Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/39adc9-db28-4b1e-bf6e-a08bf2c43460/1/iKslD4208gR6QBWFwmTzjA4ih_4.mft
File: iKslD4208gR6QBWFwmTzjA4ih_4.mft (raw, json)
Hash identifier: UpXx6xBS+JyS7s2greTPHDaleZYYDV0kdPltj7F005E=
Subject key identifier: CA:BE:20:CB:E6:BF:24:BD:D8:DF:37:3C:A3:33:8C:7D:B8:8E:B2:84
Authority key identifier: 88:AB:25:0F:8D:B4:F2:04:7A:40:15:85:C2:64:F3:8C:0E:22:87:FE
Certificate issuer: /CN=88ab250f8db4f2047a401585c264f38c0e2287fe
Certificate serial: 01984852D07998120D40FC9AE144DF6C2328
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iKslD4208gR6QBWFwmTzjA4ih_4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/39adc9-db28-4b1e-bf6e-a08bf2c43460/1/iKslD4208gR6QBWFwmTzjA4ih_4.mft
Manifest number: 142D
Signing time: Sat 26 Jul 2025 20:00:43 +0000
Manifest this update: Sat 26 Jul 2025 20:00:43 +0000
Manifest next update: Sun 27 Jul 2025 20:00:43 +0000
Files and hashes: 1: iKslD4208gR6QBWFwmTzjA4ih_4.crl (hash: ccuM/arRH+YFvgVr+Ro2K42wJKARcKFXPkma0SXI89U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/39adc9-db28-4b1e-bf6e-a08bf2c43460/1/iKslD4208gR6QBWFwmTzjA4ih_4.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/39adc9-db28-4b1e-bf6e-a08bf2c43460/1/iKslD4208gR6QBWFwmTzjA4ih_4.mft
rsync://rpki.ripe.net/repository/DEFAULT/iKslD4208gR6QBWFwmTzjA4ih_4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 15:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:52:d0:79:98:12:0d:40:fc:9a:e1:44:df:6c:23:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88ab250f8db4f2047a401585c264f38c0e2287fe
Validity
Not Before: Jul 26 20:00:43 2025 GMT
Not After : Jul 27 20:00:43 2025 GMT
Subject: CN=cabe20cbe6bf24bdd8df373ca3338c7db88eb284
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:d8:32:30:e1:2c:1f:6e:85:78:58:eb:df:3c:
03:43:d2:13:3d:c9:e7:08:43:bb:0b:df:10:1d:fe:
72:35:55:6e:e4:57:28:cb:48:24:0e:11:12:fb:c9:
9a:8f:1f:86:26:a7:b6:97:c8:fa:d1:21:7b:ca:62:
a8:70:2a:e7:c7:dc:5e:9f:f8:83:c1:0a:2e:75:71:
ec:14:69:ec:ef:c8:15:df:c1:26:89:4a:ff:69:e8:
7f:da:34:ba:bb:8d:37:4d:20:54:00:2b:9b:15:7a:
a0:ad:23:3a:d9:1e:93:24:48:49:6d:35:10:4d:50:
44:1f:ff:c7:8e:c0:16:cc:9f:38:54:0a:dc:64:8d:
23:5d:bd:72:fd:5c:61:2e:89:60:12:36:01:1d:f4:
f9:91:31:17:5a:a1:4f:eb:c1:d8:fb:92:d7:69:af:
d3:cb:e2:71:5c:94:9a:1f:05:ef:33:7f:f1:cf:2b:
06:7e:ef:57:07:5c:a4:b1:1c:48:6c:17:f0:a5:b5:
46:56:4a:ce:37:8a:8b:5d:44:a9:d2:12:cb:5d:2d:
06:47:77:ea:9e:f4:f1:de:62:39:e7:e2:9c:7a:84:
22:57:b4:fb:96:47:3b:63:70:a7:97:c3:48:96:e1:
9e:da:f5:18:de:ac:67:41:7b:56:85:98:87:a4:28:
22:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:BE:20:CB:E6:BF:24:BD:D8:DF:37:3C:A3:33:8C:7D:B8:8E:B2:84
X509v3 Authority Key Identifier:
keyid:88:AB:25:0F:8D:B4:F2:04:7A:40:15:85:C2:64:F3:8C:0E:22:87:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iKslD4208gR6QBWFwmTzjA4ih_4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/39adc9-db28-4b1e-bf6e-a08bf2c43460/1/iKslD4208gR6QBWFwmTzjA4ih_4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/39adc9-db28-4b1e-bf6e-a08bf2c43460/1/iKslD4208gR6QBWFwmTzjA4ih_4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:01:3d:62:92:59:f4:58:99:52:00:4b:09:42:76:bd:af:c5:
5d:7e:82:16:52:cd:21:12:3e:fd:2d:fa:19:7e:41:a7:f7:51:
31:31:2b:9d:fd:ad:1a:e5:77:d0:52:e6:44:ee:ee:df:0b:ad:
21:7a:03:56:27:4e:80:59:d5:47:38:f1:c9:49:3a:c4:7d:90:
db:df:6b:8b:53:18:a4:70:2f:d4:e9:8a:84:c6:12:ea:8a:7a:
98:48:ac:fc:f2:f2:ff:b0:09:da:ef:da:65:bb:4b:36:be:5f:
0f:78:b6:49:da:1f:ab:b5:0a:39:5d:40:44:b5:84:c2:61:55:
65:eb:6a:8e:b5:cf:b7:c7:32:7d:d6:9c:7b:91:4f:58:fc:e4:
cb:74:5d:63:3d:e3:19:52:48:38:0b:50:1b:07:5d:2c:e9:99:
8d:84:46:d6:68:48:bc:3e:19:f1:11:a2:25:c5:aa:d8:8d:8b:
ac:83:52:28:dd:2e:28:9e:83:be:14:41:d7:75:cd:81:a4:53:
3d:53:0e:0f:fa:08:e9:24:50:3b:8c:c7:5f:6a:3b:ab:89:8f:
87:9b:2d:b4:80:41:52:bb:1d:aa:0e:be:6d:90:a9:52:ab:b6:
97:d4:74:04:d0:01:45:04:e2:e7:16:7d:84:4e:d2:9a:7c:99:
fb:01:54:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 23:24:00 2025 by rpki-client