Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/383b70-dbf3-4ff3-b153-3fe4f7cbadab/1/ifGFjNN_s4sqz6XLTvQ-PDCNPWE.mft
File: ifGFjNN_s4sqz6XLTvQ-PDCNPWE.mft (raw, json)
Hash identifier: niJ+pQ38OKptlqnbmROAljalx/kz7XSwW5jM0ZEgqgM=
Subject key identifier: 8A:33:5A:C5:41:03:AA:FF:70:BB:7B:A7:D8:45:F2:C2:E9:52:B0:C3
Authority key identifier: 89:F1:85:8C:D3:7F:B3:8B:2A:CF:A5:CB:4E:F4:3E:3C:30:8D:3D:61
Certificate issuer: /CN=89f1858cd37fb38b2acfa5cb4ef43e3c308d3d61
Certificate serial: 019922FA580D93D0C1061AA4634A70E34831
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ifGFjNN_s4sqz6XLTvQ-PDCNPWE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/383b70-dbf3-4ff3-b153-3fe4f7cbadab/1/ifGFjNN_s4sqz6XLTvQ-PDCNPWE.mft
Manifest number: 166F
Signing time: Sun 07 Sep 2025 07:00:55 +0000
Manifest this update: Sun 07 Sep 2025 07:00:55 +0000
Manifest next update: Mon 08 Sep 2025 07:00:55 +0000
Files and hashes: 1: ifGFjNN_s4sqz6XLTvQ-PDCNPWE.crl (hash: U2+F5YZ7XBeFZ6/EBXhKZ8tVzLpm8CZyhHflEyuVRFA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/383b70-dbf3-4ff3-b153-3fe4f7cbadab/1/ifGFjNN_s4sqz6XLTvQ-PDCNPWE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/383b70-dbf3-4ff3-b153-3fe4f7cbadab/1/ifGFjNN_s4sqz6XLTvQ-PDCNPWE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ifGFjNN_s4sqz6XLTvQ-PDCNPWE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:fa:58:0d:93:d0:c1:06:1a:a4:63:4a:70:e3:48:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89f1858cd37fb38b2acfa5cb4ef43e3c308d3d61
Validity
Not Before: Sep 7 07:00:55 2025 GMT
Not After : Sep 8 07:00:55 2025 GMT
Subject: CN=8a335ac54103aaff70bb7ba7d845f2c2e952b0c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:70:c7:37:8f:74:9b:83:28:c5:85:9d:8c:0e:
21:c3:ca:7f:db:e6:e6:8b:61:74:4a:ae:f0:47:b0:
9e:1b:32:2e:d7:2b:16:cf:ce:e1:b0:3b:76:81:ff:
e0:7a:e1:7c:e4:df:37:61:e0:bc:47:c5:8a:83:cd:
da:38:2e:1c:85:8b:a1:76:4c:13:fe:eb:11:84:cf:
12:54:53:42:a9:70:80:0b:41:6f:3d:ee:9f:c4:00:
2c:f8:6e:b8:ff:22:65:b1:3d:63:64:37:75:71:6e:
cc:cc:ee:1f:87:16:83:47:04:2d:39:19:e4:a5:1e:
13:8f:5b:cf:83:98:27:bd:36:d3:9c:22:3f:5c:d5:
c7:02:ac:ad:d8:e9:1f:25:b6:14:26:39:15:ac:11:
bf:02:d7:8d:31:b7:1d:7f:54:ec:9a:33:72:1e:7a:
a3:ba:a1:dc:06:29:19:9a:97:2c:41:ef:72:53:5f:
35:e7:e5:48:db:9b:f3:ab:4a:a3:fc:32:b7:87:87:
9f:09:1f:72:3b:4d:0f:ba:0c:d7:a7:ba:e2:a7:e6:
60:0c:47:8a:b2:e6:db:4e:f2:e1:92:0e:85:77:ec:
7b:93:bb:3a:a0:66:fa:93:40:b2:cc:2d:60:01:da:
5b:e4:8b:95:89:83:ab:91:7d:b5:1d:5d:22:f7:22:
24:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:33:5A:C5:41:03:AA:FF:70:BB:7B:A7:D8:45:F2:C2:E9:52:B0:C3
X509v3 Authority Key Identifier:
keyid:89:F1:85:8C:D3:7F:B3:8B:2A:CF:A5:CB:4E:F4:3E:3C:30:8D:3D:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ifGFjNN_s4sqz6XLTvQ-PDCNPWE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/383b70-dbf3-4ff3-b153-3fe4f7cbadab/1/ifGFjNN_s4sqz6XLTvQ-PDCNPWE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/383b70-dbf3-4ff3-b153-3fe4f7cbadab/1/ifGFjNN_s4sqz6XLTvQ-PDCNPWE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:bb:78:b7:4b:cd:2e:50:83:14:a4:34:2f:76:fa:bf:9c:c7:
20:6d:3d:cb:8c:f0:40:cb:ab:ff:b9:45:96:dd:8d:69:43:da:
7d:4e:87:6a:67:d2:22:9f:f0:54:75:c3:6b:6e:fa:39:38:2b:
9b:e7:0f:a0:8d:10:41:82:32:a1:84:78:5a:8d:e2:a6:1c:24:
88:ac:d5:48:d6:98:d2:0d:62:8f:2d:fc:7a:64:2a:fe:bf:35:
c8:59:e7:53:ad:b6:c5:7c:2a:3b:48:bb:ca:c8:8f:a9:a2:b2:
d6:eb:3d:89:d2:fd:9f:7c:12:16:20:0a:69:7c:38:e0:e7:72:
7f:7b:9b:e4:c1:e6:80:e0:8b:43:ee:5c:b4:71:12:05:f7:aa:
9e:ad:24:02:07:fb:2f:70:1f:58:01:f9:da:15:3d:b0:7a:99:
be:33:1c:86:a1:ed:b4:f2:ec:ec:ad:78:4e:97:95:40:df:9b:
67:d9:f6:96:57:41:00:7b:3c:1d:0f:d2:3f:59:54:3f:dd:46:
77:ce:ec:60:56:ed:1a:fe:ef:48:ad:13:5c:c3:a0:93:01:a0:
47:5c:fc:0f:2e:48:50:a6:f6:81:40:30:4e:d2:0c:08:4d:71:
b8:d2:e5:99:3f:63:15:6e:2d:c7:f7:a4:ce:d1:e6:2e:42:94:
aa:37:f1:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:16:15 2025 by rpki-client