Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/031138-86e1-4182-a7a6-0107ec33e5b7/1/1W_iwM_XaRBE7jeEXPz1ThqEmXQ.mft
File: 1W_iwM_XaRBE7jeEXPz1ThqEmXQ.mft (raw, json)
Hash identifier: lpILmmq2xunuoIPUuyoxR11tc4p+vezqP3HB59agFjs=
Subject key identifier: A8:84:05:E5:85:23:71:7F:A5:B0:0B:1C:C6:07:0F:7F:10:0E:47:54
Authority key identifier: D5:6F:E2:C0:CF:D7:69:10:44:EE:37:84:5C:FC:F5:4E:1A:84:99:74
Certificate issuer: /CN=d56fe2c0cfd7691044ee37845cfcf54e1a849974
Certificate serial: 019848C0741917248A3430D1468D2B232DA9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1W_iwM_XaRBE7jeEXPz1ThqEmXQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/031138-86e1-4182-a7a6-0107ec33e5b7/1/1W_iwM_XaRBE7jeEXPz1ThqEmXQ.mft
Manifest number: 15FF
Signing time: Sat 26 Jul 2025 22:00:28 +0000
Manifest this update: Sat 26 Jul 2025 22:00:28 +0000
Manifest next update: Sun 27 Jul 2025 22:00:28 +0000
Files and hashes: 1: 1W_iwM_XaRBE7jeEXPz1ThqEmXQ.crl (hash: kE+DvM2RV0Qbk1rr5dTf61u+Vm8e4o+pYZ8T3+t1cXI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/031138-86e1-4182-a7a6-0107ec33e5b7/1/1W_iwM_XaRBE7jeEXPz1ThqEmXQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/031138-86e1-4182-a7a6-0107ec33e5b7/1/1W_iwM_XaRBE7jeEXPz1ThqEmXQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1W_iwM_XaRBE7jeEXPz1ThqEmXQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:c0:74:19:17:24:8a:34:30:d1:46:8d:2b:23:2d:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d56fe2c0cfd7691044ee37845cfcf54e1a849974
Validity
Not Before: Jul 26 22:00:28 2025 GMT
Not After : Jul 27 22:00:28 2025 GMT
Subject: CN=a88405e58523717fa5b00b1cc6070f7f100e4754
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:82:eb:5b:6f:7b:ff:f0:17:9a:48:cc:be:49:
df:eb:f8:36:0c:95:6e:56:9d:10:97:78:26:d8:98:
71:02:5a:e3:7c:60:71:3b:82:8b:a2:cf:bc:d0:6f:
2a:2a:b9:ed:ab:a1:b9:37:85:c2:c3:a1:4d:e9:e7:
74:c8:6f:e8:65:2f:46:30:cf:f5:5b:1d:42:52:25:
82:2e:82:d6:d8:b5:d8:c2:53:f0:cb:4d:bc:6e:a8:
06:21:ec:dd:b6:09:64:9b:8b:92:21:cf:3b:2f:08:
c1:6f:cd:d3:b5:94:ba:b5:e6:ba:42:0f:f7:e7:2c:
29:2b:f3:b2:c4:9d:0d:09:17:74:dd:24:4a:52:9d:
06:b8:a0:d9:11:e5:d6:d9:9b:6b:3a:06:6f:14:b9:
06:2b:49:32:64:24:b8:7e:8d:36:ba:03:55:a9:ae:
f4:c4:a6:55:f4:89:36:46:6f:79:f3:87:8f:ad:b5:
85:e9:83:4c:67:4c:1c:1c:88:e6:41:10:b0:a8:38:
15:88:9a:d7:95:aa:e0:04:a9:74:e6:ff:46:8d:2f:
91:65:31:bd:c9:51:fe:28:38:ac:16:3f:44:16:85:
31:ca:f4:04:a1:b4:01:62:9d:97:0c:08:5c:9a:15:
87:e0:b4:9e:61:76:c3:31:f2:a9:c0:9f:7d:fe:41:
e7:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:84:05:E5:85:23:71:7F:A5:B0:0B:1C:C6:07:0F:7F:10:0E:47:54
X509v3 Authority Key Identifier:
keyid:D5:6F:E2:C0:CF:D7:69:10:44:EE:37:84:5C:FC:F5:4E:1A:84:99:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1W_iwM_XaRBE7jeEXPz1ThqEmXQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/031138-86e1-4182-a7a6-0107ec33e5b7/1/1W_iwM_XaRBE7jeEXPz1ThqEmXQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/031138-86e1-4182-a7a6-0107ec33e5b7/1/1W_iwM_XaRBE7jeEXPz1ThqEmXQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:d5:ec:8e:86:17:72:da:f5:24:1f:ff:40:6d:a7:c7:1a:e4:
6a:c4:f7:71:7b:20:e3:b1:9e:86:02:0c:18:af:d2:f9:8c:86:
75:15:56:30:da:17:68:32:c0:66:56:c3:af:f7:3c:04:7c:3d:
d4:bb:5c:64:05:69:2a:1f:0a:7f:ac:4a:0f:ea:17:b5:02:f6:
89:1d:37:94:04:23:d8:b5:22:71:7b:69:bb:ad:01:7b:7b:e2:
fe:36:b1:bf:2b:90:34:e7:ca:6c:ba:4d:e1:3a:c0:2e:17:da:
4c:77:7d:2a:81:e5:64:67:5e:21:51:1b:36:7e:15:23:25:24:
52:b2:3b:b9:cd:c9:24:04:d8:64:22:b7:aa:27:b5:9a:43:67:
54:f9:c7:5a:fe:c2:7b:c5:a3:5f:53:cb:27:e2:60:f6:52:3a:
38:f7:22:8a:17:ab:26:f5:66:fc:20:5b:f0:5c:1a:2b:d2:1f:
4e:2d:2a:c7:fc:c6:c5:b8:9a:35:1e:49:7b:75:25:1d:48:14:
e8:71:6f:d1:fd:bd:3e:61:8f:af:73:fa:72:dc:a1:df:67:58:
94:4d:8a:06:2d:ee:a1:78:a8:da:23:b4:c6:24:41:69:f0:85:
9c:91:c7:a3:b0:27:f5:dc:6b:fe:31:da:e6:42:30:be:a7:38:
61:ff:1f:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 05:51:31 2025 by rpki-client