Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/f2ccc0-3732-4351-b770-6b0da9e4fb10/1/IClZ7xuVPXmKoPVkMafxG2vhltY.mft
File: IClZ7xuVPXmKoPVkMafxG2vhltY.mft (raw, json)
Hash identifier: oorCrme41SNrKbKqxf2dGDAqtID/R+3qREvvRno69lo=
Subject key identifier: 15:B9:40:32:52:89:4A:35:7D:94:76:C9:78:E0:F6:B7:C8:DF:BC:48
Authority key identifier: 20:29:59:EF:1B:95:3D:79:8A:A0:F5:64:31:A7:F1:1B:6B:E1:96:D6
Certificate issuer: /CN=202959ef1b953d798aa0f56431a7f11b6be196d6
Certificate serial: 019848529A7EA7D2B264DE0437B44499F41F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IClZ7xuVPXmKoPVkMafxG2vhltY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/f2ccc0-3732-4351-b770-6b0da9e4fb10/1/IClZ7xuVPXmKoPVkMafxG2vhltY.mft
Manifest number: 11F9
Signing time: Sat 26 Jul 2025 20:00:29 +0000
Manifest this update: Sat 26 Jul 2025 20:00:29 +0000
Manifest next update: Sun 27 Jul 2025 20:00:29 +0000
Files and hashes: 1: IClZ7xuVPXmKoPVkMafxG2vhltY.crl (hash: gwYPMq+bUkTIbVRiiGCD449vdNx3tu2gmeJh1XufEgA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/f2ccc0-3732-4351-b770-6b0da9e4fb10/1/IClZ7xuVPXmKoPVkMafxG2vhltY.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/f2ccc0-3732-4351-b770-6b0da9e4fb10/1/IClZ7xuVPXmKoPVkMafxG2vhltY.mft
rsync://rpki.ripe.net/repository/DEFAULT/IClZ7xuVPXmKoPVkMafxG2vhltY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 15:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:52:9a:7e:a7:d2:b2:64:de:04:37:b4:44:99:f4:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=202959ef1b953d798aa0f56431a7f11b6be196d6
Validity
Not Before: Jul 26 20:00:29 2025 GMT
Not After : Jul 27 20:00:29 2025 GMT
Subject: CN=15b9403252894a357d9476c978e0f6b7c8dfbc48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:b7:e4:89:bd:ec:53:58:0d:37:e9:21:d1:53:
c1:3e:55:76:a3:e1:c7:53:8d:67:41:89:dd:d6:68:
fa:b6:b9:04:5a:4c:f5:4b:09:1b:1a:1e:83:25:dd:
68:d1:a0:f5:7a:50:81:a4:76:ed:ed:68:6a:c3:d8:
7c:58:18:af:55:a4:78:33:9d:f8:d8:04:05:b0:0d:
63:99:b0:a1:58:94:d4:0a:19:84:d8:98:48:68:d1:
36:cc:d9:9f:15:0f:9b:8f:36:75:70:0d:49:07:ac:
f6:18:31:b2:90:3e:d0:54:12:9a:70:f9:29:52:9c:
55:3e:36:ce:22:c4:31:be:84:c2:cf:a1:cc:10:bb:
20:dc:e7:bb:6a:4a:3a:56:9d:9e:87:0a:20:ea:1f:
14:82:53:82:35:de:07:80:9b:89:e9:e2:42:64:92:
61:4c:40:50:9e:91:31:d8:38:62:8d:7f:52:8f:bb:
e6:dc:24:1d:e9:bf:46:34:ba:25:ad:d2:c1:2a:c9:
f3:f9:ea:6a:87:9a:5f:76:34:4c:13:22:63:a7:d3:
04:28:2d:bf:84:65:0e:ce:53:ec:d5:e7:5a:22:08:
8a:54:35:d6:75:87:d8:95:e4:4f:b9:d4:d1:c9:4f:
dd:f1:ba:0b:ed:ed:40:40:c6:7b:10:99:9e:d2:d2:
20:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:B9:40:32:52:89:4A:35:7D:94:76:C9:78:E0:F6:B7:C8:DF:BC:48
X509v3 Authority Key Identifier:
keyid:20:29:59:EF:1B:95:3D:79:8A:A0:F5:64:31:A7:F1:1B:6B:E1:96:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IClZ7xuVPXmKoPVkMafxG2vhltY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/f2ccc0-3732-4351-b770-6b0da9e4fb10/1/IClZ7xuVPXmKoPVkMafxG2vhltY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/f2ccc0-3732-4351-b770-6b0da9e4fb10/1/IClZ7xuVPXmKoPVkMafxG2vhltY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:f9:bd:c5:29:d2:b4:06:d9:aa:7a:50:1d:30:6b:34:f6:d2:
78:86:98:c8:c6:7d:58:46:71:83:00:64:ed:5a:c8:7e:01:e0:
e3:d3:91:07:f6:06:e6:9e:c2:26:63:78:04:e5:f8:7e:81:f9:
67:bb:73:e7:c6:08:9d:df:84:bf:91:12:46:de:b7:f2:06:a4:
ec:b5:57:e0:a0:ed:b6:f8:28:40:b4:49:bc:25:1f:ce:57:78:
0f:ac:4f:b9:eb:6f:60:09:a6:f3:16:42:ed:6c:ba:30:8f:f8:
13:3e:64:4d:da:1d:78:07:30:04:63:df:c6:02:f6:83:17:a2:
59:e0:9e:cd:40:a5:68:49:34:c5:2b:21:4f:7e:63:6e:77:ba:
b0:34:64:06:6f:47:9c:e7:1b:c3:92:97:9c:ca:bc:31:ea:96:
4c:16:bc:27:52:91:da:93:7a:31:b4:d2:9e:5e:5a:46:31:65:
05:11:b8:ef:cb:c8:4a:35:c2:ac:32:93:a8:11:04:e6:3e:4e:
a9:c7:91:8c:47:c8:24:82:a8:91:c5:61:45:8e:36:12:58:28:
2d:e4:a1:84:2b:7b:2f:5d:be:13:25:6f:cf:fd:24:5b:44:95:
09:80:e0:d2:79:5d:74:6e:5d:4a:ce:20:dc:6a:19:06:6d:bb:
8a:cd:2a:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 00:30:00 2025 by rpki-client