Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/9145cb-02bd-47e6-b04b-0871152a1aa3/1/iaWq49f3LuzoOWtBSSIIrdUhhDU.mft
File: iaWq49f3LuzoOWtBSSIIrdUhhDU.mft (raw, json)
Hash identifier: xNwJV7kckQXJSCMTJWU99ETNMRfoqhoAK4j9n/LggPY=
Subject key identifier: CA:A6:90:0D:BF:56:8C:33:6F:83:0C:D4:8C:83:21:70:94:2C:4B:B7
Authority key identifier: 89:A5:AA:E3:D7:F7:2E:EC:E8:39:6B:41:49:22:08:AD:D5:21:84:35
Certificate issuer: /CN=89a5aae3d7f72eece8396b41492208add5218435
Certificate serial: 0198D54E15C9743D51CFE307E2CB744DD53D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iaWq49f3LuzoOWtBSSIIrdUhhDU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/9145cb-02bd-47e6-b04b-0871152a1aa3/1/iaWq49f3LuzoOWtBSSIIrdUhhDU.mft
Manifest number: 153A
Signing time: Sat 23 Aug 2025 05:02:01 +0000
Manifest this update: Sat 23 Aug 2025 05:02:01 +0000
Manifest next update: Sun 24 Aug 2025 05:02:01 +0000
Files and hashes: 1: iaWq49f3LuzoOWtBSSIIrdUhhDU.crl (hash: u+NkRAhL7fkpKoWF/3dkjCFg/A+QYXgnzKs5Ke0Rehs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/9145cb-02bd-47e6-b04b-0871152a1aa3/1/iaWq49f3LuzoOWtBSSIIrdUhhDU.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/9145cb-02bd-47e6-b04b-0871152a1aa3/1/iaWq49f3LuzoOWtBSSIIrdUhhDU.mft
rsync://rpki.ripe.net/repository/DEFAULT/iaWq49f3LuzoOWtBSSIIrdUhhDU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:15:c9:74:3d:51:cf:e3:07:e2:cb:74:4d:d5:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89a5aae3d7f72eece8396b41492208add5218435
Validity
Not Before: Aug 23 05:02:01 2025 GMT
Not After : Aug 24 05:02:01 2025 GMT
Subject: CN=caa6900dbf568c336f830cd48c832170942c4bb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:ce:cb:da:d6:06:3e:da:c6:5e:02:0c:29:cb:
5a:2e:b8:7e:d5:72:26:31:1f:a7:45:67:a0:25:4b:
15:e6:ab:5f:b8:6b:79:d7:71:5e:4f:bd:2f:fd:f1:
b3:ce:63:20:50:87:8f:38:d2:5c:90:a7:00:9e:9e:
5e:30:ed:25:4e:dd:9d:6f:86:e6:74:41:cf:52:86:
97:95:18:b8:69:24:c8:12:8f:87:fd:c0:d2:9a:7d:
85:5a:80:88:e6:11:7f:55:f6:94:c6:16:81:2e:7c:
ce:c6:da:d5:0e:71:b4:29:4d:74:aa:cd:ab:71:9c:
c9:f8:62:ef:06:8d:be:1f:8b:6c:a7:39:6e:18:9b:
73:89:87:f0:d1:6d:39:1c:7b:71:f1:6b:48:be:d7:
b8:c4:f4:c7:2f:65:27:8a:17:1d:49:19:29:04:b6:
68:6d:66:8b:c1:cb:e2:3f:32:0b:8e:a2:80:e7:84:
19:5b:92:91:f7:33:d4:c0:0f:e0:08:2e:e4:f6:f4:
a0:5d:7c:00:a5:27:37:56:d5:46:d1:57:eb:f8:a8:
91:0b:a4:c0:13:0b:0b:30:0f:80:4f:60:bf:43:02:
6d:43:31:47:48:f3:34:77:cd:26:7b:ba:92:85:2a:
38:77:0b:7e:12:e8:b4:27:fb:ca:93:de:9a:f0:c4:
15:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:A6:90:0D:BF:56:8C:33:6F:83:0C:D4:8C:83:21:70:94:2C:4B:B7
X509v3 Authority Key Identifier:
keyid:89:A5:AA:E3:D7:F7:2E:EC:E8:39:6B:41:49:22:08:AD:D5:21:84:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iaWq49f3LuzoOWtBSSIIrdUhhDU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/9145cb-02bd-47e6-b04b-0871152a1aa3/1/iaWq49f3LuzoOWtBSSIIrdUhhDU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/9145cb-02bd-47e6-b04b-0871152a1aa3/1/iaWq49f3LuzoOWtBSSIIrdUhhDU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:dd:33:ab:99:59:d5:04:a2:e9:14:59:be:7d:57:db:77:c1:
d5:24:78:de:cb:2d:09:2b:b4:22:0d:a5:1f:5c:97:24:4b:38:
95:d2:2a:42:3b:dd:2f:6b:a9:3c:5d:19:a3:b0:18:6a:1a:c7:
57:87:fe:0e:9b:99:90:3d:6c:c9:43:df:54:4c:83:7e:98:bf:
29:b2:9a:4b:3d:cf:33:93:4f:30:1f:63:73:9a:2f:7c:d6:c8:
8a:76:ae:86:b5:90:2d:85:f5:e3:57:79:b3:af:63:aa:0d:23:
1d:cc:a0:d3:eb:b4:4a:7e:8e:be:13:a0:d1:72:5a:38:50:75:
8a:1c:63:99:d1:ed:57:2b:e7:89:56:bf:f1:e0:ef:77:c9:5a:
05:2f:d5:f6:c4:ec:3e:00:8e:b8:03:05:c4:b9:74:2f:48:ef:
27:14:2f:18:b6:1f:b1:6a:df:9e:cd:72:bd:82:3c:75:20:b8:
8d:49:7f:ce:4d:b4:17:41:0a:28:2f:db:2f:6a:b0:32:ef:30:
b1:77:29:e9:04:2b:db:6a:1a:a2:c2:16:aa:6e:f4:8d:b3:92:
91:69:4d:39:3c:8a:78:48:21:0f:c1:a2:35:87:a2:33:c5:6c:
52:29:99:6a:30:b0:74:48:49:25:f6:71:5b:ee:27:b0:3a:fb:
3c:ec:6a:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:49:20 2025 by rpki-client