
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/469a73-2cf3-4687-acc6-102c4ba8cc4b/1/1IdkFNyZXRTt46AaMjtiuQb4PFc.mft
File: 1IdkFNyZXRTt46AaMjtiuQb4PFc.mft (raw, json)
Hash identifier: YmTjtjCF3x3chHclk0q7xnJNMnPDX7/4R9a7pOvZAgs=
Subject key identifier: 5E:10:F9:9D:8F:7F:B8:4D:4D:3F:43:65:1E:B7:9B:FC:0D:71:97:E6
Authority key identifier: D4:87:64:14:DC:99:5D:14:ED:E3:A0:1A:32:3B:62:B9:06:F8:3C:57
Certificate issuer: /CN=d4876414dc995d14ede3a01a323b62b906f83c57
Certificate serial: 0198D515BB904A7843ADF7AE99F971C0D25E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1IdkFNyZXRTt46AaMjtiuQb4PFc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/469a73-2cf3-4687-acc6-102c4ba8cc4b/1/1IdkFNyZXRTt46AaMjtiuQb4PFc.mft
Manifest number: 05D0
Signing time: Sat 23 Aug 2025 04:00:27 +0000
Manifest this update: Sat 23 Aug 2025 04:00:27 +0000
Manifest next update: Sun 24 Aug 2025 04:00:27 +0000
Files and hashes: 1: 1IdkFNyZXRTt46AaMjtiuQb4PFc.crl (hash: qWexFGwudK5Z9dEibotUoXGd8fXUwymw/r3XNQjhZU8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/469a73-2cf3-4687-acc6-102c4ba8cc4b/1/1IdkFNyZXRTt46AaMjtiuQb4PFc.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/469a73-2cf3-4687-acc6-102c4ba8cc4b/1/1IdkFNyZXRTt46AaMjtiuQb4PFc.mft
rsync://rpki.ripe.net/repository/DEFAULT/1IdkFNyZXRTt46AaMjtiuQb4PFc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 04:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:15:bb:90:4a:78:43:ad:f7:ae:99:f9:71:c0:d2:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4876414dc995d14ede3a01a323b62b906f83c57
Validity
Not Before: Aug 23 04:00:27 2025 GMT
Not After : Aug 24 04:00:27 2025 GMT
Subject: CN=5e10f99d8f7fb84d4d3f43651eb79bfc0d7197e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:09:52:47:34:94:90:7f:69:81:8a:85:3d:49:
9a:2d:98:01:99:d8:ec:ab:f2:67:37:3a:01:de:98:
05:f2:d6:58:1c:7e:86:05:c8:f5:e7:0b:47:67:6c:
4d:bb:df:42:1a:37:4e:88:cd:61:27:b7:c9:ac:b2:
ff:af:e2:1b:87:be:11:09:52:29:a3:b5:42:1f:7b:
eb:98:d8:44:7d:60:c3:4e:c2:1e:75:d3:a9:07:ed:
cc:74:19:e9:10:50:82:ba:ab:da:4c:15:d8:46:78:
da:db:d4:e5:98:11:89:c9:f9:c4:ae:7b:f4:fb:f6:
94:52:9a:3c:07:a8:bf:a5:01:e3:1d:f0:7b:67:66:
d5:f3:5e:93:14:d3:a1:d5:69:83:08:21:05:74:00:
84:eb:3d:18:98:1d:bb:26:f6:2d:ef:9b:8e:b7:35:
6f:58:26:9e:95:0f:6c:cf:da:c2:9d:a1:c5:b0:be:
8c:af:08:2f:58:7f:bf:f8:3c:5d:4d:ca:42:39:19:
cd:b2:c6:67:eb:b4:46:4e:35:5e:27:48:ef:b5:b1:
17:9e:3e:aa:44:7c:65:87:7f:29:79:6f:ed:93:52:
4e:f0:c7:93:90:df:3e:43:cd:15:1c:50:21:16:2c:
53:09:c3:df:30:f7:b1:96:c7:f1:da:86:47:f3:63:
67:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:10:F9:9D:8F:7F:B8:4D:4D:3F:43:65:1E:B7:9B:FC:0D:71:97:E6
X509v3 Authority Key Identifier:
keyid:D4:87:64:14:DC:99:5D:14:ED:E3:A0:1A:32:3B:62:B9:06:F8:3C:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1IdkFNyZXRTt46AaMjtiuQb4PFc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/469a73-2cf3-4687-acc6-102c4ba8cc4b/1/1IdkFNyZXRTt46AaMjtiuQb4PFc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/469a73-2cf3-4687-acc6-102c4ba8cc4b/1/1IdkFNyZXRTt46AaMjtiuQb4PFc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:19:d2:28:27:ff:c3:91:a5:de:b1:6c:64:a7:73:68:1e:0b:
16:d4:15:18:71:f3:e0:9e:63:57:f4:b4:2f:19:5f:7f:be:60:
d4:90:c3:c7:b5:09:70:30:44:85:d8:8c:a6:06:2c:9d:77:ca:
a5:e1:ab:12:46:35:fe:c2:fc:1a:e9:59:9b:c7:dc:9c:59:a5:
bf:9d:56:e7:b9:36:8c:de:43:47:07:ca:5a:61:ce:da:5a:ce:
92:fe:fa:c2:98:b3:9b:90:0f:91:71:65:72:dd:eb:13:91:86:
3e:18:de:af:af:7c:81:b5:18:eb:98:7c:d4:ae:c2:0b:db:ca:
5d:c2:f7:b9:80:af:77:bb:f7:af:2c:b2:41:e9:92:b9:59:fc:
60:da:44:68:a3:a8:f0:e9:c0:de:e7:33:ee:f1:9f:50:9a:57:
7f:e3:8f:2b:d4:e3:f4:33:d5:fb:ce:75:ac:8f:f8:e5:04:be:
8b:13:ca:03:94:ac:aa:34:e5:9a:14:45:ef:99:e4:2c:ec:24:
bd:42:14:7c:3a:e9:d7:d7:02:d4:cb:82:53:57:57:ea:3f:66:
c5:0f:b2:42:1c:98:8b:3d:36:6b:0c:09:6e:3b:67:13:5c:f3:
e8:a5:2f:f0:c3:26:b5:7d:81:48:83:b2:c4:0a:c0:69:9b:68:
97:2d:b2:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:00:46 2025 by rpki-client