Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/d68dff-95e1-4c90-9ec6-55029280fec1/1/IaqfF_jMpH37krSQLSwrMgPb7aY.mft
File: IaqfF_jMpH37krSQLSwrMgPb7aY.mft (raw, json)
Hash identifier: DoF16HP6Z4TeMkVxjvDuQEUjdKYOGhnNbtrhEMZoqk0=
Subject key identifier: 6F:CC:AC:92:1F:0D:3A:3E:86:5C:57:05:2C:5A:0B:87:35:7A:3C:DE
Authority key identifier: 21:AA:9F:17:F8:CC:A4:7D:FB:92:B4:90:2D:2C:2B:32:03:DB:ED:A6
Certificate issuer: /CN=21aa9f17f8cca47dfb92b4902d2c2b3203dbeda6
Certificate serial: 0198A04E7D36F652D094F70345E231D5D460
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IaqfF_jMpH37krSQLSwrMgPb7aY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/d68dff-95e1-4c90-9ec6-55029280fec1/1/IaqfF_jMpH37krSQLSwrMgPb7aY.mft
Manifest number: 06CA
Signing time: Tue 12 Aug 2025 22:02:35 +0000
Manifest this update: Tue 12 Aug 2025 22:02:35 +0000
Manifest next update: Wed 13 Aug 2025 22:02:35 +0000
Files and hashes: 1: IaqfF_jMpH37krSQLSwrMgPb7aY.crl (hash: rYAaEU8TLSgkHJs5+RugTB6jwZMU1YUKDsVlYm4IrTc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/d68dff-95e1-4c90-9ec6-55029280fec1/1/IaqfF_jMpH37krSQLSwrMgPb7aY.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/d68dff-95e1-4c90-9ec6-55029280fec1/1/IaqfF_jMpH37krSQLSwrMgPb7aY.mft
rsync://rpki.ripe.net/repository/DEFAULT/IaqfF_jMpH37krSQLSwrMgPb7aY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 22:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:a0:4e:7d:36:f6:52:d0:94:f7:03:45:e2:31:d5:d4:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21aa9f17f8cca47dfb92b4902d2c2b3203dbeda6
Validity
Not Before: Aug 12 22:02:35 2025 GMT
Not After : Aug 13 22:02:35 2025 GMT
Subject: CN=6fccac921f0d3a3e865c57052c5a0b87357a3cde
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:10:51:fd:e9:ed:12:bd:f1:73:df:3c:25:2b:
94:8b:45:aa:f0:7e:47:0d:f1:6e:54:1d:5a:47:63:
57:f6:e0:54:f0:d7:9d:42:a2:e8:13:86:dd:79:a4:
fe:f5:83:d4:30:97:77:66:60:cd:9a:0a:23:dc:bc:
0f:ab:71:5a:30:46:ef:9e:f3:d5:be:04:62:5e:c2:
c2:d3:53:1c:c7:60:62:82:f3:f3:33:ba:70:dc:c0:
d1:0b:ab:78:d8:04:7a:3b:9a:44:0f:dd:25:48:72:
23:a8:d3:6f:32:ab:c1:21:be:48:6e:eb:88:96:d4:
e7:4a:d8:4e:29:86:51:8c:6d:4d:09:ef:dd:4a:95:
25:db:52:e7:69:54:2b:8f:3e:bd:23:3d:c5:24:03:
cd:8b:a4:15:ea:71:55:02:3b:55:7f:8b:ec:78:26:
22:87:4c:95:32:25:7c:1e:ff:ca:04:19:a2:f5:a0:
ac:cb:31:f2:8b:29:88:c9:7d:b9:cd:69:70:58:84:
eb:d1:56:4a:0b:53:e3:f5:33:5a:45:15:34:67:70:
db:4d:63:c3:0d:1c:83:8a:e0:09:c2:b4:ff:65:15:
87:56:8b:32:60:71:91:dc:ed:f9:09:76:11:a2:3e:
ef:b5:08:aa:ba:c4:68:fe:5a:6f:77:0e:e8:dc:0e:
c7:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:CC:AC:92:1F:0D:3A:3E:86:5C:57:05:2C:5A:0B:87:35:7A:3C:DE
X509v3 Authority Key Identifier:
keyid:21:AA:9F:17:F8:CC:A4:7D:FB:92:B4:90:2D:2C:2B:32:03:DB:ED:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IaqfF_jMpH37krSQLSwrMgPb7aY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/d68dff-95e1-4c90-9ec6-55029280fec1/1/IaqfF_jMpH37krSQLSwrMgPb7aY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/d68dff-95e1-4c90-9ec6-55029280fec1/1/IaqfF_jMpH37krSQLSwrMgPb7aY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:bc:81:38:33:c8:e6:38:11:50:65:07:a1:73:2a:8c:c7:ad:
79:ac:63:21:81:2d:02:c4:64:59:53:ba:fb:b4:13:1a:38:e6:
2e:58:a6:be:fc:81:39:f0:b7:e4:ff:e0:c3:23:1c:20:08:d5:
6c:6a:7e:d8:9b:36:d6:28:21:d5:da:eb:4f:ff:33:9e:c6:95:
77:4b:36:91:8f:b4:8e:20:1e:ed:cd:75:90:ad:f0:74:90:3c:
64:da:31:7a:3e:9a:a3:17:69:c1:91:33:b2:4b:4c:34:92:27:
05:6c:26:27:a1:30:13:43:a7:dd:7a:bd:92:35:aa:82:ca:4a:
59:27:0d:34:40:ef:45:37:64:f4:06:dc:97:68:c7:71:26:f6:
af:ad:fe:a0:3b:28:0f:78:d4:2b:85:b0:25:4b:2b:a9:a1:8d:
2d:e5:e6:a7:5d:77:1b:f4:35:3d:e7:d9:fd:15:82:83:f9:cf:
4b:61:b8:ff:2d:c5:49:9b:4d:e0:2f:cc:b2:29:d4:c4:5c:3a:
36:0c:c3:53:03:95:47:bc:62:ab:7e:8c:27:3d:51:8a:92:9c:
2c:ef:5d:7c:9f:59:7d:9a:36:aa:a8:2d:70:b4:f1:e0:3d:aa:
c2:47:e7:9e:f9:be:9d:97:77:6d:3c:cc:a0:f6:a1:fb:63:db:
00:20:55:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 05:29:22 2025 by rpki-client