Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/6efd9c-64c3-42b6-92fd-ab7881b0df2b/1/INaBg9YBj1BMXm-uIo4bNQxvD-8.mft
File: INaBg9YBj1BMXm-uIo4bNQxvD-8.mft (raw, json)
Hash identifier: cYLDsaR/eIHDrHGA1G64SHRfu/xAG32jvPci0/I+068=
Subject key identifier: B5:17:4D:8D:F2:9D:8F:C5:E4:58:8B:C2:FE:59:77:81:35:5B:31:9B
Authority key identifier: 20:D6:81:83:D6:01:8F:50:4C:5E:6F:AE:22:8E:1B:35:0C:6F:0F:EF
Certificate issuer: /CN=20d68183d6018f504c5e6fae228e1b350c6f0fef
Certificate serial: 0198D5833B7287A9377441501C75DB1B934C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/INaBg9YBj1BMXm-uIo4bNQxvD-8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/6efd9c-64c3-42b6-92fd-ab7881b0df2b/1/INaBg9YBj1BMXm-uIo4bNQxvD-8.mft
Manifest number: 043D
Signing time: Sat 23 Aug 2025 06:00:04 +0000
Manifest this update: Sat 23 Aug 2025 06:00:04 +0000
Manifest next update: Sun 24 Aug 2025 06:00:04 +0000
Files and hashes: 1: INaBg9YBj1BMXm-uIo4bNQxvD-8.crl (hash: YaNga7sv3zL0Sj0hsrChRQS09AZDLS0LHB/5b9e8z70=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/6efd9c-64c3-42b6-92fd-ab7881b0df2b/1/INaBg9YBj1BMXm-uIo4bNQxvD-8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/6efd9c-64c3-42b6-92fd-ab7881b0df2b/1/INaBg9YBj1BMXm-uIo4bNQxvD-8.mft
rsync://rpki.ripe.net/repository/DEFAULT/INaBg9YBj1BMXm-uIo4bNQxvD-8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:3b:72:87:a9:37:74:41:50:1c:75:db:1b:93:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20d68183d6018f504c5e6fae228e1b350c6f0fef
Validity
Not Before: Aug 23 06:00:04 2025 GMT
Not After : Aug 24 06:00:04 2025 GMT
Subject: CN=b5174d8df29d8fc5e4588bc2fe597781355b319b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:98:cb:76:2c:cc:f6:2c:f9:60:d6:71:95:47:
27:17:81:8c:9b:be:7a:43:ad:3f:f8:65:5d:48:61:
cf:98:f0:e1:b2:59:a3:52:60:38:5b:24:d6:c9:3e:
ab:22:0b:4e:af:d9:93:43:ca:30:9d:0a:82:93:41:
d3:74:b6:20:95:53:1d:da:b0:c6:a3:55:fe:f7:1c:
7e:a9:c8:ed:c6:71:bc:a8:3d:c3:b6:1d:8c:1b:24:
6f:bb:c3:fc:d0:e7:9f:55:91:7f:bc:db:44:d3:6a:
dc:2f:70:23:5b:4a:0e:30:3f:e1:9a:88:51:45:55:
fb:a4:dd:4e:ae:44:5e:19:b1:af:88:2d:0b:af:29:
56:5f:15:e4:1a:77:36:58:fb:e4:57:58:3c:ca:d9:
63:a6:10:21:f3:9e:00:1e:68:ce:84:14:66:fc:41:
da:46:2c:de:3a:10:ff:65:56:1a:b7:35:21:3f:9e:
77:a3:60:f8:b3:fc:57:79:10:ed:09:fa:b9:f8:2c:
14:e0:23:7f:60:0d:74:ab:9c:62:9e:b3:a5:5c:8b:
f3:20:34:03:45:79:9e:47:dc:0b:8c:52:f6:6d:c8:
f2:77:4a:ff:a7:05:04:bb:88:86:05:fc:fe:6d:f8:
9c:11:e5:e6:fb:5d:79:f1:b3:ee:23:21:f9:6a:a2:
19:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:17:4D:8D:F2:9D:8F:C5:E4:58:8B:C2:FE:59:77:81:35:5B:31:9B
X509v3 Authority Key Identifier:
keyid:20:D6:81:83:D6:01:8F:50:4C:5E:6F:AE:22:8E:1B:35:0C:6F:0F:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/INaBg9YBj1BMXm-uIo4bNQxvD-8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/6efd9c-64c3-42b6-92fd-ab7881b0df2b/1/INaBg9YBj1BMXm-uIo4bNQxvD-8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/6efd9c-64c3-42b6-92fd-ab7881b0df2b/1/INaBg9YBj1BMXm-uIo4bNQxvD-8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:f2:bb:1e:f9:bc:2a:86:14:dd:99:ed:4f:3b:10:06:1c:13:
c2:6c:27:58:f7:50:b2:f4:82:ca:e6:cb:91:5f:d7:d7:d9:7f:
72:aa:5b:89:31:72:7d:b4:ea:b9:9b:7f:17:33:dc:f3:14:d4:
b8:fc:1f:7a:b9:9d:67:a0:0d:0a:f9:1e:1c:51:bb:51:aa:f6:
c6:82:e7:f5:a5:1e:41:e9:c3:05:e6:96:73:43:e5:e4:cd:58:
33:96:1f:57:4f:ff:8b:ac:6a:f2:c9:f3:c2:a3:21:54:00:37:
53:27:57:c2:87:cb:dc:2a:57:f6:de:d5:94:50:62:f8:c0:2b:
cf:d3:95:f2:2a:3c:e7:58:b6:2e:98:1d:da:c8:05:88:cc:c0:
b0:23:0c:ec:82:49:c0:8b:ed:db:15:2e:e2:ff:bc:f1:ab:31:
f6:eb:ba:4a:60:57:b9:f8:f4:f7:a9:df:71:96:29:77:7f:2e:
40:5f:ed:2b:85:aa:a1:95:e8:2f:ce:6f:73:9f:0d:95:9c:6c:
4e:b2:03:71:db:1a:54:77:69:41:59:bb:7d:08:2c:63:94:b1:
25:87:2c:da:8e:6f:6b:03:0b:40:ab:5a:f7:65:62:06:af:1b:
8d:b8:10:64:da:af:9a:ea:0a:db:e3:c4:09:19:c5:f9:03:10:
ac:d2:e1:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:13:37 2025 by rpki-client