Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/23e440-865e-4f4f-9fc9-108d5b148f0c/1/c4i9uc1_a6So9hjFpCp2quiSWc8.mft
File: c4i9uc1_a6So9hjFpCp2quiSWc8.mft (raw, json)
Hash identifier: JZzCVj8KnGG76JtQIuwjtzktXYc8JJ3QsdAeYNSnojw=
Subject key identifier: 7F:70:2C:1C:9D:D1:82:7B:1B:8F:0A:96:46:71:B5:14:1C:CE:89:BD
Authority key identifier: 73:88:BD:B9:CD:7F:6B:A4:A8:F6:18:C5:A4:2A:76:AA:E8:92:59:CF
Certificate issuer: /CN=7388bdb9cd7f6ba4a8f618c5a42a76aae89259cf
Certificate serial: 019896A5D2255E8661CF609BF19A54802F62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c4i9uc1_a6So9hjFpCp2quiSWc8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/23e440-865e-4f4f-9fc9-108d5b148f0c/1/c4i9uc1_a6So9hjFpCp2quiSWc8.mft
Manifest number: 1625
Signing time: Mon 11 Aug 2025 01:01:46 +0000
Manifest this update: Mon 11 Aug 2025 01:01:46 +0000
Manifest next update: Tue 12 Aug 2025 01:01:46 +0000
Files and hashes: 1: c4i9uc1_a6So9hjFpCp2quiSWc8.crl (hash: OhCeI1Ja9X40ji3kXeWg6KfHIzxXCufGAgGTt/lHK0o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/23e440-865e-4f4f-9fc9-108d5b148f0c/1/c4i9uc1_a6So9hjFpCp2quiSWc8.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/23e440-865e-4f4f-9fc9-108d5b148f0c/1/c4i9uc1_a6So9hjFpCp2quiSWc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/c4i9uc1_a6So9hjFpCp2quiSWc8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 12 Aug 2025 01:01:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:96:a5:d2:25:5e:86:61:cf:60:9b:f1:9a:54:80:2f:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7388bdb9cd7f6ba4a8f618c5a42a76aae89259cf
Validity
Not Before: Aug 11 01:01:46 2025 GMT
Not After : Aug 12 01:01:46 2025 GMT
Subject: CN=7f702c1c9dd1827b1b8f0a964671b5141cce89bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:31:68:91:6b:18:7c:4c:fb:8a:39:96:ad:b9:
ac:1b:bb:ed:3b:81:38:7c:cd:2e:29:bb:37:ab:b7:
9e:82:63:04:52:a3:f0:36:95:7c:89:ef:4b:fb:06:
f7:db:7e:e1:53:8a:26:83:c5:40:c5:c8:ff:9e:91:
8b:14:06:85:57:02:a9:81:5e:b7:a2:f9:30:1a:84:
74:18:1d:88:5b:2d:30:f4:49:de:ac:5a:4c:8b:2c:
aa:c0:f5:ab:1a:7a:d1:ab:2b:88:13:55:97:97:ee:
05:b5:04:dd:1e:83:80:a2:f0:2f:b9:89:ea:00:11:
db:0d:b1:51:a9:63:59:14:aa:2b:b1:a1:d4:a0:45:
d8:5a:8b:1c:97:23:57:26:72:0b:bf:f1:d1:68:c1:
ae:72:25:0d:27:4c:cd:42:d8:5e:12:26:c2:24:c9:
c9:4c:e9:48:2b:e3:7a:4a:98:3f:a6:50:12:ca:da:
bb:a0:bf:1e:ec:4a:f6:a1:b5:7e:9b:b4:16:aa:41:
90:c5:fa:c8:4d:5c:d7:45:f6:dd:04:b0:17:da:cb:
1a:f1:ef:bd:7a:fd:4c:92:70:fb:ec:7d:79:4b:5a:
34:2e:03:e7:e1:6d:1c:26:25:52:31:fe:f5:ad:53:
46:71:da:c7:d9:8f:35:5d:c7:3a:92:d0:0d:14:5d:
2b:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:70:2C:1C:9D:D1:82:7B:1B:8F:0A:96:46:71:B5:14:1C:CE:89:BD
X509v3 Authority Key Identifier:
keyid:73:88:BD:B9:CD:7F:6B:A4:A8:F6:18:C5:A4:2A:76:AA:E8:92:59:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4i9uc1_a6So9hjFpCp2quiSWc8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/23e440-865e-4f4f-9fc9-108d5b148f0c/1/c4i9uc1_a6So9hjFpCp2quiSWc8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/23e440-865e-4f4f-9fc9-108d5b148f0c/1/c4i9uc1_a6So9hjFpCp2quiSWc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:eb:e0:13:66:32:bd:f4:4f:79:a3:7c:83:6d:1e:03:5b:71:
37:dd:63:7a:a6:fd:95:f1:df:b6:da:aa:1f:60:06:f9:c3:90:
55:ec:45:df:58:65:d8:08:0a:0f:3a:7f:a6:09:51:a9:ac:45:
9c:e3:04:74:f6:ad:58:3e:fa:ba:0d:65:b4:e4:5a:d6:45:21:
37:7d:e4:b7:9c:f7:99:92:87:56:e1:c9:3d:3e:47:56:b7:c5:
0a:73:97:d9:fc:17:c0:45:12:f5:d0:7c:ce:cd:a7:e6:23:ab:
1f:a7:b6:bf:d8:54:87:b4:65:aa:24:c1:eb:e6:a9:d7:3a:16:
f6:13:cf:90:e1:8c:c8:49:d5:1c:1c:bb:c3:91:a6:cd:02:d0:
ba:ba:b1:f4:0d:c6:30:ea:f9:8d:47:d2:19:ff:87:2e:ea:57:
b9:d5:4a:90:8e:b4:58:be:a0:07:53:57:50:d8:8d:66:65:ae:
47:c0:09:0e:26:76:a2:e4:1d:9c:93:68:b4:00:62:51:7e:9b:
f3:6b:2b:22:a5:3b:54:8d:3f:df:32:a3:95:e9:15:29:0d:b9:
0b:f6:1f:f6:26:82:1c:95:28:36:fa:67:41:7f:b7:d9:a9:34:
20:cb:da:12:48:12:dd:dc:ee:d7:96:20:6b:53:76:2c:e0:3a:
e5:a3:22:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 05:50:29 2025 by rpki-client