Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/cbe8e7-5a78-4558-9951-84accecc51f0/1/Ay05zpG-hnz1zhtgCdUmLCi2Ugk.mft
File: Ay05zpG-hnz1zhtgCdUmLCi2Ugk.mft (raw, json)
Hash identifier: Zlx4aIqGn7Mv96mXYnLEoGNVPW8teGehqSnnXdClqXI=
Subject key identifier: 05:5D:A5:0B:63:01:80:BC:F3:EB:C1:AF:1E:54:37:15:D2:DE:11:1E
Authority key identifier: 03:2D:39:CE:91:BE:86:7C:F5:CE:1B:60:09:D5:26:2C:28:B6:52:09
Certificate issuer: /CN=032d39ce91be867cf5ce1b6009d5262c28b65209
Certificate serial: 01989600753EB8BB54D7A8FBC1014BF9EECF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ay05zpG-hnz1zhtgCdUmLCi2Ugk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/cbe8e7-5a78-4558-9951-84accecc51f0/1/Ay05zpG-hnz1zhtgCdUmLCi2Ugk.mft
Manifest number: 1625
Signing time: Sun 10 Aug 2025 22:01:09 +0000
Manifest this update: Sun 10 Aug 2025 22:01:09 +0000
Manifest next update: Mon 11 Aug 2025 22:01:09 +0000
Files and hashes: 1: Ay05zpG-hnz1zhtgCdUmLCi2Ugk.crl (hash: MRIK8LdeBet4pMexodmCvHFvApHZ1/mAikKH3yxvbmI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/cbe8e7-5a78-4558-9951-84accecc51f0/1/Ay05zpG-hnz1zhtgCdUmLCi2Ugk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/cbe8e7-5a78-4558-9951-84accecc51f0/1/Ay05zpG-hnz1zhtgCdUmLCi2Ugk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ay05zpG-hnz1zhtgCdUmLCi2Ugk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 17:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:96:00:75:3e:b8:bb:54:d7:a8:fb:c1:01:4b:f9:ee:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=032d39ce91be867cf5ce1b6009d5262c28b65209
Validity
Not Before: Aug 10 22:01:09 2025 GMT
Not After : Aug 11 22:01:09 2025 GMT
Subject: CN=055da50b630180bcf3ebc1af1e543715d2de111e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:9b:2e:2f:aa:48:c5:49:79:b8:1c:5f:66:14:
ca:51:8b:30:d7:1f:11:4a:19:da:0c:a9:7d:9d:58:
4a:2f:1d:61:60:6c:02:8f:03:9b:20:d4:12:70:34:
6c:cf:10:c6:c1:22:52:05:b5:85:e1:05:bc:81:e0:
95:6f:0f:49:bf:7b:8c:a0:ee:e5:d4:1d:7b:e1:d2:
c9:81:46:fa:85:3b:2a:04:c2:85:9e:45:c7:a0:47:
65:c4:38:04:74:97:68:e5:66:d1:13:d1:5f:81:52:
ab:bd:44:5d:c9:38:dd:74:c0:af:a4:5b:df:55:e2:
b6:02:d9:20:87:cf:6a:4d:49:e6:a2:6e:e5:1f:52:
56:5d:44:4a:f8:d5:8d:67:13:11:bc:9b:a8:22:a2:
30:26:69:85:dd:ce:01:df:6c:0d:3e:46:bd:62:2c:
67:c0:37:a0:d4:aa:8a:57:b7:60:92:7f:f0:28:a0:
56:46:82:d4:c3:0d:86:2e:d9:1c:95:3b:4c:e0:d2:
a1:74:5e:87:b6:97:6c:13:64:3b:05:e0:8a:da:24:
6b:a7:19:9c:4a:ac:6d:fd:3c:d2:c1:84:9d:a7:03:
75:6f:e6:43:58:08:e7:90:cc:36:14:f4:db:99:5a:
f3:b9:dc:f6:f5:66:82:3d:e8:52:f7:40:6d:ae:6a:
16:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:5D:A5:0B:63:01:80:BC:F3:EB:C1:AF:1E:54:37:15:D2:DE:11:1E
X509v3 Authority Key Identifier:
keyid:03:2D:39:CE:91:BE:86:7C:F5:CE:1B:60:09:D5:26:2C:28:B6:52:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ay05zpG-hnz1zhtgCdUmLCi2Ugk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/cbe8e7-5a78-4558-9951-84accecc51f0/1/Ay05zpG-hnz1zhtgCdUmLCi2Ugk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/cbe8e7-5a78-4558-9951-84accecc51f0/1/Ay05zpG-hnz1zhtgCdUmLCi2Ugk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:3c:6d:f5:1f:60:84:ac:51:70:18:bc:50:c8:35:30:ae:8d:
e2:18:a2:9c:18:27:27:21:ed:d5:92:36:fa:e7:bf:34:89:69:
1a:4b:91:1e:80:93:14:1d:72:fa:bd:aa:71:ed:00:1d:2c:e8:
bd:da:20:5c:39:e3:e2:5d:7e:34:46:7b:21:0d:6d:b2:58:a4:
2f:ff:d3:79:c4:9e:cf:64:26:e9:9f:9f:f8:d7:81:46:16:e4:
9a:ee:88:83:5b:55:40:8f:dd:d9:56:d6:84:4c:f4:71:5a:8e:
f7:61:65:33:47:46:dd:de:77:5f:ae:0c:73:9b:49:f6:6d:b3:
69:18:fd:62:5f:37:a7:a9:da:fd:e8:e8:03:48:94:ff:03:f5:
e0:62:42:d6:c6:97:53:fe:a3:35:49:81:b7:26:8c:f8:07:07:
02:75:3a:e4:c3:94:f2:a4:91:ba:2d:cd:cf:97:05:f2:2e:89:
d6:de:3a:53:62:9b:bb:15:f4:e0:a8:45:b6:8d:47:e5:bf:bf:
57:5f:0f:2d:02:b9:21:8f:75:fa:fb:c7:95:9f:c4:d4:d4:8b:
ab:ff:e4:8b:fa:43:81:ac:c1:3b:30:77:71:fc:02:a5:65:17:
7b:0a:a3:44:2f:5a:8c:32:cd:69:f3:b0:a0:65:38:c6:d4:35:
d6:11:a0:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 01:48:58 2025 by rpki-client