Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/2052f3-2be1-417a-a416-dfbd5b5ea760/1/I-_rMup5TJRQkgia5cE1AvdxbN4.mft
File: I-_rMup5TJRQkgia5cE1AvdxbN4.mft (raw, json)
Hash identifier: xu2qoiuln92sQrOnVnT50j2JhRoWvFtsSKJIK+7L2TA=
Subject key identifier: 57:4B:A2:27:CA:8B:71:E0:AC:FE:5C:F6:99:2B:35:58:39:85:60:04
Authority key identifier: 23:EF:EB:32:EA:79:4C:94:50:92:08:9A:E5:C1:35:02:F7:71:6C:DE
Certificate issuer: /CN=23efeb32ea794c945092089ae5c13502f7716cde
Certificate serial: 01989F03CC4750E74F88E61C877596DBE7FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I-_rMup5TJRQkgia5cE1AvdxbN4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/2052f3-2be1-417a-a416-dfbd5b5ea760/1/I-_rMup5TJRQkgia5cE1AvdxbN4.mft
Manifest number: 162A
Signing time: Tue 12 Aug 2025 16:01:22 +0000
Manifest this update: Tue 12 Aug 2025 16:01:22 +0000
Manifest next update: Wed 13 Aug 2025 16:01:22 +0000
Files and hashes: 1: I-_rMup5TJRQkgia5cE1AvdxbN4.crl (hash: ljOY+heHBW/Xyq9xkMWcFVsvHXtujT3GeZf4XXHwfRc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/2052f3-2be1-417a-a416-dfbd5b5ea760/1/I-_rMup5TJRQkgia5cE1AvdxbN4.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/2052f3-2be1-417a-a416-dfbd5b5ea760/1/I-_rMup5TJRQkgia5cE1AvdxbN4.mft
rsync://rpki.ripe.net/repository/DEFAULT/I-_rMup5TJRQkgia5cE1AvdxbN4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 16:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:9f:03:cc:47:50:e7:4f:88:e6:1c:87:75:96:db:e7:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23efeb32ea794c945092089ae5c13502f7716cde
Validity
Not Before: Aug 12 16:01:22 2025 GMT
Not After : Aug 13 16:01:22 2025 GMT
Subject: CN=574ba227ca8b71e0acfe5cf6992b355839856004
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:fd:16:4a:f9:d0:b5:ea:c3:31:8e:db:c2:5c:
ff:f1:32:e3:ad:33:96:3c:de:45:52:25:3c:96:e1:
70:ab:ad:98:6c:5d:4b:ee:5c:40:2f:8d:bc:ab:a4:
a3:82:09:05:25:39:50:30:cc:c6:07:75:66:f9:8f:
e5:07:4f:43:84:13:e0:29:f7:d6:dd:19:d6:47:60:
97:db:54:a5:b3:97:2d:67:13:23:15:87:7d:2b:77:
d6:e8:7a:ab:65:ff:00:5b:ff:1d:96:0b:05:a3:49:
4d:33:18:19:21:28:15:c8:38:f8:b1:b7:e6:7b:a4:
fd:fa:b1:93:3a:34:8c:e2:7d:9e:80:6c:76:b0:0f:
72:4a:5a:50:d1:aa:9e:d6:9e:ce:b0:3c:e0:2f:88:
de:b6:64:c7:be:a7:f0:c7:d7:ad:c7:ce:19:db:35:
11:a6:39:e0:ea:d7:16:70:3a:5c:ff:79:b0:79:e9:
56:bb:2d:22:e7:1d:1a:95:fa:74:d3:13:81:4e:46:
18:a9:12:94:59:b2:d6:31:71:16:5d:0a:77:88:d4:
3a:47:b4:7c:80:dd:66:83:20:70:6e:37:3f:08:5b:
79:fc:2e:82:ad:a5:b4:d0:14:7e:92:92:e0:4f:d6:
02:9c:c4:4f:8f:f7:4c:e8:6a:8b:0a:c6:8d:8a:3d:
c5:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:4B:A2:27:CA:8B:71:E0:AC:FE:5C:F6:99:2B:35:58:39:85:60:04
X509v3 Authority Key Identifier:
keyid:23:EF:EB:32:EA:79:4C:94:50:92:08:9A:E5:C1:35:02:F7:71:6C:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I-_rMup5TJRQkgia5cE1AvdxbN4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/2052f3-2be1-417a-a416-dfbd5b5ea760/1/I-_rMup5TJRQkgia5cE1AvdxbN4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/2052f3-2be1-417a-a416-dfbd5b5ea760/1/I-_rMup5TJRQkgia5cE1AvdxbN4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:26:0f:61:b8:7d:02:1f:66:c9:e5:db:de:20:5d:31:e1:2a:
19:83:69:f9:27:20:cc:0d:ce:aa:fd:8e:2e:01:67:f6:65:12:
54:74:8a:68:dc:39:2a:36:e8:b1:91:98:88:d3:ba:82:7a:35:
ea:c8:c8:00:48:eb:48:a7:12:05:e6:cd:41:cb:ef:22:b6:32:
fa:b9:d7:67:5a:89:26:7b:1c:43:7a:95:b3:b9:71:44:79:94:
ea:12:bf:88:14:33:84:66:2c:a4:3d:ce:97:64:a2:42:04:97:
51:b9:1d:b7:0e:be:c3:94:fb:2f:e6:44:28:40:42:46:20:f0:
bd:d7:6a:d4:22:7b:ee:21:87:c3:f3:f6:a2:33:e1:f5:85:74:
23:bc:1d:b4:4d:e8:97:b3:8a:ef:80:98:18:a6:94:b4:fd:f4:
e5:ab:50:52:b6:2c:c4:e4:2d:f0:b5:03:31:ef:3f:66:1a:d3:
12:c9:7e:8d:0d:7c:aa:45:69:4a:5e:91:ea:39:aa:9e:b9:f3:
5a:84:6a:89:a9:25:39:ad:00:5a:6c:fa:fc:e1:5c:0a:f5:04:
df:5c:c5:9c:f5:a9:22:b3:b4:37:5a:3c:26:03:3a:a5:7a:7e:
3f:e5:ac:57:22:6a:2a:ac:ae:b2:75:b5:1b:78:c7:33:69:69:
e6:90:dc:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 02:16:37 2025 by rpki-client