Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/22078d-cd51-4ed2-bbbd-82ce464c2cdd/1/I2WqPfWMnlXZ4H6iz_LK6F7hXB0.mft
File: I2WqPfWMnlXZ4H6iz_LK6F7hXB0.mft (raw, json)
Hash identifier: Bj1Og3XkafUVts0WvaaOiEjf+rcZAUKduauxUB4wDGA=
Subject key identifier: 9E:35:11:40:9B:79:F0:2D:4D:62:79:06:9E:67:54:07:7E:0B:60:B5
Authority key identifier: 23:65:AA:3D:F5:8C:9E:55:D9:E0:7E:A2:CF:F2:CA:E8:5E:E1:5C:1D
Certificate issuer: /CN=2365aa3df58c9e55d9e07ea2cff2cae85ee15c1d
Certificate serial: 01984B54F6BA0E01B944FAC2DF38B600DED6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I2WqPfWMnlXZ4H6iz_LK6F7hXB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/22078d-cd51-4ed2-bbbd-82ce464c2cdd/1/I2WqPfWMnlXZ4H6iz_LK6F7hXB0.mft
Manifest number: 068C
Signing time: Sun 27 Jul 2025 10:01:56 +0000
Manifest this update: Sun 27 Jul 2025 10:01:56 +0000
Manifest next update: Mon 28 Jul 2025 10:01:56 +0000
Files and hashes: 1: I2WqPfWMnlXZ4H6iz_LK6F7hXB0.crl (hash: /bywFpaFexjcMMC62+An8XXm7WiHor0yxZtxBDFXGsw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/22078d-cd51-4ed2-bbbd-82ce464c2cdd/1/I2WqPfWMnlXZ4H6iz_LK6F7hXB0.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/22078d-cd51-4ed2-bbbd-82ce464c2cdd/1/I2WqPfWMnlXZ4H6iz_LK6F7hXB0.mft
rsync://rpki.ripe.net/repository/DEFAULT/I2WqPfWMnlXZ4H6iz_LK6F7hXB0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4b:54:f6:ba:0e:01:b9:44:fa:c2:df:38:b6:00:de:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2365aa3df58c9e55d9e07ea2cff2cae85ee15c1d
Validity
Not Before: Jul 27 10:01:56 2025 GMT
Not After : Jul 28 10:01:56 2025 GMT
Subject: CN=9e3511409b79f02d4d6279069e6754077e0b60b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:e3:73:e0:44:97:4c:8f:8d:b9:f7:d3:e9:e4:
fd:df:fb:e5:f9:93:0e:ce:bf:f6:a4:8a:2a:19:e3:
85:f8:3b:4c:35:77:3f:b4:db:89:8f:09:79:9d:7f:
89:fe:ff:d0:91:dd:81:3f:44:0e:42:f4:7a:1b:f4:
74:e5:88:4f:68:c0:e7:34:4c:ad:3d:31:2f:20:18:
93:d2:d6:1e:f1:52:2b:aa:f7:af:2d:3b:46:71:90:
b2:91:fd:92:53:b8:54:28:7b:b3:d3:ac:ea:51:9d:
9c:e4:a0:30:8f:4d:fa:b9:f1:59:8d:cd:f6:3e:e3:
60:84:29:30:48:c3:e8:58:77:10:e3:dc:cb:ac:56:
97:1e:ff:25:28:12:ca:d7:17:64:ab:69:24:cb:f4:
77:0f:42:81:33:b8:b8:c6:da:de:60:24:ea:17:28:
e7:90:96:dd:23:89:38:cb:f0:ee:16:d4:27:31:5d:
b8:16:e0:f9:c3:e6:2e:66:3f:f6:dc:1b:1c:e9:0c:
2f:00:51:4e:78:37:57:29:a6:1e:7e:ef:b0:27:16:
c6:91:98:d8:a9:ac:60:28:92:f9:ca:1f:ed:47:fc:
ca:bc:f5:50:ff:1d:97:7e:fc:14:06:c3:43:6f:af:
63:e8:56:04:ce:7b:97:89:d6:8e:3d:a3:4d:f4:50:
7f:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:35:11:40:9B:79:F0:2D:4D:62:79:06:9E:67:54:07:7E:0B:60:B5
X509v3 Authority Key Identifier:
keyid:23:65:AA:3D:F5:8C:9E:55:D9:E0:7E:A2:CF:F2:CA:E8:5E:E1:5C:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I2WqPfWMnlXZ4H6iz_LK6F7hXB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/22078d-cd51-4ed2-bbbd-82ce464c2cdd/1/I2WqPfWMnlXZ4H6iz_LK6F7hXB0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/22078d-cd51-4ed2-bbbd-82ce464c2cdd/1/I2WqPfWMnlXZ4H6iz_LK6F7hXB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:ac:37:f6:b7:6b:a8:67:d8:41:3f:54:84:0e:ef:bd:90:b5:
ac:3c:7c:6b:7a:d9:82:87:8f:a6:3a:85:4c:ee:34:76:fd:0d:
96:60:4c:98:44:81:12:72:d6:17:63:aa:5b:1a:17:38:00:f0:
7c:ca:97:43:45:28:f8:ea:8d:0f:a6:c5:52:30:e6:7f:8d:91:
09:92:a1:ec:86:97:1e:df:46:4c:4f:c1:f5:fa:6b:fe:b5:d5:
08:eb:bc:68:06:33:dc:58:14:1a:c0:91:37:af:d9:51:d0:64:
92:90:35:89:a3:fb:bd:c7:fb:88:79:ca:55:ae:62:ad:d5:e0:
66:d2:82:9d:41:31:5e:86:d9:d4:1a:4a:94:c6:67:80:e2:54:
b0:4d:f8:b7:a5:b0:af:f2:35:4f:6f:ae:e7:52:f2:7e:8e:a2:
c7:9a:77:dd:6d:8b:9b:16:07:d0:33:3e:d7:20:f2:13:4c:3a:
01:cb:d0:24:be:4e:f1:56:18:35:29:ab:e2:63:c8:44:e1:b1:
4d:e4:f3:e9:ad:4a:0c:5d:89:d6:89:27:cf:da:a0:3e:d9:7b:
1c:79:30:5a:99:1d:91:32:48:20:94:25:03:da:25:19:3e:d7:
24:c6:b4:27:c4:a5:3e:96:b7:d9:13:41:0b:49:ba:b6:09:54:
8a:4c:2e:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 11:56:31 2025 by rpki-client