Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/bf69c4-d64a-4340-9bf1-364854cbc0e8/1/ikHi8tFFLnxMwH2_p4OdWN9X8hg.mft
File: ikHi8tFFLnxMwH2_p4OdWN9X8hg.mft (raw, json)
Hash identifier: qi5GN3M1ngfQCEX6MverdgGyd2Hfw7CkWAqF0T0VemQ=
Subject key identifier: 11:F4:58:BE:BE:1D:A2:FB:FF:62:4B:E3:32:71:74:3C:1D:23:EF:CA
Authority key identifier: 8A:41:E2:F2:D1:45:2E:7C:4C:C0:7D:BF:A7:83:9D:58:DF:57:F2:18
Certificate issuer: /CN=8a41e2f2d1452e7c4cc07dbfa7839d58df57f218
Certificate serial: 01984D4335976A8F27969810B34721888E7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ikHi8tFFLnxMwH2_p4OdWN9X8hg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/bf69c4-d64a-4340-9bf1-364854cbc0e8/1/ikHi8tFFLnxMwH2_p4OdWN9X8hg.mft
Manifest number: 15FF
Signing time: Sun 27 Jul 2025 19:01:46 +0000
Manifest this update: Sun 27 Jul 2025 19:01:46 +0000
Manifest next update: Mon 28 Jul 2025 19:01:46 +0000
Files and hashes: 1: ikHi8tFFLnxMwH2_p4OdWN9X8hg.crl (hash: V4LMmH3ca21BWi6cliFbR53V07pF+vXBPFuLWz2+vGs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/bf69c4-d64a-4340-9bf1-364854cbc0e8/1/ikHi8tFFLnxMwH2_p4OdWN9X8hg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/bf69c4-d64a-4340-9bf1-364854cbc0e8/1/ikHi8tFFLnxMwH2_p4OdWN9X8hg.mft
rsync://rpki.ripe.net/repository/DEFAULT/ikHi8tFFLnxMwH2_p4OdWN9X8hg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 18:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4d:43:35:97:6a:8f:27:96:98:10:b3:47:21:88:8e:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a41e2f2d1452e7c4cc07dbfa7839d58df57f218
Validity
Not Before: Jul 27 19:01:46 2025 GMT
Not After : Jul 28 19:01:46 2025 GMT
Subject: CN=11f458bebe1da2fbff624be33271743c1d23efca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:b3:a7:90:d8:1c:4c:4f:fc:17:60:7c:4c:66:
81:05:09:8a:32:1f:42:82:4e:a5:6d:ec:c4:b6:b1:
65:03:39:d5:ca:57:0e:d8:f8:50:b5:8c:34:10:0c:
cd:5c:96:4c:c0:b0:44:0d:bd:a5:3c:81:84:eb:72:
2b:0e:98:d4:84:d2:42:ec:4d:52:41:da:4b:a1:bf:
9b:53:5f:ea:9f:8a:c8:21:f1:00:5a:76:05:b0:4a:
61:65:b5:dd:97:89:cb:bf:a7:35:ba:4b:20:8d:30:
d3:a4:93:7b:57:f0:ff:3e:ac:0b:9a:86:35:d6:a9:
c8:12:75:07:2f:cd:26:df:00:2f:06:57:d1:5c:e6:
32:5a:d0:82:14:3e:c9:11:a0:0f:ba:5a:b4:cc:5e:
88:be:64:6a:3a:4d:2d:12:49:db:a2:42:82:e3:07:
c6:fd:69:0b:d9:fe:95:37:e0:ce:27:c5:ea:79:1a:
20:5a:2d:18:db:8c:68:b5:3b:21:16:9c:c1:01:cc:
97:3e:e1:cb:6f:12:1e:5c:63:99:c3:fc:3d:cf:a6:
6d:74:d5:4f:68:f1:8a:d3:b1:9a:b3:29:37:4d:3a:
fe:0c:fb:8a:9f:7b:ca:9e:ad:3f:49:9a:34:28:e3:
9f:70:77:23:15:d2:af:06:b1:11:fd:1b:1b:4a:05:
f5:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:F4:58:BE:BE:1D:A2:FB:FF:62:4B:E3:32:71:74:3C:1D:23:EF:CA
X509v3 Authority Key Identifier:
keyid:8A:41:E2:F2:D1:45:2E:7C:4C:C0:7D:BF:A7:83:9D:58:DF:57:F2:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ikHi8tFFLnxMwH2_p4OdWN9X8hg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/bf69c4-d64a-4340-9bf1-364854cbc0e8/1/ikHi8tFFLnxMwH2_p4OdWN9X8hg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/bf69c4-d64a-4340-9bf1-364854cbc0e8/1/ikHi8tFFLnxMwH2_p4OdWN9X8hg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:65:d1:52:fb:6f:3d:f6:72:f5:9d:6c:44:8d:01:39:d7:db:
c0:b5:a9:77:8b:70:a8:76:18:a1:ef:15:61:5c:31:2e:2d:17:
55:d9:13:d0:06:0a:66:33:8f:f3:34:cc:c5:30:5a:a3:09:55:
e6:e9:6e:06:b0:1b:17:94:cd:e1:ea:2d:36:09:36:03:22:8e:
09:95:37:21:4a:fc:4e:72:ee:87:82:94:05:b4:b9:a7:4e:e1:
c6:f3:c0:7d:41:49:bf:1b:c5:62:84:02:15:dd:b9:0b:bd:55:
9a:69:7a:0c:2e:23:6e:f1:ea:32:bd:af:5e:2c:f5:f6:bc:28:
62:b0:70:99:1f:6a:e5:dc:aa:fd:c1:8d:ee:4b:93:a7:45:3b:
45:28:65:a2:b3:10:56:45:f9:4f:96:4d:f4:9e:5b:25:28:82:
b0:46:63:3d:40:ff:9f:ec:95:24:92:d9:6c:1a:a2:92:38:be:
93:5d:f6:d3:62:72:e2:5e:be:19:63:fd:52:6c:a0:b8:8f:1b:
72:57:e0:e1:9e:7c:1a:72:24:d2:37:eb:58:b5:00:73:3f:6c:
b0:fc:9f:26:c7:e7:9c:3f:19:22:3c:11:0b:05:94:70:db:2f:
10:79:e8:ea:ec:f7:65:3a:e2:ca:7e:1b:7a:a8:d9:e1:ae:6f:
b2:85:d5:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 28 01:01:08 2025 by rpki-client