Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/123b25-fee4-490b-be00-0b8a792c1b9d/1/96wXOfUp2vTMczgkibgFl-ugf0E.mft
File: 96wXOfUp2vTMczgkibgFl-ugf0E.mft (raw, json)
Hash identifier: c5N4o5XWmu5+VZObhDWhJ/0UpiKxbFVH4WXpT82f++U=
Subject key identifier: C0:5E:9C:D6:1C:29:0F:1B:34:34:69:78:27:CC:0A:3A:B8:9B:97:F9
Authority key identifier: F7:AC:17:39:F5:29:DA:F4:CC:73:38:24:89:B8:05:97:EB:A0:7F:41
Certificate issuer: /CN=f7ac1739f529daf4cc73382489b80597eba07f41
Certificate serial: 0198917EF68C7D034951D14FD1ACCF5FF3E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/96wXOfUp2vTMczgkibgFl-ugf0E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/123b25-fee4-490b-be00-0b8a792c1b9d/1/96wXOfUp2vTMczgkibgFl-ugf0E.mft
Manifest number: 085F
Signing time: Sun 10 Aug 2025 01:01:13 +0000
Manifest this update: Sun 10 Aug 2025 01:01:13 +0000
Manifest next update: Mon 11 Aug 2025 01:01:13 +0000
Files and hashes: 1: 96wXOfUp2vTMczgkibgFl-ugf0E.crl (hash: VLJK7UdriKf+T+NcvcW5Vrh6Zk1RRO/ONSMrN40NaFY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/123b25-fee4-490b-be00-0b8a792c1b9d/1/96wXOfUp2vTMczgkibgFl-ugf0E.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/123b25-fee4-490b-be00-0b8a792c1b9d/1/96wXOfUp2vTMczgkibgFl-ugf0E.mft
rsync://rpki.ripe.net/repository/DEFAULT/96wXOfUp2vTMczgkibgFl-ugf0E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 18:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:91:7e:f6:8c:7d:03:49:51:d1:4f:d1:ac:cf:5f:f3:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f7ac1739f529daf4cc73382489b80597eba07f41
Validity
Not Before: Aug 10 01:01:13 2025 GMT
Not After : Aug 11 01:01:13 2025 GMT
Subject: CN=c05e9cd61c290f1b3434697827cc0a3ab89b97f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:e1:50:44:95:8f:fc:4f:3b:76:a1:6d:2d:f1:
3d:1c:b8:01:27:5f:6b:f0:5f:27:d0:ba:31:d0:13:
a8:80:fb:e9:b8:3b:3e:86:28:e7:eb:0a:6e:87:c8:
2f:b8:f6:34:06:dc:ef:db:e3:ea:cb:5c:ea:c9:06:
34:fd:2b:30:45:c6:bb:e9:cb:41:91:8c:86:c5:0b:
07:46:38:5c:7a:0a:6e:e6:76:5f:db:c4:18:68:e6:
a7:29:a5:23:8c:90:68:9d:e2:dc:4c:b1:b5:a2:7f:
25:4f:93:77:49:d3:48:a7:39:7e:95:3c:b9:2d:57:
c0:9f:40:2a:23:50:2b:ea:d0:7e:7e:fc:97:bb:a1:
c3:8d:d6:91:e7:6e:47:88:b4:a1:d9:0d:7d:c8:d2:
15:23:87:ae:af:0f:76:0a:9c:b6:45:67:31:03:95:
ac:ec:e9:17:58:3b:50:20:e6:ab:b1:c0:35:f9:cb:
de:34:96:d6:08:cf:ab:ed:50:68:0d:d1:3f:05:07:
12:70:ca:02:35:a4:55:c3:89:1d:47:29:98:da:40:
6f:86:d0:af:02:93:d6:4d:cf:da:65:d4:68:05:3e:
4c:e5:58:b9:86:42:e5:d1:fd:64:fa:00:56:d8:0f:
97:13:aa:fc:db:7d:92:c2:79:1a:78:3a:da:f0:10:
6b:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:5E:9C:D6:1C:29:0F:1B:34:34:69:78:27:CC:0A:3A:B8:9B:97:F9
X509v3 Authority Key Identifier:
keyid:F7:AC:17:39:F5:29:DA:F4:CC:73:38:24:89:B8:05:97:EB:A0:7F:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/96wXOfUp2vTMczgkibgFl-ugf0E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/123b25-fee4-490b-be00-0b8a792c1b9d/1/96wXOfUp2vTMczgkibgFl-ugf0E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/123b25-fee4-490b-be00-0b8a792c1b9d/1/96wXOfUp2vTMczgkibgFl-ugf0E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:88:67:60:fd:9c:80:09:98:b2:29:fd:35:c5:73:23:f1:76:
f7:56:9e:fb:32:c2:66:00:6c:1b:1d:31:1a:37:27:02:50:f2:
14:ef:c3:d7:ce:93:b1:48:d2:3c:61:ed:de:d4:ac:42:2f:36:
30:2b:c6:0e:cd:b8:db:bf:e0:24:6e:e9:b9:c6:49:51:06:fb:
be:f0:bb:2b:b3:94:9a:8f:ea:96:11:1b:3f:5a:78:a8:df:b1:
bb:11:92:9e:e2:bd:4c:7d:e9:0b:d6:f7:1b:a5:89:93:79:25:
9e:16:af:cc:57:b8:88:e9:8a:a4:4f:35:14:59:e9:12:50:1c:
3c:71:08:d2:92:52:7b:f6:d6:db:82:56:b3:09:6f:49:db:48:
b8:97:a3:cd:46:06:6c:91:e4:5a:e4:56:39:3e:0e:e9:5e:cf:
6e:a8:9b:a9:94:06:a0:a6:fd:bd:b8:b7:82:6d:77:2c:57:50:
a9:1b:2b:bd:a1:d2:12:bf:b9:16:37:10:e5:37:ce:41:19:c7:
80:5a:d4:b3:21:48:73:47:70:14:86:f0:e1:74:65:45:d3:91:
0d:1c:34:02:0e:e7:6e:29:a2:c9:cd:2b:b3:ed:96:e8:0f:7d:
ac:2d:d6:dc:6e:62:86:58:43:65:1c:19:88:06:e9:05:26:22:
84:b3:46:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 03:50:33 2025 by rpki-client