Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/fd22ad-f792-475c-8bae-26024e2a5f3e/1/ije4wOFZfNHaZcmgf6wFrNhEzGo.mft
File: ije4wOFZfNHaZcmgf6wFrNhEzGo.mft (raw, json)
Hash identifier: 78whFHFsjXcMCTMpRn+nMPreICFtrnJjMa5zvu0cmXg=
Subject key identifier: 13:4E:E3:FB:C8:8F:91:FE:1B:02:94:D7:07:37:E6:91:BA:8B:24:40
Authority key identifier: 8A:37:B8:C0:E1:59:7C:D1:DA:65:C9:A0:7F:AC:05:AC:D8:44:CC:6A
Certificate issuer: /CN=8a37b8c0e1597cd1da65c9a07fac05acd844cc6a
Certificate serial: 019923A08D665A42E397338D134FBB00E6FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ije4wOFZfNHaZcmgf6wFrNhEzGo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/fd22ad-f792-475c-8bae-26024e2a5f3e/1/ije4wOFZfNHaZcmgf6wFrNhEzGo.mft
Manifest number: 115E
Signing time: Sun 07 Sep 2025 10:02:28 +0000
Manifest this update: Sun 07 Sep 2025 10:02:28 +0000
Manifest next update: Mon 08 Sep 2025 10:02:28 +0000
Files and hashes: 1: ije4wOFZfNHaZcmgf6wFrNhEzGo.crl (hash: qMHScOpsUTn1w2f+KJRxqqeRmp6ZZYSFk54vIBdG4so=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/fd22ad-f792-475c-8bae-26024e2a5f3e/1/ije4wOFZfNHaZcmgf6wFrNhEzGo.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/fd22ad-f792-475c-8bae-26024e2a5f3e/1/ije4wOFZfNHaZcmgf6wFrNhEzGo.mft
rsync://rpki.ripe.net/repository/DEFAULT/ije4wOFZfNHaZcmgf6wFrNhEzGo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:a0:8d:66:5a:42:e3:97:33:8d:13:4f:bb:00:e6:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a37b8c0e1597cd1da65c9a07fac05acd844cc6a
Validity
Not Before: Sep 7 10:02:28 2025 GMT
Not After : Sep 8 10:02:28 2025 GMT
Subject: CN=134ee3fbc88f91fe1b0294d70737e691ba8b2440
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:bc:9c:fd:c7:5a:9f:b9:73:ef:ad:f9:78:72:
ac:cd:32:70:49:22:42:77:e1:12:7a:39:8e:ea:08:
fb:e5:2e:88:7b:a2:92:6b:5a:fa:13:6c:a7:40:ea:
e8:31:3c:53:07:df:d0:6b:b1:c0:27:fe:e4:10:9c:
23:7f:e4:b3:95:43:6d:2b:60:76:36:ca:92:6b:e5:
31:fa:23:34:e3:c5:87:2d:06:54:af:f7:2a:e1:29:
e4:c5:8e:c3:b1:9a:96:f4:52:b7:de:b3:ce:36:a7:
f3:68:82:f7:fd:d4:66:49:16:8c:52:24:ce:b3:97:
74:8e:05:a5:34:1d:be:ec:e8:b4:55:d7:40:60:42:
96:78:e5:d9:c7:ce:d8:e7:98:c7:4b:f4:a1:e3:3a:
18:49:bc:d8:02:3d:d6:b4:9c:36:83:62:a5:49:73:
17:5a:3c:bd:4d:2b:e8:a9:03:b4:18:97:2b:78:76:
66:50:6e:1b:a0:18:71:5a:38:de:15:b6:a4:03:c9:
e1:c9:7d:11:eb:5b:4a:51:e4:c3:38:25:f2:f5:f1:
4a:85:e5:b9:e8:c5:5d:96:96:c9:e5:36:01:4d:c6:
60:d2:54:b4:a6:33:9c:62:fc:56:1d:14:01:61:1b:
45:d9:54:0e:d5:d9:1a:e9:21:6e:23:9c:34:08:66:
45:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:4E:E3:FB:C8:8F:91:FE:1B:02:94:D7:07:37:E6:91:BA:8B:24:40
X509v3 Authority Key Identifier:
keyid:8A:37:B8:C0:E1:59:7C:D1:DA:65:C9:A0:7F:AC:05:AC:D8:44:CC:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ije4wOFZfNHaZcmgf6wFrNhEzGo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/fd22ad-f792-475c-8bae-26024e2a5f3e/1/ije4wOFZfNHaZcmgf6wFrNhEzGo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/fd22ad-f792-475c-8bae-26024e2a5f3e/1/ije4wOFZfNHaZcmgf6wFrNhEzGo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:0b:4a:f9:6b:65:e1:47:cb:44:7c:41:a4:b1:b2:82:86:3d:
d1:5d:92:db:b3:0d:fd:9c:c5:8d:c7:f5:93:72:84:7a:e6:78:
f9:e0:83:12:8c:38:37:36:8c:f7:40:54:18:f0:7a:01:30:39:
12:a0:e4:72:cd:76:ee:5b:c8:e0:57:0c:08:e8:03:56:ad:15:
35:a8:bd:2c:68:58:f5:49:3a:ba:3e:da:ab:12:7b:62:ff:c9:
e4:20:44:c7:e1:91:9d:be:81:a9:83:da:4c:08:68:83:85:38:
d6:17:77:bd:f9:1f:9a:53:b3:50:21:03:3a:9c:24:3e:c8:ae:
cf:98:68:9a:9b:28:aa:35:a8:0a:2c:56:7c:4f:96:9e:4f:41:
f2:0e:03:e2:b7:d3:ec:05:1b:ce:92:05:86:6a:eb:e4:48:16:
3b:d4:f7:b2:74:55:10:78:e1:54:e2:dd:8c:c9:ae:da:36:cd:
79:75:09:3e:00:44:83:e9:f1:68:51:bd:66:0d:0d:42:b2:6e:
14:ea:ca:b6:f3:c7:90:a9:ab:50:30:f0:9f:3d:a3:a4:ad:74:
e6:2f:38:19:29:90:06:a6:db:ca:63:7c:f3:19:83:4b:56:4a:
9a:6e:e6:fd:3e:a6:23:af:fb:e8:e7:60:35:f7:f3:3c:9b:96:
97:ab:8e:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 13:53:37 2025 by rpki-client