Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/d0815c-5b26-4317-8e75-5691f1738aba/1/Rx1zcSQTRsbqmkdpRoAhcsoHVms.mft
File: Rx1zcSQTRsbqmkdpRoAhcsoHVms.mft (raw, json)
Hash identifier: bsVrkXyc4sJ2PxW5wzATjnbLBttk5Xa4H5ycY9YFc4g=
Subject key identifier: 1A:7F:49:AF:1A:FB:F2:EF:89:EB:65:FB:10:68:10:C5:87:63:32:2B
Authority key identifier: 47:1D:73:71:24:13:46:C6:EA:9A:47:69:46:80:21:72:CA:07:56:6B
Certificate issuer: /CN=471d7371241346c6ea9a476946802172ca07566b
Certificate serial: 01988EECAF64998BB8B863CA325339DC257B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rx1zcSQTRsbqmkdpRoAhcsoHVms.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/d0815c-5b26-4317-8e75-5691f1738aba/1/Rx1zcSQTRsbqmkdpRoAhcsoHVms.mft
Manifest number: 095A
Signing time: Sat 09 Aug 2025 13:02:12 +0000
Manifest this update: Sat 09 Aug 2025 13:02:12 +0000
Manifest next update: Sun 10 Aug 2025 13:02:12 +0000
Files and hashes: 1: Rx1zcSQTRsbqmkdpRoAhcsoHVms.crl (hash: AirZQTgxAMRS7EZAzmtyfM36XeITlWr4op8+ITqE0fw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/d0815c-5b26-4317-8e75-5691f1738aba/1/Rx1zcSQTRsbqmkdpRoAhcsoHVms.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/d0815c-5b26-4317-8e75-5691f1738aba/1/Rx1zcSQTRsbqmkdpRoAhcsoHVms.mft
rsync://rpki.ripe.net/repository/DEFAULT/Rx1zcSQTRsbqmkdpRoAhcsoHVms.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 13:02:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8e:ec:af:64:99:8b:b8:b8:63:ca:32:53:39:dc:25:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=471d7371241346c6ea9a476946802172ca07566b
Validity
Not Before: Aug 9 13:02:12 2025 GMT
Not After : Aug 10 13:02:12 2025 GMT
Subject: CN=1a7f49af1afbf2ef89eb65fb106810c58763322b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:c8:79:06:da:e2:f0:a3:d2:10:cd:5f:16:af:
a5:8e:21:fb:33:d4:8c:3d:52:f3:b1:7e:86:32:bc:
12:34:23:40:5c:15:c5:b2:bd:b3:c8:c9:29:57:97:
0b:28:8b:94:71:7d:54:8c:f2:55:09:52:85:7e:ea:
7f:f7:33:e9:12:1a:e0:e0:ed:ea:c5:a8:58:db:06:
03:2d:ae:13:af:08:27:1b:04:06:e2:3d:0a:b0:35:
b5:5b:b0:d6:d0:c2:ae:4a:83:e9:ab:d4:58:6b:22:
79:94:c4:3d:30:01:b0:cd:5d:58:62:db:55:24:13:
9f:4e:4c:c7:a4:73:f4:fe:d5:ad:3c:aa:43:8f:a2:
35:31:e9:c6:0c:91:af:c3:c6:63:47:dc:40:19:a7:
46:0b:c8:79:bb:5c:04:84:ec:29:4f:bd:87:ee:84:
05:f3:b8:4a:6f:ba:58:42:55:64:4b:62:9d:90:0a:
02:bb:51:4a:d9:f2:33:26:c4:bb:9b:0a:36:4a:5e:
57:09:66:c6:d9:34:29:9e:43:6a:3a:ab:ca:40:a4:
c4:fb:58:04:c8:f3:9c:25:d5:6f:5b:b4:3d:68:2d:
79:79:cb:f4:63:47:05:39:a1:ab:18:33:01:63:d8:
88:8a:7a:c9:5f:28:30:87:12:55:7e:87:61:c3:83:
1f:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:7F:49:AF:1A:FB:F2:EF:89:EB:65:FB:10:68:10:C5:87:63:32:2B
X509v3 Authority Key Identifier:
keyid:47:1D:73:71:24:13:46:C6:EA:9A:47:69:46:80:21:72:CA:07:56:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rx1zcSQTRsbqmkdpRoAhcsoHVms.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/d0815c-5b26-4317-8e75-5691f1738aba/1/Rx1zcSQTRsbqmkdpRoAhcsoHVms.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/d0815c-5b26-4317-8e75-5691f1738aba/1/Rx1zcSQTRsbqmkdpRoAhcsoHVms.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:6d:ca:9a:1b:cc:ca:ac:c0:04:d3:47:2f:17:20:a9:d3:3f:
ec:fc:2c:37:77:91:82:b7:75:93:77:46:21:85:60:88:3c:71:
7a:21:98:00:5c:70:20:3f:90:46:2d:3b:49:78:26:c8:b6:1a:
b5:4d:29:87:d8:b0:f4:e2:ab:5c:03:fc:cf:52:40:4d:fc:cd:
c2:5b:bf:75:9d:83:ab:ea:c4:90:8c:0f:c3:fe:16:5d:b5:16:
7f:5a:27:1a:10:51:75:b9:dd:74:70:6c:21:2c:e8:bf:62:08:
42:67:59:38:b2:a5:ef:f3:b1:6b:8a:f1:e2:8a:b2:42:df:0e:
ec:19:06:36:aa:19:03:0d:65:04:6b:f5:2f:57:c0:2e:b4:22:
ef:05:6f:9a:8d:a0:57:c3:52:0e:be:54:39:e2:6d:42:62:9c:
e9:85:a7:5d:60:63:97:50:01:95:fb:cd:ee:38:e6:4a:22:3a:
cc:11:48:5a:12:b1:d5:d5:d9:75:e3:20:77:c4:3d:b9:ec:09:
ae:e0:3f:a9:33:36:b0:29:29:19:49:3c:92:f6:04:e0:5a:15:
83:d9:8e:27:1c:fe:09:bb:6a:e3:2c:3a:c6:ee:1a:64:67:a9:
b4:f3:4e:55:ad:a9:77:65:c5:83:4e:d6:3a:78:aa:e9:7e:ae:
b0:cf:61:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 20:46:54 2025 by rpki-client