Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/15fb8a-9261-462d-a5ac-d5a1ea9edb08/1/0IpNevM5v1JVcjk3VdHPszzdta0.mft
File: 0IpNevM5v1JVcjk3VdHPszzdta0.mft (raw, json)
Hash identifier: WHff7VuQF+FRofbinQiec/fkKOdBhPyIwEICv6n9hKs=
Subject key identifier: CB:5E:8E:19:FC:55:6A:D1:20:4C:FD:11:8D:BE:EE:55:71:65:1D:BE
Authority key identifier: D0:8A:4D:7A:F3:39:BF:52:55:72:39:37:55:D1:CF:B3:3C:DD:B5:AD
Certificate issuer: /CN=d08a4d7af339bf525572393755d1cfb33cddb5ad
Certificate serial: 019846D25262BD4447D756DC4E09E86257B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0IpNevM5v1JVcjk3VdHPszzdta0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/15fb8a-9261-462d-a5ac-d5a1ea9edb08/1/0IpNevM5v1JVcjk3VdHPszzdta0.mft
Manifest number: 15FC
Signing time: Sat 26 Jul 2025 13:00:45 +0000
Manifest this update: Sat 26 Jul 2025 13:00:45 +0000
Manifest next update: Sun 27 Jul 2025 13:00:45 +0000
Files and hashes: 1: 0IpNevM5v1JVcjk3VdHPszzdta0.crl (hash: gRgbVnx0c579tUEtxmh176g+5Vqh+snSVfQOWkJ4hS8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/15fb8a-9261-462d-a5ac-d5a1ea9edb08/1/0IpNevM5v1JVcjk3VdHPszzdta0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/15fb8a-9261-462d-a5ac-d5a1ea9edb08/1/0IpNevM5v1JVcjk3VdHPszzdta0.mft
rsync://rpki.ripe.net/repository/DEFAULT/0IpNevM5v1JVcjk3VdHPszzdta0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:46:d2:52:62:bd:44:47:d7:56:dc:4e:09:e8:62:57:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d08a4d7af339bf525572393755d1cfb33cddb5ad
Validity
Not Before: Jul 26 13:00:45 2025 GMT
Not After : Jul 27 13:00:45 2025 GMT
Subject: CN=cb5e8e19fc556ad1204cfd118dbeee5571651dbe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:76:cd:80:29:7e:56:2c:44:ba:06:52:d5:e2:
eb:c8:64:b0:30:c8:2f:64:ef:a4:f3:89:5e:20:fe:
aa:f6:19:6b:06:cd:f1:6a:b6:8b:e5:fd:21:1a:18:
8b:2e:d7:eb:f4:3c:d5:16:57:f1:4a:fa:96:ef:4d:
e1:eb:66:b8:aa:b6:94:ca:11:dd:7a:f5:d4:6a:14:
1c:22:c8:60:8d:58:82:9d:50:71:c0:6d:93:9a:e4:
3f:27:ac:6f:e2:e5:72:75:0c:ff:e3:94:28:b5:51:
81:6e:9a:d8:3c:5d:96:5a:f0:4b:5c:aa:cc:40:7f:
a0:99:20:2e:8d:88:96:17:32:46:c2:02:4b:ea:e8:
24:1a:47:58:0f:66:76:71:a3:02:c7:c9:27:de:bf:
e9:a2:db:8d:87:a5:fe:d2:5d:0b:54:7a:1e:fc:79:
dd:f7:d4:16:a4:0f:a9:65:14:eb:eb:1c:c4:93:41:
9d:1e:4c:52:9d:bb:1f:eb:b4:98:3c:8d:30:eb:7a:
08:72:97:ec:e4:0e:2f:5e:73:63:d3:0a:f8:48:18:
bd:82:3a:a8:8d:85:53:e4:92:f5:e8:cd:2a:8c:0e:
7a:e1:0b:c0:f5:25:69:1a:6a:a7:51:b2:a1:89:2b:
19:e8:e6:13:f3:dc:ef:5c:9f:ad:86:9a:1c:13:8b:
23:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:5E:8E:19:FC:55:6A:D1:20:4C:FD:11:8D:BE:EE:55:71:65:1D:BE
X509v3 Authority Key Identifier:
keyid:D0:8A:4D:7A:F3:39:BF:52:55:72:39:37:55:D1:CF:B3:3C:DD:B5:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0IpNevM5v1JVcjk3VdHPszzdta0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/15fb8a-9261-462d-a5ac-d5a1ea9edb08/1/0IpNevM5v1JVcjk3VdHPszzdta0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/15fb8a-9261-462d-a5ac-d5a1ea9edb08/1/0IpNevM5v1JVcjk3VdHPszzdta0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:d6:72:13:f2:53:88:60:a7:ee:0e:eb:1d:b5:00:f6:7e:61:
c5:89:9e:69:28:4b:cd:69:80:20:0a:3d:da:0e:8f:ba:43:58:
f7:4c:44:8c:03:8b:a7:c2:c3:f5:bd:7a:15:f5:0b:c4:af:2b:
c4:3a:0a:e9:b1:21:4b:bf:44:22:e1:8c:dc:cf:ca:44:da:cf:
34:cf:18:ae:40:e0:ad:88:6e:ae:97:06:d2:78:39:21:ef:01:
6d:95:b3:12:f2:43:d3:b4:26:c9:f6:3c:35:1a:eb:fe:dd:0b:
48:d1:6e:4a:17:d4:27:90:b9:2f:38:de:98:61:43:4d:79:cf:
73:17:15:12:af:b2:15:e0:09:8b:37:22:a7:5b:ab:58:72:12:
dc:e9:3e:f5:0b:80:0c:93:be:43:15:3c:18:b6:64:f1:03:52:
5c:68:59:52:6d:79:a4:9e:48:95:fd:62:0f:5c:41:2d:db:df:
2a:f1:25:25:3c:47:4d:ee:ae:86:a6:8f:8d:8a:e9:be:6a:81:
07:da:32:f4:b0:e1:35:37:eb:33:18:6c:4a:92:2a:b2:40:de:
a5:85:4a:55:73:1f:56:65:95:bc:da:62:4b:73:c8:4e:3e:b3:
c5:16:3a:72:7f:8a:61:d0:63:9f:6c:bb:ee:32:bc:c0:8f:54:
7b:af:b9:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 20:24:12 2025 by rpki-client