Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/993364-d85f-4007-96ec-49ac28142318/1/iXlCagvNkDpVJkksxa97TysO2wQ.mft
File: iXlCagvNkDpVJkksxa97TysO2wQ.mft (raw, json)
Hash identifier: KdJfc1E41bqM0x4qM1nL4VwzHAnfh6kZqMGXZMx6Guk=
Subject key identifier: 92:3F:BF:30:25:2F:4D:85:CD:5A:2B:58:C5:F2:37:AA:09:0E:93:54
Authority key identifier: 89:79:42:6A:0B:CD:90:3A:55:26:49:2C:C5:AF:7B:4F:2B:0E:DB:04
Certificate issuer: /CN=8979426a0bcd903a5526492cc5af7b4f2b0edb04
Certificate serial: 019922C38126C3ACCE1765FF04DC1F324892
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iXlCagvNkDpVJkksxa97TysO2wQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/993364-d85f-4007-96ec-49ac28142318/1/iXlCagvNkDpVJkksxa97TysO2wQ.mft
Manifest number: 05F3
Signing time: Sun 07 Sep 2025 06:01:01 +0000
Manifest this update: Sun 07 Sep 2025 06:01:01 +0000
Manifest next update: Mon 08 Sep 2025 06:01:01 +0000
Files and hashes: 1: iXlCagvNkDpVJkksxa97TysO2wQ.crl (hash: JMA1kgZ6M/vm/VfXmRGsUhar1WDq2bPxXqTWmcFqBqs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/993364-d85f-4007-96ec-49ac28142318/1/iXlCagvNkDpVJkksxa97TysO2wQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/993364-d85f-4007-96ec-49ac28142318/1/iXlCagvNkDpVJkksxa97TysO2wQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/iXlCagvNkDpVJkksxa97TysO2wQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:c3:81:26:c3:ac:ce:17:65:ff:04:dc:1f:32:48:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8979426a0bcd903a5526492cc5af7b4f2b0edb04
Validity
Not Before: Sep 7 06:01:01 2025 GMT
Not After : Sep 8 06:01:01 2025 GMT
Subject: CN=923fbf30252f4d85cd5a2b58c5f237aa090e9354
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:c9:65:f9:b0:eb:e3:d5:f1:54:c8:59:76:d3:
ed:5a:95:0b:88:c0:07:1a:76:46:55:fd:f5:5b:49:
86:6c:93:68:1c:de:a0:5c:a4:d6:b9:8a:6d:0e:1b:
30:1b:de:ad:90:31:94:c2:74:7a:ca:19:96:60:fd:
15:5e:0f:ea:f7:a4:39:be:31:69:80:2b:d5:42:f4:
60:b0:50:37:85:99:e6:52:cf:e4:52:7d:ee:61:ae:
5f:eb:17:74:2f:29:67:c2:10:4b:84:8f:95:13:d6:
b0:ed:89:65:52:fc:f2:e0:f7:e0:fa:cb:90:06:ef:
35:1d:5e:e1:7d:3b:bf:97:7d:04:3f:54:7b:f4:3f:
c9:9c:43:a2:9b:7d:ff:45:67:5f:d2:d8:70:94:c4:
6a:84:5e:d9:b9:d7:9e:71:06:38:b9:a0:29:43:32:
f9:3a:00:22:ff:a4:51:ec:26:6c:00:2e:40:9c:05:
84:f8:5a:7c:54:06:ec:0d:54:f3:67:93:7e:9f:a4:
c8:68:25:af:2b:d2:15:f6:6d:59:b7:79:3d:20:cd:
7f:88:a3:4b:72:e2:72:57:b5:06:9e:c1:c9:a0:b6:
c4:44:f5:c5:87:28:52:7c:78:d8:a5:45:52:dc:2c:
21:c6:e6:3b:92:38:9d:80:7a:f0:67:3b:8f:48:0f:
0c:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:3F:BF:30:25:2F:4D:85:CD:5A:2B:58:C5:F2:37:AA:09:0E:93:54
X509v3 Authority Key Identifier:
keyid:89:79:42:6A:0B:CD:90:3A:55:26:49:2C:C5:AF:7B:4F:2B:0E:DB:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iXlCagvNkDpVJkksxa97TysO2wQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/993364-d85f-4007-96ec-49ac28142318/1/iXlCagvNkDpVJkksxa97TysO2wQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/993364-d85f-4007-96ec-49ac28142318/1/iXlCagvNkDpVJkksxa97TysO2wQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:ea:82:d5:3d:c7:1b:a5:53:c4:d6:49:d8:62:53:37:9b:fd:
f0:61:58:e4:c6:91:04:c1:d5:27:bd:b1:84:0c:08:82:77:ea:
fd:20:25:c0:82:4e:b3:4b:4d:b6:29:95:42:57:0b:59:00:62:
4f:b7:d0:5a:45:f5:9d:68:be:2b:db:b5:7c:a2:21:0c:2c:e4:
77:71:c7:cb:35:f4:0d:ca:c2:ae:1b:57:dc:08:ec:b0:16:6f:
85:8c:ca:e2:9c:75:b1:38:e8:ea:82:2e:27:fc:42:72:bc:c1:
28:c4:6c:bf:fd:15:70:3c:a4:51:e5:95:6b:2c:e8:70:46:94:
8c:89:2d:02:45:55:6b:db:06:fc:aa:b9:a5:d1:e9:8f:5c:be:
bf:1c:36:08:ee:64:67:53:7e:7c:3c:86:b0:93:08:38:1f:7c:
ec:ae:00:34:f9:ea:79:6f:a9:37:d9:c6:42:f6:c5:c6:28:1d:
00:cb:fb:6b:35:2b:50:10:e5:00:a0:b8:43:2c:fa:cd:9b:7c:
fc:b8:d8:08:67:5d:6b:c8:f9:77:2f:99:72:dc:25:4c:45:ba:
0f:11:3c:2c:a2:e5:9b:16:6b:5e:f8:79:eb:01:82:ef:3f:d8:
c1:35:a0:ca:33:aa:c6:92:04:79:29:22:c3:cc:8a:29:ec:10:
1c:00:aa:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:29:29 2025 by rpki-client