Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/c025e5-399a-4ce8-b5f0-acbef018d03a/1/IIP4tbYgnefJQAjzM3vjQ2866-Y.mft
File: IIP4tbYgnefJQAjzM3vjQ2866-Y.mft (raw, json)
Hash identifier: erk69XzyH3mlNwAhdGE0L62UeCZL4YD7kkgFUEMspbo=
Subject key identifier: DE:94:06:F9:7D:2A:55:FF:78:DD:BC:AE:D6:38:D3:FC:EE:CC:F6:70
Authority key identifier: 20:83:F8:B5:B6:20:9D:E7:C9:40:08:F3:33:7B:E3:43:6F:3A:EB:E6
Certificate issuer: /CN=2083f8b5b6209de7c94008f3337be3436f3aebe6
Certificate serial: 01987306D2D8255CB5CA47977567E75B53BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IIP4tbYgnefJQAjzM3vjQ2866-Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/c025e5-399a-4ce8-b5f0-acbef018d03a/1/IIP4tbYgnefJQAjzM3vjQ2866-Y.mft
Manifest number: 066B
Signing time: Mon 04 Aug 2025 03:01:23 +0000
Manifest this update: Mon 04 Aug 2025 03:01:23 +0000
Manifest next update: Tue 05 Aug 2025 03:01:23 +0000
Files and hashes: 1: IIP4tbYgnefJQAjzM3vjQ2866-Y.crl (hash: YNdjqpQt4LrxYUbQZ3+i8nbsHdjmUqLgP92DNn5KBhk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/c025e5-399a-4ce8-b5f0-acbef018d03a/1/IIP4tbYgnefJQAjzM3vjQ2866-Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/c025e5-399a-4ce8-b5f0-acbef018d03a/1/IIP4tbYgnefJQAjzM3vjQ2866-Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/IIP4tbYgnefJQAjzM3vjQ2866-Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:06:d2:d8:25:5c:b5:ca:47:97:75:67:e7:5b:53:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2083f8b5b6209de7c94008f3337be3436f3aebe6
Validity
Not Before: Aug 4 03:01:23 2025 GMT
Not After : Aug 5 03:01:23 2025 GMT
Subject: CN=de9406f97d2a55ff78ddbcaed638d3fceeccf670
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:4d:90:71:dc:70:02:28:5b:d3:71:bb:f1:d2:
d5:91:5c:9f:17:2d:30:e7:6d:72:d7:fb:cd:5d:a8:
3b:60:fa:0e:31:c6:8f:01:5a:83:14:16:0c:bb:a0:
e9:69:25:68:3e:e8:d5:41:b5:73:ea:d3:b5:7f:ec:
ff:6b:cd:64:34:8d:2f:b0:ff:9d:aa:3b:25:d6:dd:
63:88:6c:8a:f5:d3:f1:e9:5f:73:15:1f:a5:96:b5:
81:0c:50:48:cb:a8:12:fc:6c:7a:5d:69:06:00:2b:
ef:e3:7c:81:5b:d4:57:2c:e3:68:11:97:9c:cb:39:
83:5c:03:f9:b9:ee:d4:87:68:0b:ed:5f:63:5b:2c:
89:a6:13:19:7c:cd:68:06:ec:aa:9f:5d:f3:79:79:
d5:b4:b7:e8:44:76:fa:c6:a2:2f:6f:8e:4c:d8:01:
12:b8:ff:01:f7:0a:49:34:9d:2c:d9:53:d1:ae:58:
7a:41:b6:ec:68:08:9f:a3:59:0e:45:92:c7:cb:e2:
e2:6e:2f:b9:a1:91:2d:88:e6:10:f7:40:df:1e:f2:
10:c2:ad:85:41:00:08:1c:b6:b7:21:a9:21:7b:2b:
c6:7e:13:5c:16:9c:1d:16:bc:26:04:2c:b4:ce:86:
8a:c7:b3:88:d5:68:d1:d3:28:05:12:ba:78:4d:fb:
70:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:94:06:F9:7D:2A:55:FF:78:DD:BC:AE:D6:38:D3:FC:EE:CC:F6:70
X509v3 Authority Key Identifier:
keyid:20:83:F8:B5:B6:20:9D:E7:C9:40:08:F3:33:7B:E3:43:6F:3A:EB:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IIP4tbYgnefJQAjzM3vjQ2866-Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/c025e5-399a-4ce8-b5f0-acbef018d03a/1/IIP4tbYgnefJQAjzM3vjQ2866-Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/c025e5-399a-4ce8-b5f0-acbef018d03a/1/IIP4tbYgnefJQAjzM3vjQ2866-Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:c1:e0:8b:e6:cf:22:33:f0:7b:f1:89:c0:db:3f:6d:17:20:
ba:f3:a6:ca:78:dc:9a:8b:12:3f:2a:11:d1:c1:09:1b:03:ff:
d3:2b:ba:34:91:10:0c:21:d2:7d:b9:93:52:45:0a:92:3d:08:
4b:f6:ab:43:99:64:ae:0d:88:3b:9d:51:08:c5:57:35:2d:81:
b1:14:f6:13:c1:a0:c5:07:b5:c6:a5:5b:a3:b9:eb:40:03:73:
ac:7a:f6:f5:35:97:0c:51:59:15:33:aa:04:fa:85:04:9c:c9:
a7:9a:7e:6c:6f:1b:91:5e:18:a7:e7:2c:fd:88:a0:48:17:e6:
bf:3d:69:f5:4a:db:1a:f1:b4:3b:30:0e:c5:fc:69:63:75:b7:
fb:e5:08:96:97:67:e8:39:fb:c4:e0:74:bb:e0:5d:8e:f9:02:
8a:0f:f0:d3:01:01:d4:bb:5c:3b:f0:68:dc:88:ba:73:4f:fd:
6e:c2:26:2b:b7:da:3d:0d:2a:1b:58:4c:b1:03:5d:39:8a:21:
9b:38:66:3a:ad:71:3e:42:4e:34:2f:b1:ea:0e:d5:1e:4b:9d:
bb:c6:75:99:c7:d7:94:c4:0c:f5:b4:db:ee:d4:16:35:13:1a:
21:24:7d:67:a2:c9:8f:d3:6f:0f:51:19:3f:b8:64:11:24:e0:
1f:2a:cf:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:20:32 2025 by rpki-client