Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/fa1004-e450-41ec-9d5e-4a1f7c1bdf78/1/IZt8FF4Kz4FIQY1UJH393_wZ-kw.mft
File: IZt8FF4Kz4FIQY1UJH393_wZ-kw.mft (raw, json)
Hash identifier: C7WHCWDR5+7TnLZlo4K5fWkkSA1gYwz+3pbmZIcZweU=
Subject key identifier: 8E:E5:C5:65:88:F9:64:3E:F7:9E:F2:0A:7B:AB:2A:61:2A:53:92:20
Authority key identifier: 21:9B:7C:14:5E:0A:CF:81:48:41:8D:54:24:7D:FD:DF:FC:19:FA:4C
Certificate issuer: /CN=219b7c145e0acf8148418d54247dfddffc19fa4c
Certificate serial: 0198D4A80C088B0B8857A3DF6CDDEC9825C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IZt8FF4Kz4FIQY1UJH393_wZ-kw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/fa1004-e450-41ec-9d5e-4a1f7c1bdf78/1/IZt8FF4Kz4FIQY1UJH393_wZ-kw.mft
Manifest number: 01FC
Signing time: Sat 23 Aug 2025 02:00:39 +0000
Manifest this update: Sat 23 Aug 2025 02:00:39 +0000
Manifest next update: Sun 24 Aug 2025 02:00:39 +0000
Files and hashes: 1: IZt8FF4Kz4FIQY1UJH393_wZ-kw.crl (hash: NGZEsHlBuxHhj6wpaBJMjYwZFjHhZN9J8t4ec/qA9II=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/fa1004-e450-41ec-9d5e-4a1f7c1bdf78/1/IZt8FF4Kz4FIQY1UJH393_wZ-kw.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/fa1004-e450-41ec-9d5e-4a1f7c1bdf78/1/IZt8FF4Kz4FIQY1UJH393_wZ-kw.mft
rsync://rpki.ripe.net/repository/DEFAULT/IZt8FF4Kz4FIQY1UJH393_wZ-kw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:a8:0c:08:8b:0b:88:57:a3:df:6c:dd:ec:98:25:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=219b7c145e0acf8148418d54247dfddffc19fa4c
Validity
Not Before: Aug 23 02:00:39 2025 GMT
Not After : Aug 24 02:00:39 2025 GMT
Subject: CN=8ee5c56588f9643ef79ef20a7bab2a612a539220
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:72:89:26:11:f3:ef:e9:6a:a3:95:36:fc:40:
9f:87:c2:05:3e:68:59:4b:63:01:95:15:f7:65:02:
c3:76:89:99:86:ba:b3:1d:cb:de:d1:d3:e5:0a:b3:
be:8e:02:bf:09:8a:24:5d:49:31:89:77:55:38:99:
f3:14:cd:fa:a4:c2:51:c5:ed:e9:a0:54:d0:32:8f:
ae:a0:96:0a:4b:d9:2a:8a:2d:ff:2d:6e:ef:19:9f:
29:06:1d:e2:56:0c:fd:e9:13:31:b1:b7:a8:82:77:
67:1e:56:1a:53:2c:b4:7e:e1:9e:44:3f:e8:40:c5:
0b:53:45:56:4b:87:40:1c:4b:88:48:89:3c:ce:fc:
98:4e:47:44:44:6e:57:71:01:b9:81:fd:c1:d7:33:
5c:3a:d6:da:1f:a3:57:a9:f7:89:d8:d9:e4:18:5f:
29:46:22:b6:44:50:10:e0:a2:15:db:4f:4a:5c:3e:
06:02:b3:30:5b:bd:3a:68:80:56:aa:2e:dc:6c:04:
00:e8:7a:a6:60:41:31:75:1e:11:5b:ab:b7:47:54:
63:a6:cd:da:b0:ff:9b:7a:9c:ab:cb:e9:2e:21:0f:
f5:6d:7a:24:75:a9:43:40:77:79:4e:51:5f:0e:ed:
6e:05:e1:c7:65:9c:ed:19:50:3e:5b:c7:4d:ad:5b:
1e:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:E5:C5:65:88:F9:64:3E:F7:9E:F2:0A:7B:AB:2A:61:2A:53:92:20
X509v3 Authority Key Identifier:
keyid:21:9B:7C:14:5E:0A:CF:81:48:41:8D:54:24:7D:FD:DF:FC:19:FA:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IZt8FF4Kz4FIQY1UJH393_wZ-kw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/fa1004-e450-41ec-9d5e-4a1f7c1bdf78/1/IZt8FF4Kz4FIQY1UJH393_wZ-kw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/fa1004-e450-41ec-9d5e-4a1f7c1bdf78/1/IZt8FF4Kz4FIQY1UJH393_wZ-kw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:00:a9:09:70:99:62:7c:79:bd:f9:26:17:43:8f:b9:16:cd:
1b:9a:40:0b:0e:fc:34:42:7a:b1:54:85:b2:d7:1d:d3:02:ff:
bb:21:27:ab:e8:a6:38:34:aa:37:3e:6b:96:6a:ad:3f:4d:fb:
a1:ac:53:4a:25:28:75:d1:46:ef:e2:e7:86:86:f1:78:b6:b3:
94:64:00:c1:38:ef:5f:b5:9f:6f:9f:7a:9c:c4:e4:d9:c8:4a:
ae:52:b0:60:c0:fa:af:3d:12:7e:f2:a7:41:80:93:bb:4a:c8:
85:d7:51:95:7b:92:d9:c5:d6:47:ad:0d:0a:58:be:e6:fd:fd:
fb:68:11:55:89:98:83:bd:5f:d5:db:13:b4:4b:2e:15:0b:fa:
04:7d:7a:88:94:61:60:48:31:58:05:10:25:12:97:3d:bc:c7:
b7:b0:fa:8e:60:dc:7e:81:8d:84:b2:70:e6:41:47:9e:0b:b6:
c6:6f:f5:93:65:cf:af:be:c9:f3:72:ef:0e:76:53:72:9b:cf:
fb:5c:22:ee:2f:94:e5:9f:4b:48:b8:6e:78:29:30:0c:6e:f8:
4a:fd:6b:e0:62:50:e1:11:b6:da:01:b6:fc:d8:86:ec:5e:0b:
a1:e2:95:ac:00:4f:65:68:d5:30:a0:88:a9:c1:30:62:68:ee:
5f:c5:a4:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:28:52 2025 by rpki-client