Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/383b70-dbf3-4ff3-b153-3fe4f7cbadab/1/ifGFjNN_s4sqz6XLTvQ-PDCNPWE.mft
File: ifGFjNN_s4sqz6XLTvQ-PDCNPWE.mft (raw, json)
Hash identifier: mPZjwCiH4SjXV2PCJfgCfotq3NHWDVkLOu3tczi3ozk=
Subject key identifier: 6A:05:B4:84:BE:6B:F4:AB:81:39:CD:64:1F:3C:95:D7:22:09:64:A9
Authority key identifier: 89:F1:85:8C:D3:7F:B3:8B:2A:CF:A5:CB:4E:F4:3E:3C:30:8D:3D:61
Certificate issuer: /CN=89f1858cd37fb38b2acfa5cb4ef43e3c308d3d61
Certificate serial: 0198D7A8954201C0AED7CFD1CFBE83379E24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ifGFjNN_s4sqz6XLTvQ-PDCNPWE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/383b70-dbf3-4ff3-b153-3fe4f7cbadab/1/ifGFjNN_s4sqz6XLTvQ-PDCNPWE.mft
Manifest number: 1648
Signing time: Sat 23 Aug 2025 16:00:06 +0000
Manifest this update: Sat 23 Aug 2025 16:00:06 +0000
Manifest next update: Sun 24 Aug 2025 16:00:06 +0000
Files and hashes: 1: ifGFjNN_s4sqz6XLTvQ-PDCNPWE.crl (hash: +XQck6j2wfKhgh306rKkBE8J9ogl0ODcPPW3F7QlEok=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/383b70-dbf3-4ff3-b153-3fe4f7cbadab/1/ifGFjNN_s4sqz6XLTvQ-PDCNPWE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/383b70-dbf3-4ff3-b153-3fe4f7cbadab/1/ifGFjNN_s4sqz6XLTvQ-PDCNPWE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ifGFjNN_s4sqz6XLTvQ-PDCNPWE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:a8:95:42:01:c0:ae:d7:cf:d1:cf:be:83:37:9e:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89f1858cd37fb38b2acfa5cb4ef43e3c308d3d61
Validity
Not Before: Aug 23 16:00:06 2025 GMT
Not After : Aug 24 16:00:06 2025 GMT
Subject: CN=6a05b484be6bf4ab8139cd641f3c95d7220964a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:91:82:9f:71:d6:17:0c:36:ba:23:c6:45:5d:
ed:4b:c3:ea:a2:31:bf:75:b1:b2:bd:43:46:1e:d9:
22:41:f8:c0:ed:38:ab:65:5b:82:dc:75:4e:d7:b0:
78:61:1e:77:ec:f5:75:fa:33:af:f4:0e:8c:e8:c2:
8d:77:6d:9e:fb:2b:48:87:ad:16:85:d2:d9:6c:a1:
45:15:af:c3:b9:f8:4a:f3:1e:e6:b0:fb:04:90:4a:
91:0c:b2:24:0f:c2:b9:47:f9:14:c6:a2:ec:a4:b1:
38:3a:f3:8d:8c:9b:7a:57:b5:79:bb:f0:3a:0f:b3:
ff:28:97:23:68:4d:84:2f:f9:65:74:57:ac:93:2c:
c3:e4:c2:77:87:f2:ca:59:c5:c4:da:79:0d:74:ab:
f6:4b:bc:c3:aa:c3:61:32:9a:1b:53:59:24:ef:30:
5e:98:0c:7d:2c:26:67:e9:a7:60:a7:2c:28:61:d0:
49:51:65:ae:c9:44:e6:13:99:a2:50:aa:93:e8:09:
44:89:cd:a1:55:e3:f7:72:bf:f8:4a:85:81:c5:eb:
76:f8:33:b3:1e:ac:cd:7f:5c:4a:1e:63:d8:5a:ff:
13:36:c6:1b:54:4c:9a:c9:91:40:07:d8:0a:86:ef:
5f:00:49:b8:4c:04:d3:66:6a:93:4d:ce:29:7d:6b:
01:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:05:B4:84:BE:6B:F4:AB:81:39:CD:64:1F:3C:95:D7:22:09:64:A9
X509v3 Authority Key Identifier:
keyid:89:F1:85:8C:D3:7F:B3:8B:2A:CF:A5:CB:4E:F4:3E:3C:30:8D:3D:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ifGFjNN_s4sqz6XLTvQ-PDCNPWE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/383b70-dbf3-4ff3-b153-3fe4f7cbadab/1/ifGFjNN_s4sqz6XLTvQ-PDCNPWE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/383b70-dbf3-4ff3-b153-3fe4f7cbadab/1/ifGFjNN_s4sqz6XLTvQ-PDCNPWE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:fd:1b:c0:bc:12:75:3f:9b:53:0e:50:4b:6f:c8:ef:62:a1:
5e:15:64:93:79:7f:e4:1e:bd:91:fc:07:ff:58:7a:9b:16:b6:
bb:9b:c2:3d:0c:cd:51:c6:a6:67:3b:5c:03:ca:c9:82:54:df:
e9:d4:b0:9f:fe:c1:11:48:4a:4d:f3:e4:78:99:94:7d:6c:80:
2d:8d:ca:63:17:55:f1:85:40:6c:2c:c5:90:82:c8:23:9e:c1:
5c:37:f0:13:1c:e8:f6:c7:64:28:2b:91:17:ed:7c:89:23:82:
3a:03:a6:7a:76:72:3f:b8:ee:70:8d:fe:a9:e5:bc:a1:89:df:
83:d4:9d:93:ae:3c:3a:e9:2b:96:06:3e:08:77:54:7b:89:6f:
3e:68:00:89:08:30:3b:dc:84:b4:de:6d:4a:47:70:da:7e:a1:
19:a5:bd:61:bf:6b:ae:91:20:94:0a:b1:eb:51:b1:b6:02:8f:
cf:dd:39:47:45:90:92:ff:c2:fd:9f:42:d6:f5:dc:e7:b3:05:
1f:d2:1a:94:6d:9b:3c:0a:f3:94:f5:ef:3a:98:c7:b3:9e:ac:
e3:eb:15:7f:7b:11:b9:1b:90:3a:b5:60:37:77:e6:27:18:0d:
49:4d:88:e4:f8:1a:72:51:fa:41:82:6f:c0:44:2a:5d:e4:a6:
e4:dd:13:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:44:20 2025 by rpki-client