Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/9d59e1-7a67-469d-b4da-8b3372234dc0/1/I3yDRH0XGDOA9Im8lGyLnjAP-x0.mft
File: I3yDRH0XGDOA9Im8lGyLnjAP-x0.mft (raw, json)
Hash identifier: kUZtVG7ztG84SRct1Slq0neIOZ9LgwmFLevek9nLmto=
Subject key identifier: 5C:5E:40:26:1E:7B:12:43:F7:A9:E4:B0:4D:83:A2:89:38:77:C4:21
Authority key identifier: 23:7C:83:44:7D:17:18:33:80:F4:89:BC:94:6C:8B:9E:30:0F:FB:1D
Certificate issuer: /CN=237c83447d17183380f489bc946c8b9e300ffb1d
Certificate serial: 01984A41893BC8790CC47900F48D8FFDD429
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I3yDRH0XGDOA9Im8lGyLnjAP-x0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/9d59e1-7a67-469d-b4da-8b3372234dc0/1/I3yDRH0XGDOA9Im8lGyLnjAP-x0.mft
Manifest number: 1318
Signing time: Sun 27 Jul 2025 05:01:05 +0000
Manifest this update: Sun 27 Jul 2025 05:01:05 +0000
Manifest next update: Mon 28 Jul 2025 05:01:05 +0000
Files and hashes: 1: I3yDRH0XGDOA9Im8lGyLnjAP-x0.crl (hash: J3xIUDtY8oVSlzbYwiztnza/5/C/0+2btewg42k/d+s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/9d59e1-7a67-469d-b4da-8b3372234dc0/1/I3yDRH0XGDOA9Im8lGyLnjAP-x0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/9d59e1-7a67-469d-b4da-8b3372234dc0/1/I3yDRH0XGDOA9Im8lGyLnjAP-x0.mft
rsync://rpki.ripe.net/repository/DEFAULT/I3yDRH0XGDOA9Im8lGyLnjAP-x0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:41:89:3b:c8:79:0c:c4:79:00:f4:8d:8f:fd:d4:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=237c83447d17183380f489bc946c8b9e300ffb1d
Validity
Not Before: Jul 27 05:01:05 2025 GMT
Not After : Jul 28 05:01:05 2025 GMT
Subject: CN=5c5e40261e7b1243f7a9e4b04d83a2893877c421
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:19:f7:ec:6f:50:c9:a8:90:dd:f2:db:ba:9d:
d6:54:b4:22:9c:9d:2d:a6:83:8a:b9:c4:20:e2:db:
c1:9b:37:08:ab:75:15:36:0c:3e:a4:fd:55:10:f7:
f8:e8:2a:8e:c2:49:3c:ad:58:f5:05:7a:1d:1b:51:
c8:f9:cf:9b:f8:89:09:dd:83:0a:ba:99:15:fa:5f:
8a:50:7e:33:8e:52:ae:40:8f:41:eb:e5:8f:26:b0:
e9:e3:1a:25:69:a4:09:ba:f0:93:21:2f:f0:41:c9:
e0:bf:92:ff:bf:ea:95:4e:b7:f4:a6:b1:56:a2:e3:
3c:a0:05:e9:c8:7b:e7:19:98:a5:18:42:c2:a6:35:
a8:31:45:ff:7f:c2:ac:d0:cb:8e:d6:00:20:33:7c:
f2:21:60:60:e4:22:ab:f4:1d:4e:61:93:f3:c1:72:
1e:bc:ce:03:fc:8c:2e:a2:f9:f8:9d:88:43:0e:bc:
9e:30:47:c7:b4:2e:9e:33:0c:01:60:ac:70:00:78:
48:dd:ff:87:08:e1:ff:42:02:e1:62:ad:20:4a:55:
b1:a6:49:f3:76:d5:ef:be:55:c1:4c:9b:6d:d4:48:
06:e4:5c:bf:ae:8d:06:ed:2d:fe:2a:e9:cc:67:7b:
53:b4:3f:03:d6:40:39:2a:f1:16:34:ed:e0:fb:dd:
86:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:5E:40:26:1E:7B:12:43:F7:A9:E4:B0:4D:83:A2:89:38:77:C4:21
X509v3 Authority Key Identifier:
keyid:23:7C:83:44:7D:17:18:33:80:F4:89:BC:94:6C:8B:9E:30:0F:FB:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I3yDRH0XGDOA9Im8lGyLnjAP-x0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/9d59e1-7a67-469d-b4da-8b3372234dc0/1/I3yDRH0XGDOA9Im8lGyLnjAP-x0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/9d59e1-7a67-469d-b4da-8b3372234dc0/1/I3yDRH0XGDOA9Im8lGyLnjAP-x0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:59:ae:69:82:88:2c:f2:e0:56:8c:23:e6:6c:18:1a:da:01:
7d:b6:78:25:9f:b0:af:87:99:e6:54:b8:9e:40:49:dd:6d:36:
e8:f2:24:03:75:11:35:64:ee:7d:4e:da:7d:54:90:6a:5f:63:
6d:9d:29:a7:25:a8:d6:20:f5:fd:1b:38:52:e6:49:72:8f:ba:
5b:50:c1:ca:27:83:e9:f3:c5:f6:85:50:21:bc:ce:22:e2:20:
6f:63:c9:18:76:94:f2:41:ba:ef:08:41:80:73:2a:d3:15:15:
f2:aa:c3:a5:03:bd:5d:e8:96:3b:2e:46:57:a5:db:69:c5:ac:
6c:3e:85:e3:b7:bb:46:49:cd:1c:d3:d5:f7:13:91:ab:f0:09:
62:80:cd:aa:bb:2e:14:40:41:ea:15:f3:d8:c9:91:10:d5:ff:
ee:79:96:12:5a:1e:97:a9:f0:29:72:bb:ae:42:a0:08:b7:c1:
c0:34:07:bd:d1:2e:f7:3c:5d:7a:48:cd:29:a2:70:90:97:76:
ff:d1:64:29:a0:1f:c3:f8:36:c0:e4:41:fc:5a:b9:05:d6:29:
8e:64:1a:39:8e:64:65:16:43:92:42:7e:31:09:2e:23:04:ab:
83:55:37:83:fe:cd:2d:8f:0d:fd:09:82:a5:04:68:66:f1:07:
89:33:f1:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 08:27:09 2025 by rpki-client