Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/81b00a-f68d-44f4-8825-982736b45bdf/1/iMaZNJivBRiWLl9I1chG3BddGIQ.mft
File: iMaZNJivBRiWLl9I1chG3BddGIQ.mft (raw, json)
Hash identifier: SaqZ0+Q6a8linDGAUXs9BOjQWZoQY7abOMaxk3YOFFw=
Subject key identifier: F5:E7:69:01:04:FA:E2:1F:17:B0:28:B8:40:DD:D6:1D:95:74:68:CC
Authority key identifier: 88:C6:99:34:98:AF:05:18:96:2E:5F:48:D5:C8:46:DC:17:5D:18:84
Certificate issuer: /CN=88c6993498af0518962e5f48d5c846dc175d1884
Certificate serial: 01976DAB6D6C1EFE5EE9EB794E95725EA690
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iMaZNJivBRiWLl9I1chG3BddGIQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/81b00a-f68d-44f4-8825-982736b45bdf/1/iMaZNJivBRiWLl9I1chG3BddGIQ.mft
Manifest number: 158D
Signing time: Sat 14 Jun 2025 09:00:40 +0000
Manifest this update: Sat 14 Jun 2025 09:00:40 +0000
Manifest next update: Sun 15 Jun 2025 09:00:40 +0000
Files and hashes: 1: iMaZNJivBRiWLl9I1chG3BddGIQ.crl (hash: SEl+U7325TG1yV+9j82M1SG0TTtMJ579J0kkPHWBpOc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/81b00a-f68d-44f4-8825-982736b45bdf/1/iMaZNJivBRiWLl9I1chG3BddGIQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/81b00a-f68d-44f4-8825-982736b45bdf/1/iMaZNJivBRiWLl9I1chG3BddGIQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/iMaZNJivBRiWLl9I1chG3BddGIQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:ab:6d:6c:1e:fe:5e:e9:eb:79:4e:95:72:5e:a6:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88c6993498af0518962e5f48d5c846dc175d1884
Validity
Not Before: Jun 14 09:00:40 2025 GMT
Not After : Jun 15 09:00:40 2025 GMT
Subject: CN=f5e7690104fae21f17b028b840ddd61d957468cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:2f:a3:f1:57:7a:a0:a2:27:48:93:2a:86:17:
1c:78:8b:dd:45:16:b8:5f:f4:76:29:39:cf:58:8d:
15:88:60:3a:0b:f6:fc:d1:15:d5:91:a3:10:bb:9e:
e5:a7:f9:b7:7e:e3:45:94:6b:25:18:4b:ec:83:0b:
5d:e9:93:c1:3a:8e:8f:9c:2b:0c:94:bf:0b:e8:b9:
d1:3a:a1:08:7a:bd:9a:3e:bb:b0:49:19:51:6e:08:
98:59:bc:8b:8c:08:30:fa:59:f6:07:a2:59:e6:67:
09:f3:30:fa:cd:f6:65:d0:8b:24:3e:a6:0f:db:66:
53:cd:45:34:6e:5f:55:f4:67:ed:9d:94:6b:79:fa:
87:79:ad:29:20:cc:8c:10:fd:07:04:ac:c4:b3:72:
bb:37:0b:e3:ea:2a:72:ef:6b:4e:dd:77:b3:c7:be:
90:77:30:fc:4d:d7:de:fa:75:34:a4:66:8f:95:c4:
7a:b8:04:e5:3d:58:19:f1:9a:a8:ca:35:13:38:f5:
a4:5d:9c:41:33:be:a3:b4:11:9f:04:0f:fd:5b:42:
d9:74:4d:d0:89:cb:c1:41:8c:2c:26:ed:c9:f7:9e:
16:b8:76:23:23:af:60:a9:7b:7c:b4:1b:05:9e:f2:
59:de:9e:a4:54:92:e3:19:e5:6f:9c:62:c4:cf:00:
ce:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:E7:69:01:04:FA:E2:1F:17:B0:28:B8:40:DD:D6:1D:95:74:68:CC
X509v3 Authority Key Identifier:
keyid:88:C6:99:34:98:AF:05:18:96:2E:5F:48:D5:C8:46:DC:17:5D:18:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iMaZNJivBRiWLl9I1chG3BddGIQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/81b00a-f68d-44f4-8825-982736b45bdf/1/iMaZNJivBRiWLl9I1chG3BddGIQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/81b00a-f68d-44f4-8825-982736b45bdf/1/iMaZNJivBRiWLl9I1chG3BddGIQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:bc:86:57:0d:20:4a:91:eb:45:d1:56:22:e0:d5:6f:d1:44:
99:a2:17:3f:65:78:dc:9c:8a:d0:9a:89:f2:dc:40:16:a8:9f:
b7:22:9d:36:6e:1f:f6:0e:b6:72:a3:76:ab:7c:40:e8:a9:c3:
5e:92:99:18:83:62:8d:61:a7:e3:b0:e1:d8:3e:ee:a5:b6:0c:
56:90:40:88:a7:ac:df:23:b7:48:83:44:35:b3:1a:54:85:ad:
73:88:af:8d:a8:b6:99:dc:e8:40:f0:9b:eb:56:20:87:c3:ee:
b3:a4:6b:95:8e:89:2e:d0:cd:66:42:93:b1:fa:c2:ed:2a:5e:
57:2c:b7:cc:d7:d2:6c:58:5d:6a:e1:4a:5d:2b:53:4e:c8:c3:
09:d1:10:27:41:d2:b1:ea:c3:45:09:e4:e5:09:73:40:2f:d0:
0d:08:ed:07:0b:69:e0:13:f7:45:5f:27:46:c0:1d:35:a5:a0:
a6:95:78:56:f4:3e:54:75:ed:c0:4a:c9:17:50:28:71:9b:54:
c5:aa:78:68:e5:0c:26:e9:39:37:c3:92:1e:5b:c7:f2:3d:f6:
c0:d2:b2:24:16:b9:e2:ad:b7:7a:47:53:f1:71:92:8a:9b:cb:
68:ed:d2:31:00:24:e7:18:0a:5b:69:4e:b0:a3:ba:c3:da:24:
3c:f6:d3:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 11:56:26 2025 by rpki-client