Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/38c26f-25a2-4b20-9ecd-0e6bced00463/1/IMnySVGbH_R5NQ8xclT0Bei_yr0.mft
File: IMnySVGbH_R5NQ8xclT0Bei_yr0.mft (raw, json)
Hash identifier: Xi5B7KpLzGkAkEmveQsbU64U+jrYmAU+9DaZpLR9Z3k=
Subject key identifier: B8:10:CE:52:A6:2E:C0:D9:D6:9B:F7:FB:07:05:58:60:4E:41:74:15
Authority key identifier: 20:C9:F2:49:51:9B:1F:F4:79:35:0F:31:72:54:F4:05:E8:BF:CA:BD
Certificate issuer: /CN=20c9f249519b1ff479350f317254f405e8bfcabd
Certificate serial: 019872CFD8959BE17E0389A65A8A2CD77AE5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IMnySVGbH_R5NQ8xclT0Bei_yr0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/38c26f-25a2-4b20-9ecd-0e6bced00463/1/IMnySVGbH_R5NQ8xclT0Bei_yr0.mft
Manifest number: 100C
Signing time: Mon 04 Aug 2025 02:01:20 +0000
Manifest this update: Mon 04 Aug 2025 02:01:20 +0000
Manifest next update: Tue 05 Aug 2025 02:01:20 +0000
Files and hashes: 1: IMnySVGbH_R5NQ8xclT0Bei_yr0.crl (hash: JBXhhXToWpFZuW3w4V+sMTapJQekamA/jtVNcxal6aU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/38c26f-25a2-4b20-9ecd-0e6bced00463/1/IMnySVGbH_R5NQ8xclT0Bei_yr0.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/38c26f-25a2-4b20-9ecd-0e6bced00463/1/IMnySVGbH_R5NQ8xclT0Bei_yr0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IMnySVGbH_R5NQ8xclT0Bei_yr0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 02:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:72:cf:d8:95:9b:e1:7e:03:89:a6:5a:8a:2c:d7:7a:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20c9f249519b1ff479350f317254f405e8bfcabd
Validity
Not Before: Aug 4 02:01:20 2025 GMT
Not After : Aug 5 02:01:20 2025 GMT
Subject: CN=b810ce52a62ec0d9d69bf7fb070558604e417415
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:3a:9d:af:5d:12:c4:32:20:c2:25:8f:9e:d4:
44:fe:f7:a6:e2:3e:1d:4c:c3:c3:19:58:f2:36:7b:
5c:b7:2d:ec:11:ba:23:9f:44:f1:7d:58:13:72:11:
e5:c1:67:07:9f:74:37:d1:bb:db:30:d4:a5:88:d5:
12:c7:48:67:5c:80:0d:b1:d0:8d:b8:a6:95:eb:34:
86:31:b3:29:c4:4c:f2:35:53:ce:b5:59:8a:ac:87:
b5:d8:c3:f3:76:14:a8:aa:54:01:c7:9a:2c:5e:cb:
27:9a:96:f1:ae:73:74:1f:94:6e:17:9d:8c:23:ea:
30:f6:76:ab:e2:a9:c5:fc:87:50:f4:60:19:63:db:
97:b8:4b:87:30:0e:fd:98:7e:cf:85:b6:a8:2a:c7:
ab:98:a4:a9:f2:5a:8b:67:3e:1c:25:ce:01:87:10:
e5:3e:69:7d:c9:f4:d6:ba:f0:1f:68:56:17:80:30:
67:f0:55:fa:b5:ef:24:34:38:d5:a7:a9:2b:b9:65:
b1:2a:69:96:fe:29:ad:ba:03:60:14:05:38:e1:2f:
85:92:cb:7b:6f:1e:38:1a:1b:ad:90:d0:32:44:44:
58:4c:eb:37:ba:6a:7b:3c:7d:1a:cf:79:02:1f:1f:
79:96:68:06:cf:fb:ff:14:a8:90:89:aa:8a:ec:ce:
5a:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:10:CE:52:A6:2E:C0:D9:D6:9B:F7:FB:07:05:58:60:4E:41:74:15
X509v3 Authority Key Identifier:
keyid:20:C9:F2:49:51:9B:1F:F4:79:35:0F:31:72:54:F4:05:E8:BF:CA:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IMnySVGbH_R5NQ8xclT0Bei_yr0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/38c26f-25a2-4b20-9ecd-0e6bced00463/1/IMnySVGbH_R5NQ8xclT0Bei_yr0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/38c26f-25a2-4b20-9ecd-0e6bced00463/1/IMnySVGbH_R5NQ8xclT0Bei_yr0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:97:b8:32:31:90:9e:e5:d4:15:1f:cf:9f:3e:d7:08:b0:f6:
5c:9d:a8:d8:66:bb:f4:41:8a:c8:f5:25:ba:d8:d5:4e:76:ec:
55:d1:17:59:24:64:1f:bf:42:57:af:93:94:c8:aa:92:c8:8e:
1f:64:ca:8e:19:32:62:f8:dc:12:12:2a:f9:96:f4:60:d1:08:
97:88:95:57:2e:de:0f:a2:00:de:49:aa:af:0f:55:26:83:be:
c1:38:f2:08:61:ed:30:5a:60:c4:a3:b2:a4:6c:2a:65:45:f3:
66:20:30:01:93:16:61:28:51:4d:1c:53:cf:10:74:39:57:9f:
57:59:7e:c2:67:d2:5e:fa:e2:74:df:de:fd:c1:09:d6:62:af:
90:e2:69:2d:50:37:9d:52:40:59:f2:67:71:88:35:6d:0f:6c:
bb:27:9a:a1:dc:4d:f7:e1:04:d0:09:b5:e1:4a:84:fe:2a:c3:
eb:0e:69:a3:0e:2a:d3:7f:42:e9:8e:7d:41:ec:c4:d5:15:39:
36:2e:1c:a4:3a:9a:55:63:d2:14:92:08:3c:bc:fb:37:1a:a9:
a3:43:2e:f3:04:0b:14:af:0d:dd:6c:4d:9d:d3:75:3a:5a:d4:
94:99:50:10:d8:d8:de:31:49:7a:3d:bd:d2:f9:ee:bd:32:83:
4a:ba:58:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:22:45 2025 by rpki-client