Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/c025e5-399a-4ce8-b5f0-acbef018d03a/1/IIP4tbYgnefJQAjzM3vjQ2866-Y.mft
File: IIP4tbYgnefJQAjzM3vjQ2866-Y.mft (raw, json)
Hash identifier: YIsp2WBtnQn5cWvKVrzzY2v+20PktXFpivbdcLVQZiQ=
Subject key identifier: BD:4A:4B:5F:AA:20:32:14:11:C9:0C:EA:BE:45:5D:80:21:D0:1A:F2
Authority key identifier: 20:83:F8:B5:B6:20:9D:E7:C9:40:08:F3:33:7B:E3:43:6F:3A:EB:E6
Certificate issuer: /CN=2083f8b5b6209de7c94008f3337be3436f3aebe6
Certificate serial: 01976884FC5226DAE84CC4122365A87673A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IIP4tbYgnefJQAjzM3vjQ2866-Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/c025e5-399a-4ce8-b5f0-acbef018d03a/1/IIP4tbYgnefJQAjzM3vjQ2866-Y.mft
Manifest number: 05E1
Signing time: Fri 13 Jun 2025 09:00:35 +0000
Manifest this update: Fri 13 Jun 2025 09:00:35 +0000
Manifest next update: Sat 14 Jun 2025 09:00:35 +0000
Files and hashes: 1: IIP4tbYgnefJQAjzM3vjQ2866-Y.crl (hash: uHTE5jMQGL1yHxVtlNGVldn/z4/DxquUukNyHdGhHm0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/c025e5-399a-4ce8-b5f0-acbef018d03a/1/IIP4tbYgnefJQAjzM3vjQ2866-Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/c025e5-399a-4ce8-b5f0-acbef018d03a/1/IIP4tbYgnefJQAjzM3vjQ2866-Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/IIP4tbYgnefJQAjzM3vjQ2866-Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 09:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:68:84:fc:52:26:da:e8:4c:c4:12:23:65:a8:76:73:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2083f8b5b6209de7c94008f3337be3436f3aebe6
Validity
Not Before: Jun 13 09:00:35 2025 GMT
Not After : Jun 14 09:00:35 2025 GMT
Subject: CN=bd4a4b5faa20321411c90ceabe455d8021d01af2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:95:99:5f:32:14:4f:49:7e:c9:13:3a:a3:c6:
ea:4b:0a:a7:4c:55:0e:73:76:1e:67:62:4d:f6:4c:
c5:b4:42:6c:31:61:72:7f:e5:d2:40:7f:8c:61:a9:
9b:b0:56:22:7a:6c:28:50:51:d6:b1:ff:b6:a9:61:
4d:3c:b7:60:a5:63:96:a7:89:c9:b5:fc:6b:fc:b1:
66:fb:5f:f9:73:c1:40:69:f5:12:6d:48:c6:51:68:
22:be:66:9e:43:a1:30:2e:bb:be:29:04:2b:3e:f4:
da:3f:7e:37:2a:5a:f4:cd:36:d6:83:71:6f:2a:38:
ae:0c:88:50:ac:ff:35:e2:8e:26:10:59:c7:28:95:
3b:fa:ca:ed:5e:df:cb:8b:2b:aa:0f:4a:50:ae:34:
f1:e4:66:8b:24:dd:82:a7:73:52:c4:a3:a6:f9:ee:
62:95:df:9f:57:97:ee:3d:59:7c:4c:13:6e:e0:5e:
0e:6a:80:6d:3a:e6:d2:8f:3c:e6:dc:0a:de:31:a7:
1d:f5:c2:a0:25:88:8a:8d:44:b0:16:c8:60:d6:50:
8f:0a:3c:17:1d:25:39:36:79:dc:6a:3f:a7:0b:22:
5b:fe:d2:fd:47:b5:68:82:b6:80:c3:ef:8f:e6:12:
e9:94:ee:a9:fd:46:6c:12:d9:fc:b0:04:1f:e2:f2:
e2:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:4A:4B:5F:AA:20:32:14:11:C9:0C:EA:BE:45:5D:80:21:D0:1A:F2
X509v3 Authority Key Identifier:
keyid:20:83:F8:B5:B6:20:9D:E7:C9:40:08:F3:33:7B:E3:43:6F:3A:EB:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IIP4tbYgnefJQAjzM3vjQ2866-Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/c025e5-399a-4ce8-b5f0-acbef018d03a/1/IIP4tbYgnefJQAjzM3vjQ2866-Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/c025e5-399a-4ce8-b5f0-acbef018d03a/1/IIP4tbYgnefJQAjzM3vjQ2866-Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:73:da:b3:4d:da:04:a8:d4:75:35:cd:15:a9:8d:f1:ad:d6:
51:cf:13:00:60:4c:cf:07:d8:d2:c8:ec:72:44:62:1c:d3:63:
ef:b6:7b:a3:f6:8d:43:b2:08:1f:9f:e7:30:10:2a:2a:46:37:
50:43:41:55:26:29:e1:54:9a:d3:a2:c6:99:43:74:a3:79:11:
35:10:2d:ca:09:bc:f4:bd:f4:9d:2a:82:56:c0:0f:ee:41:a8:
d4:b3:3d:19:63:b4:8c:22:ef:f6:aa:6a:1d:d5:0e:a3:90:9d:
74:bb:75:59:d7:66:2a:3f:23:80:c7:d7:2b:6e:d8:7f:d3:1f:
ec:7f:12:06:04:ad:e5:0e:d3:92:78:63:3f:9e:32:e7:1e:ef:
b3:e8:14:f2:2d:b9:e9:2b:0e:d2:ba:d8:07:7e:73:c7:38:43:
af:54:47:da:03:bc:1b:34:3c:45:e4:5a:1c:e5:9d:9b:a5:25:
27:4d:fc:4f:85:25:93:9e:63:37:83:30:5b:5f:98:38:5b:43:
ff:65:89:bb:07:6f:ca:fa:01:87:cf:9c:8a:df:9e:f5:9f:8b:
5b:65:dd:60:e9:20:97:1c:52:65:93:3a:1a:1d:42:82:94:93:
27:09:c5:62:18:14:66:0b:c3:ae:d2:c3:0f:13:01:6e:04:fa:
73:d6:11:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:17:57 2025 by rpki-client