Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/6a6b55-ca02-458d-8b5d-74d77302b184/1/IdhdIxrVS4Q5wqrtkaV3WGrEYAA.mft
File: IdhdIxrVS4Q5wqrtkaV3WGrEYAA.mft (raw, json)
Hash identifier: 4FNC5lp87aMwaq2MgNpQKPBqr2aaNGDgAv66jWO7qE8=
Subject key identifier: AC:52:0F:E4:CF:62:82:A5:F7:74:84:07:F5:E0:87:68:2F:82:6A:CC
Authority key identifier: 21:D8:5D:23:1A:D5:4B:84:39:C2:AA:ED:91:A5:77:58:6A:C4:60:00
Certificate issuer: /CN=21d85d231ad54b8439c2aaed91a577586ac46000
Certificate serial: 0198D5BC1902D9223C42D3582CFD1E607C92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IdhdIxrVS4Q5wqrtkaV3WGrEYAA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/6a6b55-ca02-458d-8b5d-74d77302b184/1/IdhdIxrVS4Q5wqrtkaV3WGrEYAA.mft
Manifest number: 114B
Signing time: Sat 23 Aug 2025 07:02:10 +0000
Manifest this update: Sat 23 Aug 2025 07:02:10 +0000
Manifest next update: Sun 24 Aug 2025 07:02:10 +0000
Files and hashes: 1: IdhdIxrVS4Q5wqrtkaV3WGrEYAA.crl (hash: 3XBilNzC7407PHNfUtjwCyQEy2Pr218nL2xKgZNagjM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/6a6b55-ca02-458d-8b5d-74d77302b184/1/IdhdIxrVS4Q5wqrtkaV3WGrEYAA.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/6a6b55-ca02-458d-8b5d-74d77302b184/1/IdhdIxrVS4Q5wqrtkaV3WGrEYAA.mft
rsync://rpki.ripe.net/repository/DEFAULT/IdhdIxrVS4Q5wqrtkaV3WGrEYAA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bc:19:02:d9:22:3c:42:d3:58:2c:fd:1e:60:7c:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21d85d231ad54b8439c2aaed91a577586ac46000
Validity
Not Before: Aug 23 07:02:10 2025 GMT
Not After : Aug 24 07:02:10 2025 GMT
Subject: CN=ac520fe4cf6282a5f7748407f5e087682f826acc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:78:39:2b:6f:c0:78:f1:e2:52:32:12:ee:94:
52:fa:ec:a6:c1:0b:44:4f:f3:7f:0e:21:b3:a1:22:
c1:d4:eb:92:ea:3a:2f:be:f8:d9:ee:be:f5:c8:33:
c2:c8:a9:c4:07:f9:2a:1f:c2:b9:f6:d7:61:97:c4:
e3:cc:22:97:0f:e0:b0:d9:35:56:c9:40:0e:79:fc:
80:e5:09:6e:bf:00:0a:ff:fd:c6:1b:83:f6:bd:9d:
73:ec:25:79:87:5a:a0:a9:11:e0:7d:4d:41:46:75:
39:37:50:d0:02:81:45:c0:34:3b:bf:5c:0a:db:c9:
20:3e:24:39:76:62:51:46:90:25:4b:72:77:a3:8c:
99:74:c3:43:42:50:b7:9d:4f:a1:3d:64:20:43:ee:
da:bc:f3:e4:23:13:c8:37:f6:79:e7:04:03:c5:b7:
26:4b:5f:c3:a2:21:3a:91:0b:61:97:4b:d2:f1:7f:
a7:60:18:f7:5a:5d:70:6a:01:7f:e8:6e:3a:b1:64:
ce:1e:5f:d4:6c:5d:6a:fc:15:5d:1c:76:c5:b8:b3:
40:0f:c8:57:fd:49:7d:9c:0b:69:53:f3:b9:aa:2a:
ac:86:b4:d0:ae:82:24:62:29:d1:da:bd:05:f0:9b:
df:7d:d0:23:ee:98:2b:7d:94:f4:0a:b9:29:fe:5b:
f7:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:52:0F:E4:CF:62:82:A5:F7:74:84:07:F5:E0:87:68:2F:82:6A:CC
X509v3 Authority Key Identifier:
keyid:21:D8:5D:23:1A:D5:4B:84:39:C2:AA:ED:91:A5:77:58:6A:C4:60:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IdhdIxrVS4Q5wqrtkaV3WGrEYAA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/6a6b55-ca02-458d-8b5d-74d77302b184/1/IdhdIxrVS4Q5wqrtkaV3WGrEYAA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/6a6b55-ca02-458d-8b5d-74d77302b184/1/IdhdIxrVS4Q5wqrtkaV3WGrEYAA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:dd:00:5e:78:ef:cb:81:38:9c:a4:13:d3:aa:39:d4:5b:fd:
e5:b4:5a:ce:1e:75:45:c2:9b:c2:08:d4:5c:9f:8b:7b:1c:15:
4e:a4:e6:e5:46:0a:62:c3:d1:a4:18:60:e6:6b:3d:a1:ca:0e:
ff:a8:bf:26:63:c0:88:ea:a2:c8:5e:2d:cb:0d:6b:c3:e7:f2:
a8:81:bc:ea:25:99:06:b5:ce:4b:8c:b0:d0:8c:09:44:e9:89:
4e:67:fa:e1:e9:0f:c9:7a:bc:5e:64:9d:05:05:b8:99:27:0e:
7a:88:fb:cc:2f:3f:be:6c:2f:ac:17:5e:92:0c:18:16:93:6b:
28:4b:15:ee:52:5f:84:92:ca:77:9b:f8:f2:bc:de:c1:de:e9:
00:73:b9:5f:86:5e:1f:69:56:62:e1:d9:7d:81:39:5f:f6:91:
dd:aa:e1:43:4f:a0:0b:ec:d6:4c:25:5c:df:1f:0e:86:a0:f9:
9f:b9:9c:79:ac:96:23:02:86:65:8e:a6:63:42:d9:82:7c:c2:
64:7d:ad:83:6d:75:54:21:81:f7:b3:ff:6b:63:24:ba:f7:a9:
41:06:7f:3a:b2:b8:8e:d6:21:f5:5e:37:7d:e3:c1:00:9c:0d:
7e:a5:cd:dd:53:bd:c8:0e:cd:b8:f3:18:13:52:7c:e3:5b:b7:
de:0a:4c:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:31:02 2025 by rpki-client