Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/7bf9ad-3591-4ca5-b2fd-cdb5c0e2d75d/1/McNWgQ1FrfUs8Z-wsNIPfzRooOk.mft
File: McNWgQ1FrfUs8Z-wsNIPfzRooOk.mft (raw, json)
Hash identifier: Bdeb45dz0X6fiU1kKRdFjQRLo05t9IrZT7bnhs1cNnI=
Subject key identifier: 25:CE:8A:F6:4C:23:AA:F2:2A:D2:BA:A9:0D:D3:B6:E8:7E:9F:0C:15
Authority key identifier: 31:C3:56:81:0D:45:AD:F5:2C:F1:9F:B0:B0:D2:0F:7F:34:68:A0:E9
Certificate issuer: /CN=31c356810d45adf52cf19fb0b0d20f7f3468a0e9
Certificate serial: 0198808B7FB678677687AD966BCE205B3D48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/McNWgQ1FrfUs8Z-wsNIPfzRooOk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/7bf9ad-3591-4ca5-b2fd-cdb5c0e2d75d/1/McNWgQ1FrfUs8Z-wsNIPfzRooOk.mft
Manifest number: 39
Signing time: Wed 06 Aug 2025 18:01:22 +0000
Manifest this update: Wed 06 Aug 2025 18:01:22 +0000
Manifest next update: Thu 07 Aug 2025 18:01:22 +0000
Files and hashes: 1: McNWgQ1FrfUs8Z-wsNIPfzRooOk.crl (hash: WvAK4WlfB7ALEodhinFFghuJwSedTxT7KUemZDuj1RU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/7bf9ad-3591-4ca5-b2fd-cdb5c0e2d75d/1/McNWgQ1FrfUs8Z-wsNIPfzRooOk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/7bf9ad-3591-4ca5-b2fd-cdb5c0e2d75d/1/McNWgQ1FrfUs8Z-wsNIPfzRooOk.mft
rsync://rpki.ripe.net/repository/DEFAULT/McNWgQ1FrfUs8Z-wsNIPfzRooOk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 18:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:80:8b:7f:b6:78:67:76:87:ad:96:6b:ce:20:5b:3d:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31c356810d45adf52cf19fb0b0d20f7f3468a0e9
Validity
Not Before: Aug 6 18:01:22 2025 GMT
Not After : Aug 7 18:01:22 2025 GMT
Subject: CN=25ce8af64c23aaf22ad2baa90dd3b6e87e9f0c15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:cb:09:f8:7f:f9:54:62:2a:03:5e:d3:4c:03:
84:87:10:c8:4b:f2:b1:ab:06:bd:3d:6e:c7:d1:4f:
5d:49:55:85:64:58:82:8d:7c:ba:9b:a3:14:d4:88:
df:d8:ee:18:1a:a8:f2:e0:d2:fa:88:ad:d0:03:10:
15:82:ec:bb:6e:52:cf:a8:a1:e7:8e:17:14:74:d8:
4c:f8:d4:44:cd:ae:c6:83:45:2d:ff:8c:80:7f:94:
f8:5b:a6:86:4a:ef:5e:7e:59:d0:4b:f6:8a:27:67:
3a:10:f1:a2:0b:2a:95:b6:96:84:43:20:4e:10:7e:
23:da:57:ea:63:9c:04:3d:42:48:8e:08:73:0d:f1:
ef:d4:ef:8c:07:ae:35:53:c2:92:a5:b1:ea:90:28:
5c:5f:a2:aa:ae:0c:4a:4e:16:a9:46:3e:f7:51:e9:
47:4e:19:59:31:d5:7d:7a:0d:bd:45:78:eb:8e:15:
27:12:a1:55:66:2a:f6:4f:96:52:2d:f9:8e:3d:99:
85:b1:4e:0a:17:97:6b:fe:23:26:8b:59:16:41:10:
f3:11:d2:99:83:89:1e:56:9e:6e:b8:82:c9:5a:da:
19:51:e9:e2:a8:65:29:b0:5e:cb:ce:81:b3:68:8c:
38:57:1d:65:9b:2e:a4:83:b0:9a:06:e7:b4:f9:f2:
14:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:CE:8A:F6:4C:23:AA:F2:2A:D2:BA:A9:0D:D3:B6:E8:7E:9F:0C:15
X509v3 Authority Key Identifier:
keyid:31:C3:56:81:0D:45:AD:F5:2C:F1:9F:B0:B0:D2:0F:7F:34:68:A0:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/McNWgQ1FrfUs8Z-wsNIPfzRooOk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/7bf9ad-3591-4ca5-b2fd-cdb5c0e2d75d/1/McNWgQ1FrfUs8Z-wsNIPfzRooOk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/7bf9ad-3591-4ca5-b2fd-cdb5c0e2d75d/1/McNWgQ1FrfUs8Z-wsNIPfzRooOk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:a4:74:8a:a1:66:3d:44:04:4d:9c:d3:cb:9e:c4:0f:1e:03:
77:07:fe:a6:6e:f6:5d:8a:18:c0:46:f8:13:bb:86:ce:db:c0:
5e:e9:2a:8f:d4:dc:46:cc:6e:19:e0:cf:8d:10:87:e9:6f:f2:
75:ba:a8:21:9a:2c:6e:a3:b8:99:26:b7:be:0d:12:f5:66:12:
ab:22:55:3c:25:7a:73:e1:c9:da:ee:05:3e:72:42:86:38:a9:
c8:e4:08:4e:28:72:e0:17:98:9c:f0:04:c7:97:3b:2c:77:41:
0e:4f:c5:b8:ef:5b:05:8b:2b:5a:c6:23:77:31:cd:35:0d:df:
ff:09:03:27:da:d6:01:cd:04:1a:47:a8:f3:42:5b:43:f2:61:
ff:c5:30:67:a1:56:e7:f6:44:ae:2e:85:35:17:5f:fe:e7:e3:
c1:ea:e8:26:54:60:ab:af:67:cc:e0:ca:fd:39:28:60:5a:6f:
63:d3:4a:26:db:ad:dd:6a:0e:4f:d0:0c:8e:b0:ce:b4:5a:00:
df:b3:9e:c1:85:98:12:a8:27:62:5b:5f:56:9f:59:3c:f8:16:
cf:96:db:8f:17:e9:ba:9d:dd:b6:a7:dc:79:1d:14:e3:20:53:
72:81:10:cc:87:39:86:b1:83:fc:3b:5f:ef:69:46:f5:9f:7b:
4f:7c:6a:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 03:15:26 2025 by rpki-client