
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/382fdf-b73c-4979-86c5-ed4498115033/1/fIJLILMxe7jIm-pPDzTQlC0dcU4.mft
File: fIJLILMxe7jIm-pPDzTQlC0dcU4.mft (raw, json)
Hash identifier: jyuxQteUpZZOqMfRqmoQe5XkMSSPJB6eXew/trCOXpE=
Subject key identifier: 18:16:F8:7D:C3:8F:16:9D:E6:BD:5B:AB:44:13:77:E4:73:9E:E1:58
Authority key identifier: 7C:82:4B:20:B3:31:7B:B8:C8:9B:EA:4F:0F:34:D0:94:2D:1D:71:4E
Certificate issuer: /CN=7c824b20b3317bb8c89bea4f0f34d0942d1d714e
Certificate serial: 019848F72ADD40115765A3D2442CC7B19AF7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fIJLILMxe7jIm-pPDzTQlC0dcU4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/382fdf-b73c-4979-86c5-ed4498115033/1/fIJLILMxe7jIm-pPDzTQlC0dcU4.mft
Manifest number: B5
Signing time: Sat 26 Jul 2025 23:00:14 +0000
Manifest this update: Sat 26 Jul 2025 23:00:14 +0000
Manifest next update: Sun 27 Jul 2025 23:00:14 +0000
Files and hashes: 1: fIJLILMxe7jIm-pPDzTQlC0dcU4.crl (hash: 51wvUys5n4MvN/mGi99TRCmBVUdmBAOH4C5WFjMmYmA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/382fdf-b73c-4979-86c5-ed4498115033/1/fIJLILMxe7jIm-pPDzTQlC0dcU4.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/382fdf-b73c-4979-86c5-ed4498115033/1/fIJLILMxe7jIm-pPDzTQlC0dcU4.mft
rsync://rpki.ripe.net/repository/DEFAULT/fIJLILMxe7jIm-pPDzTQlC0dcU4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:f7:2a:dd:40:11:57:65:a3:d2:44:2c:c7:b1:9a:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c824b20b3317bb8c89bea4f0f34d0942d1d714e
Validity
Not Before: Jul 26 23:00:14 2025 GMT
Not After : Jul 27 23:00:14 2025 GMT
Subject: CN=1816f87dc38f169de6bd5bab441377e4739ee158
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:29:80:98:b7:b3:6f:0e:80:67:e1:4b:94:a5:
0d:5f:d0:4d:6f:d1:cb:22:96:47:c0:13:07:52:05:
34:14:db:10:ae:1b:d9:a0:2a:62:f5:bf:f7:7c:41:
ab:54:dd:a8:e5:71:3b:96:7f:04:86:7c:78:f6:9f:
81:c9:d3:a0:25:34:9c:61:f6:25:75:ef:7a:fd:46:
af:d6:bf:c0:0c:93:06:8b:9c:81:5a:cf:93:62:49:
3f:03:e4:f9:12:30:24:80:5c:b5:81:ee:e2:66:b9:
40:22:81:28:9a:30:22:22:92:6b:25:ca:ec:cb:4e:
65:f5:fb:c0:e0:85:a5:a3:ed:97:3b:bd:2f:2c:e1:
a4:68:f7:17:a1:86:c1:1c:4d:9c:f0:79:71:99:b5:
70:10:88:6d:34:67:86:98:bc:a5:94:10:1e:85:9d:
07:f1:01:e8:1a:4e:36:09:d2:9c:a2:97:94:1e:61:
a1:4c:2f:36:90:ab:6b:9e:e0:a1:9b:c3:4a:75:d0:
a5:18:83:89:b0:e8:d5:8f:77:3d:6d:e3:94:4c:20:
c9:86:96:28:66:ba:7d:73:26:fd:70:4b:c6:08:29:
18:70:67:c5:e0:6a:e3:45:ad:42:ac:24:b0:a5:cc:
7d:6a:fd:97:86:ea:c9:31:07:f8:1c:f8:ae:88:5b:
fa:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:16:F8:7D:C3:8F:16:9D:E6:BD:5B:AB:44:13:77:E4:73:9E:E1:58
X509v3 Authority Key Identifier:
keyid:7C:82:4B:20:B3:31:7B:B8:C8:9B:EA:4F:0F:34:D0:94:2D:1D:71:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fIJLILMxe7jIm-pPDzTQlC0dcU4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/382fdf-b73c-4979-86c5-ed4498115033/1/fIJLILMxe7jIm-pPDzTQlC0dcU4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/382fdf-b73c-4979-86c5-ed4498115033/1/fIJLILMxe7jIm-pPDzTQlC0dcU4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:cb:b2:21:b1:71:f4:bb:63:a6:fb:2d:5c:ce:44:9a:b3:5e:
9b:9e:3e:69:81:b9:46:e9:e7:a2:f0:de:0d:6b:31:37:50:d2:
f4:34:a9:ca:1b:d6:3b:50:3a:19:e4:f0:38:54:6c:bc:9e:86:
6e:0c:21:06:41:e2:06:55:59:cc:e9:46:98:00:91:14:55:67:
72:7a:78:23:ae:e8:0d:64:66:b5:00:b0:b9:69:35:4c:f9:82:
94:75:27:9f:be:01:50:b3:ee:e9:0c:83:11:66:a9:7c:de:05:
c4:8e:88:61:db:9e:e9:12:13:90:8b:dc:b3:d6:ba:37:33:5f:
f5:cc:93:8e:c1:1f:30:bb:e0:4e:89:57:18:c5:68:5f:1e:62:
4f:82:3e:3b:50:da:5b:8e:21:cc:cc:58:70:f3:ab:4b:d2:a1:
b7:9a:63:b5:0d:a7:cb:a2:60:46:30:cf:c3:42:68:ef:b5:7c:
32:a6:05:bb:21:0d:7b:c7:70:aa:5b:26:1b:f2:38:f2:10:9d:
73:d7:3d:58:5c:87:d9:34:47:c8:4a:75:bd:89:3c:b1:f2:cd:
a2:23:bb:4b:f8:48:f6:f5:85:a4:26:4b:d9:af:5c:51:b6:1b:
0d:33:da:f7:d4:1d:41:44:d9:e7:e6:a2:ca:b9:4f:58:3c:5b:
11:a5:77:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 03:49:15 2025 by rpki-client