Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/3f7a06-2b45-4a0b-ba6c-958c376506ed/1/Iycd4-AQWavm0aWTxKJP9uGI1k8.mft
File: Iycd4-AQWavm0aWTxKJP9uGI1k8.mft (raw, json)
Hash identifier: b5lsOqJq0PMjfE7bR1Jr8c2GqN8x6seyK9n9GOfgUTs=
Subject key identifier: 45:C7:16:A3:F9:2B:80:B1:29:6D:0A:F1:66:34:14:02:D0:79:04:C3
Authority key identifier: 23:27:1D:E3:E0:10:59:AB:E6:D1:A5:93:C4:A2:4F:F6:E1:88:D6:4F
Certificate issuer: /CN=23271de3e01059abe6d1a593c4a24ff6e188d64f
Certificate serial: 0198D661372576F226FA673BEC2C9AB9D72B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Iycd4-AQWavm0aWTxKJP9uGI1k8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/3f7a06-2b45-4a0b-ba6c-958c376506ed/1/Iycd4-AQWavm0aWTxKJP9uGI1k8.mft
Manifest number: 0E4A
Signing time: Sat 23 Aug 2025 10:02:31 +0000
Manifest this update: Sat 23 Aug 2025 10:02:31 +0000
Manifest next update: Sun 24 Aug 2025 10:02:31 +0000
Files and hashes: 1: Iycd4-AQWavm0aWTxKJP9uGI1k8.crl (hash: abE7b4fVoZDt133t6usxPLjfWVNOUPo95onH5rb/2Hk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/3f7a06-2b45-4a0b-ba6c-958c376506ed/1/Iycd4-AQWavm0aWTxKJP9uGI1k8.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/3f7a06-2b45-4a0b-ba6c-958c376506ed/1/Iycd4-AQWavm0aWTxKJP9uGI1k8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Iycd4-AQWavm0aWTxKJP9uGI1k8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:61:37:25:76:f2:26:fa:67:3b:ec:2c:9a:b9:d7:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23271de3e01059abe6d1a593c4a24ff6e188d64f
Validity
Not Before: Aug 23 10:02:31 2025 GMT
Not After : Aug 24 10:02:31 2025 GMT
Subject: CN=45c716a3f92b80b1296d0af166341402d07904c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:1b:6b:37:98:d3:4a:92:3f:9d:60:80:a4:a5:
d9:60:7b:12:87:43:a3:72:24:01:19:19:48:13:cc:
01:c9:fe:5c:49:40:9e:e4:96:69:83:3a:29:9a:1b:
e8:ee:83:26:3e:dc:c7:b0:bd:7d:e6:1d:32:20:27:
6b:7c:09:a5:78:95:44:51:7a:14:2e:a9:cb:69:d6:
a3:0f:74:73:b0:b1:9a:e8:74:47:c5:c2:b3:48:bf:
40:5e:c0:be:0c:42:09:53:78:97:c8:dc:f7:e1:6a:
f4:0d:52:b7:58:6e:d4:63:ab:60:f8:00:b0:e5:74:
c2:e2:cc:c3:d6:da:67:12:8b:0f:fc:b4:5a:f1:d4:
a8:d0:3b:7b:c6:8c:3a:3c:1e:d8:69:d0:a1:be:78:
de:9a:c3:f2:99:07:06:4c:9b:dd:b5:e7:a0:33:a0:
2c:6f:ba:bd:29:8f:78:27:ba:56:83:8a:1a:66:25:
38:3e:27:63:6e:68:1c:f0:2b:b2:f9:c8:ea:34:f8:
e0:57:cf:68:ed:16:35:94:1b:b2:1a:d1:61:fe:e4:
24:6c:6d:6f:ed:42:6c:64:62:5a:0f:f3:70:e0:5e:
77:49:26:fb:b7:23:4a:95:3e:66:6c:bf:98:87:87:
36:c2:01:f4:5a:07:af:ae:31:c5:49:09:17:86:9a:
bd:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:C7:16:A3:F9:2B:80:B1:29:6D:0A:F1:66:34:14:02:D0:79:04:C3
X509v3 Authority Key Identifier:
keyid:23:27:1D:E3:E0:10:59:AB:E6:D1:A5:93:C4:A2:4F:F6:E1:88:D6:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Iycd4-AQWavm0aWTxKJP9uGI1k8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/3f7a06-2b45-4a0b-ba6c-958c376506ed/1/Iycd4-AQWavm0aWTxKJP9uGI1k8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/3f7a06-2b45-4a0b-ba6c-958c376506ed/1/Iycd4-AQWavm0aWTxKJP9uGI1k8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:e1:29:2c:a5:9c:f4:53:e3:98:02:1d:d5:68:64:e2:39:f3:
b8:b9:26:50:ba:22:12:4d:a4:11:2e:a9:c8:6f:8c:b4:16:74:
e9:49:53:fe:6d:a4:be:ae:67:b1:29:9a:44:eb:16:ee:20:f2:
3f:93:d1:b6:c3:94:47:30:af:e8:59:24:ca:17:2a:4a:7e:91:
3b:8d:2a:53:77:c8:df:ce:e6:6c:c4:4e:4e:2d:72:cf:df:13:
66:c9:f7:ae:06:8a:44:eb:87:ef:89:12:14:f3:8b:f6:52:97:
92:36:70:93:73:b1:36:e4:9e:3f:95:79:d2:27:d7:0e:1f:d2:
8f:94:af:33:39:b4:6c:89:dd:c0:4a:9e:0d:cd:fd:cb:39:15:
9e:15:a0:87:68:ae:52:c5:6f:a7:04:57:f1:92:e8:4e:f7:91:
87:e1:74:51:62:f8:4e:69:c9:a3:08:8c:b4:bb:94:1f:fe:0b:
fd:0b:2c:77:ef:e1:6f:20:9b:4b:5f:8c:7e:fd:d6:60:0d:b0:
20:cb:06:80:54:76:5d:f3:9b:3d:73:81:54:0d:98:25:f8:23:
ef:05:57:d5:fd:60:1c:23:bd:0e:88:64:84:7f:74:e2:74:7b:
71:d0:2d:c0:31:1d:2b:af:8d:55:c3:de:30:a8:99:2d:94:2e:
ce:39:24:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:10:33 2025 by rpki-client