Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/5e43c3-cadf-4374-99aa-4e2f89cae1da/1/1II6TKTXaJe13f55iOJx_2gTGPI.mft
File: 1II6TKTXaJe13f55iOJx_2gTGPI.mft (raw, json)
Hash identifier: Gg/z6otsCBYxFmMoj5naGOD2fpREUSwD869xNmVw6eI=
Subject key identifier: BC:F9:5E:7E:24:EA:A0:83:95:46:DA:37:06:9B:0A:4C:57:14:B2:C8
Authority key identifier: D4:82:3A:4C:A4:D7:68:97:B5:DD:FE:79:88:E2:71:FF:68:13:18:F2
Certificate issuer: /CN=d4823a4ca4d76897b5ddfe7988e271ff681318f2
Certificate serial: 019846D22C64CB3120B47A9F2B96580BB454
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1II6TKTXaJe13f55iOJx_2gTGPI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/5e43c3-cadf-4374-99aa-4e2f89cae1da/1/1II6TKTXaJe13f55iOJx_2gTGPI.mft
Manifest number: 12E4
Signing time: Sat 26 Jul 2025 13:00:35 +0000
Manifest this update: Sat 26 Jul 2025 13:00:35 +0000
Manifest next update: Sun 27 Jul 2025 13:00:35 +0000
Files and hashes: 1: 1II6TKTXaJe13f55iOJx_2gTGPI.crl (hash: 9xHzwv/gkZcBr2s1+uEKp082G6A+JeQQErHRR8L11Cg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/5e43c3-cadf-4374-99aa-4e2f89cae1da/1/1II6TKTXaJe13f55iOJx_2gTGPI.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/5e43c3-cadf-4374-99aa-4e2f89cae1da/1/1II6TKTXaJe13f55iOJx_2gTGPI.mft
rsync://rpki.ripe.net/repository/DEFAULT/1II6TKTXaJe13f55iOJx_2gTGPI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:46:d2:2c:64:cb:31:20:b4:7a:9f:2b:96:58:0b:b4:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4823a4ca4d76897b5ddfe7988e271ff681318f2
Validity
Not Before: Jul 26 13:00:35 2025 GMT
Not After : Jul 27 13:00:35 2025 GMT
Subject: CN=bcf95e7e24eaa0839546da37069b0a4c5714b2c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:2d:36:7c:e5:b0:26:4f:e5:07:17:02:1c:f5:
64:ec:24:0d:c1:99:21:a7:67:e4:03:98:71:67:4c:
38:51:d9:a9:d4:b6:28:62:2e:d7:8e:51:fe:98:27:
9b:d8:2e:28:57:b7:ff:ec:a9:14:1a:0c:5d:50:ea:
ba:72:ad:94:09:07:cb:45:85:3c:49:56:d9:64:fc:
3d:62:36:c1:23:c6:6f:4c:7e:b1:68:f6:45:24:2c:
0c:44:42:a9:54:30:0e:47:59:25:c2:a6:ac:d5:0b:
78:f2:50:7e:77:9f:61:b7:4a:3e:87:89:bd:f9:3c:
ad:ac:f1:66:25:0f:f0:38:c4:95:90:a6:6e:a1:22:
96:b6:be:09:b8:51:43:46:a8:55:7e:dd:12:c2:8c:
4a:8b:31:48:13:f1:c7:1e:14:e5:a7:4b:e4:7e:ef:
72:c6:f0:92:32:a2:01:cd:26:3e:89:3b:18:6b:2e:
e5:aa:36:85:64:d0:94:70:18:21:e1:ed:ff:d7:50:
71:46:7e:0c:7b:41:52:40:02:98:20:63:a8:45:32:
e4:01:8a:17:b4:35:e1:09:ec:6f:75:4c:77:dd:e4:
66:64:b3:d2:da:3a:20:f2:66:79:08:f5:ea:af:35:
c2:c7:9e:e1:7a:60:73:f6:61:d5:56:e9:0d:fd:51:
47:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:F9:5E:7E:24:EA:A0:83:95:46:DA:37:06:9B:0A:4C:57:14:B2:C8
X509v3 Authority Key Identifier:
keyid:D4:82:3A:4C:A4:D7:68:97:B5:DD:FE:79:88:E2:71:FF:68:13:18:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1II6TKTXaJe13f55iOJx_2gTGPI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/5e43c3-cadf-4374-99aa-4e2f89cae1da/1/1II6TKTXaJe13f55iOJx_2gTGPI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/5e43c3-cadf-4374-99aa-4e2f89cae1da/1/1II6TKTXaJe13f55iOJx_2gTGPI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:61:d0:4c:97:99:0c:ec:3d:54:20:53:4a:92:18:42:94:df:
21:3b:ed:d2:7a:0d:b5:ae:6f:66:a5:8f:d0:6a:87:08:44:d4:
ca:c7:6f:f3:e6:62:99:3f:24:60:5c:c1:0f:65:3c:87:f2:d4:
df:e2:c9:e8:58:7f:7d:27:fe:1d:7b:2e:90:da:63:61:16:24:
0e:df:be:9f:f4:62:ad:43:86:72:21:7d:0f:39:cc:43:75:7d:
70:05:62:f0:21:37:bb:34:8e:29:5f:05:35:9f:60:eb:c7:e8:
d2:20:7f:f8:e5:ea:c4:59:2e:eb:7b:32:31:b3:dc:50:2c:86:
19:59:8d:59:09:38:cb:7c:8c:9d:9a:82:3f:cd:b2:dd:9b:d7:
aa:1c:6b:7b:ea:c5:be:64:9f:f8:f4:cd:5c:26:4d:a1:77:09:
c4:e5:70:29:55:80:70:cd:0f:ed:b0:ad:c6:20:21:80:47:11:
8b:cf:a0:c5:5b:6e:67:69:fa:ce:b6:b1:41:dd:f5:d5:e9:e4:
6d:c0:94:d2:87:e1:7f:1d:29:f9:15:a9:cd:a9:f2:1d:89:28:
0e:e7:f9:09:43:93:7b:d6:6e:f0:2d:71:ea:4a:9e:81:68:76:
69:d0:68:ce:d6:eb:15:ea:d6:cd:0f:c1:f9:2e:32:b7:9d:80:
7b:4e:01:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 20:45:24 2025 by rpki-client