Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/5e43c3-cadf-4374-99aa-4e2f89cae1da/1/1II6TKTXaJe13f55iOJx_2gTGPI.mft
File: 1II6TKTXaJe13f55iOJx_2gTGPI.mft (raw, json)
Hash identifier: AiY0mklehoytl88sCAertzPH6hJ7UQ2i7YX/45xa7cw=
Subject key identifier: 0A:DB:88:A8:76:18:AD:76:F0:E8:DD:30:EC:F4:DB:74:62:E4:93:A8
Authority key identifier: D4:82:3A:4C:A4:D7:68:97:B5:DD:FE:79:88:E2:71:FF:68:13:18:F2
Certificate issuer: /CN=d4823a4ca4d76897b5ddfe7988e271ff681318f2
Certificate serial: 0198D5BC0AACDB97127F89D084762B569E09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1II6TKTXaJe13f55iOJx_2gTGPI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/5e43c3-cadf-4374-99aa-4e2f89cae1da/1/1II6TKTXaJe13f55iOJx_2gTGPI.mft
Manifest number: 132E
Signing time: Sat 23 Aug 2025 07:02:07 +0000
Manifest this update: Sat 23 Aug 2025 07:02:07 +0000
Manifest next update: Sun 24 Aug 2025 07:02:07 +0000
Files and hashes: 1: 1II6TKTXaJe13f55iOJx_2gTGPI.crl (hash: sx83H3z+iJ7H6fGGKuTJqS2NzDBbkL0awCxU2JjofL4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/5e43c3-cadf-4374-99aa-4e2f89cae1da/1/1II6TKTXaJe13f55iOJx_2gTGPI.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/5e43c3-cadf-4374-99aa-4e2f89cae1da/1/1II6TKTXaJe13f55iOJx_2gTGPI.mft
rsync://rpki.ripe.net/repository/DEFAULT/1II6TKTXaJe13f55iOJx_2gTGPI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bc:0a:ac:db:97:12:7f:89:d0:84:76:2b:56:9e:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4823a4ca4d76897b5ddfe7988e271ff681318f2
Validity
Not Before: Aug 23 07:02:07 2025 GMT
Not After : Aug 24 07:02:07 2025 GMT
Subject: CN=0adb88a87618ad76f0e8dd30ecf4db7462e493a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:21:0a:b1:4d:94:0c:72:41:7c:fe:e6:93:4b:
47:44:3c:15:6f:a7:8b:56:7d:4f:1d:af:b8:07:dd:
1d:70:49:7c:6a:f2:23:67:0a:2c:52:4f:b9:94:8a:
3b:00:b0:82:3e:45:0c:5e:ea:c4:a4:fb:96:fe:78:
8c:8c:4b:2d:56:17:d1:c5:ac:2a:b5:d1:67:1b:dd:
0e:16:5d:4c:c3:5b:3d:10:dc:f2:98:9b:e6:e8:81:
42:c3:33:35:51:63:4b:47:dd:45:d6:a4:2a:cf:ab:
a7:b0:bc:41:c2:76:4b:aa:1f:72:00:5f:3f:21:7b:
83:1b:07:e7:01:59:36:78:d4:7d:16:17:71:ae:9e:
08:11:86:73:5c:87:d5:6f:8c:72:43:d4:50:21:41:
11:be:f5:b8:5c:80:1e:07:42:3b:d5:bc:11:a2:17:
d0:93:75:37:c9:c1:3c:9e:18:ba:4a:45:6c:40:c2:
89:dc:29:af:cf:d5:61:14:07:db:c7:e6:53:2f:b9:
c9:a4:98:d1:75:e3:05:93:d3:6a:e4:f6:8e:2f:b5:
7a:b8:37:b4:2e:dc:a6:b3:8a:84:1f:e7:0b:c6:82:
76:df:3e:2a:fc:31:54:3b:9b:6e:c8:03:81:c1:a6:
64:ee:1d:8b:c6:d5:91:d5:5a:17:3f:f9:52:dc:26:
a2:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:DB:88:A8:76:18:AD:76:F0:E8:DD:30:EC:F4:DB:74:62:E4:93:A8
X509v3 Authority Key Identifier:
keyid:D4:82:3A:4C:A4:D7:68:97:B5:DD:FE:79:88:E2:71:FF:68:13:18:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1II6TKTXaJe13f55iOJx_2gTGPI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/5e43c3-cadf-4374-99aa-4e2f89cae1da/1/1II6TKTXaJe13f55iOJx_2gTGPI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/5e43c3-cadf-4374-99aa-4e2f89cae1da/1/1II6TKTXaJe13f55iOJx_2gTGPI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:ac:e0:95:59:e6:1a:f6:21:0a:69:b8:b8:08:a2:43:e1:59:
ff:73:88:9c:4f:12:06:64:8b:ee:de:6d:c0:aa:11:75:0b:9a:
c6:31:d0:1d:95:cf:37:d5:da:e2:6d:e4:04:c8:64:f3:5a:2f:
b8:14:0d:cb:10:34:36:9f:34:54:62:96:30:77:94:e3:f3:5e:
f1:58:57:07:93:ec:3d:17:4f:7e:2e:45:76:30:c1:4c:6b:60:
4d:6f:95:35:ae:33:d8:21:69:13:cf:08:cf:35:a0:83:7f:f5:
97:7d:80:79:c4:66:80:1a:e4:81:f8:41:f8:75:43:53:78:14:
9e:82:6a:22:e9:87:33:04:99:07:f0:ec:b7:14:ad:96:57:00:
b3:8e:a7:19:28:38:b6:67:11:51:56:f9:5c:32:3f:c9:f3:cf:
4f:7e:d7:53:ab:4b:fa:19:79:e1:fd:6e:d2:47:4f:c3:99:28:
c1:50:2e:a6:8c:d9:cb:e3:b6:61:d9:7c:e4:f5:68:75:69:04:
85:e4:f5:b8:f0:e9:94:aa:de:48:9e:4a:f4:f9:54:c1:1a:17:
68:c5:dd:56:c4:5d:41:dd:c5:0f:d0:6c:ab:7f:a9:45:81:c4:
f5:05:59:9e:d3:78:2a:65:f6:c0:e4:45:7d:1b:df:8d:04:76:
5e:9c:50:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:27:07 2025 by rpki-client