Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/a40bbb-556a-40c5-b97c-32b2be06222c/1/iFeQ87X0pUUjTzIwv4lmOFbge8c.mft
File: iFeQ87X0pUUjTzIwv4lmOFbge8c.mft (raw, json)
Hash identifier: iyss0d3s2i/yAuFN6q9tLnXKkKBNk2yxELC6Yp7kudk=
Subject key identifier: 92:F5:18:70:71:EC:EE:4C:EC:41:27:C2:F7:34:64:88:13:19:6C:E8
Authority key identifier: 88:57:90:F3:B5:F4:A5:45:23:4F:32:30:BF:89:66:38:56:E0:7B:C7
Certificate issuer: /CN=885790f3b5f4a545234f3230bf89663856e07bc7
Certificate serial: 019849666AA663509A63B9B92DF7FF396CB2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iFeQ87X0pUUjTzIwv4lmOFbge8c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/a40bbb-556a-40c5-b97c-32b2be06222c/1/iFeQ87X0pUUjTzIwv4lmOFbge8c.mft
Manifest number: 15FD
Signing time: Sun 27 Jul 2025 01:01:45 +0000
Manifest this update: Sun 27 Jul 2025 01:01:45 +0000
Manifest next update: Mon 28 Jul 2025 01:01:45 +0000
Files and hashes: 1: iFeQ87X0pUUjTzIwv4lmOFbge8c.crl (hash: mlvN06x1n1/FBESoRQXdHUHz3BU0LiGGym7GLxVCmd8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/a40bbb-556a-40c5-b97c-32b2be06222c/1/iFeQ87X0pUUjTzIwv4lmOFbge8c.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/a40bbb-556a-40c5-b97c-32b2be06222c/1/iFeQ87X0pUUjTzIwv4lmOFbge8c.mft
rsync://rpki.ripe.net/repository/DEFAULT/iFeQ87X0pUUjTzIwv4lmOFbge8c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:66:6a:a6:63:50:9a:63:b9:b9:2d:f7:ff:39:6c:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=885790f3b5f4a545234f3230bf89663856e07bc7
Validity
Not Before: Jul 27 01:01:45 2025 GMT
Not After : Jul 28 01:01:45 2025 GMT
Subject: CN=92f5187071ecee4cec4127c2f734648813196ce8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:fb:a5:67:24:ee:bd:87:45:81:1d:8b:4d:c8:
c0:a7:b3:ff:59:7d:91:43:0f:80:52:8e:85:99:b6:
a1:40:ea:85:4b:fe:81:02:05:ed:f4:e7:a7:73:a6:
f4:91:ec:44:53:ef:2d:70:ae:dd:dd:58:86:de:78:
3e:d3:62:8c:a1:47:4d:b6:ea:be:e7:ea:2f:20:62:
98:cf:bd:b1:49:55:fe:a2:87:c0:23:95:67:f6:0b:
86:97:24:f7:49:91:e5:dc:9b:c1:d0:56:bf:fa:95:
c8:30:11:0d:39:97:87:93:31:df:31:0a:e7:1a:e1:
4c:8d:f8:38:38:9e:e3:79:b0:a3:78:8e:e6:9f:21:
fd:23:4a:3f:94:7f:2d:54:89:69:08:74:cc:91:29:
2d:67:85:00:02:26:a0:8a:88:cc:7b:e3:b3:69:0b:
fa:21:d8:fd:e0:a8:dc:bc:0f:f1:58:90:1c:f2:25:
4d:b1:4b:4a:5c:43:2e:f0:77:16:d7:e2:76:b7:3f:
54:01:23:14:f4:34:03:eb:1d:e8:87:d1:61:90:67:
1e:57:89:30:1f:f7:7a:fc:27:64:b8:88:5b:70:7d:
12:7a:c4:e5:c3:77:42:f6:e1:d9:1a:77:00:19:c6:
c9:2f:66:bf:ad:d5:90:31:3e:9f:21:d3:bf:36:03:
28:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:F5:18:70:71:EC:EE:4C:EC:41:27:C2:F7:34:64:88:13:19:6C:E8
X509v3 Authority Key Identifier:
keyid:88:57:90:F3:B5:F4:A5:45:23:4F:32:30:BF:89:66:38:56:E0:7B:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iFeQ87X0pUUjTzIwv4lmOFbge8c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/a40bbb-556a-40c5-b97c-32b2be06222c/1/iFeQ87X0pUUjTzIwv4lmOFbge8c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/a40bbb-556a-40c5-b97c-32b2be06222c/1/iFeQ87X0pUUjTzIwv4lmOFbge8c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:74:ec:c9:99:8e:4d:2f:33:07:68:bc:19:f2:40:57:dd:b7:
04:a9:c3:31:d2:b2:61:4f:8b:f6:e8:2e:ec:48:f8:03:34:0a:
f1:af:38:42:4b:71:10:f2:f9:f8:d4:4e:e3:c6:47:62:48:e6:
00:5d:d8:f4:f3:47:49:94:e0:41:16:d9:98:79:bb:41:46:e9:
b8:ba:b8:91:7a:df:52:86:93:5d:2a:06:8a:4c:c0:c8:1a:05:
b7:32:88:a8:cb:04:0b:2d:ba:1a:b1:a1:1f:bd:0a:67:95:ac:
89:b3:a6:8f:02:33:80:0f:b9:b5:8f:4f:70:9e:7e:cb:b0:f4:
68:e3:13:da:91:70:b8:cc:44:4f:34:9f:c5:4c:33:9e:bc:c0:
0f:2b:2c:72:9c:37:c0:ee:43:1f:eb:1a:ba:4c:cb:1a:0a:c4:
cd:f8:ba:29:35:3b:40:aa:c8:63:d7:cb:ce:ab:98:a5:95:aa:
77:00:5c:0c:42:3e:aa:f1:26:f5:3c:eb:60:ef:bf:eb:5b:28:
c2:1a:85:7d:6e:06:6a:98:85:7e:4e:d6:ac:bb:ac:6f:8e:3f:
b0:41:24:45:e7:c0:28:0a:bf:c6:76:70:e8:c3:eb:01:71:7b:
1a:5b:26:7b:ed:eb:f5:59:8c:98:48:ae:fc:32:03:1b:78:a7:
3e:cb:5c:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 08:51:24 2025 by rpki-client