
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/689b5c-a8d9-47ca-af68-9f92f3855f86/1/gh7As3VkunTWFpG4sq1Da52qshM.mft
File: gh7As3VkunTWFpG4sq1Da52qshM.mft (raw, json)
Hash identifier: 9S3QkKg4on8ywCWBJwm+700rk4ZAXGMWNligdF+A37I=
Subject key identifier: CF:CB:30:EA:62:A0:E5:67:4B:6A:2A:A2:9A:1D:DA:19:3C:AA:5F:2C
Authority key identifier: 82:1E:C0:B3:75:64:BA:74:D6:16:91:B8:B2:AD:43:6B:9D:AA:B2:13
Certificate issuer: /CN=821ec0b37564ba74d61691b8b2ad436b9daab213
Certificate serial: 0198816778F817D3A3489E766C95697F9974
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gh7As3VkunTWFpG4sq1Da52qshM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/689b5c-a8d9-47ca-af68-9f92f3855f86/1/gh7As3VkunTWFpG4sq1Da52qshM.mft
Manifest number: 161B
Signing time: Wed 06 Aug 2025 22:01:38 +0000
Manifest this update: Wed 06 Aug 2025 22:01:38 +0000
Manifest next update: Thu 07 Aug 2025 22:01:38 +0000
Files and hashes: 1: gh7As3VkunTWFpG4sq1Da52qshM.crl (hash: Wg1OPTUBST5NljkT2meduP7WbXwO0XFZmT5FnauT5Hk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/689b5c-a8d9-47ca-af68-9f92f3855f86/1/gh7As3VkunTWFpG4sq1Da52qshM.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/689b5c-a8d9-47ca-af68-9f92f3855f86/1/gh7As3VkunTWFpG4sq1Da52qshM.mft
rsync://rpki.ripe.net/repository/DEFAULT/gh7As3VkunTWFpG4sq1Da52qshM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 20:46:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:81:67:78:f8:17:d3:a3:48:9e:76:6c:95:69:7f:99:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=821ec0b37564ba74d61691b8b2ad436b9daab213
Validity
Not Before: Aug 6 22:01:38 2025 GMT
Not After : Aug 7 22:01:38 2025 GMT
Subject: CN=cfcb30ea62a0e5674b6a2aa29a1dda193caa5f2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:06:ea:a8:22:15:95:4a:25:69:bb:8c:e5:e0:
2b:b4:26:8e:77:f7:cf:a0:d1:ab:c7:77:c2:7b:44:
2c:7e:b6:14:97:8f:b8:3e:3e:c4:e2:99:5f:c8:8f:
3a:2b:be:83:c9:a4:0f:4c:bb:3d:1a:9c:5c:b2:0f:
0c:27:58:49:7b:88:d5:a9:98:51:38:47:09:0c:6f:
1c:79:ab:ab:f3:86:99:b5:4d:46:2d:a9:cd:fc:e1:
8e:e8:d1:5f:8a:50:87:ff:16:e0:87:08:cb:98:32:
1c:05:7a:3c:01:01:79:b5:24:91:4d:39:91:bf:d2:
25:52:74:f2:62:91:70:18:6b:31:77:e5:1d:55:9c:
b9:d0:73:14:bf:58:da:01:e2:68:95:f4:4f:b0:2c:
38:4a:5f:df:cb:d5:e2:1d:56:7c:f1:03:a6:1f:46:
4e:88:57:65:1b:15:0e:1c:85:d2:a0:50:bc:7a:ac:
7d:8f:00:fe:73:a5:71:13:e7:c5:25:91:ea:35:84:
69:14:72:15:9f:1e:c7:94:4e:dd:7c:a8:5f:6f:1d:
2e:c8:65:51:39:e8:6d:54:71:d9:c5:0f:70:47:90:
7d:29:2d:82:ca:c6:a2:58:f7:06:7c:2b:c0:b1:84:
f9:eb:be:93:8e:05:2b:6a:a2:b6:17:56:9b:f1:f8:
05:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:CB:30:EA:62:A0:E5:67:4B:6A:2A:A2:9A:1D:DA:19:3C:AA:5F:2C
X509v3 Authority Key Identifier:
keyid:82:1E:C0:B3:75:64:BA:74:D6:16:91:B8:B2:AD:43:6B:9D:AA:B2:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gh7As3VkunTWFpG4sq1Da52qshM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/689b5c-a8d9-47ca-af68-9f92f3855f86/1/gh7As3VkunTWFpG4sq1Da52qshM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/689b5c-a8d9-47ca-af68-9f92f3855f86/1/gh7As3VkunTWFpG4sq1Da52qshM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:9e:6f:08:1a:06:01:05:46:ca:e2:7e:19:e8:1c:29:c2:0a:
80:78:cf:8a:7e:8a:b9:2d:bc:0c:f7:92:b1:9c:eb:e1:d2:65:
0c:18:9f:6a:96:37:24:93:5d:0c:65:dc:e0:f7:db:d0:85:b1:
c2:29:27:0b:cd:42:22:e3:fd:11:10:ae:2d:b4:51:08:01:e6:
eb:38:f0:07:a0:d2:55:5b:52:8a:4a:e1:bf:2a:80:cb:13:2f:
3f:84:18:9c:1f:e1:8c:a5:0c:b4:7e:7e:18:02:b0:0d:f4:3e:
a9:a0:f9:fa:2c:50:65:7c:7f:fa:50:22:a4:8f:09:e4:5d:c4:
d2:e1:e6:8b:87:27:65:e1:aa:a2:38:8e:9c:b8:99:f4:e5:8b:
bb:dc:12:97:1c:8a:40:f3:aa:af:4f:3d:fa:d3:fd:9a:f1:5a:
ce:e4:e0:a5:b2:55:cf:77:c1:de:b7:74:32:ba:c0:0c:45:4b:
7e:4f:41:16:63:82:9b:c9:ad:99:22:ae:23:ae:dc:1b:da:b5:
0f:07:18:d0:53:4f:7f:5c:bc:2a:bb:41:d7:b4:6c:1c:3d:6d:
44:5e:dd:e0:02:c2:46:53:69:98:90:0a:be:c6:44:4d:8c:48:
e5:ab:7a:39:67:04:c9:37:04:b8:64:9c:4c:c3:43:27:98:ee:
4a:2e:27:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 00:37:41 2025 by rpki-client