db:e2:bf:31:f1:80:dd:c3:63:24:ec:89:87:10:0a:
f4:c9:a1:6d:ae:37:97:43:55:29:ea:1a:5a:92:c2:ef:d5:b4:
fa:b8:ee:58:e8:7c:92:b9:b3:00:2c:fc:3c:88:44:1d:3a:62:
4e:0b:04:62:44:17:31:3a:db:d0:f0:6e:87:4f:1e:ea:94:f4:
9f:89:ee:a5:c8:6d:36:3e:1b:57:f8:ff:86:06:7d:99:1a:df:
2d:d1:b8:19:36:83:2d:57:8a:c0:b2:d3:9a:40:07:ba:cd:2c:
15:26:4d:1d:08:aa:41:1b:df:c8:62:b1:94:6d:3c:3a:65:eb:
dd:a8:df:b1:b4:b0:ef:53:8f:33:7c:2c:7f:6d:c1:5b:8d:51:
2e:cb:a3:33:2d:ab:35:7f:da:e3:4b:1e:72:05:a8:1d:f9:46:
bf:78:a0:2c:57:f9:01:4d:bb:d0:d6:3c:2f:3a:fe:45:db:0d:
32:b7:dd:07:dc:7a:05:fa:15:1c:f7:3d:dc:6a:49:db:fd:b6:
1f:b5:99:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 18:14:58 2025 by rpki-client