Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/b18080-e3c9-4114-a174-c3d6c7c8ba8a/1/I0AYtVE7d50uHjrBqGpZO92XTKc.mft
File: I0AYtVE7d50uHjrBqGpZO92XTKc.mft (raw, json)
Hash identifier: mNe3Z2d70KDR7Dcj7waa7YkjI6akAo0qkWw7UXpuRd4=
Subject key identifier: 6F:B2:EB:A9:D8:C9:73:36:6D:1D:D1:36:B0:65:C8:BF:5B:18:B1:97
Authority key identifier: 23:40:18:B5:51:3B:77:9D:2E:1E:3A:C1:A8:6A:59:3B:DD:97:4C:A7
Certificate issuer: /CN=234018b5513b779d2e1e3ac1a86a593bdd974ca7
Certificate serial: 0199221F0CA16C2FB36943D1411257A18AA2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I0AYtVE7d50uHjrBqGpZO92XTKc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/b18080-e3c9-4114-a174-c3d6c7c8ba8a/1/I0AYtVE7d50uHjrBqGpZO92XTKc.mft
Manifest number: 0252
Signing time: Sun 07 Sep 2025 03:01:24 +0000
Manifest this update: Sun 07 Sep 2025 03:01:24 +0000
Manifest next update: Mon 08 Sep 2025 03:01:24 +0000
Files and hashes: 1: I0AYtVE7d50uHjrBqGpZO92XTKc.crl (hash: 6yFFXamed+dnT/T4L6cCW24Y4xWuaimXcArjtFwOv1E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/b18080-e3c9-4114-a174-c3d6c7c8ba8a/1/I0AYtVE7d50uHjrBqGpZO92XTKc.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/b18080-e3c9-4114-a174-c3d6c7c8ba8a/1/I0AYtVE7d50uHjrBqGpZO92XTKc.mft
rsync://rpki.ripe.net/repository/DEFAULT/I0AYtVE7d50uHjrBqGpZO92XTKc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 03:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:1f:0c:a1:6c:2f:b3:69:43:d1:41:12:57:a1:8a:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=234018b5513b779d2e1e3ac1a86a593bdd974ca7
Validity
Not Before: Sep 7 03:01:24 2025 GMT
Not After : Sep 8 03:01:24 2025 GMT
Subject: CN=6fb2eba9d8c973366d1dd136b065c8bf5b18b197
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:9b:b3:70:12:72:70:05:5f:58:7e:83:65:07:
8a:be:46:8b:c6:5f:f6:8f:0c:3a:5c:1a:02:a8:78:
fc:e7:ea:85:ca:75:94:46:90:50:12:14:83:7d:0e:
53:ce:ce:9e:32:ec:6d:56:88:05:3d:a3:1d:bd:81:
bd:68:b4:13:d5:02:74:a2:ac:07:8f:04:71:a6:04:
1a:c8:30:d6:b2:07:97:e5:20:7a:22:80:93:e7:d1:
28:f4:d4:31:1c:82:40:2e:c0:79:32:81:d7:9d:52:
cf:53:31:d6:e6:08:f5:4b:0c:a6:6d:60:04:6a:93:
a9:02:31:e5:f0:55:a2:9e:47:2e:81:27:55:a3:f0:
b8:16:80:d8:c4:fb:c8:c3:29:f0:61:9c:19:34:c1:
e6:23:d5:f5:4b:9f:2d:58:41:d2:a2:98:0e:fd:8d:
1a:9b:19:57:d8:91:e7:ec:79:b6:b9:b8:9c:96:6a:
ef:4f:ae:da:ae:42:5d:43:86:64:1e:4e:85:a9:da:
38:46:40:80:c0:72:98:06:1b:00:1d:f9:81:b6:23:
36:ed:55:36:dd:be:6c:5e:10:1d:b9:b0:29:fe:2e:
0d:e7:ac:39:53:ce:04:52:ad:b6:54:2d:41:1f:f9:
75:b3:f6:be:20:a8:00:a2:1f:a5:e7:e5:32:2f:21:
17:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:B2:EB:A9:D8:C9:73:36:6D:1D:D1:36:B0:65:C8:BF:5B:18:B1:97
X509v3 Authority Key Identifier:
keyid:23:40:18:B5:51:3B:77:9D:2E:1E:3A:C1:A8:6A:59:3B:DD:97:4C:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I0AYtVE7d50uHjrBqGpZO92XTKc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/b18080-e3c9-4114-a174-c3d6c7c8ba8a/1/I0AYtVE7d50uHjrBqGpZO92XTKc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/b18080-e3c9-4114-a174-c3d6c7c8ba8a/1/I0AYtVE7d50uHjrBqGpZO92XTKc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:6a:64:68:c5:07:02:28:df:31:f1:f3:37:99:7d:66:81:a3:
26:ed:fa:1f:80:df:f0:21:62:04:a1:85:6a:45:33:02:a1:09:
14:dd:eb:b7:79:e4:f0:b8:30:25:c1:a7:e9:01:23:4d:a8:09:
1c:0a:85:37:5a:64:4e:a7:ee:5d:20:1e:89:db:40:f8:01:f0:
2d:72:ec:1a:6e:1f:cf:47:31:71:ea:0f:0f:8b:20:03:3c:4e:
d4:98:07:9e:72:76:a6:07:15:88:35:57:8e:12:17:a9:b3:0e:
4d:98:ca:80:50:93:b1:4a:9d:11:70:fe:92:5d:2b:3d:44:96:
19:25:1b:ad:f1:f9:12:01:0a:d2:18:fa:f7:b6:98:2c:d4:e4:
12:b3:0a:56:d5:21:45:10:49:56:ba:e9:3e:fa:10:41:90:9a:
f5:ec:e0:c5:91:b7:02:97:21:ef:d3:16:1a:67:3d:e8:25:82:
aa:76:45:a0:50:bb:78:99:3c:8e:c8:4d:34:00:ea:18:21:10:
3c:9d:5e:76:7a:5b:6b:ed:2b:56:8a:ed:76:db:84:53:cc:34:
64:cb:52:39:5c:b3:59:4c:ef:ce:74:73:a5:df:54:f9:7e:88:
34:4d:e4:3e:fa:b6:d4:39:f2:ce:32:2e:fd:8c:8c:71:2c:ea:
99:db:fd:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 09:59:45 2025 by rpki-client