Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/cbf67b-a65a-42a3-8908-07369e14cade/1/IlVxaqH0w8EChxihwzHiKzOerXw.mft
File: IlVxaqH0w8EChxihwzHiKzOerXw.mft (raw, json)
Hash identifier: xCvYFu3NQyQ3tCR0L9OJCh9FwAqIW9UHOMGve/RKXiA=
Subject key identifier: 31:F8:45:B1:65:23:70:14:D2:7D:5E:E3:BA:1C:49:D2:24:AA:73:2A
Authority key identifier: 22:55:71:6A:A1:F4:C3:C1:02:87:18:A1:C3:31:E2:2B:33:9E:AD:7C
Certificate issuer: /CN=2255716aa1f4c3c1028718a1c331e22b339ead7c
Certificate serial: 0198D73B957A768689A453EA48EDAD17DE88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IlVxaqH0w8EChxihwzHiKzOerXw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/cbf67b-a65a-42a3-8908-07369e14cade/1/IlVxaqH0w8EChxihwzHiKzOerXw.mft
Manifest number: 12CB
Signing time: Sat 23 Aug 2025 14:01:02 +0000
Manifest this update: Sat 23 Aug 2025 14:01:02 +0000
Manifest next update: Sun 24 Aug 2025 14:01:02 +0000
Files and hashes: 1: IlVxaqH0w8EChxihwzHiKzOerXw.crl (hash: 0Et6xH/BNF6J1QV+Q8lLZYfLQ7YP5iMhbj9z4woazQY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/cbf67b-a65a-42a3-8908-07369e14cade/1/IlVxaqH0w8EChxihwzHiKzOerXw.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/cbf67b-a65a-42a3-8908-07369e14cade/1/IlVxaqH0w8EChxihwzHiKzOerXw.mft
rsync://rpki.ripe.net/repository/DEFAULT/IlVxaqH0w8EChxihwzHiKzOerXw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:3b:95:7a:76:86:89:a4:53:ea:48:ed:ad:17:de:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2255716aa1f4c3c1028718a1c331e22b339ead7c
Validity
Not Before: Aug 23 14:01:02 2025 GMT
Not After : Aug 24 14:01:02 2025 GMT
Subject: CN=31f845b165237014d27d5ee3ba1c49d224aa732a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:28:60:77:2f:95:03:88:c6:be:a4:06:a9:a9:
da:bb:e3:55:53:2b:9b:5c:48:d9:f1:75:c0:9c:0c:
b9:fb:31:62:3e:06:6c:4b:d0:29:44:2d:f5:d4:45:
ab:84:66:89:a1:9e:71:ff:a4:05:f3:51:bc:48:cc:
17:ee:a6:38:57:2e:f0:65:bd:77:9f:cd:3f:97:ed:
8d:d8:bc:44:7b:9c:40:d7:0c:91:30:41:dd:ae:60:
f4:52:07:7d:c0:32:97:e5:ff:64:ba:ea:a8:b8:c6:
45:ac:15:f5:91:7d:fd:58:70:73:fb:90:12:2c:7d:
af:fb:26:9f:6c:59:51:d3:a2:e4:a4:b2:e8:f2:fb:
d2:2d:6e:61:9b:3a:a7:db:47:d4:24:97:8b:94:4d:
d3:d5:83:64:2e:e7:45:40:e9:f1:25:81:d5:43:d8:
f0:11:93:3e:07:ab:b4:f8:83:d7:e3:c6:bf:48:91:
d7:aa:bb:43:9e:ff:34:29:01:46:4c:32:4e:10:df:
37:c4:d3:aa:36:70:6d:a5:e1:3e:3c:01:1d:4b:c4:
3b:04:e9:34:e4:7b:d6:0e:ca:62:77:31:d9:00:ce:
ed:f2:18:71:55:0b:b2:e7:46:ae:8b:e8:5a:19:c9:
3f:b1:75:05:d3:04:4b:f4:31:93:6c:2e:5d:9d:e1:
99:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:F8:45:B1:65:23:70:14:D2:7D:5E:E3:BA:1C:49:D2:24:AA:73:2A
X509v3 Authority Key Identifier:
keyid:22:55:71:6A:A1:F4:C3:C1:02:87:18:A1:C3:31:E2:2B:33:9E:AD:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IlVxaqH0w8EChxihwzHiKzOerXw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/cbf67b-a65a-42a3-8908-07369e14cade/1/IlVxaqH0w8EChxihwzHiKzOerXw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/cbf67b-a65a-42a3-8908-07369e14cade/1/IlVxaqH0w8EChxihwzHiKzOerXw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:81:bd:ce:2f:49:a6:de:47:64:4a:f0:cd:07:b7:90:f6:3e:
84:8a:4e:67:70:b2:48:d5:a1:f8:22:72:7f:e0:b9:eb:cb:a8:
53:b3:59:3c:9c:5a:90:7b:78:71:23:64:51:b8:17:cf:71:21:
0f:ff:fc:ba:85:6a:c1:fb:f9:8e:3b:30:7e:c3:b1:4b:08:42:
cf:7c:b5:66:58:1a:f2:4b:97:da:76:ed:23:47:d2:d4:c5:7f:
d1:7d:1a:e4:29:9a:7e:90:74:5d:2a:65:a2:52:37:04:d3:29:
e5:45:8d:4a:e8:6f:16:58:9b:3f:3d:a2:82:2b:88:59:c3:ae:
07:13:29:28:c4:07:4f:4b:52:33:00:f9:79:9d:69:63:62:0e:
b3:29:aa:ff:e1:a0:47:80:5b:ca:8a:5f:2c:94:1a:26:7a:34:
5e:6b:49:90:55:d6:76:12:e9:36:39:43:32:6d:3d:2a:48:30:
c4:fb:6c:7f:77:58:9c:3d:4c:6e:97:a5:c7:6d:0e:e6:83:76:
b9:27:ce:36:16:ec:2c:2d:5f:94:ea:88:56:58:3a:76:71:4e:
41:7f:95:a2:22:0e:07:7e:14:ec:59:ec:16:de:a6:e5:de:2e:
78:a6:2b:a4:2f:d6:d8:a7:b0:90:94:3f:97:c1:af:28:cb:9c:
b5:66:bc:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 21:24:19 2025 by rpki-client