Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/f9ed64-5cc3-4a0d-a70c-1a387a456579/1/iOr6__gbldzuV3JwV-1nEUozgZM.mft
File: iOr6__gbldzuV3JwV-1nEUozgZM.mft (raw, json)
Hash identifier: 0Le8PYbQvubd8NyzQZl3milZxX3evG76uI74hdLgoUw=
Subject key identifier: A2:0A:70:5D:0A:68:C2:D5:2D:90:82:09:AF:69:6A:91:AE:7E:D9:F7
Authority key identifier: 88:EA:FA:FF:F8:1B:95:DC:EE:57:72:70:57:ED:67:11:4A:33:81:93
Certificate issuer: /CN=88eafafff81b95dcee57727057ed67114a338193
Certificate serial: 0198D5BB8253BD4ADD4740473B8FEB713FE4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iOr6__gbldzuV3JwV-1nEUozgZM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/f9ed64-5cc3-4a0d-a70c-1a387a456579/1/iOr6__gbldzuV3JwV-1nEUozgZM.mft
Manifest number: 0671
Signing time: Sat 23 Aug 2025 07:01:32 +0000
Manifest this update: Sat 23 Aug 2025 07:01:32 +0000
Manifest next update: Sun 24 Aug 2025 07:01:32 +0000
Files and hashes: 1: iOr6__gbldzuV3JwV-1nEUozgZM.crl (hash: aP+2UVuCRUAFu3emhVesoie5abXwSRgf0Tf4LDug1qA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/f9ed64-5cc3-4a0d-a70c-1a387a456579/1/iOr6__gbldzuV3JwV-1nEUozgZM.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/f9ed64-5cc3-4a0d-a70c-1a387a456579/1/iOr6__gbldzuV3JwV-1nEUozgZM.mft
rsync://rpki.ripe.net/repository/DEFAULT/iOr6__gbldzuV3JwV-1nEUozgZM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:82:53:bd:4a:dd:47:40:47:3b:8f:eb:71:3f:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88eafafff81b95dcee57727057ed67114a338193
Validity
Not Before: Aug 23 07:01:32 2025 GMT
Not After : Aug 24 07:01:32 2025 GMT
Subject: CN=a20a705d0a68c2d52d908209af696a91ae7ed9f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:fd:bf:23:c7:38:e5:d8:cc:f0:0c:7c:a6:4f:
96:44:73:7a:cc:f8:f9:86:5b:31:0d:04:21:cb:64:
aa:cd:a5:0a:39:be:37:17:71:6e:69:29:ce:5e:3e:
0c:e5:50:df:a0:0a:d9:09:3f:52:31:15:c3:2b:eb:
cb:3f:1b:0a:ce:ab:d4:23:b2:74:1f:73:93:1a:78:
6c:c1:05:46:24:83:86:46:4c:3b:69:90:f4:22:a4:
e5:e4:95:4e:64:9a:4d:23:15:48:07:57:35:fc:20:
f0:04:05:d1:3b:30:4a:03:5e:c4:08:c7:f3:2d:d5:
7e:e6:2e:40:94:99:7c:b2:99:05:70:37:bd:fe:1b:
0b:c8:bf:a1:c5:f7:63:3a:9f:e1:eb:fd:8f:5d:87:
b8:0e:98:3a:f9:39:e8:f3:9d:4b:ee:45:c7:e8:3d:
af:05:d4:90:ff:21:8e:fa:2f:5b:21:76:9f:8c:e5:
b3:a7:32:1f:98:f1:8e:8d:8d:df:d4:56:5e:c2:d9:
93:5e:42:10:c0:5c:70:53:d7:f8:1f:ba:5e:72:56:
df:7a:e4:b1:e2:7b:67:70:04:f0:50:a5:8c:a0:7e:
87:98:74:6e:9a:cf:4b:fe:81:3c:19:c0:ec:00:83:
7b:55:06:2f:a2:dc:27:4a:2c:82:39:73:15:77:96:
a9:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:0A:70:5D:0A:68:C2:D5:2D:90:82:09:AF:69:6A:91:AE:7E:D9:F7
X509v3 Authority Key Identifier:
keyid:88:EA:FA:FF:F8:1B:95:DC:EE:57:72:70:57:ED:67:11:4A:33:81:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iOr6__gbldzuV3JwV-1nEUozgZM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/f9ed64-5cc3-4a0d-a70c-1a387a456579/1/iOr6__gbldzuV3JwV-1nEUozgZM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/f9ed64-5cc3-4a0d-a70c-1a387a456579/1/iOr6__gbldzuV3JwV-1nEUozgZM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:1f:ab:42:dc:ff:12:92:f4:e7:e0:d2:ec:40:3b:b7:9e:d7:
c8:8a:a4:4f:0a:53:0a:a7:e3:6e:4c:f0:48:37:1d:11:af:67:
17:12:4e:76:90:b9:fc:7f:6e:7f:38:34:55:6a:4c:36:30:f1:
3f:5e:9b:9b:de:4d:69:dd:0a:a7:42:66:ce:6f:cd:46:6d:a0:
c5:11:01:27:82:04:08:8e:57:7e:9d:8f:6c:d8:14:b8:dd:6f:
0e:c5:2a:19:23:9c:e3:b1:3c:82:28:59:68:d7:25:a4:6b:89:
7c:1d:54:40:00:4d:c0:e4:4e:7c:c0:bd:c9:7e:12:d8:fa:a9:
fa:11:79:fe:62:f4:e3:42:79:de:16:47:2b:98:1e:96:7c:c8:
09:be:52:42:d2:7f:9f:8d:5e:6d:ad:31:c5:46:01:0e:21:9b:
fe:78:77:d7:38:d9:82:91:b7:e2:8c:d3:ab:f5:ab:d4:75:da:
06:47:14:d0:1b:bb:44:7e:7b:62:a7:e8:08:31:e1:3e:16:da:
3d:48:97:34:ea:25:57:02:3f:24:45:0f:ce:7b:51:aa:6b:8a:
cf:2d:dc:83:4d:3f:07:0c:70:df:98:f9:81:ce:99:6a:91:5c:
25:06:9e:d5:66:96:d9:6f:39:44:97:b0:66:ab:60:f1:b0:80:
09:17:cc:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:05:13 2025 by rpki-client