Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/81b00a-f68d-44f4-8825-982736b45bdf/1/iMaZNJivBRiWLl9I1chG3BddGIQ.mft
File: iMaZNJivBRiWLl9I1chG3BddGIQ.mft (raw, json)
Hash identifier: FypAyyE6Ypn2hm8M9Cnz7pJk5+mgztsxJe21wnicGZ8=
Subject key identifier: DE:21:BC:43:C9:A4:26:3E:59:11:66:AD:41:36:CB:C3:D0:FF:A9:A9
Authority key identifier: 88:C6:99:34:98:AF:05:18:96:2E:5F:48:D5:C8:46:DC:17:5D:18:84
Certificate issuer: /CN=88c6993498af0518962e5f48d5c846dc175d1884
Certificate serial: 0198D4E00F54F0605CD47BADE0B12F806B93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iMaZNJivBRiWLl9I1chG3BddGIQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/81b00a-f68d-44f4-8825-982736b45bdf/1/iMaZNJivBRiWLl9I1chG3BddGIQ.mft
Manifest number: 1647
Signing time: Sat 23 Aug 2025 03:01:50 +0000
Manifest this update: Sat 23 Aug 2025 03:01:50 +0000
Manifest next update: Sun 24 Aug 2025 03:01:50 +0000
Files and hashes: 1: iMaZNJivBRiWLl9I1chG3BddGIQ.crl (hash: Gj0qdPT80RTSPBIFmzfW5kN0HojaAu5zJwX4Ff/egYA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/81b00a-f68d-44f4-8825-982736b45bdf/1/iMaZNJivBRiWLl9I1chG3BddGIQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/81b00a-f68d-44f4-8825-982736b45bdf/1/iMaZNJivBRiWLl9I1chG3BddGIQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/iMaZNJivBRiWLl9I1chG3BddGIQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:01:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:0f:54:f0:60:5c:d4:7b:ad:e0:b1:2f:80:6b:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88c6993498af0518962e5f48d5c846dc175d1884
Validity
Not Before: Aug 23 03:01:50 2025 GMT
Not After : Aug 24 03:01:50 2025 GMT
Subject: CN=de21bc43c9a4263e591166ad4136cbc3d0ffa9a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:f1:12:e5:62:72:8d:be:c1:d0:dd:c8:15:c3:
e3:73:7c:2e:f5:5a:00:0c:3d:49:ee:b0:f2:1d:61:
0f:de:3a:50:70:9c:0c:5a:80:a4:bd:f1:ff:28:3f:
92:a5:b6:da:05:13:42:33:6f:8b:a9:a0:24:15:41:
1a:bf:b2:1e:9e:5d:6f:19:bc:91:61:b8:d2:31:8d:
e4:99:51:ee:06:c6:76:e9:a9:63:d6:91:1a:22:15:
c6:de:7c:3a:58:49:76:37:b5:af:e9:51:64:44:ec:
b7:ba:ad:62:4d:15:cf:54:d1:b8:41:e0:c3:19:6c:
94:9f:84:73:f5:4a:be:ad:4d:d8:13:f4:06:47:d9:
bd:04:d9:c8:d5:5f:2a:31:c4:24:fb:94:bb:b0:6a:
62:9c:14:6e:30:94:2b:a8:5a:8b:89:87:18:76:a4:
e7:de:bc:7c:ed:bc:00:5a:59:b5:08:8f:d0:a3:1c:
64:ab:2b:da:dd:87:c4:c0:c0:e4:0f:5a:80:36:a2:
7a:ef:21:f8:e7:24:16:1a:80:5f:75:60:0b:f3:33:
72:4f:24:d5:e9:8e:ab:8c:50:03:e6:f7:1e:92:b5:
5f:3a:db:7a:c6:5f:6c:7e:84:0d:e4:73:76:b5:c6:
ae:d3:42:0b:d1:b6:51:e8:d6:32:d3:d1:cc:f2:0c:
8b:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:21:BC:43:C9:A4:26:3E:59:11:66:AD:41:36:CB:C3:D0:FF:A9:A9
X509v3 Authority Key Identifier:
keyid:88:C6:99:34:98:AF:05:18:96:2E:5F:48:D5:C8:46:DC:17:5D:18:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iMaZNJivBRiWLl9I1chG3BddGIQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/81b00a-f68d-44f4-8825-982736b45bdf/1/iMaZNJivBRiWLl9I1chG3BddGIQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/81b00a-f68d-44f4-8825-982736b45bdf/1/iMaZNJivBRiWLl9I1chG3BddGIQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:98:55:d4:8c:ac:af:2e:94:0e:76:4a:98:7b:f4:9d:62:ae:
ed:66:52:fa:10:bb:0d:8d:ac:7e:06:0b:93:4c:03:a2:1a:cb:
d8:69:59:a3:a5:2c:e0:d9:06:18:f5:e1:0e:a5:d3:cc:69:96:
f2:64:04:c9:ca:5b:49:63:84:bb:a5:28:a2:cc:f7:af:3d:ea:
de:ef:a7:76:73:15:50:b9:b1:68:96:40:bb:4f:a5:ad:dd:cf:
bb:db:33:ad:1e:95:a5:27:d0:58:99:65:aa:e2:fb:57:38:a4:
ee:41:74:8e:73:f1:3d:b4:f3:3c:cd:ee:36:48:bd:de:8d:3a:
72:64:c8:61:93:bd:73:8b:64:c5:2d:47:a0:76:54:48:66:39:
67:94:4e:74:0f:f3:8e:23:ba:7c:62:fe:c1:28:76:df:e1:0f:
a5:10:17:4e:c5:1a:eb:c1:9d:6e:02:3a:f8:ff:54:29:95:67:
9b:43:20:1c:da:1b:c8:2f:1a:d1:7d:6f:d3:5f:b6:03:a3:00:
d3:4f:29:a1:a7:41:fd:31:d9:18:0e:d1:3a:63:4d:49:15:29:
6d:7b:0c:61:96:43:7a:11:fe:e5:e2:b9:e2:a2:d2:78:6c:2d:
e8:9f:12:94:a4:aa:e2:52:59:01:e6:56:07:04:68:cc:bb:2e:
64:e7:a3:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:31:40 2025 by rpki-client