Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/a86f77-fae6-4fe2-ba4b-eb37e776ddd2/1/CR2q09J9vPlNMAb7-6fh3dXSnxY.mft
File: CR2q09J9vPlNMAb7-6fh3dXSnxY.mft (raw, json)
Hash identifier: JAnE4cAldgcvnL435qfK4BqIqIGSxvkidF73oXLlwWI=
Subject key identifier: A8:4C:3A:DA:10:B1:6C:FB:A0:90:01:6E:C2:25:68:C9:BD:32:43:11
Authority key identifier: 09:1D:AA:D3:D2:7D:BC:F9:4D:30:06:FB:FB:A7:E1:DD:D5:D2:9F:16
Certificate issuer: /CN=091daad3d27dbcf94d3006fbfba7e1ddd5d29f16
Certificate serial: 019881D593D8D648E58D7CCB8CEF19B9BF14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CR2q09J9vPlNMAb7-6fh3dXSnxY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/a86f77-fae6-4fe2-ba4b-eb37e776ddd2/1/CR2q09J9vPlNMAb7-6fh3dXSnxY.mft
Manifest number: 06DC
Signing time: Thu 07 Aug 2025 00:01:54 +0000
Manifest this update: Thu 07 Aug 2025 00:01:54 +0000
Manifest next update: Fri 08 Aug 2025 00:01:54 +0000
Files and hashes: 1: Bd7FcffIWEfbujnp9WS-BYRh8lY.roa (hash: 1aqbGtOUu0Pm7rzIGfOGmwYKjDdAbGNYXLp563xVUt0=)
2: CR2q09J9vPlNMAb7-6fh3dXSnxY.crl (hash: VTL/FbX8Khpw5B4i0738OPKhHGXn/WeK56zVQ0leO7w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/a86f77-fae6-4fe2-ba4b-eb37e776ddd2/1/CR2q09J9vPlNMAb7-6fh3dXSnxY.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/a86f77-fae6-4fe2-ba4b-eb37e776ddd2/1/CR2q09J9vPlNMAb7-6fh3dXSnxY.mft
rsync://rpki.ripe.net/repository/DEFAULT/CR2q09J9vPlNMAb7-6fh3dXSnxY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 08 Aug 2025 00:01:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:81:d5:93:d8:d6:48:e5:8d:7c:cb:8c:ef:19:b9:bf:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=091daad3d27dbcf94d3006fbfba7e1ddd5d29f16
Validity
Not Before: Aug 7 00:01:54 2025 GMT
Not After : Aug 8 00:01:54 2025 GMT
Subject: CN=a84c3ada10b16cfba090016ec22568c9bd324311
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:44:de:af:c8:32:0e:50:10:45:80:4a:7d:22:
cf:61:58:8d:0f:1a:80:b0:91:a6:59:cb:fa:ab:f3:
76:83:ff:da:58:72:37:11:f5:ba:4b:fe:5b:2d:d1:
3c:e4:e9:92:7a:db:a9:0b:c1:d5:ae:b6:58:0b:41:
72:f3:74:50:30:5e:c2:20:a9:15:68:4b:1d:7a:6a:
42:d4:23:64:e6:de:ed:b0:2f:2b:88:f8:03:c4:c5:
3e:2c:50:03:46:ac:1a:e7:fb:0d:54:8b:02:51:5b:
dd:19:56:75:30:74:25:fc:61:31:dc:e7:65:01:e2:
63:9e:a9:3d:55:a9:32:94:3e:41:29:ed:be:9d:73:
ed:25:1c:2e:64:ab:ad:ea:26:e4:45:63:9b:0e:95:
4c:5d:b1:8c:ea:03:f9:f9:03:6f:73:99:d8:e4:a0:
66:7b:66:18:ab:ff:37:33:8e:09:09:7b:ae:be:30:
43:01:b1:2c:58:8c:14:19:03:21:f3:3b:3b:24:58:
52:69:6e:06:6c:44:88:dd:b9:a1:29:8b:28:73:ef:
74:5a:25:25:db:cc:65:45:7d:c2:78:69:5f:72:82:
97:be:df:94:af:31:d5:ee:ff:fa:fb:5e:91:34:5a:
1c:8f:37:8c:c8:aa:71:bd:58:62:41:47:93:e6:ac:
73:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:4C:3A:DA:10:B1:6C:FB:A0:90:01:6E:C2:25:68:C9:BD:32:43:11
X509v3 Authority Key Identifier:
keyid:09:1D:AA:D3:D2:7D:BC:F9:4D:30:06:FB:FB:A7:E1:DD:D5:D2:9F:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CR2q09J9vPlNMAb7-6fh3dXSnxY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/a86f77-fae6-4fe2-ba4b-eb37e776ddd2/1/CR2q09J9vPlNMAb7-6fh3dXSnxY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/a86f77-fae6-4fe2-ba4b-eb37e776ddd2/1/CR2q09J9vPlNMAb7-6fh3dXSnxY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:c1:f1:62:0c:63:0f:c7:76:21:7d:1e:cc:65:a1:a9:be:1b:
43:8f:1d:e7:21:a9:c4:9f:92:1a:80:f1:0a:0e:76:4d:c7:ad:
d8:0a:b8:4d:af:c0:e9:0b:8c:1d:30:f2:b1:a3:34:f5:d0:97:
46:d9:68:8d:88:65:7e:43:31:19:8b:18:66:e6:20:02:05:82:
bf:3c:9d:44:60:14:e3:a4:d4:dd:97:14:eb:fb:0d:5f:38:a2:
e3:a3:9c:6c:8d:56:72:26:80:f8:24:28:8e:89:ef:92:82:eb:
63:59:5b:22:2a:b6:a2:80:f9:e3:0a:1e:6b:d9:c9:2c:30:f6:
3c:d7:f5:2b:a3:31:c2:eb:1a:f9:34:e8:07:f5:fc:ee:71:79:
55:67:6a:2d:54:43:39:f9:38:1d:4b:71:1c:07:f4:73:f0:e6:
0e:be:8b:3e:86:84:01:9e:2e:03:ae:93:40:1b:6b:d8:9a:76:
e8:da:c0:6e:b5:56:1c:90:82:1f:68:b7:74:ab:fa:bc:55:d7:
86:0e:de:03:42:33:bc:b3:c3:8a:21:7d:ce:3e:2f:c3:de:22:
5e:f8:d6:a5:8f:bc:77:79:1a:30:39:94:72:aa:c0:9a:e6:8b:
9e:d1:7d:03:0c:dc:de:30:ac:cf:cf:35:d3:90:5b:69:fb:14:
0b:b0:fe:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 11:10:10 2025 by rpki-client