Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/9a0aa5-5bd3-4e87-9d2f-75e0d479753f/1/I6IOrOflZNlFaAhkd3q-nCu41NY.mft
File: I6IOrOflZNlFaAhkd3q-nCu41NY.mft (raw, json)
Hash identifier: 07PkhJCU0KUcFfSB3YaN9uphtg3LQPUPKbqBkJacIII=
Subject key identifier: 5A:68:23:08:56:89:50:B7:C8:7C:F9:0B:E3:BC:74:EE:65:9F:19:F4
Authority key identifier: 23:A2:0E:AC:E7:E5:64:D9:45:68:08:64:77:7A:BE:9C:2B:B8:D4:D6
Certificate issuer: /CN=23a20eace7e564d945680864777abe9c2bb8d4d6
Certificate serial: 01989335ED64AC9F9AE459F19165BCCAAFA6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I6IOrOflZNlFaAhkd3q-nCu41NY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/9a0aa5-5bd3-4e87-9d2f-75e0d479753f/1/I6IOrOflZNlFaAhkd3q-nCu41NY.mft
Manifest number: 75
Signing time: Sun 10 Aug 2025 09:00:41 +0000
Manifest this update: Sun 10 Aug 2025 09:00:41 +0000
Manifest next update: Mon 11 Aug 2025 09:00:41 +0000
Files and hashes: 1: I6IOrOflZNlFaAhkd3q-nCu41NY.crl (hash: /dGZaS3yIP0bB+jdF5iWyNoDpTDxQgamx7O3DOmR2uA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/9a0aa5-5bd3-4e87-9d2f-75e0d479753f/1/I6IOrOflZNlFaAhkd3q-nCu41NY.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/9a0aa5-5bd3-4e87-9d2f-75e0d479753f/1/I6IOrOflZNlFaAhkd3q-nCu41NY.mft
rsync://rpki.ripe.net/repository/DEFAULT/I6IOrOflZNlFaAhkd3q-nCu41NY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 09:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:93:35:ed:64:ac:9f:9a:e4:59:f1:91:65:bc:ca:af:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23a20eace7e564d945680864777abe9c2bb8d4d6
Validity
Not Before: Aug 10 09:00:41 2025 GMT
Not After : Aug 11 09:00:41 2025 GMT
Subject: CN=5a682308568950b7c87cf90be3bc74ee659f19f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:92:a3:ef:6b:9b:8b:c3:37:ff:b8:21:f6:f0:
52:9d:cf:d3:68:83:8e:85:b0:d5:68:75:55:7d:d6:
46:08:48:df:2d:19:86:56:23:3a:67:7c:14:fd:8e:
9a:97:3b:61:ec:a1:af:fa:8f:c4:2f:3c:a1:df:30:
26:b0:cf:9c:64:20:3c:4b:18:0a:47:76:05:49:a9:
c5:81:f1:8b:bc:39:b9:f5:e5:17:b3:dc:b0:1e:c4:
b9:c5:fc:9d:f7:48:ab:eb:44:83:03:b7:7b:51:0b:
2e:34:c0:a3:c8:d0:70:32:a6:5e:0b:2e:c6:80:ad:
28:5e:69:ca:69:79:f2:d5:07:48:ea:fd:14:25:f3:
01:17:6e:6e:cc:1a:cd:f0:52:57:9f:49:2d:74:87:
fc:41:4f:94:59:7c:7d:26:aa:92:b5:1f:76:a9:f5:
fc:70:79:66:1f:a3:cb:f9:ac:a7:2b:c2:f1:84:16:
cf:f0:19:5a:ea:51:a2:85:f1:d6:12:93:22:8a:b5:
4a:3a:db:b5:7f:ec:b6:7f:a4:78:4a:5c:bd:07:e3:
82:e5:a1:e3:7d:cf:cb:95:7a:28:30:15:a8:83:51:
95:14:42:0e:59:42:ed:59:98:d1:92:58:51:0b:43:
4e:ac:44:3c:23:36:75:f4:e1:5e:cd:b2:ed:35:37:
c4:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:68:23:08:56:89:50:B7:C8:7C:F9:0B:E3:BC:74:EE:65:9F:19:F4
X509v3 Authority Key Identifier:
keyid:23:A2:0E:AC:E7:E5:64:D9:45:68:08:64:77:7A:BE:9C:2B:B8:D4:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I6IOrOflZNlFaAhkd3q-nCu41NY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/9a0aa5-5bd3-4e87-9d2f-75e0d479753f/1/I6IOrOflZNlFaAhkd3q-nCu41NY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/9a0aa5-5bd3-4e87-9d2f-75e0d479753f/1/I6IOrOflZNlFaAhkd3q-nCu41NY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:5a:4e:86:a6:b9:02:5c:3b:f0:9e:a9:a6:10:77:59:8c:13:
be:5d:45:d3:6c:96:12:5f:c7:b6:1b:12:75:14:22:85:06:1a:
be:57:93:63:ae:bd:31:46:19:00:ce:6d:ee:ac:5c:25:6a:bd:
0a:59:bc:d8:02:76:5e:eb:24:73:c4:c5:13:fb:4d:b7:e5:88:
d7:05:3c:cc:c2:1c:ec:03:34:a9:ff:8d:d2:4b:ee:53:e6:6e:
fa:76:ea:e0:8c:35:42:a0:19:fd:c0:c5:05:a8:bb:72:c7:6f:
45:93:44:96:2f:4b:11:b6:b7:11:61:48:dd:0a:cd:fe:ce:f5:
0c:cf:1e:dd:48:e5:01:8b:c2:a8:55:a6:96:07:2b:08:a0:33:
ea:47:4a:02:75:5c:41:73:f2:71:06:d2:6c:48:2b:f6:b5:9e:
d5:ff:25:0c:26:27:4c:4e:02:04:58:ed:1d:46:3b:54:d0:90:
e7:97:b3:b2:9b:ce:33:07:75:2c:33:17:b5:01:75:44:1d:39:
00:5f:47:67:d0:13:2b:fa:4f:2c:9e:69:a1:a6:7f:dd:b8:ad:
4d:97:3a:3f:a1:a6:ae:60:27:7d:ec:1b:f1:ce:bf:45:10:16:
28:ea:53:fd:30:ab:a5:65:bc:41:8e:20:64:99:29:ad:ec:4f:
b1:95:45:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 18:10:47 2025 by rpki-client