Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/ce1677-d927-44c6-a909-3b2b51a5e3da/1/CL9ZiZt6yjCjx9Xbk7IS2YcJyJs.mft
File: CL9ZiZt6yjCjx9Xbk7IS2YcJyJs.mft (raw, json)
Hash identifier: KNwN4RLnwHycB4/9mQ8cR1cCR6/DJxTI+SWyZIsSkoA=
Subject key identifier: 84:EA:72:BA:D7:72:19:07:2D:67:B4:94:C3:9A:87:4A:5C:E4:09:DF
Authority key identifier: 08:BF:59:89:9B:7A:CA:30:A3:C7:D5:DB:93:B2:12:D9:87:09:C8:9B
Certificate issuer: /CN=08bf59899b7aca30a3c7d5db93b212d98709c89b
Certificate serial: 0198733DD815A6BCC289055D40C3DD624228
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CL9ZiZt6yjCjx9Xbk7IS2YcJyJs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/ce1677-d927-44c6-a909-3b2b51a5e3da/1/CL9ZiZt6yjCjx9Xbk7IS2YcJyJs.mft
Manifest number: 1615
Signing time: Mon 04 Aug 2025 04:01:29 +0000
Manifest this update: Mon 04 Aug 2025 04:01:29 +0000
Manifest next update: Tue 05 Aug 2025 04:01:29 +0000
Files and hashes: 1: CL9ZiZt6yjCjx9Xbk7IS2YcJyJs.crl (hash: lqpCb9DxevosPW5ybpyLSy+rCIJMqdgXkDJRE9EDiEs=)
2: QBvaKUProLFwUadr8JLWlBh2UrE.roa (hash: xpxsGWmbgKM4U5yVDwdEgOHu1jns29KEhnZ49U4Y2OU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/ce1677-d927-44c6-a909-3b2b51a5e3da/1/CL9ZiZt6yjCjx9Xbk7IS2YcJyJs.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/ce1677-d927-44c6-a909-3b2b51a5e3da/1/CL9ZiZt6yjCjx9Xbk7IS2YcJyJs.mft
rsync://rpki.ripe.net/repository/DEFAULT/CL9ZiZt6yjCjx9Xbk7IS2YcJyJs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:3d:d8:15:a6:bc:c2:89:05:5d:40:c3:dd:62:42:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08bf59899b7aca30a3c7d5db93b212d98709c89b
Validity
Not Before: Aug 4 04:01:29 2025 GMT
Not After : Aug 5 04:01:29 2025 GMT
Subject: CN=84ea72bad77219072d67b494c39a874a5ce409df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:95:a4:d2:8c:60:48:80:5d:a9:09:06:e1:73:
6d:7f:e9:9e:a0:3c:c0:ce:cc:6f:f8:26:e0:15:11:
c5:9c:12:4a:57:73:85:7e:59:20:d9:a3:2b:55:35:
25:f9:3d:62:2d:03:9d:e4:b5:e8:79:29:ac:36:46:
be:17:b3:12:a1:5e:a6:d0:6d:34:4a:16:18:68:f0:
ec:8d:6b:f5:d6:5a:fe:9d:ff:e6:a3:6e:26:4d:d1:
c2:b9:c3:41:e9:9e:7d:3d:1f:e7:ad:97:17:2c:2d:
95:27:67:73:43:0e:10:9f:e7:41:de:cc:f6:2c:40:
22:a7:97:02:91:36:5f:d3:1b:bf:90:67:8c:99:ba:
3d:98:8c:b8:29:07:a4:5f:b4:bb:93:d1:33:3e:52:
f7:a9:24:a6:ad:d7:09:06:b0:ce:f7:0f:71:3e:f3:
76:1b:71:d7:2d:7c:16:b4:d2:4b:b4:9d:47:51:27:
26:ab:d8:39:58:f5:f4:bf:49:15:78:ea:2d:94:76:
ca:b6:bf:dc:88:ab:1c:d0:e6:24:b1:19:12:62:c1:
63:a3:c2:bb:9b:27:48:90:76:fd:18:81:2d:0b:a8:
ef:67:db:54:a8:93:63:40:69:e8:a4:b8:44:33:fb:
6c:1e:3a:82:f8:2a:04:4a:18:ad:63:2d:93:4f:a8:
fe:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:EA:72:BA:D7:72:19:07:2D:67:B4:94:C3:9A:87:4A:5C:E4:09:DF
X509v3 Authority Key Identifier:
keyid:08:BF:59:89:9B:7A:CA:30:A3:C7:D5:DB:93:B2:12:D9:87:09:C8:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CL9ZiZt6yjCjx9Xbk7IS2YcJyJs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/ce1677-d927-44c6-a909-3b2b51a5e3da/1/CL9ZiZt6yjCjx9Xbk7IS2YcJyJs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/ce1677-d927-44c6-a909-3b2b51a5e3da/1/CL9ZiZt6yjCjx9Xbk7IS2YcJyJs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:1e:18:37:50:86:a8:05:ed:69:fa:9a:fd:85:02:b2:5a:c5:
9c:d3:08:61:c2:22:7b:2d:f5:e6:4b:4c:b8:41:9a:9e:70:3e:
e3:58:fd:1b:6a:9e:ef:c6:68:3c:e8:ba:72:ec:3d:4c:2d:35:
3f:61:fc:2a:7d:47:c7:b2:31:63:81:54:7b:21:d3:5e:87:f1:
ed:51:da:5e:65:05:71:6c:0b:f1:38:58:9d:1f:dd:96:1a:1e:
14:32:37:de:22:8a:8c:75:96:9e:d2:bd:08:f8:c5:71:11:91:
ff:74:1d:8b:e4:9c:02:d5:d1:f6:0f:37:a9:5e:f0:21:0a:25:
46:bd:2f:1c:90:7f:20:2b:4d:db:2e:bc:70:40:c6:e0:e5:ed:
8b:54:8c:ef:e4:2c:e8:bb:d6:ea:96:d9:db:c1:7d:81:83:a4:
17:60:47:ed:05:d4:c6:ba:51:b3:81:f7:a7:a0:4b:e9:b4:46:
6d:c6:06:0b:74:b3:22:84:b6:89:b5:c7:24:19:d1:f5:b8:d2:
d2:d4:c0:9b:69:ce:5a:8e:15:05:42:f3:6b:a2:12:ff:86:1a:
bf:66:01:91:5e:b6:d2:3a:8f:71:49:a8:99:d6:e1:75:cd:58:
e0:ee:18:c6:5b:6c:d4:d9:a0:d5:78:21:f8:2c:f8:22:a4:93:
bb:00:a2:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 10:59:43 2025 by rpki-client