Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/daf850-f587-44b2-8de4-a8585ff93546/1/ItxuR0PtXMhDAyhSiW7xX0iS7bA.mft
File: ItxuR0PtXMhDAyhSiW7xX0iS7bA.mft (raw, json)
Hash identifier: cd8Io78xiyhFvFQXmarqoGWh/SWSUJXSEQu/0bEflEo=
Subject key identifier: 4F:68:1E:73:B4:95:46:FA:6A:86:FE:EA:F4:C0:92:6C:43:EE:5C:5D
Authority key identifier: 22:DC:6E:47:43:ED:5C:C8:43:03:28:52:89:6E:F1:5F:48:92:ED:B0
Certificate issuer: /CN=22dc6e4743ed5cc843032852896ef15f4892edb0
Certificate serial: 0198D705FF5D6A8842B49C1280AE0A64B36F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ItxuR0PtXMhDAyhSiW7xX0iS7bA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/daf850-f587-44b2-8de4-a8585ff93546/1/ItxuR0PtXMhDAyhSiW7xX0iS7bA.mft
Manifest number: 0C4E
Signing time: Sat 23 Aug 2025 13:02:31 +0000
Manifest this update: Sat 23 Aug 2025 13:02:31 +0000
Manifest next update: Sun 24 Aug 2025 13:02:31 +0000
Files and hashes: 1: ItxuR0PtXMhDAyhSiW7xX0iS7bA.crl (hash: SpXf3QXERy+ZP4pT4/v2AsVc5ofoeKB3hd4UAODMqag=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/daf850-f587-44b2-8de4-a8585ff93546/1/ItxuR0PtXMhDAyhSiW7xX0iS7bA.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/daf850-f587-44b2-8de4-a8585ff93546/1/ItxuR0PtXMhDAyhSiW7xX0iS7bA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ItxuR0PtXMhDAyhSiW7xX0iS7bA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:50:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:05:ff:5d:6a:88:42:b4:9c:12:80:ae:0a:64:b3:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22dc6e4743ed5cc843032852896ef15f4892edb0
Validity
Not Before: Aug 23 13:02:31 2025 GMT
Not After : Aug 24 13:02:31 2025 GMT
Subject: CN=4f681e73b49546fa6a86feeaf4c0926c43ee5c5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:9d:bb:0d:b4:f7:c0:60:08:67:ff:b6:8d:a2:
f0:c0:da:9d:a6:7e:01:c0:81:af:00:b1:9d:2e:02:
86:b4:84:76:6a:59:41:ce:e1:d4:24:5f:e9:fc:01:
d2:22:f0:7a:6e:54:65:86:95:bb:c3:a9:83:90:1f:
ec:4a:55:8f:f3:c4:db:fe:f2:74:99:13:f2:97:52:
51:00:15:a5:1f:4a:ee:34:13:2e:ee:ee:36:97:de:
2f:1d:3d:76:27:42:75:30:5a:77:d3:58:ba:8c:1d:
61:b5:56:27:7c:83:d0:c4:29:93:11:e9:7e:4b:b9:
77:82:b4:dd:ee:b1:a2:10:43:7b:53:e9:21:26:a2:
75:ff:83:6f:a1:1e:69:f1:56:aa:b4:0b:95:d9:62:
d9:2d:2a:07:57:87:55:36:d6:29:dc:49:12:46:c1:
9d:13:02:73:2c:0f:54:db:02:af:f9:78:8d:08:05:
41:11:2b:4e:d2:fe:b7:24:7a:98:a4:1a:59:83:94:
ca:cf:d7:34:9e:5a:a3:0a:db:f9:08:3e:3b:a9:1b:
d6:77:75:0e:c9:b2:2e:19:91:f0:b9:7b:4a:84:aa:
37:8b:c9:06:22:44:b1:2c:5a:85:8a:4e:03:3c:b9:
40:ad:b4:c3:48:ef:17:46:18:e0:8f:03:35:45:15:
5c:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:68:1E:73:B4:95:46:FA:6A:86:FE:EA:F4:C0:92:6C:43:EE:5C:5D
X509v3 Authority Key Identifier:
keyid:22:DC:6E:47:43:ED:5C:C8:43:03:28:52:89:6E:F1:5F:48:92:ED:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ItxuR0PtXMhDAyhSiW7xX0iS7bA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/daf850-f587-44b2-8de4-a8585ff93546/1/ItxuR0PtXMhDAyhSiW7xX0iS7bA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/daf850-f587-44b2-8de4-a8585ff93546/1/ItxuR0PtXMhDAyhSiW7xX0iS7bA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:f0:cc:7a:6e:21:a0:ff:47:52:97:58:e7:e5:9f:86:39:4f:
bf:78:d0:6f:dc:f3:34:29:5e:81:ea:c2:4f:d1:85:3e:b1:b1:
bb:66:48:12:62:e8:bd:13:45:26:12:37:7c:c2:7f:70:76:2d:
03:d0:ec:db:32:47:fa:6c:13:cc:7c:8c:46:ba:94:3d:1c:b2:
be:bb:ee:bb:a4:c6:30:e4:80:9e:ae:97:cb:89:b0:c3:a6:7b:
7f:ee:a9:d2:38:4c:3e:9e:f0:32:76:cc:49:41:bf:87:f4:6c:
3b:86:5f:3b:2a:bf:d7:0d:65:78:62:25:9c:76:41:76:11:f2:
9d:3f:f6:f1:ba:0a:6a:b2:ad:3f:58:a0:52:f8:4f:f2:ff:68:
aa:cd:86:dc:58:05:c2:25:13:a4:f2:88:14:33:ae:8f:4d:a9:
92:e4:a3:83:3b:8c:74:a9:2a:8a:23:ac:15:e9:81:1a:1b:7c:
c3:b0:6e:36:46:67:97:90:ae:5f:ae:02:f8:6c:2d:0c:81:4d:
e1:cd:a5:9e:cf:35:2e:07:be:a6:2c:1a:da:50:0b:fa:2b:c1:
74:5f:65:8e:87:c8:8e:ed:c4:c8:88:ec:c9:6b:9c:0a:08:82:
bf:9f:b7:c7:04:8c:6c:52:31:ce:3e:e7:a3:89:e3:25:bb:ef:
8f:45:96:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:11:53 2025 by rpki-client