Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/3f7a06-2b45-4a0b-ba6c-958c376506ed/1/Iycd4-AQWavm0aWTxKJP9uGI1k8.mft
File: Iycd4-AQWavm0aWTxKJP9uGI1k8.mft (raw, json)
Hash identifier: BI4ihltFdh+f8Y3+/kCyWlPOKGR2WJkK4fw9bJsKDxo=
Subject key identifier: 3F:36:F2:90:5E:06:BB:6C:78:20:7D:E7:18:86:FE:C1:5E:EB:33:74
Authority key identifier: 23:27:1D:E3:E0:10:59:AB:E6:D1:A5:93:C4:A2:4F:F6:E1:88:D6:4F
Certificate issuer: /CN=23271de3e01059abe6d1a593c4a24ff6e188d64f
Certificate serial: 0197B6A0A15CB3E1325A59BA797821669B1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Iycd4-AQWavm0aWTxKJP9uGI1k8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/3f7a06-2b45-4a0b-ba6c-958c376506ed/1/Iycd4-AQWavm0aWTxKJP9uGI1k8.mft
Manifest number: 0DB5
Signing time: Sat 28 Jun 2025 13:01:09 +0000
Manifest this update: Sat 28 Jun 2025 13:01:09 +0000
Manifest next update: Sun 29 Jun 2025 13:01:09 +0000
Files and hashes: 1: Iycd4-AQWavm0aWTxKJP9uGI1k8.crl (hash: Lne//yYxkNuM9E8VL9iF0P5B6oBZU+y8D5NaYewFObg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/3f7a06-2b45-4a0b-ba6c-958c376506ed/1/Iycd4-AQWavm0aWTxKJP9uGI1k8.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/3f7a06-2b45-4a0b-ba6c-958c376506ed/1/Iycd4-AQWavm0aWTxKJP9uGI1k8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Iycd4-AQWavm0aWTxKJP9uGI1k8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:a1:5c:b3:e1:32:5a:59:ba:79:78:21:66:9b:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23271de3e01059abe6d1a593c4a24ff6e188d64f
Validity
Not Before: Jun 28 13:01:09 2025 GMT
Not After : Jun 29 13:01:09 2025 GMT
Subject: CN=3f36f2905e06bb6c78207de71886fec15eeb3374
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:6f:56:18:9b:bf:09:70:e2:b1:17:f1:5f:c0:
d7:a2:39:af:55:7a:14:97:2d:0c:54:ad:71:f1:e9:
fa:09:16:84:12:3a:db:64:ae:60:23:30:e5:b9:78:
3f:da:c3:6b:d6:48:6a:17:16:83:de:0f:0f:8e:9e:
83:b4:4a:7f:b4:e6:07:fa:b5:bb:3b:8e:df:e2:95:
26:40:ba:ee:79:3f:2c:78:18:45:1d:66:28:63:f7:
32:9e:77:c0:99:64:0a:5a:8f:e6:23:73:33:7a:ff:
47:8a:22:3d:08:0c:48:c9:66:8d:9e:75:52:a4:1b:
63:1c:a4:28:33:06:80:04:b5:11:f3:cc:27:31:ba:
fa:37:dc:a8:a8:2e:8f:e1:77:e3:36:af:b7:c8:6d:
19:68:01:42:53:66:eb:74:49:0b:0b:79:16:bb:23:
5d:08:a3:f1:e4:ed:14:bc:11:c5:94:bd:31:66:67:
6a:47:34:55:f2:71:7b:97:5a:95:8f:aa:44:52:0e:
68:c6:e5:35:57:e0:72:bd:5f:57:d5:4d:87:38:e0:
60:35:5f:48:9d:f2:3f:55:32:7a:39:3a:e8:71:1d:
e2:b0:7d:3b:76:04:03:6b:35:e0:f9:09:d2:67:7b:
f0:cb:e6:e8:50:14:1d:77:16:e0:58:71:4d:ba:bb:
fa:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:36:F2:90:5E:06:BB:6C:78:20:7D:E7:18:86:FE:C1:5E:EB:33:74
X509v3 Authority Key Identifier:
keyid:23:27:1D:E3:E0:10:59:AB:E6:D1:A5:93:C4:A2:4F:F6:E1:88:D6:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Iycd4-AQWavm0aWTxKJP9uGI1k8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/3f7a06-2b45-4a0b-ba6c-958c376506ed/1/Iycd4-AQWavm0aWTxKJP9uGI1k8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/3f7a06-2b45-4a0b-ba6c-958c376506ed/1/Iycd4-AQWavm0aWTxKJP9uGI1k8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:8e:0b:cf:6f:9c:2c:38:4c:9c:14:59:7c:67:e8:9d:91:70:
c9:94:88:81:85:92:6b:5e:8f:74:07:49:45:22:c8:af:25:61:
7a:fb:47:bc:a0:77:1e:ec:a7:6a:db:25:75:21:e6:4a:8f:28:
15:b3:43:78:55:9d:da:47:4f:e6:54:7b:c4:c3:f1:86:ac:a7:
95:64:7a:64:5e:69:1c:32:86:1f:dc:a8:60:6a:32:6d:1a:29:
1d:51:ca:ce:ab:73:89:89:1c:fb:ea:fa:ec:c6:56:4c:f5:ad:
65:97:b9:13:be:a2:86:9b:2b:bf:87:7b:d2:5f:2f:a5:04:96:
cd:d4:14:dc:e4:5d:15:e9:d4:5f:ed:4c:b2:c9:f7:bb:42:83:
88:05:1f:7d:df:51:0a:4c:2d:bf:ab:e5:2b:4f:d0:8d:3e:07:
0f:97:60:df:93:1a:f0:e0:c6:86:c6:79:e7:29:2e:19:58:68:
dc:32:a9:d8:2a:ac:ef:90:37:19:a0:06:56:95:ff:f6:21:b7:
22:4d:5e:4a:d9:d0:36:b4:08:4a:ec:e9:53:f6:b0:42:cc:cb:
94:f9:fe:40:44:db:6c:79:92:b3:10:63:2d:5d:c7:71:3c:92:
7f:45:ed:35:0f:2a:c4:28:7b:c3:00:62:88:48:67:a2:72:1e:
d6:d1:d1:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:18:49 2025 by rpki-client