Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/a40bbb-556a-40c5-b97c-32b2be06222c/1/iFeQ87X0pUUjTzIwv4lmOFbge8c.mft
File: iFeQ87X0pUUjTzIwv4lmOFbge8c.mft (raw, json)
Hash identifier: rD00xxs+VvUVXemJ6zolMxVGX96IrMbWcj0x7vY06w8=
Subject key identifier: 72:FC:52:B8:34:70:B1:45:49:2B:41:00:54:74:9B:65:42:22:5C:5A
Authority key identifier: 88:57:90:F3:B5:F4:A5:45:23:4F:32:30:BF:89:66:38:56:E0:7B:C7
Certificate issuer: /CN=885790f3b5f4a545234f3230bf89663856e07bc7
Certificate serial: 0198D6615105F33A9C0E26F2EF08E5340271
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iFeQ87X0pUUjTzIwv4lmOFbge8c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/a40bbb-556a-40c5-b97c-32b2be06222c/1/iFeQ87X0pUUjTzIwv4lmOFbge8c.mft
Manifest number: 1646
Signing time: Sat 23 Aug 2025 10:02:38 +0000
Manifest this update: Sat 23 Aug 2025 10:02:38 +0000
Manifest next update: Sun 24 Aug 2025 10:02:38 +0000
Files and hashes: 1: iFeQ87X0pUUjTzIwv4lmOFbge8c.crl (hash: G5xHNVofo9fVqMvfEpIdBBBrM6v1BIaz08WHmPVl750=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/a40bbb-556a-40c5-b97c-32b2be06222c/1/iFeQ87X0pUUjTzIwv4lmOFbge8c.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/a40bbb-556a-40c5-b97c-32b2be06222c/1/iFeQ87X0pUUjTzIwv4lmOFbge8c.mft
rsync://rpki.ripe.net/repository/DEFAULT/iFeQ87X0pUUjTzIwv4lmOFbge8c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:02:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:61:51:05:f3:3a:9c:0e:26:f2:ef:08:e5:34:02:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=885790f3b5f4a545234f3230bf89663856e07bc7
Validity
Not Before: Aug 23 10:02:38 2025 GMT
Not After : Aug 24 10:02:38 2025 GMT
Subject: CN=72fc52b83470b145492b410054749b6542225c5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:88:17:42:da:7c:0d:a3:9f:33:e3:40:fc:76:
29:28:2d:91:76:56:60:97:d6:d8:25:22:81:0d:d7:
e4:46:96:ff:3c:fb:da:41:bd:28:2f:aa:75:9a:18:
66:a4:42:31:ca:ae:b2:26:6f:e0:80:74:4c:64:76:
c0:57:30:03:8a:07:5f:77:6a:ba:02:84:00:ce:e0:
90:3a:35:84:97:d2:52:d3:47:e3:a3:10:ac:48:1f:
01:5e:67:7d:a9:8c:30:b0:e6:02:bd:06:af:b8:1a:
f3:41:36:d6:ab:56:86:6a:bd:f7:ed:01:f7:a3:11:
c5:d8:2e:5f:24:dc:a9:6a:cf:ed:4b:c2:94:d5:f4:
0b:4c:9e:82:ab:7c:8a:f7:cc:97:9a:0d:42:2e:49:
a0:12:e3:9c:7c:f8:74:71:2f:45:8e:c0:9a:e5:ab:
d3:f4:f1:97:9e:00:e4:ad:d9:a5:95:d0:95:3f:3c:
29:15:38:64:a0:36:85:b8:f7:88:fd:b3:63:4a:40:
c1:37:60:53:4b:35:4e:4b:dd:d2:21:f6:18:0f:0b:
b8:0a:a9:40:25:65:ca:8f:f7:8b:e1:47:99:34:69:
46:90:39:ef:ab:ff:fa:2a:91:5a:33:ca:93:af:b6:
a7:b2:92:1c:9d:10:58:34:d3:16:f1:ad:e2:c2:05:
cd:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:FC:52:B8:34:70:B1:45:49:2B:41:00:54:74:9B:65:42:22:5C:5A
X509v3 Authority Key Identifier:
keyid:88:57:90:F3:B5:F4:A5:45:23:4F:32:30:BF:89:66:38:56:E0:7B:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iFeQ87X0pUUjTzIwv4lmOFbge8c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/a40bbb-556a-40c5-b97c-32b2be06222c/1/iFeQ87X0pUUjTzIwv4lmOFbge8c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/a40bbb-556a-40c5-b97c-32b2be06222c/1/iFeQ87X0pUUjTzIwv4lmOFbge8c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:74:58:e1:c8:81:36:2d:36:d2:df:8a:20:f1:b6:ee:41:4a:
36:74:55:5f:af:14:b5:87:f3:fb:69:88:fd:a9:43:77:28:cb:
90:a9:a8:84:ad:66:23:c7:13:fa:38:f7:5c:7b:53:f2:c2:1d:
bc:d2:7b:29:af:39:aa:a9:90:39:0e:d3:77:b1:00:e4:c8:9f:
c6:bc:6a:bc:77:01:80:fb:3d:cf:b1:42:1c:08:bb:29:18:d4:
22:bf:14:61:ab:68:86:0d:98:55:d5:ac:4c:63:40:41:ea:b8:
fe:ea:de:f9:53:78:5d:51:fa:51:87:4c:ee:49:f3:8c:db:28:
f8:a6:7e:95:ae:91:a0:04:db:a1:b2:e0:61:2d:2f:55:46:7b:
d0:da:b3:4f:de:af:7c:19:80:da:1c:fb:89:36:cc:27:4f:cf:
17:dd:3e:25:71:a6:6c:ea:c3:61:6e:34:93:74:5f:ca:90:90:
7b:1d:ca:ee:9b:1a:3f:02:aa:76:40:2c:24:de:37:d0:52:4d:
01:7b:de:0a:b7:26:1f:6e:b1:fe:68:80:5d:b3:3f:04:67:78:
a1:5e:5a:2d:a5:9c:61:78:18:cc:68:73:43:df:ea:3e:c5:59:
7c:b2:c7:f0:f4:4e:ba:0d:13:0f:63:cd:c3:1f:b2:00:34:29:
61:f5:e8:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 20:03:37 2025 by rpki-client