Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/18dd8b-a010-42ca-bc99-0f867d9ff58e/1/icKIUyrvyGlxuY1bTR2YGW2ey4U.mft
File: icKIUyrvyGlxuY1bTR2YGW2ey4U.mft (raw, json)
Hash identifier: lGbEDw8q9+YUie2akT7GMEsQY6wtNY8vwl6qJatJqmE=
Subject key identifier: 1E:C9:14:22:54:09:22:6D:FA:52:E0:05:38:41:A4:F6:24:7E:8F:FA
Authority key identifier: 89:C2:88:53:2A:EF:C8:69:71:B9:8D:5B:4D:1D:98:19:6D:9E:CB:85
Certificate issuer: /CN=89c288532aefc86971b98d5b4d1d98196d9ecb85
Certificate serial: 0198511F21BB027EB90456ED77A89BB383F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/icKIUyrvyGlxuY1bTR2YGW2ey4U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/18dd8b-a010-42ca-bc99-0f867d9ff58e/1/icKIUyrvyGlxuY1bTR2YGW2ey4U.mft
Manifest number: 0775
Signing time: Mon 28 Jul 2025 13:00:51 +0000
Manifest this update: Mon 28 Jul 2025 13:00:51 +0000
Manifest next update: Tue 29 Jul 2025 13:00:51 +0000
Files and hashes: 1: icKIUyrvyGlxuY1bTR2YGW2ey4U.crl (hash: Z+d1oTwaf3dwLnnHBCkYaQyUsDL42zu3ZdeslnYKe+0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/18dd8b-a010-42ca-bc99-0f867d9ff58e/1/icKIUyrvyGlxuY1bTR2YGW2ey4U.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/18dd8b-a010-42ca-bc99-0f867d9ff58e/1/icKIUyrvyGlxuY1bTR2YGW2ey4U.mft
rsync://rpki.ripe.net/repository/DEFAULT/icKIUyrvyGlxuY1bTR2YGW2ey4U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 13:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:51:1f:21:bb:02:7e:b9:04:56:ed:77:a8:9b:b3:83:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89c288532aefc86971b98d5b4d1d98196d9ecb85
Validity
Not Before: Jul 28 13:00:51 2025 GMT
Not After : Jul 29 13:00:51 2025 GMT
Subject: CN=1ec914225409226dfa52e0053841a4f6247e8ffa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:e6:71:f4:62:31:90:08:0a:6c:c7:16:c8:ef:
a2:94:ea:70:a6:82:31:78:34:6d:f4:03:d2:6d:f9:
3f:08:68:e7:e1:3c:48:71:59:9e:51:15:99:ff:f2:
e3:92:57:b1:6b:91:13:e6:cb:a7:a3:cb:9d:c0:a2:
aa:f0:7b:72:1e:2a:ff:bc:f0:3d:ab:3d:48:c3:02:
5f:ec:55:bf:be:89:d6:2b:80:3b:e8:c1:b2:dc:d2:
e2:c2:58:84:d5:95:4f:66:c3:ae:10:51:cf:f3:dc:
b5:45:54:0c:94:c0:62:0b:9e:4a:bd:1a:83:74:b8:
c6:bc:b7:42:d5:0d:82:e5:d6:2a:30:5b:b5:b2:e3:
d6:12:cc:34:76:8d:64:81:c7:d2:99:95:6a:31:8b:
3b:95:2b:8b:0c:b4:ac:ab:b1:b2:ca:7c:e6:40:0f:
86:0a:94:05:66:c0:7b:d4:97:af:e9:9f:43:e6:1a:
ef:fd:e7:82:83:c8:ca:e8:95:59:ac:9e:2a:43:01:
99:ca:7c:52:ef:73:a6:18:d7:a2:61:dd:27:55:7f:
04:45:71:04:9f:5f:24:59:ca:63:fc:e8:62:00:e3:
a1:23:de:66:ba:d5:4c:5b:14:6f:b2:db:b9:ec:1a:
74:70:1a:2c:8f:23:68:55:5e:35:5f:96:fb:55:7e:
b5:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:C9:14:22:54:09:22:6D:FA:52:E0:05:38:41:A4:F6:24:7E:8F:FA
X509v3 Authority Key Identifier:
keyid:89:C2:88:53:2A:EF:C8:69:71:B9:8D:5B:4D:1D:98:19:6D:9E:CB:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/icKIUyrvyGlxuY1bTR2YGW2ey4U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/18dd8b-a010-42ca-bc99-0f867d9ff58e/1/icKIUyrvyGlxuY1bTR2YGW2ey4U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/18dd8b-a010-42ca-bc99-0f867d9ff58e/1/icKIUyrvyGlxuY1bTR2YGW2ey4U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:30:b0:ad:b0:8f:a6:52:76:5d:8c:74:77:0c:61:ed:ff:5c:
89:24:ae:a9:9b:1b:92:a5:53:f5:19:ae:d7:dc:27:66:cb:ea:
92:61:6e:65:2a:a5:7f:2c:c6:39:cf:af:14:99:e3:3a:2f:89:
5f:ec:78:e7:b0:3f:51:a2:0d:2b:b1:c5:6f:67:b4:d4:88:1a:
f5:ec:71:30:bc:92:79:71:a6:7f:6d:22:c0:7f:f0:ee:6b:82:
2b:e9:74:03:cb:92:d4:b2:ee:50:c6:dd:cc:98:e3:c2:32:16:
34:49:43:58:d4:6c:f8:da:29:14:41:c9:49:54:2b:1b:d0:9c:
b5:5a:31:b6:81:1c:12:b0:5e:2c:7f:83:b3:9b:99:1d:2f:97:
e5:97:09:9a:10:d0:5b:80:db:8d:8a:af:bc:6f:6e:bd:98:b9:
db:34:5e:19:49:c7:d1:2e:4a:0e:ae:84:b0:6a:df:c5:4e:40:
a7:0f:50:b1:e7:22:a9:b1:ae:b7:b3:9d:9f:ba:9f:b2:a5:e6:
41:30:3f:d9:fe:b2:02:4b:f7:56:cb:53:90:e8:4e:b2:23:3c:
1b:ea:b5:fc:d1:3b:89:d8:92:37:31:d0:56:45:02:3d:40:f6:
b9:6e:75:89:32:4c:56:f1:50:65:bb:15:aa:65:a7:30:ad:74:
84:e6:24:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 28 20:07:55 2025 by rpki-client