Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/6f385e-7fe1-49ad-81fb-1882f4c276cd/1/iCl5Lj_yH8NYJ_aKeMgFABXGanI.mft
File: iCl5Lj_yH8NYJ_aKeMgFABXGanI.mft (raw, json)
Hash identifier: axwnupGn+jdqYFhc3kPg5tHbNjBEzpGGG616B++cCSw=
Subject key identifier: 74:A6:66:41:CE:A4:D2:16:EC:DC:2B:FA:43:41:67:5C:C1:0D:B2:C6
Authority key identifier: 88:29:79:2E:3F:F2:1F:C3:58:27:F6:8A:78:C8:05:00:15:C6:6A:72
Certificate issuer: /CN=8829792e3ff21fc35827f68a78c8050015c66a72
Certificate serial: 0198D515F3786ABE5263B8D53A0EBB361029
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iCl5Lj_yH8NYJ_aKeMgFABXGanI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/6f385e-7fe1-49ad-81fb-1882f4c276cd/1/iCl5Lj_yH8NYJ_aKeMgFABXGanI.mft
Manifest number: 1646
Signing time: Sat 23 Aug 2025 04:00:42 +0000
Manifest this update: Sat 23 Aug 2025 04:00:42 +0000
Manifest next update: Sun 24 Aug 2025 04:00:42 +0000
Files and hashes: 1: iCl5Lj_yH8NYJ_aKeMgFABXGanI.crl (hash: M5vgsEYl81CRQGkf2ANy1AgefPuxEBsdi/kiy5jCQPw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/6f385e-7fe1-49ad-81fb-1882f4c276cd/1/iCl5Lj_yH8NYJ_aKeMgFABXGanI.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/6f385e-7fe1-49ad-81fb-1882f4c276cd/1/iCl5Lj_yH8NYJ_aKeMgFABXGanI.mft
rsync://rpki.ripe.net/repository/DEFAULT/iCl5Lj_yH8NYJ_aKeMgFABXGanI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 04:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:15:f3:78:6a:be:52:63:b8:d5:3a:0e:bb:36:10:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8829792e3ff21fc35827f68a78c8050015c66a72
Validity
Not Before: Aug 23 04:00:42 2025 GMT
Not After : Aug 24 04:00:42 2025 GMT
Subject: CN=74a66641cea4d216ecdc2bfa4341675cc10db2c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:69:e4:4a:42:f0:3d:71:9e:e1:c6:67:18:f1:
47:2d:bb:dc:bc:ca:8d:12:d8:3b:86:08:f1:34:05:
30:de:e7:b2:16:90:5f:4f:6a:57:95:08:82:a8:44:
49:03:d8:fb:ee:52:44:ef:07:06:ee:ac:dd:07:8b:
87:4a:4f:91:38:d8:75:fd:c3:36:46:26:02:7f:7c:
eb:cb:5d:61:84:ac:19:39:86:21:ec:0a:32:40:45:
75:52:20:10:9e:1a:da:7b:fb:22:cb:8e:1a:42:d2:
5e:ab:32:b1:08:1c:0b:28:e3:af:e7:b0:57:cb:0b:
26:a3:0f:c3:83:fb:82:e1:35:fc:e8:ce:8c:84:d5:
bf:56:78:35:26:e0:60:9a:20:5a:ee:f3:ee:a8:6c:
71:34:97:4a:f1:e3:f8:cb:cc:09:76:3e:16:97:07:
84:a3:03:19:67:b2:f7:28:7a:cc:45:ee:c2:6f:67:
fd:b7:9c:f1:03:d1:a3:c5:3f:f9:77:57:e6:3f:00:
b4:c2:37:6a:ab:91:06:04:69:81:ee:bd:ed:80:b8:
c5:48:44:21:ea:39:bc:25:f5:82:b3:04:24:ad:ec:
c5:87:c9:15:b7:50:1a:f1:3c:f7:07:cb:03:d0:8d:
a9:14:a9:ab:de:12:fa:87:b2:be:44:e7:ec:b3:08:
b5:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:A6:66:41:CE:A4:D2:16:EC:DC:2B:FA:43:41:67:5C:C1:0D:B2:C6
X509v3 Authority Key Identifier:
keyid:88:29:79:2E:3F:F2:1F:C3:58:27:F6:8A:78:C8:05:00:15:C6:6A:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iCl5Lj_yH8NYJ_aKeMgFABXGanI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/6f385e-7fe1-49ad-81fb-1882f4c276cd/1/iCl5Lj_yH8NYJ_aKeMgFABXGanI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/6f385e-7fe1-49ad-81fb-1882f4c276cd/1/iCl5Lj_yH8NYJ_aKeMgFABXGanI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:5a:35:bc:55:ad:bf:81:9c:bb:6a:4b:04:79:5c:25:d2:1e:
a7:8b:4f:cb:1f:93:fe:af:a5:58:c9:92:b6:94:4d:3b:1d:06:
87:d4:86:74:53:40:0a:b7:19:c9:9d:63:5c:10:1b:23:ee:20:
09:6c:66:8a:e2:b0:ac:ff:cc:28:48:95:89:71:1c:50:5b:96:
fe:70:1c:f3:e1:9e:96:5b:42:aa:b4:7b:c8:55:ad:d2:d0:e9:
d9:5c:46:11:61:ef:7e:b4:e8:e1:e5:14:3e:24:b7:da:34:b1:
72:22:40:6c:90:9b:b2:2e:22:8b:49:dc:12:9e:c4:a6:5d:c1:
1a:83:d5:6d:c9:c7:15:29:aa:f4:57:44:f0:68:48:4d:0b:db:
80:e0:0d:1c:1f:93:94:ea:93:7c:76:d3:71:71:13:6a:b8:9b:
87:b7:4e:11:f3:00:16:b0:2b:d8:51:43:1e:ec:f3:ba:43:e4:
03:79:22:71:ef:5b:21:47:28:92:43:cd:f5:61:df:00:07:a2:
0c:7a:26:31:3b:27:99:8c:dc:f2:90:bf:32:19:38:99:8c:fb:
3d:8a:b8:03:9c:e8:ac:78:bb:77:c7:df:f7:6b:50:9c:74:bd:
f9:ac:11:f1:e7:c0:e1:24:ea:a8:f2:cf:e2:b4:5c:aa:d5:dd:
96:64:32:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:23:20 2025 by rpki-client