Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/93e301-62f8-49f1-a0f7-7ed6ef73ff6d/1/i2nPHqZfCOKQoEFSd-ZeyVt4DXc.mft
File: i2nPHqZfCOKQoEFSd-ZeyVt4DXc.mft (raw, json)
Hash identifier: 9JGVAi3u1tloem81LPmxjK4RIL3Jji9c5P7xEk0BU+Q=
Subject key identifier: 13:03:62:F1:05:40:B3:66:49:42:AC:A4:D1:94:5F:B2:58:36:46:9A
Authority key identifier: 8B:69:CF:1E:A6:5F:08:E2:90:A0:41:52:77:E6:5E:C9:5B:78:0D:77
Certificate issuer: /CN=8b69cf1ea65f08e290a0415277e65ec95b780d77
Certificate serial: 019873E1C1AAD5E2C449850A8B2BC4370FBC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2nPHqZfCOKQoEFSd-ZeyVt4DXc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/93e301-62f8-49f1-a0f7-7ed6ef73ff6d/1/i2nPHqZfCOKQoEFSd-ZeyVt4DXc.mft
Manifest number: 0D4D
Signing time: Mon 04 Aug 2025 07:00:31 +0000
Manifest this update: Mon 04 Aug 2025 07:00:31 +0000
Manifest next update: Tue 05 Aug 2025 07:00:31 +0000
Files and hashes: 1: i2nPHqZfCOKQoEFSd-ZeyVt4DXc.crl (hash: v0CQurIlmL3at57yodXPNPqUnejvrtZsk8O8cdgnrpY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/93e301-62f8-49f1-a0f7-7ed6ef73ff6d/1/i2nPHqZfCOKQoEFSd-ZeyVt4DXc.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/93e301-62f8-49f1-a0f7-7ed6ef73ff6d/1/i2nPHqZfCOKQoEFSd-ZeyVt4DXc.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2nPHqZfCOKQoEFSd-ZeyVt4DXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e1:c1:aa:d5:e2:c4:49:85:0a:8b:2b:c4:37:0f:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b69cf1ea65f08e290a0415277e65ec95b780d77
Validity
Not Before: Aug 4 07:00:31 2025 GMT
Not After : Aug 5 07:00:31 2025 GMT
Subject: CN=130362f10540b3664942aca4d1945fb25836469a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:2e:ad:b0:c2:8c:9d:37:76:3d:0d:e4:eb:10:
be:3d:83:fa:8a:c5:12:a6:25:58:ff:ed:c7:49:a1:
78:d4:9c:91:5c:82:8a:30:60:9f:b0:4f:3c:ed:be:
a9:80:c9:b2:7e:c1:7b:16:80:6d:da:a2:14:b2:c7:
8a:8c:d7:f5:38:b5:d9:6a:8f:c2:b2:74:93:3d:fc:
fd:51:74:6e:e5:ef:ba:01:0a:6a:27:c1:9e:41:c3:
9a:73:ec:53:99:f3:eb:6a:f8:c6:40:4d:24:11:a2:
73:d0:82:ed:c4:d1:40:a9:9a:d8:c1:06:de:83:06:
62:07:fe:34:95:d2:50:9c:23:0b:4b:89:5d:69:7a:
35:f9:51:d5:f4:27:af:d7:5f:cd:11:c2:44:47:dc:
b3:88:84:ef:17:e5:00:f9:24:86:61:f8:e2:93:ad:
be:b4:17:30:af:b4:93:4f:f1:d8:c1:36:87:fe:59:
5d:48:12:32:66:37:c3:e1:e9:d3:91:71:6d:4b:a6:
72:61:63:90:21:71:5d:d5:f9:f1:01:3f:78:d6:1a:
63:bc:93:a3:30:81:33:79:12:39:d4:56:b7:32:51:
f8:09:e1:9f:98:6a:6d:7a:b5:00:30:e9:fa:88:b8:
9f:74:41:5f:8b:03:6c:55:5e:47:85:b4:49:9b:e8:
e3:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:03:62:F1:05:40:B3:66:49:42:AC:A4:D1:94:5F:B2:58:36:46:9A
X509v3 Authority Key Identifier:
keyid:8B:69:CF:1E:A6:5F:08:E2:90:A0:41:52:77:E6:5E:C9:5B:78:0D:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2nPHqZfCOKQoEFSd-ZeyVt4DXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/93e301-62f8-49f1-a0f7-7ed6ef73ff6d/1/i2nPHqZfCOKQoEFSd-ZeyVt4DXc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/93e301-62f8-49f1-a0f7-7ed6ef73ff6d/1/i2nPHqZfCOKQoEFSd-ZeyVt4DXc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:85:7b:01:b3:0f:9b:d2:70:27:e4:53:7e:b9:50:c9:d2:ff:
1d:79:ab:fe:c7:08:9f:02:13:06:82:37:dd:6f:32:e4:a5:40:
35:a8:e6:7b:6a:07:4d:cd:7c:be:10:5b:24:f0:91:09:52:31:
2f:5b:1a:66:33:21:49:60:70:ef:b0:b1:2a:2a:fb:86:e3:05:
4b:ff:16:84:94:ad:85:eb:b9:10:0c:f2:25:8c:c6:e3:d8:04:
02:60:66:0d:84:6e:07:a0:17:04:fa:06:4e:61:f2:b8:98:2d:
0c:e0:22:aa:90:df:66:cc:ac:53:d6:fd:39:1f:a3:b4:f1:f7:
92:d7:47:13:e2:0b:b8:6b:4f:e5:63:2f:51:82:3c:49:d1:6a:
2d:16:64:87:2c:f7:5a:63:cf:5a:ae:c7:28:fd:00:3d:a4:16:
f9:a3:d7:a0:8f:5d:c0:7d:1e:e8:f7:e0:c2:01:10:79:10:03:
31:39:d7:3b:e0:73:e3:9e:b8:c9:44:ba:ce:9c:81:3e:04:dc:
51:68:84:91:24:ac:db:d1:03:ea:76:88:24:ff:6e:4f:03:de:
28:a4:4d:4f:eb:25:46:e1:67:94:ec:0e:af:fc:e8:23:4a:c0:
ba:d7:1e:52:62:61:62:e3:39:97:59:61:78:fe:0c:a1:04:cc:
60:b9:80:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:08:40 2025 by rpki-client