Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/c2dc50-f895-4757-ae8b-afb500a4482a/1/CdR3O7Q9trKeh94C42U_p9jyb2U.mft
File: CdR3O7Q9trKeh94C42U_p9jyb2U.mft (raw, json)
Hash identifier: FMgIQVkskiS5tsVQCUAhcIgYgUqNfx2gshi07sF/wEE=
Subject key identifier: 5A:57:64:47:D9:E6:D9:F2:5D:8A:19:D1:63:1F:0B:00:EA:6B:30:63
Authority key identifier: 09:D4:77:3B:B4:3D:B6:B2:9E:87:DE:02:E3:65:3F:A7:D8:F2:6F:65
Certificate issuer: /CN=09d4773bb43db6b29e87de02e3653fa7d8f26f65
Certificate serial: 0198820BF87FA79524E2A3CC9F770FA58C02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CdR3O7Q9trKeh94C42U_p9jyb2U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/c2dc50-f895-4757-ae8b-afb500a4482a/1/CdR3O7Q9trKeh94C42U_p9jyb2U.mft
Manifest number: 01BE
Signing time: Thu 07 Aug 2025 01:01:19 +0000
Manifest this update: Thu 07 Aug 2025 01:01:19 +0000
Manifest next update: Fri 08 Aug 2025 01:01:19 +0000
Files and hashes: 1: CdR3O7Q9trKeh94C42U_p9jyb2U.crl (hash: oMoCtO66UGuBjGh80j5K2vy6fILc1sXqEBSXLpgvOAM=)
2: H2ZOh9fIAnQ96NovacR2PdzVa0g.roa (hash: +nBuIb1Jhz2syXSr6RgoJwf6cbGP9SV27ZeU9ljDCeA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/c2dc50-f895-4757-ae8b-afb500a4482a/1/CdR3O7Q9trKeh94C42U_p9jyb2U.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/c2dc50-f895-4757-ae8b-afb500a4482a/1/CdR3O7Q9trKeh94C42U_p9jyb2U.mft
rsync://rpki.ripe.net/repository/DEFAULT/CdR3O7Q9trKeh94C42U_p9jyb2U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 20:46:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:82:0b:f8:7f:a7:95:24:e2:a3:cc:9f:77:0f:a5:8c:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09d4773bb43db6b29e87de02e3653fa7d8f26f65
Validity
Not Before: Aug 7 01:01:19 2025 GMT
Not After : Aug 8 01:01:19 2025 GMT
Subject: CN=5a576447d9e6d9f25d8a19d1631f0b00ea6b3063
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:c0:ee:23:8f:8f:41:4d:f6:52:95:ba:15:57:
13:74:10:83:3e:ae:35:6f:63:8a:fc:2b:fb:c1:2d:
70:cd:cc:93:a6:53:ec:e7:48:8c:f8:a5:59:43:bd:
ff:f0:a4:11:73:7e:31:8a:e0:f1:c9:e4:ba:b0:ca:
f4:c9:4f:83:a0:49:cf:2f:e0:9e:42:07:f2:0b:ab:
54:2e:d2:da:98:bc:fc:fa:90:4e:f2:43:04:9f:8b:
5a:62:cb:99:85:3c:5f:98:5b:aa:6e:83:f7:c5:53:
34:b7:8e:39:e8:af:71:ad:99:78:f5:b8:f1:9e:72:
0a:6e:6b:82:c6:73:70:11:e8:3b:11:19:05:e1:6b:
e1:55:53:61:dc:96:bd:84:4f:1d:f3:d5:c5:6b:6b:
c0:b5:ad:4f:4f:bd:49:2c:b6:65:ab:57:4d:f7:a0:
85:6f:ed:26:3e:38:76:9d:ec:a8:ef:d2:5d:3a:85:
8a:d5:f6:6a:99:d4:a5:47:7d:4f:7e:27:81:94:6f:
fe:f4:3d:30:6f:f6:5b:17:ea:28:92:fb:5f:65:6b:
a2:2e:8a:a6:be:6a:09:11:29:1f:52:66:8e:b6:14:
95:32:c5:52:63:bb:d5:2d:ca:b3:8d:6d:0b:f5:43:
90:f8:c7:bc:9c:0a:6d:63:86:ac:ab:d8:4e:98:52:
07:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:57:64:47:D9:E6:D9:F2:5D:8A:19:D1:63:1F:0B:00:EA:6B:30:63
X509v3 Authority Key Identifier:
keyid:09:D4:77:3B:B4:3D:B6:B2:9E:87:DE:02:E3:65:3F:A7:D8:F2:6F:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CdR3O7Q9trKeh94C42U_p9jyb2U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/c2dc50-f895-4757-ae8b-afb500a4482a/1/CdR3O7Q9trKeh94C42U_p9jyb2U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/c2dc50-f895-4757-ae8b-afb500a4482a/1/CdR3O7Q9trKeh94C42U_p9jyb2U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:90:2c:02:af:06:4a:fa:07:d5:3d:a1:34:19:1b:48:63:57:
02:84:54:95:4c:89:02:f1:4b:3f:72:6d:07:da:2d:c8:38:f8:
11:11:ac:8d:98:32:da:bf:6b:b2:d0:35:7e:fc:9d:36:b0:04:
ba:84:13:d6:90:af:c9:4a:f2:65:fd:70:7c:26:3f:28:73:35:
ad:3f:11:63:a2:19:85:5a:d3:7d:3c:94:1f:13:9c:fb:ea:ce:
f2:fb:74:45:74:f7:e2:ba:05:bc:c9:dc:1f:fb:97:60:6c:85:
9d:a4:7e:80:59:af:c0:28:5f:c8:3a:57:05:87:41:06:2e:39:
2e:8c:aa:1a:85:3a:e1:a8:9c:4f:5f:88:ae:f5:d2:99:f9:22:
91:8d:bd:f4:66:c0:d0:58:e6:08:e6:56:bf:3c:c9:5b:97:d2:
f1:a8:b7:db:03:87:3c:6b:e1:df:f9:aa:db:4d:c6:17:b5:14:
3d:49:fa:ee:80:01:ea:36:cf:ab:f2:53:6c:c9:a4:d0:ab:64:
f7:fe:b1:dc:fe:35:ce:e6:44:d5:00:c3:fb:e5:18:ab:6e:8b:
f0:65:4e:6c:dd:55:66:de:7d:7b:d1:82:3d:32:14:e1:05:e6:
f0:b0:b5:b6:b3:93:5b:8c:14:3f:97:36:97:97:11:d1:15:33:
a1:36:fb:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 03:52:23 2025 by rpki-client