Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/63ecd9-3d18-4810-9db4-d36c16279552/1/iRXDvI1ZBfJPvjBRvOcgCSE4MAk.mft
File: iRXDvI1ZBfJPvjBRvOcgCSE4MAk.mft (raw, json)
Hash identifier: vDLQa78rrVN0uRPuyzqq54xhkmLwFEWjdP4nk7ZOPQk=
Subject key identifier: 71:CA:E3:A4:81:81:FD:97:D2:54:EB:5B:A1:E3:6D:DF:D9:73:AC:00
Authority key identifier: 89:15:C3:BC:8D:59:05:F2:4F:BE:30:51:BC:E7:20:09:21:38:30:09
Certificate issuer: /CN=8915c3bc8d5905f24fbe3051bce7200921383009
Certificate serial: 01992330FF4E0D6AB8D0E09346FD0054E6DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iRXDvI1ZBfJPvjBRvOcgCSE4MAk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/63ecd9-3d18-4810-9db4-d36c16279552/1/iRXDvI1ZBfJPvjBRvOcgCSE4MAk.mft
Manifest number: 0143
Signing time: Sun 07 Sep 2025 08:00:37 +0000
Manifest this update: Sun 07 Sep 2025 08:00:37 +0000
Manifest next update: Mon 08 Sep 2025 08:00:37 +0000
Files and hashes: 1: iRXDvI1ZBfJPvjBRvOcgCSE4MAk.crl (hash: 0oQpwpRbtvB6HEi5hZstP2n99jb4Hfi1OiDtXy4UXiE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/63ecd9-3d18-4810-9db4-d36c16279552/1/iRXDvI1ZBfJPvjBRvOcgCSE4MAk.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/63ecd9-3d18-4810-9db4-d36c16279552/1/iRXDvI1ZBfJPvjBRvOcgCSE4MAk.mft
rsync://rpki.ripe.net/repository/DEFAULT/iRXDvI1ZBfJPvjBRvOcgCSE4MAk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:30:ff:4e:0d:6a:b8:d0:e0:93:46:fd:00:54:e6:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8915c3bc8d5905f24fbe3051bce7200921383009
Validity
Not Before: Sep 7 08:00:37 2025 GMT
Not After : Sep 8 08:00:37 2025 GMT
Subject: CN=71cae3a48181fd97d254eb5ba1e36ddfd973ac00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:c0:bc:3f:81:b2:90:5a:6c:b3:83:af:9f:a9:
8b:55:6c:c0:86:98:b2:ef:04:c4:ba:47:a4:87:de:
f8:10:6b:9a:d9:06:5f:74:13:56:c6:d2:74:e3:6f:
65:b0:c0:f6:1f:41:84:65:50:06:70:8c:49:42:c3:
61:36:0b:30:c2:54:97:c0:c7:22:59:b5:93:cc:02:
4a:26:34:07:9f:f8:26:79:25:1a:40:8a:9f:c6:b6:
c9:34:f1:df:21:7d:c9:c2:49:4d:dd:c2:f7:11:99:
89:0d:1e:95:5a:0b:98:6d:4d:71:43:1b:7a:20:f0:
dd:10:13:3d:fe:ba:17:b0:da:e5:76:c0:13:2f:5e:
99:16:e5:2b:6a:fe:0c:64:24:25:78:53:31:16:05:
f2:f7:46:8f:bd:a6:84:b5:af:b3:af:35:1a:e5:47:
15:6e:8d:5e:c2:1b:11:fa:e6:93:43:7a:68:e0:59:
24:95:8a:3d:44:51:f8:59:d9:2f:5b:a5:5d:62:6e:
8f:69:e7:6d:16:97:c3:5e:f3:73:fc:ac:78:f9:41:
12:ee:2a:5f:69:5d:a4:0e:ee:11:22:72:43:5d:7a:
c2:6a:be:80:5d:29:fa:91:eb:5b:63:f3:83:65:2b:
1e:a9:5a:6d:a9:b4:de:72:c0:bf:2a:1c:87:20:b8:
20:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:CA:E3:A4:81:81:FD:97:D2:54:EB:5B:A1:E3:6D:DF:D9:73:AC:00
X509v3 Authority Key Identifier:
keyid:89:15:C3:BC:8D:59:05:F2:4F:BE:30:51:BC:E7:20:09:21:38:30:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iRXDvI1ZBfJPvjBRvOcgCSE4MAk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/63ecd9-3d18-4810-9db4-d36c16279552/1/iRXDvI1ZBfJPvjBRvOcgCSE4MAk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/63ecd9-3d18-4810-9db4-d36c16279552/1/iRXDvI1ZBfJPvjBRvOcgCSE4MAk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:96:ab:7f:af:da:19:1a:fd:9a:f6:00:d7:51:f1:81:81:ef:
e5:4a:80:1f:ef:8c:2c:da:fe:6a:dd:b5:5f:9f:1b:50:0f:a5:
62:ce:e6:51:3a:77:6b:a5:1f:37:36:88:eb:1e:4c:21:2c:37:
58:ef:f6:d0:65:db:44:e6:57:b4:4b:ea:f9:ce:b9:37:e1:2d:
57:66:ba:cd:be:a5:66:82:6c:3e:34:bd:ad:5f:a1:ac:09:d0:
b8:59:e1:8d:21:d2:40:59:42:14:9f:69:ff:6b:ee:d2:0b:90:
dc:72:31:55:7a:64:29:eb:49:a8:1f:87:5f:ac:9c:45:6d:d8:
40:02:4e:f1:bc:9b:78:fa:35:08:7e:be:80:89:ea:56:dc:31:
5e:c0:de:d8:b7:68:6c:b2:c0:67:5e:4b:91:7c:36:fa:21:f6:
38:df:cf:fd:2d:f5:64:16:6e:7d:d7:39:e1:73:5c:af:08:34:
56:60:dc:7f:82:d2:c1:3b:cf:c5:ee:f4:1e:a8:8c:6e:1c:47:
b4:54:03:3c:bf:94:44:21:03:dc:68:90:f8:b2:1e:e9:23:ec:
e4:6e:bf:02:51:1f:fd:c4:37:29:3a:0e:70:84:99:0c:a4:9e:
69:57:a8:ed:37:91:21:fd:f2:2a:9d:87:3a:09:06:b1:6b:a7:
6b:e5:70:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:06:42 2025 by rpki-client