Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/fa1004-e450-41ec-9d5e-4a1f7c1bdf78/1/IZt8FF4Kz4FIQY1UJH393_wZ-kw.mft
File: IZt8FF4Kz4FIQY1UJH393_wZ-kw.mft (raw, json)
Hash identifier: a6TzRvxymLX5B93+q7NIAajFvEd4y5G26PF4bgIoLM4=
Subject key identifier: BD:E3:22:C4:B2:9C:7F:C1:E1:77:98:DA:B0:39:B6:54:D8:A7:49:9F
Authority key identifier: 21:9B:7C:14:5E:0A:CF:81:48:41:8D:54:24:7D:FD:DF:FC:19:FA:4C
Certificate issuer: /CN=219b7c145e0acf8148418d54247dfddffc19fa4c
Certificate serial: 0198499C610DF6ADA541153422AE74A34C41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IZt8FF4Kz4FIQY1UJH393_wZ-kw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/fa1004-e450-41ec-9d5e-4a1f7c1bdf78/1/IZt8FF4Kz4FIQY1UJH393_wZ-kw.mft
Manifest number: 01B4
Signing time: Sun 27 Jul 2025 02:00:41 +0000
Manifest this update: Sun 27 Jul 2025 02:00:41 +0000
Manifest next update: Mon 28 Jul 2025 02:00:41 +0000
Files and hashes: 1: IZt8FF4Kz4FIQY1UJH393_wZ-kw.crl (hash: L5SG3OfHPQiLtZFELC2BCpxd365ag9ga43UEX2V5KAA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/fa1004-e450-41ec-9d5e-4a1f7c1bdf78/1/IZt8FF4Kz4FIQY1UJH393_wZ-kw.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/fa1004-e450-41ec-9d5e-4a1f7c1bdf78/1/IZt8FF4Kz4FIQY1UJH393_wZ-kw.mft
rsync://rpki.ripe.net/repository/DEFAULT/IZt8FF4Kz4FIQY1UJH393_wZ-kw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:9c:61:0d:f6:ad:a5:41:15:34:22:ae:74:a3:4c:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=219b7c145e0acf8148418d54247dfddffc19fa4c
Validity
Not Before: Jul 27 02:00:41 2025 GMT
Not After : Jul 28 02:00:41 2025 GMT
Subject: CN=bde322c4b29c7fc1e17798dab039b654d8a7499f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:3f:c8:6d:03:05:2e:b4:06:80:91:23:f1:21:
74:48:0a:fc:e0:48:b2:94:87:ca:c5:48:d6:11:62:
18:c3:98:ab:91:e2:05:cc:fd:3d:60:63:0c:ff:87:
b7:a1:2e:5d:ca:38:a0:46:1c:20:df:f9:1d:d3:91:
9a:8a:19:d8:46:22:6b:98:be:17:db:b2:ff:b1:5f:
70:8e:89:a9:5f:73:b2:03:35:f2:bb:16:2e:0c:ad:
c9:5a:10:3d:b1:79:f5:57:a4:a8:1f:7a:43:1b:ae:
01:9b:f0:79:22:41:44:ea:52:72:c1:4f:20:d5:bd:
7d:11:9b:4d:82:d4:06:0b:ed:e6:32:08:bb:36:7d:
32:18:26:79:9f:e5:5e:59:43:bd:ab:93:5f:05:cc:
96:04:e8:df:da:30:ce:6b:65:eb:17:53:c3:de:59:
c2:10:aa:3e:d5:87:b4:e8:3d:ff:36:b7:66:cf:f3:
08:00:11:46:ae:18:05:95:3e:7a:14:2b:2b:73:6e:
38:a6:d3:a2:ad:7b:2e:c1:31:bb:5e:40:1a:4a:fd:
2f:cd:75:72:2b:5e:0c:da:66:b5:8b:e0:51:d8:28:
b8:8c:d0:1d:a7:46:d9:6a:f9:c1:a7:01:0b:ec:8c:
36:6d:16:1e:20:7a:29:16:5d:19:07:fd:df:4f:a2:
4d:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:E3:22:C4:B2:9C:7F:C1:E1:77:98:DA:B0:39:B6:54:D8:A7:49:9F
X509v3 Authority Key Identifier:
keyid:21:9B:7C:14:5E:0A:CF:81:48:41:8D:54:24:7D:FD:DF:FC:19:FA:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IZt8FF4Kz4FIQY1UJH393_wZ-kw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/fa1004-e450-41ec-9d5e-4a1f7c1bdf78/1/IZt8FF4Kz4FIQY1UJH393_wZ-kw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/fa1004-e450-41ec-9d5e-4a1f7c1bdf78/1/IZt8FF4Kz4FIQY1UJH393_wZ-kw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:c0:86:ea:ba:99:52:6b:3e:d0:88:a6:fa:d8:83:48:2d:1b:
63:61:76:34:92:d0:81:67:0a:f5:89:37:ea:ce:01:89:11:ce:
7c:01:9a:02:97:56:af:d3:fd:3f:f0:dc:c7:ee:ea:2a:43:6e:
20:b4:28:21:4f:c3:42:10:98:75:81:5a:09:63:7f:5d:35:ed:
4f:30:53:f7:24:e9:bd:41:3b:bd:7f:96:9a:61:6b:d4:e9:4b:
26:7d:94:55:14:27:33:1d:68:b1:fb:e0:a7:7a:bc:f2:74:02:
46:b7:11:5b:df:ad:52:83:34:72:33:a2:17:0a:90:6c:c6:0d:
df:a2:1e:c6:0e:fc:b8:2a:20:1a:02:66:07:b6:3e:1a:97:c5:
fd:60:83:f5:b1:b5:9e:88:ae:e5:91:d1:d6:cb:4e:2d:93:3f:
9b:31:3a:3a:ef:31:40:11:ed:a3:29:c2:af:69:88:ce:5b:83:
9a:e7:a6:01:0d:95:65:21:50:3e:ef:3a:71:c3:c4:5e:f8:3e:
fc:40:37:db:78:77:1e:e6:2e:a5:d2:5c:6b:ec:4d:8c:40:dc:
1e:f3:9e:33:ad:7f:7c:1b:f1:7a:57:54:91:a1:3d:6b:f1:a8:
9e:fb:99:2d:89:ee:cd:80:f3:59:29:61:79:cd:81:95:16:5c:
98:9e:6c:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 08:41:53 2025 by rpki-client