Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/2052f3-2be1-417a-a416-dfbd5b5ea760/1/I-_rMup5TJRQkgia5cE1AvdxbN4.mft
File: I-_rMup5TJRQkgia5cE1AvdxbN4.mft (raw, json)
Hash identifier: MpLkpZQIFIMR0ME6Rorw0gCpSWX1fl5/Q4rxHiiI1dk=
Subject key identifier: CF:3F:7C:A1:46:88:88:82:EF:53:59:95:D0:02:E6:9A:60:9E:5C:56
Authority key identifier: 23:EF:EB:32:EA:79:4C:94:50:92:08:9A:E5:C1:35:02:F7:71:6C:DE
Certificate issuer: /CN=23efeb32ea794c945092089ae5c13502f7716cde
Certificate serial: 01984A0A4FC7E23D126F46F5E576C805F5BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I-_rMup5TJRQkgia5cE1AvdxbN4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/2052f3-2be1-417a-a416-dfbd5b5ea760/1/I-_rMup5TJRQkgia5cE1AvdxbN4.mft
Manifest number: 15FE
Signing time: Sun 27 Jul 2025 04:00:46 +0000
Manifest this update: Sun 27 Jul 2025 04:00:46 +0000
Manifest next update: Mon 28 Jul 2025 04:00:46 +0000
Files and hashes: 1: I-_rMup5TJRQkgia5cE1AvdxbN4.crl (hash: lFqM2M/xVCbBfd4uZwzK7+hG+0iWk/VLFP8gF953F14=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/2052f3-2be1-417a-a416-dfbd5b5ea760/1/I-_rMup5TJRQkgia5cE1AvdxbN4.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/2052f3-2be1-417a-a416-dfbd5b5ea760/1/I-_rMup5TJRQkgia5cE1AvdxbN4.mft
rsync://rpki.ripe.net/repository/DEFAULT/I-_rMup5TJRQkgia5cE1AvdxbN4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 04:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:0a:4f:c7:e2:3d:12:6f:46:f5:e5:76:c8:05:f5:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23efeb32ea794c945092089ae5c13502f7716cde
Validity
Not Before: Jul 27 04:00:46 2025 GMT
Not After : Jul 28 04:00:46 2025 GMT
Subject: CN=cf3f7ca146888882ef535995d002e69a609e5c56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:0e:16:16:32:48:48:d7:02:f9:21:8c:83:a1:
37:60:ca:e4:88:a4:37:46:8e:3b:12:4f:43:d6:d2:
08:68:05:ed:aa:f1:b0:58:ec:7c:12:fd:28:c7:1e:
97:71:af:6d:60:68:04:b0:f8:6f:3a:63:d1:6d:61:
48:7a:d0:3a:a3:47:9c:f8:37:24:0c:e8:cd:5c:c3:
69:17:0e:47:7e:65:a6:f8:3b:94:c2:a7:36:36:4b:
aa:fc:2d:ee:62:09:95:cf:76:bd:1f:f7:a7:24:f6:
8c:88:db:64:5c:58:e9:be:b9:a8:09:88:b2:e7:4c:
40:39:b4:f4:62:48:ad:3f:25:18:c0:98:92:40:55:
13:f8:03:40:07:5d:6e:fb:82:9a:eb:26:bf:f9:4f:
d5:87:df:22:39:7a:1f:5e:5b:ba:32:33:91:e2:39:
9d:a6:46:d0:3a:9e:c7:c9:56:8d:7c:24:df:f7:2a:
f5:fe:62:a0:c7:1c:ba:3b:70:82:4b:48:54:ef:40:
d6:1a:48:10:2a:cd:29:cf:80:7b:b9:3c:35:6d:c4:
fd:07:53:8f:b3:03:9c:41:8f:24:bb:29:20:2c:8e:
bc:6e:cc:bc:85:6a:27:97:92:a7:d5:84:62:4c:7f:
5c:6d:42:76:c6:1b:ac:cf:d3:1f:4d:48:38:41:1e:
15:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:3F:7C:A1:46:88:88:82:EF:53:59:95:D0:02:E6:9A:60:9E:5C:56
X509v3 Authority Key Identifier:
keyid:23:EF:EB:32:EA:79:4C:94:50:92:08:9A:E5:C1:35:02:F7:71:6C:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I-_rMup5TJRQkgia5cE1AvdxbN4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/2052f3-2be1-417a-a416-dfbd5b5ea760/1/I-_rMup5TJRQkgia5cE1AvdxbN4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/2052f3-2be1-417a-a416-dfbd5b5ea760/1/I-_rMup5TJRQkgia5cE1AvdxbN4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:d1:8b:99:7d:fc:5b:32:a3:cd:8d:7c:40:54:27:8b:e6:bb:
5c:37:1c:55:04:7f:66:04:37:de:9a:b9:9f:13:51:3b:32:5b:
7d:74:2c:36:0a:a5:09:83:9b:fa:c0:7d:9d:01:a1:aa:56:be:
09:12:30:be:0b:88:db:eb:e2:f5:e1:06:90:88:be:ae:d1:bc:
16:91:1d:1b:6f:de:39:e7:00:49:13:14:a6:89:e7:05:10:96:
dd:c1:de:95:08:e9:d5:f9:3e:ad:e2:72:49:de:34:01:84:1d:
2e:4f:5a:12:c0:48:4e:5b:89:9b:7c:85:04:a8:72:40:51:f0:
6f:2a:54:07:ac:bb:3a:8f:60:78:be:22:6e:9f:78:4d:91:fe:
9f:28:2d:33:cc:f9:fd:7e:69:ef:26:eb:3b:b6:43:e4:01:94:
4c:f7:b8:91:b2:d3:6b:6f:f5:68:19:10:56:e0:5a:fc:2c:9f:
31:1d:43:5a:42:57:64:1e:c4:3a:ec:54:44:26:60:0b:64:1d:
e0:f4:84:d1:cc:d0:6a:c8:ca:7a:ff:8d:0b:8c:88:ba:3e:22:
53:2d:d7:4e:7d:5c:74:31:ba:27:8b:71:76:d0:3d:f0:dc:d7:
f3:d1:3c:f3:94:2f:ed:03:bf:38:86:bc:74:eb:06:d6:49:f1:
03:c6:3f:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 12:09:57 2025 by rpki-client