Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/6a6b55-ca02-458d-8b5d-74d77302b184/1/IdhdIxrVS4Q5wqrtkaV3WGrEYAA.mft
File: IdhdIxrVS4Q5wqrtkaV3WGrEYAA.mft (raw, json)
Hash identifier: UvmpXv5ojt7XR52nZKwnWQ2FHyYVoBBuJyoHBHfVTC8=
Subject key identifier: F8:C9:8B:E2:1C:6B:E1:D4:10:31:28:BA:22:D7:53:AF:11:7D:70:46
Authority key identifier: 21:D8:5D:23:1A:D5:4B:84:39:C2:AA:ED:91:A5:77:58:6A:C4:60:00
Certificate issuer: /CN=21d85d231ad54b8439c2aaed91a577586ac46000
Certificate serial: 01984AAF030F46CFC57D64E498E21D55E08B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IdhdIxrVS4Q5wqrtkaV3WGrEYAA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/6a6b55-ca02-458d-8b5d-74d77302b184/1/IdhdIxrVS4Q5wqrtkaV3WGrEYAA.mft
Manifest number: 1103
Signing time: Sun 27 Jul 2025 07:00:40 +0000
Manifest this update: Sun 27 Jul 2025 07:00:40 +0000
Manifest next update: Mon 28 Jul 2025 07:00:40 +0000
Files and hashes: 1: IdhdIxrVS4Q5wqrtkaV3WGrEYAA.crl (hash: tBvdL/eXi4YvTRDF3rodWHaoT7ByRnudZ39hGFMASzw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/6a6b55-ca02-458d-8b5d-74d77302b184/1/IdhdIxrVS4Q5wqrtkaV3WGrEYAA.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/6a6b55-ca02-458d-8b5d-74d77302b184/1/IdhdIxrVS4Q5wqrtkaV3WGrEYAA.mft
rsync://rpki.ripe.net/repository/DEFAULT/IdhdIxrVS4Q5wqrtkaV3WGrEYAA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:af:03:0f:46:cf:c5:7d:64:e4:98:e2:1d:55:e0:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21d85d231ad54b8439c2aaed91a577586ac46000
Validity
Not Before: Jul 27 07:00:40 2025 GMT
Not After : Jul 28 07:00:40 2025 GMT
Subject: CN=f8c98be21c6be1d4103128ba22d753af117d7046
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:a4:e5:c7:11:7a:5c:cc:de:2d:24:ee:8a:08:
ce:ad:4b:15:51:3b:8e:43:ce:52:c1:e3:d4:c5:07:
94:97:4b:5a:3f:a8:7c:26:dd:0a:16:1d:9b:0b:03:
5c:f0:30:4d:75:cc:40:57:b3:b3:6c:1f:42:b1:8a:
dc:ea:f7:95:f7:0c:69:7e:62:c8:6e:f0:83:04:c9:
10:91:ec:e4:17:2a:53:a6:13:28:4b:d0:82:1a:94:
d6:a0:b4:93:2b:67:3d:95:fc:88:9c:17:9b:50:fc:
9d:dd:d9:80:d4:44:1a:de:99:cc:01:99:a4:3d:11:
f4:2d:2e:45:52:42:98:49:50:8b:6b:f6:23:d4:e0:
0a:b9:05:1a:77:33:be:be:5b:ab:bc:c9:01:bc:97:
a2:39:b5:44:98:e7:e9:7c:04:d3:1e:99:99:88:3f:
ff:ba:fa:af:73:ca:c3:ad:73:c3:56:df:40:d1:eb:
26:00:c8:f9:26:ed:62:b7:44:02:8b:a8:f4:19:b7:
6f:b5:16:bf:8c:62:53:c8:d1:c2:44:55:5a:fe:a2:
03:cf:7f:02:21:ad:fe:03:7f:01:f5:92:ed:56:c0:
4c:3c:03:9c:0c:65:89:0d:05:a2:76:73:b7:56:b8:
6e:f7:8d:56:1b:8c:45:2d:20:66:d6:0c:e1:8d:af:
8f:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:C9:8B:E2:1C:6B:E1:D4:10:31:28:BA:22:D7:53:AF:11:7D:70:46
X509v3 Authority Key Identifier:
keyid:21:D8:5D:23:1A:D5:4B:84:39:C2:AA:ED:91:A5:77:58:6A:C4:60:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IdhdIxrVS4Q5wqrtkaV3WGrEYAA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/6a6b55-ca02-458d-8b5d-74d77302b184/1/IdhdIxrVS4Q5wqrtkaV3WGrEYAA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/6a6b55-ca02-458d-8b5d-74d77302b184/1/IdhdIxrVS4Q5wqrtkaV3WGrEYAA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:35:03:83:fe:e6:d1:18:bb:8b:3f:0c:bb:21:30:f6:a1:6f:
ed:a9:9b:31:01:be:66:fd:71:cf:b9:30:2a:7a:79:72:24:2f:
19:c9:17:90:95:c5:bf:c0:fb:3a:6c:29:e0:ec:de:7d:58:3d:
98:c7:29:cb:07:cb:af:4a:51:d2:d2:10:d4:1b:6c:8c:10:ec:
de:77:a5:1d:db:0f:b1:08:7a:5c:6a:78:cb:ae:ee:f4:39:0d:
5f:f3:6b:8b:4d:1c:f9:a2:fe:d9:50:fe:c4:22:4e:c3:8a:85:
ac:b9:d4:58:96:be:bc:93:e9:cf:06:27:26:53:84:88:b3:01:
a1:69:b1:9f:4a:ca:0d:7d:50:0b:5a:cc:5a:64:c6:ac:fd:f4:
44:c1:a8:3e:63:9e:1f:2d:18:64:a9:d9:03:0d:d9:f6:63:e9:
28:28:92:2f:80:52:8f:fb:ae:03:65:2c:50:af:05:15:d6:2a:
bc:a7:da:9c:65:2c:d6:85:d1:93:e5:45:91:5f:64:e8:87:22:
45:d2:b1:6c:61:24:d6:4a:83:43:f9:8e:a1:56:72:c1:1a:9a:
05:d2:04:55:14:99:8b:5d:c7:71:c4:6a:48:b1:2e:47:6d:a6:
e6:31:e4:2a:2a:fe:02:86:41:2e:d0:05:fd:3c:78:58:c4:8b:
b3:34:87:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 10:34:32 2025 by rpki-client