Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/2684fb-1edb-4142-b2b6-f090d91dcbf8/1/Cnu83lfYWz-xqty6nJl3Xhnu7z4.mft
File: Cnu83lfYWz-xqty6nJl3Xhnu7z4.mft (raw, json)
Hash identifier: eL0KgAIZZ4QcJmHmHXD7uQ+MNTgx6eP85R+aNYXzY4k=
Subject key identifier: C4:C8:9E:5E:3E:2C:CE:72:7F:10:B1:F7:2B:48:2A:E6:BE:53:B6:E1
Authority key identifier: 0A:7B:BC:DE:57:D8:5B:3F:B1:AA:DC:BA:9C:99:77:5E:19:EE:EF:3E
Certificate issuer: /CN=0a7bbcde57d85b3fb1aadcba9c99775e19eeef3e
Certificate serial: 01988B0F9F57D291C149B0921A2347BB838C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cnu83lfYWz-xqty6nJl3Xhnu7z4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/2684fb-1edb-4142-b2b6-f090d91dcbf8/1/Cnu83lfYWz-xqty6nJl3Xhnu7z4.mft
Manifest number: 063A
Signing time: Fri 08 Aug 2025 19:01:53 +0000
Manifest this update: Fri 08 Aug 2025 19:01:53 +0000
Manifest next update: Sat 09 Aug 2025 19:01:53 +0000
Files and hashes: 1: Cnu83lfYWz-xqty6nJl3Xhnu7z4.crl (hash: S0TrV5N4QSMrYwJMSaQ93BB1npbY7tpoRzXMv9sQHxA=)
2: F9XGZi-RuqVcSe1fpzN4q7qIdc4.roa (hash: f6T7R08rHMZ0z6ganX/KnRpxEiznu3aFpX2FIokh414=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/2684fb-1edb-4142-b2b6-f090d91dcbf8/1/Cnu83lfYWz-xqty6nJl3Xhnu7z4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/2684fb-1edb-4142-b2b6-f090d91dcbf8/1/Cnu83lfYWz-xqty6nJl3Xhnu7z4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Cnu83lfYWz-xqty6nJl3Xhnu7z4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 19:01:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8b:0f:9f:57:d2:91:c1:49:b0:92:1a:23:47:bb:83:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a7bbcde57d85b3fb1aadcba9c99775e19eeef3e
Validity
Not Before: Aug 8 19:01:53 2025 GMT
Not After : Aug 9 19:01:53 2025 GMT
Subject: CN=c4c89e5e3e2cce727f10b1f72b482ae6be53b6e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:2f:5e:be:6e:13:a3:ca:d5:10:fb:80:5a:a1:
e9:05:94:6b:a0:0f:35:ff:7a:86:1e:c6:7d:9c:a8:
5d:74:9f:f2:53:d8:3f:1c:ea:de:ae:29:69:c8:1b:
0f:52:1c:cd:88:c2:2d:ed:0d:b0:30:f7:d0:89:bc:
91:0f:20:87:b1:2f:40:3f:51:34:2c:18:58:c3:eb:
44:f6:aa:59:c1:3a:55:1e:13:c0:f0:32:45:d5:81:
83:69:7f:16:b7:bf:30:6f:f2:50:1e:3a:9c:63:42:
77:72:9e:15:03:51:97:c5:80:6f:dd:59:25:ee:31:
a5:1d:91:44:51:37:4d:aa:0f:cd:0a:58:6f:2a:ad:
a0:c1:74:95:51:39:ed:9f:a9:51:7b:e3:21:41:bb:
60:d0:1c:3a:7c:bb:45:32:05:fa:16:82:4c:e5:f5:
68:a5:30:b0:bf:50:54:bc:4b:f9:b3:56:55:b9:b9:
fe:04:bd:31:0b:a0:64:47:89:88:9a:c9:c3:d0:b9:
a8:f3:a9:6b:c1:05:29:56:59:af:55:ba:ba:4c:47:
c5:22:d5:e1:41:0e:11:3e:79:04:4e:e6:34:94:b8:
b8:c3:12:6e:fb:22:39:5e:30:de:fe:af:62:b9:c1:
6e:44:f6:86:8a:75:3c:91:a3:4b:1b:00:bf:a6:8d:
5d:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:C8:9E:5E:3E:2C:CE:72:7F:10:B1:F7:2B:48:2A:E6:BE:53:B6:E1
X509v3 Authority Key Identifier:
keyid:0A:7B:BC:DE:57:D8:5B:3F:B1:AA:DC:BA:9C:99:77:5E:19:EE:EF:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cnu83lfYWz-xqty6nJl3Xhnu7z4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/2684fb-1edb-4142-b2b6-f090d91dcbf8/1/Cnu83lfYWz-xqty6nJl3Xhnu7z4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/2684fb-1edb-4142-b2b6-f090d91dcbf8/1/Cnu83lfYWz-xqty6nJl3Xhnu7z4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:3a:3c:a7:bc:2d:84:16:0c:b9:08:c2:e5:2d:4e:4a:02:19:
61:eb:96:85:88:49:4a:56:7b:fd:5d:e7:cd:45:6f:58:48:dc:
fc:c3:9b:2d:fc:a7:6a:f3:7b:65:be:87:b8:ba:b1:d0:62:2f:
57:f5:ad:c7:4b:8e:f2:22:ea:e0:f5:39:6c:bd:05:18:cd:33:
be:0a:53:06:c5:5e:07:31:f1:4f:eb:34:15:1c:ef:aa:bf:bd:
c3:60:c5:99:de:c1:0f:d1:89:50:aa:04:d6:d4:97:cb:f2:ed:
29:c3:f3:ee:75:83:9e:b6:8c:8e:e1:8b:52:d8:80:d0:9e:64:
42:d1:37:c1:d4:1e:d3:34:63:05:8e:17:a3:0a:e4:27:7e:45:
15:1b:ac:07:60:bc:e2:6c:3e:f1:71:0f:0b:ae:5e:22:ed:45:
42:8c:aa:2a:7d:e4:d5:2c:4a:a7:83:8a:6f:af:1f:e9:68:01:
0e:84:98:04:6b:00:d6:15:86:66:a3:ba:b9:01:c8:25:01:80:
0e:60:ae:39:0e:09:f2:d1:26:96:61:34:45:7a:15:ac:2c:f9:
7d:9c:cc:f1:23:18:55:07:9e:14:93:7b:cf:17:34:20:5a:f5:
29:db:36:9c:89:69:34:9c:d1:d2:e1:6b:d4:67:19:cb:9b:77:
d4:f2:59:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 05:35:09 2025 by rpki-client