Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/f9ed64-5cc3-4a0d-a70c-1a387a456579/1/iOr6__gbldzuV3JwV-1nEUozgZM.mft
File: iOr6__gbldzuV3JwV-1nEUozgZM.mft (raw, json)
Hash identifier: C/rju8zDCxnTfdsyEX4c6eFN+wD8nCP6EBmvHavw7Zk=
Subject key identifier: 77:5D:EB:45:F3:3B:08:6B:0E:6C:04:61:37:E7:40:D0:35:6F:EE:57
Authority key identifier: 88:EA:FA:FF:F8:1B:95:DC:EE:57:72:70:57:ED:67:11:4A:33:81:93
Certificate issuer: /CN=88eafafff81b95dcee57727057ed67114a338193
Certificate serial: 019922FA063E9E914F042C2AC09B76655BF9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iOr6__gbldzuV3JwV-1nEUozgZM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/f9ed64-5cc3-4a0d-a70c-1a387a456579/1/iOr6__gbldzuV3JwV-1nEUozgZM.mft
Manifest number: 0699
Signing time: Sun 07 Sep 2025 07:00:34 +0000
Manifest this update: Sun 07 Sep 2025 07:00:34 +0000
Manifest next update: Mon 08 Sep 2025 07:00:34 +0000
Files and hashes: 1: iOr6__gbldzuV3JwV-1nEUozgZM.crl (hash: GVg8jfxDlu7/y8qWgxLAZRVcyv0eVhwxN/GopBr/Ls0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/f9ed64-5cc3-4a0d-a70c-1a387a456579/1/iOr6__gbldzuV3JwV-1nEUozgZM.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/f9ed64-5cc3-4a0d-a70c-1a387a456579/1/iOr6__gbldzuV3JwV-1nEUozgZM.mft
rsync://rpki.ripe.net/repository/DEFAULT/iOr6__gbldzuV3JwV-1nEUozgZM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:fa:06:3e:9e:91:4f:04:2c:2a:c0:9b:76:65:5b:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88eafafff81b95dcee57727057ed67114a338193
Validity
Not Before: Sep 7 07:00:34 2025 GMT
Not After : Sep 8 07:00:34 2025 GMT
Subject: CN=775deb45f33b086b0e6c046137e740d0356fee57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:c3:d7:1d:10:61:48:da:89:57:63:4f:e0:69:
e5:69:10:90:a9:6a:91:f1:fb:e7:94:72:41:84:4a:
a0:c1:01:3d:d6:ec:d8:7c:bd:2e:9f:29:07:9c:dc:
05:d9:a7:7b:cb:8c:9e:7b:c9:30:22:dd:54:7e:7c:
c7:5d:cc:14:15:d8:e8:0b:3a:36:36:aa:cd:fe:13:
61:36:1f:95:44:53:77:3d:e7:72:50:b2:d9:6c:77:
c6:2e:b6:37:c1:20:a8:4e:17:94:e3:85:b3:06:81:
2d:be:a5:24:68:bb:e9:40:ba:33:76:00:c0:ff:14:
00:e5:0a:dc:12:48:73:0b:e7:63:fc:fe:3a:5f:bb:
12:96:4b:dc:ac:1d:d3:31:3c:60:82:ed:c0:58:79:
30:0e:ef:ce:a2:c8:2a:d0:44:33:73:c9:5f:b2:89:
1f:8d:a0:a3:64:16:2d:52:4e:0f:56:a2:ea:0b:5c:
f3:c0:6e:bf:51:65:0d:cd:80:21:84:7a:a1:cd:e3:
cb:f7:f4:09:2c:58:47:e3:27:0b:85:80:38:cc:07:
4c:1c:3f:9b:fa:d2:80:51:38:fc:53:e6:2f:7d:9b:
c6:b6:bd:bc:2e:bf:c0:43:a5:8d:66:31:46:8b:18:
76:15:67:99:e9:43:88:1a:49:60:48:c1:f9:69:3d:
2c:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:5D:EB:45:F3:3B:08:6B:0E:6C:04:61:37:E7:40:D0:35:6F:EE:57
X509v3 Authority Key Identifier:
keyid:88:EA:FA:FF:F8:1B:95:DC:EE:57:72:70:57:ED:67:11:4A:33:81:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iOr6__gbldzuV3JwV-1nEUozgZM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/f9ed64-5cc3-4a0d-a70c-1a387a456579/1/iOr6__gbldzuV3JwV-1nEUozgZM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/f9ed64-5cc3-4a0d-a70c-1a387a456579/1/iOr6__gbldzuV3JwV-1nEUozgZM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:44:2e:a4:15:70:ae:1e:d2:88:0e:f8:0b:9c:37:94:44:2b:
39:0f:a4:45:f2:78:4b:13:44:e8:cd:5a:56:5e:94:9d:26:bd:
f9:bf:22:6e:a3:b7:ce:2e:2e:cb:66:7b:9a:79:b6:7b:d3:27:
55:ba:c6:2e:85:69:21:3e:0e:5b:74:19:8f:89:97:fb:88:97:
a5:8b:31:69:ea:1e:c1:29:a1:fe:20:66:6f:5e:35:32:72:8b:
7b:5b:0a:aa:47:80:32:da:12:64:90:12:7f:7a:b8:10:6b:ef:
0d:9e:0f:aa:ff:4c:1b:08:69:75:6e:32:a1:58:4a:c9:7f:3c:
41:8c:df:eb:ce:82:1d:73:53:a8:4d:d5:6e:e8:c7:94:d4:bd:
59:de:e6:c9:4e:49:91:ca:66:8f:71:d1:40:f4:2f:32:d6:47:
a6:4c:f5:53:01:d7:8f:5b:e3:42:7c:00:a5:28:b8:e4:aa:7b:
48:c9:e9:88:ef:3e:6e:1a:ab:0e:00:3b:79:78:66:67:7d:ba:
76:3a:8c:c0:70:ed:0b:7b:da:fe:fd:55:20:02:0d:62:ae:0b:
d4:e2:ce:d6:6a:1e:6b:fa:df:ce:fa:95:b4:f9:31:87:6c:ed:
78:92:6a:aa:c4:3c:af:d9:98:c8:4b:3b:0f:ce:d5:4e:45:57:
f8:a5:81:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:21:22 2025 by rpki-client