Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/d1f16c-5d15-4f7b-ba5e-6be0bfe1cbdb/1/_izVtrb_hGG7l5eGHJuBZ2oHU6o.mft
File: _izVtrb_hGG7l5eGHJuBZ2oHU6o.mft (raw, json)
Hash identifier: jrMhUg3SqeHrIXjcHz/6G+sV92sAxKPvjt11LNXXK5I=
Subject key identifier: 95:0E:62:59:FB:1D:32:0F:48:7A:C8:CD:55:40:0A:89:CC:9C:62:54
Authority key identifier: FE:2C:D5:B6:B6:FF:84:61:BB:97:97:86:1C:9B:81:67:6A:07:53:AA
Certificate issuer: /CN=fe2cd5b6b6ff8461bb9797861c9b81676a0753aa
Certificate serial: 0198D4A798B78A2E5CCC238CA78A1AE5CCF6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_izVtrb_hGG7l5eGHJuBZ2oHU6o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/d1f16c-5d15-4f7b-ba5e-6be0bfe1cbdb/1/_izVtrb_hGG7l5eGHJuBZ2oHU6o.mft
Manifest number: 0605
Signing time: Sat 23 Aug 2025 02:00:09 +0000
Manifest this update: Sat 23 Aug 2025 02:00:09 +0000
Manifest next update: Sun 24 Aug 2025 02:00:09 +0000
Files and hashes: 1: _izVtrb_hGG7l5eGHJuBZ2oHU6o.crl (hash: MLXfwGhA/3SiXxsuEWFm8ymdDNGQlOZhWQl+7OcK7XM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/d1f16c-5d15-4f7b-ba5e-6be0bfe1cbdb/1/_izVtrb_hGG7l5eGHJuBZ2oHU6o.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/d1f16c-5d15-4f7b-ba5e-6be0bfe1cbdb/1/_izVtrb_hGG7l5eGHJuBZ2oHU6o.mft
rsync://rpki.ripe.net/repository/DEFAULT/_izVtrb_hGG7l5eGHJuBZ2oHU6o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:a7:98:b7:8a:2e:5c:cc:23:8c:a7:8a:1a:e5:cc:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe2cd5b6b6ff8461bb9797861c9b81676a0753aa
Validity
Not Before: Aug 23 02:00:09 2025 GMT
Not After : Aug 24 02:00:09 2025 GMT
Subject: CN=950e6259fb1d320f487ac8cd55400a89cc9c6254
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:ed:f2:91:55:b8:47:0c:ec:fe:51:41:ec:c9:
bb:cb:ee:d0:6a:ac:18:b6:2e:84:29:9e:6a:55:0a:
4d:6b:4c:19:0c:f1:19:22:08:06:e8:68:2d:d4:4f:
47:aa:18:5c:2a:c0:04:b1:80:f6:2d:4f:13:37:d5:
3a:9c:d4:9d:2e:24:20:00:b2:21:4f:62:e8:b6:e0:
21:cd:e8:e1:83:bf:f9:70:3f:14:d4:7d:b7:cc:84:
4c:0b:15:89:2b:f2:0a:a5:cd:da:b5:a0:8f:16:ee:
89:16:c1:ba:e9:c9:da:a9:9b:b8:99:ff:79:75:5d:
a9:af:43:54:2e:e3:45:15:00:49:5d:12:e9:d7:29:
19:02:ed:80:ac:29:cd:36:8c:c6:b4:dc:fc:45:85:
9c:a4:2a:fb:51:bb:a2:a8:e4:34:30:57:e0:31:15:
b7:ec:82:cf:0c:1c:c9:3c:22:5d:48:42:70:9e:e3:
aa:59:e8:2b:c0:e1:de:d1:97:65:72:61:70:90:c8:
2f:b7:06:21:f0:85:7c:4b:b2:8c:9f:96:be:83:00:
9a:18:f6:ca:09:04:63:6f:f9:90:13:f3:01:47:6e:
7b:b9:51:3d:8f:83:36:95:e7:14:eb:58:ba:ac:4a:
0f:86:63:72:11:2c:b9:15:65:33:12:30:90:98:1e:
dd:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:0E:62:59:FB:1D:32:0F:48:7A:C8:CD:55:40:0A:89:CC:9C:62:54
X509v3 Authority Key Identifier:
keyid:FE:2C:D5:B6:B6:FF:84:61:BB:97:97:86:1C:9B:81:67:6A:07:53:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_izVtrb_hGG7l5eGHJuBZ2oHU6o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/d1f16c-5d15-4f7b-ba5e-6be0bfe1cbdb/1/_izVtrb_hGG7l5eGHJuBZ2oHU6o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/d1f16c-5d15-4f7b-ba5e-6be0bfe1cbdb/1/_izVtrb_hGG7l5eGHJuBZ2oHU6o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:3d:fd:1a:ba:74:7f:a2:88:03:26:91:f3:51:0d:74:89:5e:
15:30:82:ba:19:57:0c:15:d1:19:76:bd:12:06:31:8b:c3:c4:
04:fe:f6:4f:15:a5:60:0c:28:31:d8:f9:30:61:26:bf:df:31:
de:7e:06:59:60:1d:67:dc:ae:b1:dc:8b:59:3c:5f:ba:1c:31:
41:79:cf:73:44:5f:19:41:61:1f:87:ab:0f:6b:14:60:03:ec:
ec:96:b6:b1:fc:3b:bc:5a:30:34:a0:84:4e:9f:58:ae:c1:8c:
b1:fc:16:2b:54:07:b0:e0:e9:94:9c:4b:dd:98:48:98:e8:c8:
ee:b3:46:dd:ed:1e:3e:d0:0c:d9:8f:94:9f:db:1f:61:4e:2d:
ad:a6:57:d4:04:e6:1e:5b:eb:b8:b1:2a:96:36:f4:f6:ac:ee:
42:43:9f:7a:8c:72:b3:31:fc:d9:1e:84:78:98:3d:8a:8b:79:
02:df:ca:1b:50:55:99:a9:37:bd:75:78:66:75:34:9e:d9:f7:
8d:4b:d1:b1:f4:da:26:2e:3e:38:55:98:97:37:81:ef:06:b8:
c3:00:6d:32:b5:a1:87:e4:5e:dc:75:8b:19:57:93:49:c9:e9:
b1:28:69:b4:d1:a9:65:31:9f:67:02:c1:29:db:fe:92:a3:67:
09:8a:33:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 09:36:21 2025 by rpki-client