Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/7ff4a3-d191-4c6b-835a-b8050622aa96/1/RlTz5pJ-xMfJfQ8jaowkU0p_zdQ.mft
File: RlTz5pJ-xMfJfQ8jaowkU0p_zdQ.mft (raw, json)
Hash identifier: 7m1BrLCqdT3WY87iVQgLCmQO9iK03HlH9cA5boAW6uw=
Subject key identifier: 39:E7:6C:1B:FE:91:0F:CF:5A:A9:D5:D3:B2:E7:25:50:21:56:93:05
Authority key identifier: 46:54:F3:E6:92:7E:C4:C7:C9:7D:0F:23:6A:8C:24:53:4A:7F:CD:D4
Certificate issuer: /CN=4654f3e6927ec4c7c97d0f236a8c24534a7fcdd4
Certificate serial: 019897810090570B70D6AE868FD1A85E6ADE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RlTz5pJ-xMfJfQ8jaowkU0p_zdQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/7ff4a3-d191-4c6b-835a-b8050622aa96/1/RlTz5pJ-xMfJfQ8jaowkU0p_zdQ.mft
Manifest number: 0770
Signing time: Mon 11 Aug 2025 05:01:10 +0000
Manifest this update: Mon 11 Aug 2025 05:01:10 +0000
Manifest next update: Tue 12 Aug 2025 05:01:10 +0000
Files and hashes: 1: RlTz5pJ-xMfJfQ8jaowkU0p_zdQ.crl (hash: Z4OO4GhPHVByGeXoJBLqKldvVhhM6yzQd0lmaV2Cqhc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/7ff4a3-d191-4c6b-835a-b8050622aa96/1/RlTz5pJ-xMfJfQ8jaowkU0p_zdQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/7ff4a3-d191-4c6b-835a-b8050622aa96/1/RlTz5pJ-xMfJfQ8jaowkU0p_zdQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/RlTz5pJ-xMfJfQ8jaowkU0p_zdQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 12 Aug 2025 02:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:97:81:00:90:57:0b:70:d6:ae:86:8f:d1:a8:5e:6a:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4654f3e6927ec4c7c97d0f236a8c24534a7fcdd4
Validity
Not Before: Aug 11 05:01:10 2025 GMT
Not After : Aug 12 05:01:10 2025 GMT
Subject: CN=39e76c1bfe910fcf5aa9d5d3b2e7255021569305
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:ce:5e:ef:d7:9f:6d:d9:87:69:77:53:4a:03:
25:56:9c:a0:92:e3:02:b7:fb:92:6f:87:3b:5d:34:
4e:40:52:d1:37:0f:16:61:7a:53:ad:e7:0e:dd:ac:
17:26:42:c1:3e:07:b1:48:11:17:cf:93:af:76:98:
b7:1e:28:16:65:d3:a5:07:64:d6:9a:3d:04:bb:c9:
b6:ad:cf:60:ae:3b:d1:a0:d3:99:c9:e0:ba:88:20:
e8:53:24:f6:fe:e6:e1:00:73:84:5f:f4:63:a0:50:
a2:4c:ce:e1:2e:b6:b3:8e:04:b4:cd:60:3e:54:99:
b8:4b:a7:46:e4:f3:7d:5e:9d:8d:ed:3b:b6:00:91:
b2:02:7d:b2:97:9a:6c:18:ed:d7:6e:31:83:19:4d:
cd:da:2e:55:84:9c:92:e3:e5:e3:1c:8a:3e:ec:47:
10:6d:0e:d7:43:eb:09:ba:ac:6a:f5:c3:d7:48:38:
3d:26:bd:ec:c9:fe:a5:21:96:ad:7f:ba:72:df:b5:
02:a8:3f:ea:90:fd:45:25:02:70:b0:04:e5:a2:ea:
06:f6:9c:7c:da:df:9d:c1:63:43:53:a9:89:bc:a3:
81:a1:4e:84:a7:dc:5a:ff:fb:36:17:6a:96:64:c6:
73:74:94:aa:a0:b0:f5:fa:e5:8a:3b:d4:2a:09:3d:
1d:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:E7:6C:1B:FE:91:0F:CF:5A:A9:D5:D3:B2:E7:25:50:21:56:93:05
X509v3 Authority Key Identifier:
keyid:46:54:F3:E6:92:7E:C4:C7:C9:7D:0F:23:6A:8C:24:53:4A:7F:CD:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RlTz5pJ-xMfJfQ8jaowkU0p_zdQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/7ff4a3-d191-4c6b-835a-b8050622aa96/1/RlTz5pJ-xMfJfQ8jaowkU0p_zdQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/7ff4a3-d191-4c6b-835a-b8050622aa96/1/RlTz5pJ-xMfJfQ8jaowkU0p_zdQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:4a:f9:4b:a3:49:c8:d5:6a:d3:a1:01:81:27:c0:7b:ad:04:
4d:a6:f4:a0:75:1c:8c:6e:a8:3b:63:dd:4e:a6:e0:c2:36:d9:
8b:d0:3d:e8:3e:b8:a5:7a:f4:f2:3d:c3:6d:74:e8:56:b7:20:
88:6f:8d:30:53:7b:ad:52:a5:22:cc:0b:bd:21:58:96:61:4c:
1c:17:80:71:ac:e9:41:94:10:6e:5f:aa:7c:b8:7a:51:3a:a8:
f0:aa:3f:e4:ee:0c:ba:c8:4a:ab:b1:50:10:7b:1e:0b:57:91:
fc:cb:93:de:e6:f5:db:99:de:b3:f2:e3:4b:87:7f:97:32:ee:
d8:c7:2e:34:91:f2:9f:f6:91:bf:c5:8c:87:11:42:51:f6:44:
1a:72:73:d5:5c:6d:f5:a6:59:95:8c:a5:aa:07:7c:a6:35:26:
42:49:30:08:b3:b1:a1:ac:6d:1f:c2:51:c4:b0:77:ad:88:65:
5a:76:22:cb:69:83:c7:32:9e:ab:2f:9a:1d:9d:a7:79:e5:28:
07:f3:28:c9:98:58:16:0d:72:e3:07:42:91:8e:30:f4:d8:5a:
02:9c:d8:05:e9:fe:3a:4e:92:4b:78:80:06:de:79:5c:3a:7a:
5b:2a:db:46:bb:7b:a9:7f:34:15:45:f1:b0:cf:4c:b3:0e:1c:
95:8b:71:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 07:28:40 2025 by rpki-client