Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/bacec3-491b-440b-8b48-6f0f46f4d4b4/1/0iYd7m1U3VNu9wDy2dgZfIYJOWY.mft
File: 0iYd7m1U3VNu9wDy2dgZfIYJOWY.mft (raw, json)
Hash identifier: IoTwr4A1WbkB/ebJLC2pfeXQW3XsFdWqadplTjNfGog=
Subject key identifier: FA:6C:6C:52:7C:B9:3B:BA:2D:16:A5:3C:98:41:14:73:33:BB:EF:C8
Authority key identifier: D2:26:1D:EE:6D:54:DD:53:6E:F7:00:F2:D9:D8:19:7C:86:09:39:66
Certificate issuer: /CN=d2261dee6d54dd536ef700f2d9d8197c86093966
Certificate serial: 0198D660ED4B7DA96F3A397DBF0116E12543
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0iYd7m1U3VNu9wDy2dgZfIYJOWY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/bacec3-491b-440b-8b48-6f0f46f4d4b4/1/0iYd7m1U3VNu9wDy2dgZfIYJOWY.mft
Manifest number: 15D9
Signing time: Sat 23 Aug 2025 10:02:13 +0000
Manifest this update: Sat 23 Aug 2025 10:02:13 +0000
Manifest next update: Sun 24 Aug 2025 10:02:13 +0000
Files and hashes: 1: 0iYd7m1U3VNu9wDy2dgZfIYJOWY.crl (hash: yF7/SDfuo0uhwlmcUXFfCHUzjCjWybhkFIrs7H+8i9s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/bacec3-491b-440b-8b48-6f0f46f4d4b4/1/0iYd7m1U3VNu9wDy2dgZfIYJOWY.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/bacec3-491b-440b-8b48-6f0f46f4d4b4/1/0iYd7m1U3VNu9wDy2dgZfIYJOWY.mft
rsync://rpki.ripe.net/repository/DEFAULT/0iYd7m1U3VNu9wDy2dgZfIYJOWY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:ed:4b:7d:a9:6f:3a:39:7d:bf:01:16:e1:25:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2261dee6d54dd536ef700f2d9d8197c86093966
Validity
Not Before: Aug 23 10:02:13 2025 GMT
Not After : Aug 24 10:02:13 2025 GMT
Subject: CN=fa6c6c527cb93bba2d16a53c9841147333bbefc8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:c1:66:d2:56:01:a8:55:99:4f:23:59:18:2c:
a1:97:d6:00:12:9b:15:ae:d6:06:a2:1e:db:ca:01:
5d:b9:40:61:92:db:d8:e0:43:b6:03:35:c4:9d:f7:
21:92:13:73:06:56:2a:76:45:49:40:c0:7f:f9:b8:
c9:51:76:33:53:91:2f:d8:b1:6e:97:1f:63:e8:31:
8b:2d:58:1a:62:f8:3e:5e:b7:f8:0a:ca:8b:42:d2:
78:71:7e:9f:ca:ce:4c:ba:bb:84:31:e2:5c:88:dc:
c8:7e:bf:10:d3:5c:c3:a7:61:ad:a2:61:9b:4a:5c:
3d:ae:41:32:e8:bb:39:61:45:ae:40:63:20:cc:8c:
d0:14:50:93:74:2c:0d:93:e7:16:08:fd:d8:08:4b:
84:8e:e9:db:65:fd:bc:3f:74:87:73:33:3b:7c:c9:
eb:b8:01:fd:ed:aa:16:20:a6:d6:78:30:84:34:18:
dd:af:c0:e7:7e:af:47:9d:af:fe:c7:37:dc:a8:14:
62:ad:ee:24:95:8d:77:f6:9c:fa:94:01:3d:64:ba:
e7:6b:12:71:be:c5:85:72:93:65:e5:94:cd:7b:a6:
4b:94:68:aa:82:20:74:9d:93:9f:e6:95:1e:99:22:
cc:78:65:b4:a8:24:c4:bd:75:bd:0a:8c:96:37:0a:
39:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:6C:6C:52:7C:B9:3B:BA:2D:16:A5:3C:98:41:14:73:33:BB:EF:C8
X509v3 Authority Key Identifier:
keyid:D2:26:1D:EE:6D:54:DD:53:6E:F7:00:F2:D9:D8:19:7C:86:09:39:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0iYd7m1U3VNu9wDy2dgZfIYJOWY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/bacec3-491b-440b-8b48-6f0f46f4d4b4/1/0iYd7m1U3VNu9wDy2dgZfIYJOWY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/bacec3-491b-440b-8b48-6f0f46f4d4b4/1/0iYd7m1U3VNu9wDy2dgZfIYJOWY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:76:77:84:6d:00:73:ef:fc:2a:51:da:c0:6a:b7:f5:2e:c4:
fe:25:df:02:ac:32:1f:d3:c0:67:17:46:8b:75:c8:3c:a0:b1:
10:bf:c8:49:08:50:a7:a3:d1:a8:ed:66:1b:5f:84:bf:d8:af:
e0:a3:7e:29:70:ca:b9:39:8f:72:70:b3:a4:39:a1:19:6d:74:
f4:7c:ca:65:88:5a:69:0d:f4:63:20:82:a6:7b:00:39:01:df:
85:b3:5f:d8:c9:6e:f5:92:88:23:7a:66:43:7d:b8:5d:05:a1:
bb:e3:b0:03:8f:13:ff:d7:e3:bf:2a:47:fe:5f:c7:ab:e3:65:
59:3e:ea:09:e5:00:05:7e:2e:7e:bb:67:66:62:ac:8e:7d:30:
ee:9a:ad:c7:9a:fb:03:f4:fb:d3:4f:ef:b0:38:e2:5d:02:af:
34:31:1f:9d:a6:dd:d8:89:51:26:27:9a:7b:54:26:32:2e:53:
5a:05:1d:7f:66:c4:93:b8:de:c9:00:f3:ed:40:dd:32:ea:1a:
95:93:3b:8a:7e:dd:33:4b:24:b5:73:a3:c1:9f:27:0e:f3:72:
bd:6c:41:ea:77:71:13:d6:de:a9:1d:0a:c4:67:77:e9:b0:40:
bf:30:50:d9:5e:7e:7a:02:b7:ca:9b:44:4e:21:6b:fa:90:7c:
e5:d9:61:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:04:49 2025 by rpki-client