Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/738f78-438c-4bfd-806b-73bfad832d2d/1/CRzF2QybaBpstOdyzK6-w0L7mwU.mft
File: CRzF2QybaBpstOdyzK6-w0L7mwU.mft (raw, json)
Hash identifier: 4otGe7T22EiMQxVT7+nevrVkMxtRuHluh7+OsKTWcfc=
Subject key identifier: 07:55:64:CC:12:07:B6:D7:FC:EA:D6:03:9F:BC:2C:5E:F4:E9:46:AC
Authority key identifier: 09:1C:C5:D9:0C:9B:68:1A:6C:B4:E7:72:CC:AE:BE:C3:42:FB:9B:05
Certificate issuer: /CN=091cc5d90c9b681a6cb4e772ccaebec342fb9b05
Certificate serial: 0198A19647134F3EC7C6BAA4D437E7827179
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CRzF2QybaBpstOdyzK6-w0L7mwU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/738f78-438c-4bfd-806b-73bfad832d2d/1/CRzF2QybaBpstOdyzK6-w0L7mwU.mft
Manifest number: 09DE
Signing time: Wed 13 Aug 2025 04:00:37 +0000
Manifest this update: Wed 13 Aug 2025 04:00:37 +0000
Manifest next update: Thu 14 Aug 2025 04:00:37 +0000
Files and hashes: 1: CRzF2QybaBpstOdyzK6-w0L7mwU.crl (hash: b2s0o7x9yk6jei7bAHDepkYFgdA6cuL01XgRghLjMgE=)
2: JFMyA-XTfzJ98LwUaDo6uCal6eE.roa (hash: 53iyOJ7/FikpZ4x6oYvSunvmMxLDuiMuvaZO1jcps9k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/738f78-438c-4bfd-806b-73bfad832d2d/1/CRzF2QybaBpstOdyzK6-w0L7mwU.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/738f78-438c-4bfd-806b-73bfad832d2d/1/CRzF2QybaBpstOdyzK6-w0L7mwU.mft
rsync://rpki.ripe.net/repository/DEFAULT/CRzF2QybaBpstOdyzK6-w0L7mwU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 Aug 2025 04:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:a1:96:47:13:4f:3e:c7:c6:ba:a4:d4:37:e7:82:71:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=091cc5d90c9b681a6cb4e772ccaebec342fb9b05
Validity
Not Before: Aug 13 04:00:37 2025 GMT
Not After : Aug 14 04:00:37 2025 GMT
Subject: CN=075564cc1207b6d7fcead6039fbc2c5ef4e946ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:07:21:87:42:48:c4:2b:10:8c:6b:61:36:e2:
a0:fb:62:15:bb:23:ac:65:91:36:7b:1c:4a:b5:b7:
de:2e:5a:73:14:ef:ea:b2:2f:0e:c5:b6:e1:09:d8:
99:1b:6e:10:67:07:55:83:92:b5:ca:06:8c:32:fd:
c9:d2:4d:60:e7:81:79:6a:00:88:2c:20:27:68:87:
39:5f:94:85:49:ec:48:27:33:dc:50:87:aa:55:5f:
71:9d:f0:ee:0f:d0:d1:fb:9d:ca:7b:0c:02:cf:7d:
2a:8b:7e:7d:37:e5:45:ee:cb:76:87:b8:09:3d:ba:
01:44:7a:26:8d:ed:33:0b:db:be:52:ac:e9:4f:49:
d3:54:e4:ad:d1:64:db:47:f8:cc:f7:25:fd:db:ff:
7f:d1:35:24:4b:09:e4:14:ed:22:ef:ef:af:4f:fc:
05:44:0d:49:bd:7e:3a:06:71:67:11:00:12:fb:02:
25:00:be:e7:48:93:f3:fb:e1:c3:cc:af:f8:29:9d:
be:ad:ea:23:d9:3f:b6:9e:54:7a:49:52:9b:8b:1b:
43:87:e9:ce:2a:6e:96:0d:74:45:a3:30:e0:ad:84:
8d:b7:03:74:d2:0b:33:a1:0e:88:9d:9a:e8:c7:c5:
29:1e:74:d9:e6:20:7e:9a:ed:71:45:04:13:ce:17:
a0:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:55:64:CC:12:07:B6:D7:FC:EA:D6:03:9F:BC:2C:5E:F4:E9:46:AC
X509v3 Authority Key Identifier:
keyid:09:1C:C5:D9:0C:9B:68:1A:6C:B4:E7:72:CC:AE:BE:C3:42:FB:9B:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CRzF2QybaBpstOdyzK6-w0L7mwU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/738f78-438c-4bfd-806b-73bfad832d2d/1/CRzF2QybaBpstOdyzK6-w0L7mwU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/738f78-438c-4bfd-806b-73bfad832d2d/1/CRzF2QybaBpstOdyzK6-w0L7mwU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:1e:6d:4e:fd:ec:db:19:d7:cd:da:30:7e:05:06:77:e3:a1:
92:09:af:f2:b7:22:0b:56:fd:6e:03:f5:b2:2f:5f:5f:e4:b4:
f3:91:a7:df:1b:14:12:0a:1e:65:82:41:ef:7b:22:b7:2a:c4:
51:aa:3f:dd:92:39:5a:dd:a0:82:c5:36:ba:e5:ed:52:12:2e:
0b:a4:50:5c:f0:ab:7b:b9:b3:d6:b4:bf:bf:48:48:7d:3e:93:
fe:c2:47:9e:8d:bc:ff:9c:85:df:38:b7:d4:d1:6d:69:70:4b:
a7:26:cf:81:b9:80:f9:80:3d:ef:a7:63:13:d8:1e:fc:56:d8:
b9:92:94:99:16:6c:11:75:48:06:b2:7c:ff:46:a3:48:a3:eb:
03:37:cf:03:56:4b:e7:ed:7e:59:5e:fa:cb:37:46:0a:f0:28:
a1:b7:0f:ba:10:3a:21:a9:cf:6e:0f:5f:f0:d1:5a:6f:a6:cc:
12:c0:a3:a0:b8:b1:63:95:ae:78:9a:8b:c5:12:58:2a:9d:46:
91:f3:41:a1:1e:e7:e5:19:99:b2:ad:89:0b:07:36:39:fd:b4:
0e:e5:c3:9f:df:8f:ba:4e:de:21:31:50:f8:24:91:99:38:73:
90:cb:eb:0c:95:91:65:f1:3d:1d:d0:19:1d:1c:65:d6:98:63:
67:96:10:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 09:45:21 2025 by rpki-client