Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/852cfb-4471-4290-91f4-6bc4905c42d4/1/ClMYxYv1unQySyXQN0BN2N2p_yQ.mft
File: ClMYxYv1unQySyXQN0BN2N2p_yQ.mft (raw, json)
Hash identifier: iKf/Uxo+8uGV0tL2dkDdxjaMwPa85mDUHEpcm903ayQ=
Subject key identifier: F5:55:02:41:A7:F3:47:3B:E9:CA:99:7C:47:3E:60:7A:E5:93:66:95
Authority key identifier: 0A:53:18:C5:8B:F5:BA:74:32:4B:25:D0:37:40:4D:D8:DD:A9:FF:24
Certificate issuer: /CN=0a5318c58bf5ba74324b25d037404dd8dda9ff24
Certificate serial: 019874F53C8BFEAC19EC587548080D7D1C83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ClMYxYv1unQySyXQN0BN2N2p_yQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/852cfb-4471-4290-91f4-6bc4905c42d4/1/ClMYxYv1unQySyXQN0BN2N2p_yQ.mft
Manifest number: 1617
Signing time: Mon 04 Aug 2025 12:01:25 +0000
Manifest this update: Mon 04 Aug 2025 12:01:25 +0000
Manifest next update: Tue 05 Aug 2025 12:01:25 +0000
Files and hashes: 1: ClMYxYv1unQySyXQN0BN2N2p_yQ.crl (hash: BsEvDBhvB9tLcpAH5+xZWZavCy0Zmh9j7d0G89QxzYE=)
2: DLTd3WJjxjvYe7s9RQaXW0-asFQ.roa (hash: CEzU0MiwDAlXifXvS9Fry7MUXXUL96cqYeU54NDS/g8=)
3: MzKwgAtz12wzIsjgwju5LaHLtH8.roa (hash: DsGzfZzJWXHpJi5oY7AKelnpp/ss483xMhTBHOGogIk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/852cfb-4471-4290-91f4-6bc4905c42d4/1/ClMYxYv1unQySyXQN0BN2N2p_yQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/852cfb-4471-4290-91f4-6bc4905c42d4/1/ClMYxYv1unQySyXQN0BN2N2p_yQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/ClMYxYv1unQySyXQN0BN2N2p_yQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 12:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:f5:3c:8b:fe:ac:19:ec:58:75:48:08:0d:7d:1c:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a5318c58bf5ba74324b25d037404dd8dda9ff24
Validity
Not Before: Aug 4 12:01:25 2025 GMT
Not After : Aug 5 12:01:25 2025 GMT
Subject: CN=f5550241a7f3473be9ca997c473e607ae5936695
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:e8:c2:21:6c:f9:66:bb:ca:a6:db:78:c4:4a:
a4:23:4f:da:ff:7a:b2:11:df:60:c7:83:47:8f:e3:
20:62:24:14:25:d7:81:7a:ea:eb:4b:80:6d:ef:61:
90:93:08:ff:b8:1c:f9:8f:67:bd:43:51:07:48:41:
87:2c:76:5c:2c:46:75:b1:42:44:e1:14:2e:de:34:
a8:8d:40:06:27:de:34:ed:35:4b:36:66:b3:05:0e:
41:ad:b8:aa:23:05:2d:1d:44:8d:64:86:59:2d:6e:
87:6c:7f:66:ee:7c:9d:69:9f:eb:ee:f1:25:1d:57:
ed:f5:a7:a1:75:c0:a5:6f:c1:5d:36:cf:ce:32:68:
ca:da:74:7b:8c:31:1e:42:6f:d9:f8:25:58:53:58:
99:96:1a:50:b8:af:2f:2d:31:d8:51:bd:7d:2d:e6:
5c:e0:34:54:b8:d6:1f:12:89:6d:e5:17:0d:e4:98:
80:e2:86:9a:c9:40:a0:d9:04:2a:6c:fb:18:b3:80:
1c:c8:03:4d:2f:17:24:bb:80:88:be:56:e1:e3:83:
82:bc:2f:32:99:ec:ad:36:2f:8c:36:92:fa:a9:da:
cb:5a:3f:95:8a:e8:0e:05:00:07:63:35:0d:15:66:
8d:20:24:8a:6d:8c:f5:74:d6:a3:72:01:d3:19:df:
9f:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:55:02:41:A7:F3:47:3B:E9:CA:99:7C:47:3E:60:7A:E5:93:66:95
X509v3 Authority Key Identifier:
keyid:0A:53:18:C5:8B:F5:BA:74:32:4B:25:D0:37:40:4D:D8:DD:A9:FF:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ClMYxYv1unQySyXQN0BN2N2p_yQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/852cfb-4471-4290-91f4-6bc4905c42d4/1/ClMYxYv1unQySyXQN0BN2N2p_yQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/852cfb-4471-4290-91f4-6bc4905c42d4/1/ClMYxYv1unQySyXQN0BN2N2p_yQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:b6:dd:a5:35:c7:b6:aa:0b:a8:95:43:f5:1c:7f:f3:21:6a:
44:e1:b5:ce:8f:d4:43:83:10:9a:d3:32:3d:e0:29:86:7d:da:
08:3a:2e:a6:9c:3d:18:bc:5c:ab:cd:d5:6c:38:f9:de:47:a5:
93:30:87:11:94:31:5d:48:bf:9c:ff:bf:9e:14:07:ab:51:b6:
57:d7:0c:9f:b3:79:18:d5:16:7d:21:50:42:d4:3c:d3:59:8f:
b2:f5:f6:f4:5c:42:0c:79:c5:bf:d1:e4:65:d9:03:90:e6:1c:
1f:24:53:e7:a7:08:db:5a:73:b0:e0:96:32:4b:f6:11:2f:63:
7f:34:64:f6:04:df:27:85:cc:4a:9b:0d:24:ea:da:9f:1f:1c:
02:8a:32:d2:1d:34:3d:b9:09:97:04:d1:b7:f8:f1:08:95:b5:
8a:06:3f:a9:2a:5c:48:e8:95:f1:c5:c5:2b:b3:75:ba:58:a2:
a5:8e:dc:fe:58:b1:50:fa:10:c0:41:42:b8:53:d8:89:8f:7c:
80:ab:cf:6b:5d:ae:fe:1c:44:a9:1f:8d:55:69:6f:cf:ae:72:
2f:bf:1b:34:50:d1:ce:b5:4a:6b:65:3b:e9:23:b0:21:69:8d:
b0:a4:26:19:a4:43:79:68:15:03:c7:c7:a1:76:a8:5d:27:a0:
31:d0:81:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 15:36:34 2025 by rpki-client