Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/2f066c-dc7a-4a45-8574-a5b295aefc00/1/IqETXjyWLnRuT1fR6qSUoEnwOxs.mft
File: IqETXjyWLnRuT1fR6qSUoEnwOxs.mft (raw, json)
Hash identifier: CZsK9smCwwQ7ynrXcwGpn6SObqTxaYn85W3cKeXl6Rs=
Subject key identifier: 00:3B:88:89:30:33:D1:55:EC:8B:96:64:0C:98:04:41:F8:F1:4C:55
Authority key identifier: 22:A1:13:5E:3C:96:2E:74:6E:4F:57:D1:EA:A4:94:A0:49:F0:3B:1B
Certificate issuer: /CN=22a1135e3c962e746e4f57d1eaa494a049f03b1b
Certificate serial: 0198D7E1995BF8CFEDED02DC07B6F6CF2AEE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IqETXjyWLnRuT1fR6qSUoEnwOxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/2f066c-dc7a-4a45-8574-a5b295aefc00/1/IqETXjyWLnRuT1fR6qSUoEnwOxs.mft
Manifest number: 14
Signing time: Sat 23 Aug 2025 17:02:22 +0000
Manifest this update: Sat 23 Aug 2025 17:02:22 +0000
Manifest next update: Sun 24 Aug 2025 17:02:22 +0000
Files and hashes: 1: IqETXjyWLnRuT1fR6qSUoEnwOxs.crl (hash: 5a+9juzLaWm3nEfNfM9IZtywuCqFJci4RThXBymadUs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/2f066c-dc7a-4a45-8574-a5b295aefc00/1/IqETXjyWLnRuT1fR6qSUoEnwOxs.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/2f066c-dc7a-4a45-8574-a5b295aefc00/1/IqETXjyWLnRuT1fR6qSUoEnwOxs.mft
rsync://rpki.ripe.net/repository/DEFAULT/IqETXjyWLnRuT1fR6qSUoEnwOxs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:e1:99:5b:f8:cf:ed:ed:02:dc:07:b6:f6:cf:2a:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22a1135e3c962e746e4f57d1eaa494a049f03b1b
Validity
Not Before: Aug 23 17:02:22 2025 GMT
Not After : Aug 24 17:02:22 2025 GMT
Subject: CN=003b88893033d155ec8b96640c980441f8f14c55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:82:b0:9e:37:17:80:14:da:19:b6:5b:b9:18:
90:5c:28:98:ae:0b:df:bd:88:a4:ce:fe:0c:8c:47:
43:f9:89:ac:da:af:19:0e:21:39:de:84:93:49:b3:
ef:fa:65:42:ef:4c:a4:18:58:da:c0:94:cb:2d:63:
c3:77:c8:1d:04:a1:54:7a:20:eb:49:c2:19:c1:6d:
cc:38:63:0d:ca:5e:43:c8:88:53:11:c4:20:4e:ab:
b1:38:b5:aa:cc:32:de:b7:e6:de:45:ef:4f:74:bd:
b0:21:a3:1e:69:64:aa:aa:7e:ac:09:10:65:ff:ca:
60:5d:8a:58:57:f8:20:e2:ec:c6:44:76:d4:7a:c6:
aa:19:f2:61:2c:c3:09:52:03:84:fe:20:01:73:7d:
81:98:b6:bd:9d:19:1e:92:71:41:42:aa:29:db:6e:
fe:74:05:c3:c0:62:3f:8a:8b:71:14:9a:c0:e8:3a:
08:80:c3:7f:ae:c2:0e:38:e0:b0:37:ec:2e:ae:ae:
78:d0:db:77:70:8b:45:a7:65:cb:47:12:f4:b4:fa:
f6:d5:ac:fc:7c:c4:21:26:5a:b5:20:d3:28:fd:54:
66:bf:64:2f:a9:73:8f:d6:e3:88:56:fd:02:6e:da:
da:4a:69:ee:7b:82:42:8e:6f:e8:09:58:dc:53:08:
23:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:3B:88:89:30:33:D1:55:EC:8B:96:64:0C:98:04:41:F8:F1:4C:55
X509v3 Authority Key Identifier:
keyid:22:A1:13:5E:3C:96:2E:74:6E:4F:57:D1:EA:A4:94:A0:49:F0:3B:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IqETXjyWLnRuT1fR6qSUoEnwOxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/2f066c-dc7a-4a45-8574-a5b295aefc00/1/IqETXjyWLnRuT1fR6qSUoEnwOxs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/2f066c-dc7a-4a45-8574-a5b295aefc00/1/IqETXjyWLnRuT1fR6qSUoEnwOxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:9b:5e:72:07:15:d2:05:25:39:5b:08:b2:25:b1:ad:e9:51:
22:3a:ee:9b:8e:58:5e:c2:e4:7c:74:80:3a:0b:d8:ac:90:9b:
b2:1a:24:e2:c7:94:dd:c0:89:90:07:9b:28:ee:99:ff:8e:61:
18:25:d5:73:be:a6:37:d7:de:70:ae:ab:21:e9:d9:5c:34:92:
d2:57:ae:5d:cf:be:68:55:82:09:fa:3b:14:01:a7:00:4d:ce:
ec:fa:bc:54:b2:de:96:8d:d0:f4:b7:b4:3c:9f:59:ea:bd:2c:
ce:f7:e2:80:63:0c:52:92:16:a5:ac:1c:8a:ff:1e:29:5f:f7:
54:9f:23:a4:f3:87:8d:0b:4a:df:54:78:fa:f8:36:79:54:83:
78:d3:e9:d9:4b:5e:5c:8d:b7:9c:86:fd:19:3b:96:3c:6d:3f:
73:a2:e2:50:ae:98:36:96:d3:07:16:c6:f9:25:bb:7a:69:4e:
94:22:23:dc:9e:87:0d:76:12:ba:c1:2d:01:34:6d:5e:ee:ce:
a2:07:2e:67:3f:c3:af:87:31:3a:78:7a:cf:7c:ae:91:f7:69:
fb:57:be:86:18:b3:7c:4f:27:34:66:90:89:20:7e:80:f9:37:
82:ae:ee:e8:7a:1f:0c:f0:94:53:be:69:03:3c:19:7b:85:2b:
3b:e3:73:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:13:21 2025 by rpki-client