Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/dc7117-8851-4322-9c79-e0755f089c1a/1/A2x42XMHxhcQhWc4FBzAvTlczJ4.mft
File: A2x42XMHxhcQhWc4FBzAvTlczJ4.mft (raw, json)
Hash identifier: KOirwiqWsG7h6A4psAgX/oKhRkeksEQLMr9awq5LG48=
Subject key identifier: 18:E3:DC:AF:BB:C3:F9:90:3F:F1:E3:84:4A:9C:95:17:B9:A9:28:53
Authority key identifier: 03:6C:78:D9:73:07:C6:17:10:85:67:38:14:1C:C0:BD:39:5C:CC:9E
Certificate issuer: /CN=036c78d97307c61710856738141cc0bd395ccc9e
Certificate serial: 019895C9276B044358ED5484F7A329EFA6B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A2x42XMHxhcQhWc4FBzAvTlczJ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/dc7117-8851-4322-9c79-e0755f089c1a/1/A2x42XMHxhcQhWc4FBzAvTlczJ4.mft
Manifest number: B7
Signing time: Sun 10 Aug 2025 21:00:44 +0000
Manifest this update: Sun 10 Aug 2025 21:00:44 +0000
Manifest next update: Mon 11 Aug 2025 21:00:44 +0000
Files and hashes: 1: A2x42XMHxhcQhWc4FBzAvTlczJ4.crl (hash: NReRTjUqLSY3lXCZeGwoAx2MlpcdPucm+y1dJ4ZnpS8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/dc7117-8851-4322-9c79-e0755f089c1a/1/A2x42XMHxhcQhWc4FBzAvTlczJ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/dc7117-8851-4322-9c79-e0755f089c1a/1/A2x42XMHxhcQhWc4FBzAvTlczJ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/A2x42XMHxhcQhWc4FBzAvTlczJ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 21:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:95:c9:27:6b:04:43:58:ed:54:84:f7:a3:29:ef:a6:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=036c78d97307c61710856738141cc0bd395ccc9e
Validity
Not Before: Aug 10 21:00:44 2025 GMT
Not After : Aug 11 21:00:44 2025 GMT
Subject: CN=18e3dcafbbc3f9903ff1e3844a9c9517b9a92853
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:12:f1:d2:60:97:68:3a:ee:dc:b6:ea:62:a4:
d9:de:b9:b3:98:fb:bb:97:79:4f:ca:01:ae:2f:bc:
d2:94:4a:0c:11:bc:06:61:41:71:f0:7a:12:c4:31:
89:e1:31:88:b1:31:2c:b6:47:1c:51:63:11:bb:56:
01:b3:a7:15:66:d9:ff:26:a0:47:21:a1:3c:31:ee:
ef:f8:b5:ae:71:67:b1:06:8b:45:5a:23:48:30:a7:
b7:bf:4a:9d:1c:39:50:4e:9c:b8:9c:a4:cc:02:e1:
7c:3a:62:ca:ec:5b:2f:e2:59:e1:21:c6:e8:29:0a:
6b:e8:9c:f6:7e:82:08:37:7e:19:b1:4b:d6:30:e0:
96:c6:b5:15:18:df:ba:34:61:76:db:13:fe:ac:af:
e2:7b:61:27:3d:a4:8b:25:54:d8:b3:69:da:7b:4f:
ac:78:58:66:67:66:36:c8:46:cd:7c:a8:a7:af:d4:
19:a0:2c:a2:62:d6:f1:88:bc:c2:9c:5b:6e:a6:fe:
85:fa:d5:9d:fa:34:e6:5f:e4:47:3c:fd:47:12:ce:
4d:1f:46:72:6a:f5:52:f6:63:8a:fa:ae:af:03:c3:
c5:9a:47:a9:a4:97:76:a8:71:93:f3:1f:14:ab:f1:
bf:5b:00:b3:01:d0:86:6d:4f:99:32:8e:9a:a2:66:
13:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:E3:DC:AF:BB:C3:F9:90:3F:F1:E3:84:4A:9C:95:17:B9:A9:28:53
X509v3 Authority Key Identifier:
keyid:03:6C:78:D9:73:07:C6:17:10:85:67:38:14:1C:C0:BD:39:5C:CC:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A2x42XMHxhcQhWc4FBzAvTlczJ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/dc7117-8851-4322-9c79-e0755f089c1a/1/A2x42XMHxhcQhWc4FBzAvTlczJ4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/dc7117-8851-4322-9c79-e0755f089c1a/1/A2x42XMHxhcQhWc4FBzAvTlczJ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:db:99:ed:63:72:93:8f:d4:d1:5b:f9:f5:0d:c0:56:f9:ea:
00:0a:6c:a8:a5:b3:aa:ec:3d:97:82:91:4b:79:58:bc:36:a1:
d8:ff:86:e7:5f:87:31:18:7b:ab:03:e3:b1:8a:ce:e5:1e:75:
fb:e5:6e:66:10:90:eb:42:84:37:01:89:13:43:3c:83:8a:e3:
bf:b6:29:1b:f6:59:ce:45:f5:ed:f6:d7:a9:e6:1d:26:6f:46:
b3:0f:6e:6d:05:3a:21:44:a0:f7:b6:fb:f2:23:09:2a:9c:8d:
95:cf:e9:4f:d0:96:49:1c:ea:0f:ac:77:30:55:5d:4e:91:7b:
eb:e2:56:a8:af:4a:55:23:fa:78:33:e7:75:82:13:21:c3:e6:
1f:6e:63:e4:c0:4d:28:d0:ad:9c:87:f0:f7:7d:d5:c6:56:85:
45:eb:6e:86:69:ca:30:13:00:75:96:41:ce:76:37:6b:6f:b5:
65:8e:ce:7e:c2:8e:53:5c:c4:c8:9e:08:eb:7a:ac:b5:e6:53:
43:a2:36:c4:f7:2a:d1:cf:ec:01:c1:9b:c6:cf:70:39:56:95:
f8:6e:4c:4f:98:dc:6a:71:6c:73:e4:a1:34:dd:d5:c4:19:f3:
3c:51:9c:ae:c4:4e:99:89:b4:cd:63:84:5f:4e:80:a0:ad:e3:
c3:23:a1:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 05:58:45 2025 by rpki-client