Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/9145cb-02bd-47e6-b04b-0871152a1aa3/1/iaWq49f3LuzoOWtBSSIIrdUhhDU.mft
File: iaWq49f3LuzoOWtBSSIIrdUhhDU.mft (raw, json)
Hash identifier: 2MaxedRwboalSAO302q7TG18wVqdWG1dmppx+eYkvHg=
Subject key identifier: D5:62:A6:9B:42:FE:90:1F:33:DB:F8:42:42:8F:A7:00:33:5B:F6:02
Authority key identifier: 89:A5:AA:E3:D7:F7:2E:EC:E8:39:6B:41:49:22:08:AD:D5:21:84:35
Certificate issuer: /CN=89a5aae3d7f72eece8396b41492208add5218435
Certificate serial: 01984476290A2E586B0888409125E06F6ADD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iaWq49f3LuzoOWtBSSIIrdUhhDU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/9145cb-02bd-47e6-b04b-0871152a1aa3/1/iaWq49f3LuzoOWtBSSIIrdUhhDU.mft
Manifest number: 14EF
Signing time: Sat 26 Jul 2025 02:00:51 +0000
Manifest this update: Sat 26 Jul 2025 02:00:51 +0000
Manifest next update: Sun 27 Jul 2025 02:00:51 +0000
Files and hashes: 1: iaWq49f3LuzoOWtBSSIIrdUhhDU.crl (hash: j/BxzqdMBSRmgbWsfCz7eCyYaWoPRo2CkBztg2MLFc8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/9145cb-02bd-47e6-b04b-0871152a1aa3/1/iaWq49f3LuzoOWtBSSIIrdUhhDU.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/9145cb-02bd-47e6-b04b-0871152a1aa3/1/iaWq49f3LuzoOWtBSSIIrdUhhDU.mft
rsync://rpki.ripe.net/repository/DEFAULT/iaWq49f3LuzoOWtBSSIIrdUhhDU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Jul 2025 21:50:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:44:76:29:0a:2e:58:6b:08:88:40:91:25:e0:6f:6a:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89a5aae3d7f72eece8396b41492208add5218435
Validity
Not Before: Jul 26 02:00:51 2025 GMT
Not After : Jul 27 02:00:51 2025 GMT
Subject: CN=d562a69b42fe901f33dbf842428fa700335bf602
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:8a:5c:2c:48:d1:dc:c6:94:2b:74:7c:fd:f0:
93:7f:aa:c8:32:6a:14:71:3f:fb:8a:c4:43:8e:04:
fc:36:2a:e9:7f:4c:44:3c:d2:11:f9:0a:8b:9c:0c:
3f:c6:56:5c:93:94:71:a9:50:90:81:3f:a6:6e:06:
ad:a4:a9:c3:fd:ef:a5:e7:62:29:21:0f:34:b1:a2:
f8:3d:62:9f:fc:37:ce:c2:2b:ba:a6:e1:fa:0e:85:
69:8a:a4:78:6c:c8:ea:8a:28:fc:fd:57:70:48:99:
fb:51:d7:ee:66:43:ec:e1:76:62:8c:17:d9:b4:03:
e2:94:d1:0f:6d:ee:99:9e:65:1a:e2:d0:6a:4f:55:
68:39:31:ac:82:b2:01:d2:31:a7:42:4c:67:6c:d0:
f2:cf:ab:37:8e:21:94:a7:f5:72:33:98:af:6c:db:
99:18:e5:84:23:8a:6f:43:fe:22:8e:e3:c6:b2:ef:
17:18:8e:f3:b0:8c:b1:be:1c:50:e5:d0:99:4a:06:
8c:65:d6:af:86:ff:38:ec:8e:1a:de:14:cb:df:d5:
3a:83:94:7d:e0:d5:5d:7b:56:2a:f1:60:aa:f8:d1:
b9:98:9a:54:5c:15:67:01:03:15:8b:11:ea:70:6c:
43:88:d1:53:74:e7:ec:57:c0:88:62:a3:13:34:53:
04:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:62:A6:9B:42:FE:90:1F:33:DB:F8:42:42:8F:A7:00:33:5B:F6:02
X509v3 Authority Key Identifier:
keyid:89:A5:AA:E3:D7:F7:2E:EC:E8:39:6B:41:49:22:08:AD:D5:21:84:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iaWq49f3LuzoOWtBSSIIrdUhhDU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/9145cb-02bd-47e6-b04b-0871152a1aa3/1/iaWq49f3LuzoOWtBSSIIrdUhhDU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/9145cb-02bd-47e6-b04b-0871152a1aa3/1/iaWq49f3LuzoOWtBSSIIrdUhhDU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:ea:a4:35:59:ca:71:ef:16:c7:cb:3e:43:cd:e0:3f:84:8b:
a3:1b:97:10:2e:5b:ac:b1:16:4e:91:7b:3c:b3:0a:c8:d9:ab:
f4:94:1b:e1:9d:cf:f8:fc:f9:bf:6e:98:08:6e:9d:0e:c3:8a:
47:d0:d1:d8:c8:2b:1d:d2:3e:f2:b0:87:74:d2:32:14:7b:ef:
3d:33:4b:63:e0:4f:74:1b:aa:e3:a2:79:40:81:c8:ea:d7:dd:
97:29:4d:a4:9e:c9:a8:2b:b6:2a:bb:d2:38:a0:f1:a3:ea:b4:
3a:e5:d3:85:e7:90:28:5e:87:77:ff:7a:95:60:30:3e:0d:1c:
94:76:d6:44:e0:9e:d5:a7:ee:f8:c3:f3:4b:cc:83:68:39:d1:
1f:81:72:cb:ec:3f:6b:8e:be:07:e7:00:dd:37:51:0f:4d:3a:
a1:77:91:90:c9:14:d4:35:ff:c2:4b:2b:ee:3b:26:8f:df:f5:
c7:9f:1c:f6:6c:f0:f9:38:2e:1a:45:a7:76:91:69:e2:38:0e:
32:1d:f8:79:35:e9:e1:ec:0b:76:d1:08:42:9d:6a:4b:c1:e6:
ad:32:94:0d:25:7d:71:69:87:40:e0:c7:2e:8f:12:b8:3c:05:
5d:72:2d:bb:30:da:19:57:8f:ad:0f:c4:37:1c:3d:2d:a3:f0:
5f:63:9f:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 06:36:30 2025 by rpki-client