Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/5d9760-e36e-47c2-96e3-6dc510e98b73/1/I6lUuSO6IAjpheuiQdG3AHF_iEM.mft
File: I6lUuSO6IAjpheuiQdG3AHF_iEM.mft (raw, json)
Hash identifier: x0RLIB0em1IklGG7tfZUBKidO43ls7pU5GKRD+AABSw=
Subject key identifier: C0:56:82:0C:60:9A:EB:FC:B7:ED:07:B5:1D:F7:25:85:E2:7B:5A:44
Authority key identifier: 23:A9:54:B9:23:BA:20:08:E9:85:EB:A2:41:D1:B7:00:71:7F:88:43
Certificate issuer: /CN=23a954b923ba2008e985eba241d1b700717f8843
Certificate serial: 019923A05F3CB885A35C111148D17DCADE60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I6lUuSO6IAjpheuiQdG3AHF_iEM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/5d9760-e36e-47c2-96e3-6dc510e98b73/1/I6lUuSO6IAjpheuiQdG3AHF_iEM.mft
Manifest number: 14BA
Signing time: Sun 07 Sep 2025 10:02:16 +0000
Manifest this update: Sun 07 Sep 2025 10:02:16 +0000
Manifest next update: Mon 08 Sep 2025 10:02:16 +0000
Files and hashes: 1: I6lUuSO6IAjpheuiQdG3AHF_iEM.crl (hash: k/A0weuQyQq6X+1lwkprSycCs0nysa1o5SHweqUl2I0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/5d9760-e36e-47c2-96e3-6dc510e98b73/1/I6lUuSO6IAjpheuiQdG3AHF_iEM.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/5d9760-e36e-47c2-96e3-6dc510e98b73/1/I6lUuSO6IAjpheuiQdG3AHF_iEM.mft
rsync://rpki.ripe.net/repository/DEFAULT/I6lUuSO6IAjpheuiQdG3AHF_iEM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:a0:5f:3c:b8:85:a3:5c:11:11:48:d1:7d:ca:de:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23a954b923ba2008e985eba241d1b700717f8843
Validity
Not Before: Sep 7 10:02:16 2025 GMT
Not After : Sep 8 10:02:16 2025 GMT
Subject: CN=c056820c609aebfcb7ed07b51df72585e27b5a44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:ac:f1:b9:3b:71:0c:e3:87:eb:e4:61:57:c4:
25:7a:0d:a0:20:0d:f5:5c:a6:56:01:e9:7e:41:a8:
15:0b:72:0f:e3:a2:8d:7a:72:d2:f0:e2:32:ed:be:
e4:aa:c2:80:2a:44:23:6f:82:c0:e5:c5:62:83:5f:
59:02:1a:7a:8a:7d:7d:1d:96:20:26:09:fe:be:f0:
92:62:02:f5:6f:70:af:1f:a6:5a:ef:09:0a:74:90:
d4:be:bf:07:66:00:1f:4e:e3:5b:d6:3b:77:76:43:
8e:0a:ef:3c:22:04:3b:a4:75:13:9e:19:46:ca:ca:
74:ea:40:ed:50:6a:a0:6c:04:06:dd:92:65:27:74:
da:42:d9:74:cb:db:03:ee:14:91:c0:83:21:b4:03:
a5:a3:b9:ca:c2:27:c4:34:15:e7:3c:cd:29:b4:dd:
84:be:66:aa:4c:a3:82:67:ef:e9:1f:57:64:ba:37:
a7:c0:dc:ec:12:96:5a:d0:fe:4b:3d:da:04:51:26:
b0:5a:9a:99:28:a7:62:b6:64:e6:55:aa:ee:32:54:
60:60:38:c3:9a:73:ae:c0:e6:92:a8:c1:6f:b6:d2:
8c:bd:3c:99:ff:97:95:a0:08:92:0f:db:be:20:6b:
f7:1f:46:1c:d5:b8:b4:de:f6:1d:af:96:7b:69:e4:
8a:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:56:82:0C:60:9A:EB:FC:B7:ED:07:B5:1D:F7:25:85:E2:7B:5A:44
X509v3 Authority Key Identifier:
keyid:23:A9:54:B9:23:BA:20:08:E9:85:EB:A2:41:D1:B7:00:71:7F:88:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I6lUuSO6IAjpheuiQdG3AHF_iEM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/5d9760-e36e-47c2-96e3-6dc510e98b73/1/I6lUuSO6IAjpheuiQdG3AHF_iEM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/5d9760-e36e-47c2-96e3-6dc510e98b73/1/I6lUuSO6IAjpheuiQdG3AHF_iEM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:4b:a1:d3:ba:4a:a1:94:5d:e6:6c:3b:ee:8d:1b:19:47:dd:
17:2e:5b:d6:7a:8e:92:06:bf:dd:90:83:8a:49:b1:31:b6:5d:
f7:38:83:70:fa:53:fb:6b:99:46:c2:ab:bb:d3:04:3a:51:68:
ee:06:94:a0:a9:91:2d:bd:f8:67:5c:0c:a5:75:17:2b:75:fa:
fc:ae:23:03:ab:c3:c2:b1:c2:83:29:0a:3b:c0:2d:c3:95:2c:
3c:46:e7:16:ba:9e:f4:fb:65:d4:38:d3:18:78:0a:28:77:c0:
49:24:d9:66:d2:7d:43:b6:4f:cc:9b:0a:4e:81:f9:59:d8:ca:
66:d0:a5:86:2c:47:b7:e9:7c:26:a7:6e:a8:f0:8c:f1:be:65:
a7:27:57:23:9e:19:bd:88:1b:50:7a:f2:0c:7b:e9:fd:21:97:
a4:4f:36:93:ba:b6:96:1b:8e:3a:bb:62:50:bf:ab:30:df:1e:
f9:45:0b:ff:dc:f6:e9:fb:58:82:09:88:03:0f:0d:29:8d:21:
21:1c:97:72:ed:14:22:a7:f7:63:c5:e0:fa:22:56:51:7f:fc:
4a:96:87:fc:4a:f3:11:d6:f2:8c:52:36:7e:54:32:84:eb:8a:
f7:2a:56:da:ff:bc:d9:38:9a:82:c0:ed:3c:00:da:d7:f9:16:
46:6a:b2:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 14:35:40 2025 by rpki-client