Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/934fc6-0724-4cd6-a417-eea9661381b4/1/IxNmmEaTAQHlodA48EtTTaCLonY.mft
File: IxNmmEaTAQHlodA48EtTTaCLonY.mft (raw, json)
Hash identifier: uza//spA0oPaB1DnsrEZshXKONnkBLdJElXTsj2Xpi4=
Subject key identifier: 1D:1F:C1:48:48:E1:26:37:A4:1A:0C:C2:19:70:EB:24:9A:22:9C:A7
Authority key identifier: 23:13:66:98:46:93:01:01:E5:A1:D0:38:F0:4B:53:4D:A0:8B:A2:76
Certificate issuer: /CN=2313669846930101e5a1d038f04b534da08ba276
Certificate serial: 019922FA9010632085F1D1BCBCA977369D9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IxNmmEaTAQHlodA48EtTTaCLonY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/934fc6-0724-4cd6-a417-eea9661381b4/1/IxNmmEaTAQHlodA48EtTTaCLonY.mft
Manifest number: 41
Signing time: Sun 07 Sep 2025 07:01:10 +0000
Manifest this update: Sun 07 Sep 2025 07:01:10 +0000
Manifest next update: Mon 08 Sep 2025 07:01:10 +0000
Files and hashes: 1: IxNmmEaTAQHlodA48EtTTaCLonY.crl (hash: nu6rfMqXQJiLRv4h9IoOv6lFimiTWWdlnnsbiovL9/k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/934fc6-0724-4cd6-a417-eea9661381b4/1/IxNmmEaTAQHlodA48EtTTaCLonY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/934fc6-0724-4cd6-a417-eea9661381b4/1/IxNmmEaTAQHlodA48EtTTaCLonY.mft
rsync://rpki.ripe.net/repository/DEFAULT/IxNmmEaTAQHlodA48EtTTaCLonY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:fa:90:10:63:20:85:f1:d1:bc:bc:a9:77:36:9d:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2313669846930101e5a1d038f04b534da08ba276
Validity
Not Before: Sep 7 07:01:10 2025 GMT
Not After : Sep 8 07:01:10 2025 GMT
Subject: CN=1d1fc14848e12637a41a0cc21970eb249a229ca7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:2d:36:9c:e7:9d:cb:7e:60:85:17:68:a0:90:
63:a8:04:fd:94:9e:50:78:d6:35:4b:af:3a:11:ec:
76:64:62:de:4e:e7:76:70:fd:5a:89:02:8b:aa:53:
d7:49:8c:3d:18:f5:45:d4:f8:75:b1:9e:07:6a:59:
e4:c7:3c:d3:ea:7b:f7:82:db:57:1c:71:d7:d2:1e:
7d:4a:da:bb:90:04:13:a5:fc:28:7a:80:98:99:52:
20:df:2a:12:0d:ab:db:3e:bd:75:77:5e:b5:f8:7d:
50:f6:ff:bd:bc:a9:55:df:15:5f:f3:2c:65:49:a7:
64:65:b5:38:01:8a:0a:ad:7d:6d:47:33:9b:54:92:
9d:b8:be:ed:47:01:aa:9e:0e:24:52:72:14:88:88:
7e:70:36:f0:fd:01:e5:0f:2a:70:f7:79:50:ce:19:
ef:6a:30:bf:af:c3:70:5d:5f:f4:bf:e7:cd:eb:38:
34:a5:a4:e5:22:12:ae:9d:df:50:35:d1:ad:9b:f7:
a1:e2:18:cc:d9:e8:54:fe:e9:f6:2b:12:30:bb:79:
47:dd:7a:e0:3a:44:68:0f:84:06:80:03:8f:ce:b8:
d3:36:1f:3a:87:1f:80:0d:69:98:bd:04:b6:b9:a7:
6b:2e:96:f5:b9:0d:1e:57:90:75:d4:22:eb:4e:54:
08:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:1F:C1:48:48:E1:26:37:A4:1A:0C:C2:19:70:EB:24:9A:22:9C:A7
X509v3 Authority Key Identifier:
keyid:23:13:66:98:46:93:01:01:E5:A1:D0:38:F0:4B:53:4D:A0:8B:A2:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IxNmmEaTAQHlodA48EtTTaCLonY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/934fc6-0724-4cd6-a417-eea9661381b4/1/IxNmmEaTAQHlodA48EtTTaCLonY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/934fc6-0724-4cd6-a417-eea9661381b4/1/IxNmmEaTAQHlodA48EtTTaCLonY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:4f:f7:18:bd:e9:cb:61:94:da:8f:0c:45:b6:d6:e5:cb:88:
b4:c0:b5:89:3f:70:37:fa:bd:af:9b:69:0e:2b:41:da:35:6d:
64:35:c4:d4:13:24:49:36:5a:88:95:db:e1:45:27:2f:e9:c1:
87:33:71:49:fe:8e:3e:93:15:1c:a1:b4:e3:f3:05:66:42:6c:
1a:5e:2b:ba:a9:a5:67:7b:6b:a9:a6:9a:c0:d9:91:d7:2f:6d:
76:e6:77:0d:71:8b:e6:0c:fb:80:a2:71:6f:49:0d:7d:e3:5e:
5f:31:85:d8:f4:83:d3:f1:36:e4:dc:63:99:8a:c9:a2:b5:6e:
54:17:cf:df:22:a4:4a:f7:fc:9f:99:29:5e:14:3f:2f:58:e0:
46:81:5e:ee:89:a5:71:d7:f2:70:5d:f2:f5:5c:c6:a9:40:ca:
f9:21:d8:83:6c:a8:36:80:ee:d6:b8:fe:62:21:51:d8:eb:ca:
c2:86:e2:16:92:eb:e4:5f:30:d9:5c:a7:9d:e4:24:8d:77:ba:
49:96:13:a5:84:b6:df:aa:19:34:be:12:18:36:97:04:3b:b9:
44:94:ba:0d:bc:f2:47:25:cc:24:12:e7:a1:b5:9a:f8:02:70:
43:62:b2:1c:0b:ca:a0:4d:87:4b:50:71:78:5f:56:e6:76:1e:
c8:b9:4d:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 14:38:15 2025 by rpki-client