Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/7c3c4e-26db-4105-9918-352473dd5179/1/cSsCxFx16_ctVtM8KAKXwq6H6y0.mft
File: cSsCxFx16_ctVtM8KAKXwq6H6y0.mft (raw, json)
Hash identifier: zUe1M/sFv7+xAar4Jo6vGAaLOwv8EpiPP9oImROe2/0=
Subject key identifier: D2:1A:96:B8:DD:80:D3:CB:1E:56:48:D9:CB:D2:08:93:20:AC:10:84
Authority key identifier: 71:2B:02:C4:5C:75:EB:F7:2D:56:D3:3C:28:02:97:C2:AE:87:EB:2D
Certificate issuer: /CN=712b02c45c75ebf72d56d33c280297c2ae87eb2d
Certificate serial: 01989D4C259D1AABEBFFEA1A8A069C2EE949
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cSsCxFx16_ctVtM8KAKXwq6H6y0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/7c3c4e-26db-4105-9918-352473dd5179/1/cSsCxFx16_ctVtM8KAKXwq6H6y0.mft
Manifest number: 027B
Signing time: Tue 12 Aug 2025 08:01:09 +0000
Manifest this update: Tue 12 Aug 2025 08:01:09 +0000
Manifest next update: Wed 13 Aug 2025 08:01:09 +0000
Files and hashes: 1: cSsCxFx16_ctVtM8KAKXwq6H6y0.crl (hash: e5+rxPPvJH1EtGTAIDU4RbO5xOdKsNWbhx6Y4lDCANU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/7c3c4e-26db-4105-9918-352473dd5179/1/cSsCxFx16_ctVtM8KAKXwq6H6y0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/7c3c4e-26db-4105-9918-352473dd5179/1/cSsCxFx16_ctVtM8KAKXwq6H6y0.mft
rsync://rpki.ripe.net/repository/DEFAULT/cSsCxFx16_ctVtM8KAKXwq6H6y0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 08:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:9d:4c:25:9d:1a:ab:eb:ff:ea:1a:8a:06:9c:2e:e9:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=712b02c45c75ebf72d56d33c280297c2ae87eb2d
Validity
Not Before: Aug 12 08:01:09 2025 GMT
Not After : Aug 13 08:01:09 2025 GMT
Subject: CN=d21a96b8dd80d3cb1e5648d9cbd2089320ac1084
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:32:e8:87:f3:04:cb:eb:6c:de:6c:48:54:bf:
6c:d2:9c:7b:88:a7:45:d5:c7:e6:88:50:16:00:f8:
c4:e6:74:fa:a8:9a:68:d4:2f:38:d2:cd:cb:d3:fd:
1c:bc:42:d2:6e:5f:03:ae:bd:86:5f:65:94:b3:0c:
31:98:28:a5:6f:2e:4d:8b:0e:94:c8:bc:95:26:7b:
07:56:a0:bb:21:aa:0b:9d:f4:23:21:16:39:e2:4e:
98:13:a6:40:38:bb:51:60:5b:55:0d:98:ee:22:f9:
1a:17:24:57:2a:87:d7:71:f3:a4:51:d2:b0:86:49:
98:2a:3d:ea:b1:f0:7c:8c:8b:48:45:fe:5e:b5:4b:
e8:99:37:ee:46:1e:b6:e0:24:e6:2f:33:31:10:b1:
82:a8:85:f4:66:7f:52:8b:b8:63:1e:1a:0d:2a:be:
80:0d:0c:a1:86:53:fb:bd:d1:6f:0d:f6:f8:76:29:
f4:5b:78:75:21:08:3c:38:e2:0b:4b:4b:fb:3c:77:
c0:fb:af:92:d6:a7:72:5c:57:c6:5e:51:5f:2f:dc:
04:22:9a:1e:23:f0:cd:3c:cd:2f:4f:ca:aa:68:bc:
03:ad:da:6e:31:a1:04:bd:bc:6a:a5:83:5c:66:13:
25:8a:b1:6e:21:ee:9c:85:f9:2c:ff:19:21:44:97:
07:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:1A:96:B8:DD:80:D3:CB:1E:56:48:D9:CB:D2:08:93:20:AC:10:84
X509v3 Authority Key Identifier:
keyid:71:2B:02:C4:5C:75:EB:F7:2D:56:D3:3C:28:02:97:C2:AE:87:EB:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cSsCxFx16_ctVtM8KAKXwq6H6y0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/7c3c4e-26db-4105-9918-352473dd5179/1/cSsCxFx16_ctVtM8KAKXwq6H6y0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/7c3c4e-26db-4105-9918-352473dd5179/1/cSsCxFx16_ctVtM8KAKXwq6H6y0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:c8:4c:e8:35:59:49:42:95:6a:af:a3:5c:8a:09:59:45:fb:
51:81:e4:7f:0e:b7:5f:5a:1c:e1:38:87:d4:f6:9e:57:8d:c1:
1d:7d:99:d4:b6:6f:98:97:fb:55:51:b0:2e:67:82:7c:a6:6a:
3f:e3:84:46:d4:2a:6f:68:7d:9c:cf:b8:32:88:ca:50:bb:89:
33:b3:e1:d3:fb:75:f9:17:66:26:d1:d7:69:29:51:ad:34:10:
a3:e1:b2:6f:77:17:49:04:00:d2:18:f9:41:7e:81:e0:c5:76:
28:c9:17:6b:b8:59:20:92:cd:73:6c:ae:d9:da:d9:e7:81:d4:
ca:f8:e3:fe:1e:8b:82:b3:81:c4:04:b5:4a:27:7b:96:b3:51:
eb:45:c6:76:5a:a8:eb:58:75:66:6e:8c:f2:34:fa:2c:3f:15:
8b:f8:da:db:14:99:4c:3d:3c:f6:ba:21:d0:60:e9:73:b7:ce:
28:93:66:fa:ad:94:43:ab:d5:52:59:ca:8e:b0:8a:94:ed:4a:
b3:5d:8d:c1:ad:b4:be:a7:bb:2c:a6:1e:aa:99:0e:51:4a:9d:
f5:13:28:64:93:b0:b2:67:8d:cb:e6:47:09:57:79:48:86:7f:
52:57:fa:10:e8:63:f8:0d:86:f9:66:da:af:8f:99:d8:24:0b:
05:47:98:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 12 13:45:48 2025 by rpki-client