Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/ca46fb-3734-4a92-87cb-65f12b2e7970/1/cT5FABqFXik4GRnXmdzLbBGQtaw.mft
File: cT5FABqFXik4GRnXmdzLbBGQtaw.mft (raw, json)
Hash identifier: DYl4oqpJ/PtPhCxcZtIF9F5AvRkmnUfB/dQsf3UOivE=
Subject key identifier: CA:0C:DF:3B:BE:E1:5E:1E:B5:CD:34:44:8C:0B:96:7B:1A:77:C0:38
Authority key identifier: 71:3E:45:00:1A:85:5E:29:38:19:19:D7:99:DC:CB:6C:11:90:B5:AC
Certificate issuer: /CN=713e45001a855e29381919d799dccb6c1190b5ac
Certificate serial: 019873E223FADB3448C13C96924866B725D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cT5FABqFXik4GRnXmdzLbBGQtaw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/ca46fb-3734-4a92-87cb-65f12b2e7970/1/cT5FABqFXik4GRnXmdzLbBGQtaw.mft
Manifest number: 0949
Signing time: Mon 04 Aug 2025 07:00:56 +0000
Manifest this update: Mon 04 Aug 2025 07:00:56 +0000
Manifest next update: Tue 05 Aug 2025 07:00:56 +0000
Files and hashes: 1: cT5FABqFXik4GRnXmdzLbBGQtaw.crl (hash: uMQBm9Snb9NrGEVcgoPGzm2ezdV5ijgxyA8M4kLN91U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/ca46fb-3734-4a92-87cb-65f12b2e7970/1/cT5FABqFXik4GRnXmdzLbBGQtaw.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/ca46fb-3734-4a92-87cb-65f12b2e7970/1/cT5FABqFXik4GRnXmdzLbBGQtaw.mft
rsync://rpki.ripe.net/repository/DEFAULT/cT5FABqFXik4GRnXmdzLbBGQtaw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e2:23:fa:db:34:48:c1:3c:96:92:48:66:b7:25:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=713e45001a855e29381919d799dccb6c1190b5ac
Validity
Not Before: Aug 4 07:00:56 2025 GMT
Not After : Aug 5 07:00:56 2025 GMT
Subject: CN=ca0cdf3bbee15e1eb5cd34448c0b967b1a77c038
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:ff:cb:7e:77:2e:30:43:17:45:dc:d2:03:19:
32:91:d5:5b:16:6b:54:d5:c2:e4:3d:b0:9e:8f:7b:
b7:0a:b2:a8:eb:78:ec:1a:66:48:df:43:1f:95:c0:
b4:b4:3c:88:6e:5a:85:40:a7:3d:c8:0f:2a:29:bf:
1f:5e:b6:42:a1:f5:f6:33:7f:c9:55:c6:f5:05:cb:
6f:1d:38:ef:7c:11:4a:65:36:4c:2e:aa:bb:04:e2:
6a:69:36:fb:9f:66:c9:7a:06:9c:a9:eb:b1:91:41:
82:d4:43:ea:47:b4:52:0e:96:fb:38:28:ac:c0:b0:
a5:ff:74:eb:92:db:f0:78:13:82:ff:4f:b3:16:5a:
7f:cb:2a:58:aa:a2:bb:24:99:8b:09:c5:9f:d0:79:
27:c4:1d:5a:a2:93:87:a2:bb:f8:bc:ee:c8:c9:6f:
ef:a9:27:df:22:d9:30:c3:34:74:38:58:ee:5c:00:
b1:8a:60:62:37:19:98:f3:ea:8b:88:44:11:2c:c2:
00:ff:44:2c:b4:55:3f:f9:ca:91:d5:f6:8c:9b:8f:
7b:fc:fb:87:96:1a:1f:fc:bd:07:79:cb:e7:12:38:
b0:b3:89:7b:78:c4:1f:82:86:a8:6d:27:39:a3:e7:
7a:74:70:47:19:cd:67:dc:28:a7:a0:ae:0e:b3:e9:
0c:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:0C:DF:3B:BE:E1:5E:1E:B5:CD:34:44:8C:0B:96:7B:1A:77:C0:38
X509v3 Authority Key Identifier:
keyid:71:3E:45:00:1A:85:5E:29:38:19:19:D7:99:DC:CB:6C:11:90:B5:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cT5FABqFXik4GRnXmdzLbBGQtaw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/ca46fb-3734-4a92-87cb-65f12b2e7970/1/cT5FABqFXik4GRnXmdzLbBGQtaw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/ca46fb-3734-4a92-87cb-65f12b2e7970/1/cT5FABqFXik4GRnXmdzLbBGQtaw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:d2:f0:59:19:3c:b8:22:ff:9e:8a:44:b3:7f:b3:e8:47:a2:
76:0d:19:ef:5e:38:6d:74:f1:40:b2:55:2e:f6:11:7d:00:4b:
e2:82:05:4a:28:0a:ab:b0:22:9b:b3:84:7a:8d:97:dd:7d:98:
7d:c5:7e:19:57:9e:1f:ae:2a:02:60:53:93:6f:f3:f6:07:1a:
9e:f6:6e:0b:50:8c:83:60:3d:9c:28:88:fa:ac:48:35:c4:7b:
52:17:cd:0f:1b:be:c5:a7:13:ee:2a:2e:4b:1a:9b:c7:57:bd:
fd:2a:f8:33:94:fb:bf:a0:de:6f:a4:8d:02:a3:5c:61:19:4e:
02:03:b0:05:79:2d:72:ea:22:7f:d7:53:fa:d7:f4:be:36:9f:
96:c4:c8:bc:5d:62:da:1c:c7:99:62:9c:a8:5a:3f:5e:a8:8c:
87:87:cb:32:ec:5c:b4:00:a5:7f:af:8a:92:da:a5:9b:13:bb:
03:91:2d:1e:63:be:fd:af:c0:dd:04:cd:f5:3e:a1:5e:f0:84:
f0:27:1b:22:97:a4:7d:ba:c0:be:21:d5:1e:c2:8e:2e:05:49:
d0:da:22:8f:48:26:05:87:f9:ee:10:c9:cc:4d:a1:22:28:de:
33:f3:8c:74:48:41:09:a9:53:5b:59:1e:9e:e8:0c:cd:27:31:
21:68:40:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:16:34 2025 by rpki-client