Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/6bac55-9aaa-4530-8ff4-6027a6839ae4/1/Ic4xHI7WC-8bXk99O4ZBB4FEGKM.mft
File: Ic4xHI7WC-8bXk99O4ZBB4FEGKM.mft (raw, json)
Hash identifier: RFz7WUEpk5Psv4sejWYOojt6y/sNbmfa8CjEZUbb0NY=
Subject key identifier: B8:CE:5B:BC:F0:53:BD:FE:52:EA:A3:80:0B:F0:73:BA:5E:52:14:54
Authority key identifier: 21:CE:31:1C:8E:D6:0B:EF:1B:5E:4F:7D:3B:86:41:07:81:44:18:A3
Certificate issuer: /CN=21ce311c8ed60bef1b5e4f7d3b864107814418a3
Certificate serial: 019922FA608E7BE901EEE091C3421DB5144E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ic4xHI7WC-8bXk99O4ZBB4FEGKM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/6bac55-9aaa-4530-8ff4-6027a6839ae4/1/Ic4xHI7WC-8bXk99O4ZBB4FEGKM.mft
Manifest number: 0A12
Signing time: Sun 07 Sep 2025 07:00:57 +0000
Manifest this update: Sun 07 Sep 2025 07:00:57 +0000
Manifest next update: Mon 08 Sep 2025 07:00:57 +0000
Files and hashes: 1: Ic4xHI7WC-8bXk99O4ZBB4FEGKM.crl (hash: LIQdZThhTs6mgvE8w7V+PBhp9LoaFvoGGmq+6XKaywI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/6bac55-9aaa-4530-8ff4-6027a6839ae4/1/Ic4xHI7WC-8bXk99O4ZBB4FEGKM.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/6bac55-9aaa-4530-8ff4-6027a6839ae4/1/Ic4xHI7WC-8bXk99O4ZBB4FEGKM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ic4xHI7WC-8bXk99O4ZBB4FEGKM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:fa:60:8e:7b:e9:01:ee:e0:91:c3:42:1d:b5:14:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21ce311c8ed60bef1b5e4f7d3b864107814418a3
Validity
Not Before: Sep 7 07:00:57 2025 GMT
Not After : Sep 8 07:00:57 2025 GMT
Subject: CN=b8ce5bbcf053bdfe52eaa3800bf073ba5e521454
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:5b:84:59:d5:69:36:9e:28:c0:26:3a:f9:45:
dd:c7:ea:60:e4:4e:64:42:be:90:0c:f3:5c:85:3a:
a2:e9:d8:d3:07:51:8c:d7:b1:35:64:9a:b9:7d:ce:
77:26:81:aa:72:b4:c2:f3:37:6f:5e:d3:bb:d5:70:
93:fd:f7:72:cd:3c:07:f5:ec:24:9e:94:67:d9:e7:
5c:ae:0a:66:18:1f:18:fe:df:8d:b1:0d:01:67:60:
44:7d:ec:25:19:44:6d:dc:dd:95:a3:5d:0b:84:e4:
b5:1f:93:7b:b0:53:14:04:90:9d:39:6b:7b:ab:25:
b8:af:fe:18:70:24:a4:a6:b1:5d:7e:41:a0:56:3d:
c7:ce:93:1e:9a:72:bb:9b:a9:ac:4c:6b:0b:46:a6:
1c:08:b1:b9:41:bd:28:90:17:11:28:58:d6:70:f0:
0b:bf:90:bf:58:85:64:ad:8d:33:c4:aa:4b:43:b6:
87:da:e9:fd:1a:19:ea:6b:f4:a9:9e:31:18:84:3b:
e6:7c:86:aa:0c:db:05:21:d6:de:9d:3f:85:b6:b0:
03:38:d1:bf:58:b1:5f:83:a3:1f:b9:6f:f3:6a:b1:
b4:ba:9d:08:6e:b0:1a:f6:89:92:fc:2e:62:73:37:
e1:8c:4b:84:73:a0:e5:8c:60:30:74:de:bf:6f:a0:
78:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:CE:5B:BC:F0:53:BD:FE:52:EA:A3:80:0B:F0:73:BA:5E:52:14:54
X509v3 Authority Key Identifier:
keyid:21:CE:31:1C:8E:D6:0B:EF:1B:5E:4F:7D:3B:86:41:07:81:44:18:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ic4xHI7WC-8bXk99O4ZBB4FEGKM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/6bac55-9aaa-4530-8ff4-6027a6839ae4/1/Ic4xHI7WC-8bXk99O4ZBB4FEGKM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/6bac55-9aaa-4530-8ff4-6027a6839ae4/1/Ic4xHI7WC-8bXk99O4ZBB4FEGKM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:35:6b:78:88:e9:96:ef:a7:85:7c:97:b9:83:73:f9:36:02:
47:4a:5e:00:01:75:c3:ec:05:58:82:62:fd:a5:df:36:e0:94:
24:c7:59:f2:8d:9a:cb:e2:ed:1e:b2:2d:75:38:4f:7a:7e:ea:
8b:48:53:c8:fc:be:50:a2:86:c4:4c:e4:df:bc:9a:b8:86:cb:
6a:4d:d4:a8:31:97:f7:0e:85:0f:42:a3:81:0c:29:3d:f3:4f:
94:1c:cc:21:73:6d:53:a2:bd:1e:5b:8c:1d:9c:44:96:9f:c4:
c2:e7:0c:78:e7:00:0a:a9:23:65:8d:3c:19:98:6c:d8:48:a2:
01:e3:0d:2b:67:34:1d:d0:41:e6:3c:b0:a1:61:96:f7:51:d2:
46:72:1a:81:76:0e:fb:db:f8:df:65:6e:2d:a9:a3:a7:22:0b:
fd:67:ae:57:a3:9a:6e:f0:e4:84:1d:fe:14:0c:41:8a:af:dd:
0c:35:06:0f:4d:c4:aa:c0:44:68:1a:c6:3c:db:d9:91:c2:8e:
3f:5f:2b:b4:d1:89:6e:a4:ee:32:2e:7d:1e:96:a8:60:9b:97:
e9:f5:65:33:9c:59:9e:1b:d2:63:96:f9:9e:26:4b:bb:1b:d8:
de:5c:32:b4:87:0d:2b:e7:98:68:c3:00:09:fc:75:6f:9a:c2:
6c:2e:12:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:20:54 2025 by rpki-client