Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/7900fd-84e2-4a7c-8d8e-e5afbb936c3a/1/iGueLpgWv6rZz8yAbo39KCT1A0Q.mft
File: iGueLpgWv6rZz8yAbo39KCT1A0Q.mft (raw, json)
Hash identifier: 2IEgOIqCLFjylHT8BnLxzqEQ326Ospm43O6ZC4YBOLg=
Subject key identifier: A5:BA:59:0C:44:CE:C3:DC:76:D4:3D:26:CA:00:D8:4C:77:D5:2A:8D
Authority key identifier: 88:6B:9E:2E:98:16:BF:AA:D9:CF:CC:80:6E:8D:FD:28:24:F5:03:44
Certificate issuer: /CN=886b9e2e9816bfaad9cfcc806e8dfd2824f50344
Certificate serial: 0197C870115F0A7CD84C544F04374197A2A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iGueLpgWv6rZz8yAbo39KCT1A0Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/7900fd-84e2-4a7c-8d8e-e5afbb936c3a/1/iGueLpgWv6rZz8yAbo39KCT1A0Q.mft
Manifest number: 0D1B
Signing time: Wed 02 Jul 2025 00:01:17 +0000
Manifest this update: Wed 02 Jul 2025 00:01:17 +0000
Manifest next update: Thu 03 Jul 2025 00:01:17 +0000
Files and hashes: 1: iGueLpgWv6rZz8yAbo39KCT1A0Q.crl (hash: DioJWUcZM5AKfAc+2NwihfnITS/1UdENopJHHHrYllo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/7900fd-84e2-4a7c-8d8e-e5afbb936c3a/1/iGueLpgWv6rZz8yAbo39KCT1A0Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/7900fd-84e2-4a7c-8d8e-e5afbb936c3a/1/iGueLpgWv6rZz8yAbo39KCT1A0Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/iGueLpgWv6rZz8yAbo39KCT1A0Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 00:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c8:70:11:5f:0a:7c:d8:4c:54:4f:04:37:41:97:a2:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=886b9e2e9816bfaad9cfcc806e8dfd2824f50344
Validity
Not Before: Jul 2 00:01:17 2025 GMT
Not After : Jul 3 00:01:17 2025 GMT
Subject: CN=a5ba590c44cec3dc76d43d26ca00d84c77d52a8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:bb:e9:95:1c:7d:57:c7:f5:06:0d:ce:d2:5c:
1b:0f:b3:38:cb:bf:70:71:dd:72:e0:82:64:b2:fe:
39:23:ef:be:5c:a7:00:ad:7b:15:3a:27:fa:16:cc:
86:4f:96:99:80:24:98:ae:45:d8:26:2e:f0:bc:cc:
0b:79:28:9e:c7:d7:72:b2:ee:6b:06:4e:7c:0e:ca:
e4:fe:67:9d:22:62:2f:6b:29:76:0c:c3:94:c3:eb:
96:d5:ca:6b:f4:e2:5b:7f:f8:f3:cf:56:5b:eb:f9:
27:dd:4d:cc:19:a5:94:85:b5:87:20:1f:e6:3b:20:
25:24:be:9d:02:05:29:7a:77:af:7b:33:fc:d6:38:
67:a2:26:78:76:29:ce:80:02:7d:4a:64:37:cb:b1:
c6:c2:7d:15:37:42:c1:93:22:fd:8f:f0:98:ce:48:
84:61:ab:39:58:15:c5:6e:01:f5:2d:cd:8c:e6:1a:
4d:a1:0d:d6:2c:0a:2d:33:94:ad:4a:5d:b1:af:43:
40:4e:8c:8c:f4:8d:b8:d6:7a:e4:f5:ea:dd:35:51:
a3:b0:73:47:e2:49:1e:7f:2d:6f:24:32:8f:04:d6:
39:c0:b3:14:21:5e:62:7f:68:97:59:fb:e0:f2:6d:
92:17:1c:ab:24:25:4a:5f:b8:05:d9:bd:4e:52:bd:
18:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:BA:59:0C:44:CE:C3:DC:76:D4:3D:26:CA:00:D8:4C:77:D5:2A:8D
X509v3 Authority Key Identifier:
keyid:88:6B:9E:2E:98:16:BF:AA:D9:CF:CC:80:6E:8D:FD:28:24:F5:03:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iGueLpgWv6rZz8yAbo39KCT1A0Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/7900fd-84e2-4a7c-8d8e-e5afbb936c3a/1/iGueLpgWv6rZz8yAbo39KCT1A0Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/7900fd-84e2-4a7c-8d8e-e5afbb936c3a/1/iGueLpgWv6rZz8yAbo39KCT1A0Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:1a:bd:bc:6c:f4:3d:d1:47:bd:c7:bc:c4:ba:19:ee:1f:f8:
db:cb:14:5d:63:38:ee:ae:49:7b:1b:b3:5b:1d:8c:cc:41:8a:
e2:a8:bd:43:69:76:07:13:0b:1d:1c:e9:79:6b:77:b3:17:bb:
07:98:b8:d6:63:84:41:32:fc:f9:97:fc:ac:62:2e:6a:de:8d:
d0:bd:14:0c:61:c3:9e:49:ac:3e:0c:b7:a5:16:16:67:66:da:
bd:0a:6a:8c:0c:bc:c8:8c:7f:0a:2e:64:db:00:98:ac:f2:a0:
22:00:79:fd:9c:a0:fb:98:53:ea:5a:3e:b2:14:81:84:91:0d:
bc:b1:e2:34:fd:d6:2f:d2:6c:a8:3b:81:37:4a:7d:01:74:db:
c6:b3:11:c3:ac:55:68:5d:6d:77:0e:61:91:10:54:fb:ba:84:
af:97:d8:15:68:88:1b:18:e9:c9:6b:e5:b4:f8:61:80:4a:34:
f6:35:98:c7:c6:1c:d9:6e:97:25:dd:e7:17:59:48:35:3a:97:
a3:67:d3:1f:98:58:f0:12:7d:60:1c:d9:b9:4c:7b:51:12:e4:
8f:81:8f:32:fb:18:1a:3c:cc:e9:0e:69:b6:49:57:a2:06:cf:
86:92:8f:df:8c:d0:f2:93:b2:e8:27:5a:f3:f6:d2:2f:20:84:
0c:5d:31:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 05:21:33 2025 by rpki-client