Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/2f066c-dc7a-4a45-8574-a5b295aefc00/1/IqETXjyWLnRuT1fR6qSUoEnwOxs.mft
File: IqETXjyWLnRuT1fR6qSUoEnwOxs.mft (raw, json)
Hash identifier: bk0PzZ36MluO/bpPqVKvi6GBhUMCJiaPJlglX/vGaAY=
Subject key identifier: B2:65:07:8C:6C:41:41:E0:48:24:96:D3:54:D8:97:37:15:FC:43:EA
Authority key identifier: 22:A1:13:5E:3C:96:2E:74:6E:4F:57:D1:EA:A4:94:A0:49:F0:3B:1B
Certificate issuer: /CN=22a1135e3c962e746e4f57d1eaa494a049f03b1b
Certificate serial: 01992330D0506627741E530E850AE3A36CCA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IqETXjyWLnRuT1fR6qSUoEnwOxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/2f066c-dc7a-4a45-8574-a5b295aefc00/1/IqETXjyWLnRuT1fR6qSUoEnwOxs.mft
Manifest number: 3B
Signing time: Sun 07 Sep 2025 08:00:25 +0000
Manifest this update: Sun 07 Sep 2025 08:00:25 +0000
Manifest next update: Mon 08 Sep 2025 08:00:25 +0000
Files and hashes: 1: IqETXjyWLnRuT1fR6qSUoEnwOxs.crl (hash: uETA6j0nxMhbEpKzDJjrAnVzmbz4PPNwSZ+gukuA1t0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/2f066c-dc7a-4a45-8574-a5b295aefc00/1/IqETXjyWLnRuT1fR6qSUoEnwOxs.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/2f066c-dc7a-4a45-8574-a5b295aefc00/1/IqETXjyWLnRuT1fR6qSUoEnwOxs.mft
rsync://rpki.ripe.net/repository/DEFAULT/IqETXjyWLnRuT1fR6qSUoEnwOxs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:30:d0:50:66:27:74:1e:53:0e:85:0a:e3:a3:6c:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22a1135e3c962e746e4f57d1eaa494a049f03b1b
Validity
Not Before: Sep 7 08:00:25 2025 GMT
Not After : Sep 8 08:00:25 2025 GMT
Subject: CN=b265078c6c4141e0482496d354d8973715fc43ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:7b:1e:5d:95:1a:b7:cf:e4:a4:0b:74:07:97:
92:ed:85:69:40:4b:5c:bd:24:05:2f:9e:ac:b0:b6:
b2:67:42:a9:1a:4b:a3:ba:f5:81:37:29:1e:06:6e:
ad:7a:a3:d5:65:74:c1:f4:5a:e0:d8:6d:95:9a:5a:
62:b6:ee:78:50:17:37:06:76:34:e5:e4:5b:ae:58:
55:be:00:46:01:e8:8c:30:34:4f:9c:3a:82:d2:ea:
be:e1:01:99:ac:78:d2:a8:97:63:e0:20:a8:5e:71:
47:d9:a3:28:50:73:39:e4:16:2d:05:f1:77:70:63:
ea:e4:48:cf:52:8c:37:64:0a:b4:c2:e1:e6:9c:19:
9b:47:f7:26:58:0e:10:d0:02:70:36:b4:c4:f1:d6:
52:f2:dd:76:af:18:e3:9b:72:f8:ef:d1:0e:85:43:
a7:0a:0a:1d:1e:ac:6c:08:32:45:73:ee:6a:d0:5d:
c9:1b:56:5c:fb:8c:9c:b1:c0:bc:4b:68:c1:a3:bf:
70:a7:76:06:92:6b:de:60:17:17:1f:97:c7:e8:ca:
3a:bd:fe:84:06:93:c0:78:10:e7:47:28:4b:9c:c3:
12:78:df:09:c2:2a:ef:25:a3:f7:05:34:00:fd:73:
d7:a2:b3:14:26:d5:56:9e:16:7d:6b:61:fc:fa:88:
d0:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:65:07:8C:6C:41:41:E0:48:24:96:D3:54:D8:97:37:15:FC:43:EA
X509v3 Authority Key Identifier:
keyid:22:A1:13:5E:3C:96:2E:74:6E:4F:57:D1:EA:A4:94:A0:49:F0:3B:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IqETXjyWLnRuT1fR6qSUoEnwOxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/2f066c-dc7a-4a45-8574-a5b295aefc00/1/IqETXjyWLnRuT1fR6qSUoEnwOxs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/2f066c-dc7a-4a45-8574-a5b295aefc00/1/IqETXjyWLnRuT1fR6qSUoEnwOxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:84:b8:44:21:f2:1a:55:db:f5:4a:a3:e3:f2:58:5f:23:ce:
f3:59:e2:4a:c4:fe:9e:68:77:99:c8:40:1d:69:da:55:76:f3:
1e:fb:8f:5e:d4:d0:19:ba:b9:18:7c:88:82:15:09:f3:20:77:
a5:69:35:00:61:38:6a:4b:ca:8e:e4:e1:df:3c:1a:fa:52:01:
a6:91:e9:83:fb:83:d0:80:d6:4b:df:86:f8:ef:35:5f:a5:32:
4c:ec:c8:4c:51:7d:cb:13:40:c0:bf:21:af:7d:2b:05:c1:c7:
74:d2:63:b1:9c:ab:73:03:aa:80:d8:ac:bc:e9:3b:56:49:89:
4c:d2:95:fc:81:58:a2:cd:75:1c:b1:c3:c6:14:18:9e:81:7b:
8f:9c:dc:a3:b9:ba:47:45:9d:bb:e7:bb:7e:1f:a8:0d:56:1e:
bc:70:0b:a5:1b:38:6b:1b:c4:3e:87:8d:d4:0e:fc:32:4e:8e:
d6:d1:aa:c3:a5:41:1b:01:c8:d2:38:63:c7:47:a3:e9:b5:bf:
bd:91:fa:ef:6f:10:90:22:04:d6:e1:5a:cc:00:51:d0:85:a2:
8e:cf:92:03:63:f2:95:c5:b7:4e:df:cb:bb:04:12:87:08:1a:
89:90:fd:98:df:7a:06:35:97:f0:14:79:e5:19:bd:ab:0c:3d:
44:ca:2a:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:13:22 2025 by rpki-client