
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/69daa7-cfaf-4ef9-8f5f-d5eb621fc3ac/1/iJNH62PbDmEjDFwx6eGd_OfpQcQ.mft
File: iJNH62PbDmEjDFwx6eGd_OfpQcQ.mft (raw, json)
Hash identifier: e22JXlYrm3WzIvlnMIklFAaaXSh1PSQLwNtyIQ8g9a8=
Subject key identifier: FF:3A:A4:15:35:1D:EC:92:6F:D2:38:68:5B:AF:66:C8:6F:83:C1:C3
Authority key identifier: 88:93:47:EB:63:DB:0E:61:23:0C:5C:31:E9:E1:9D:FC:E7:E9:41:C4
Certificate issuer: /CN=889347eb63db0e61230c5c31e9e19dfce7e941c4
Certificate serial: 019881D4F5C8DB2D0CFC5B63837EB48EEEF3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iJNH62PbDmEjDFwx6eGd_OfpQcQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/69daa7-cfaf-4ef9-8f5f-d5eb621fc3ac/1/iJNH62PbDmEjDFwx6eGd_OfpQcQ.mft
Manifest number: 109F
Signing time: Thu 07 Aug 2025 00:01:14 +0000
Manifest this update: Thu 07 Aug 2025 00:01:14 +0000
Manifest next update: Fri 08 Aug 2025 00:01:14 +0000
Files and hashes: 1: iJNH62PbDmEjDFwx6eGd_OfpQcQ.crl (hash: OnvNd1c4ZjhUXY/HSQIuYFygWZPY7Y0uxKJK7pPu6R4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/69daa7-cfaf-4ef9-8f5f-d5eb621fc3ac/1/iJNH62PbDmEjDFwx6eGd_OfpQcQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/69daa7-cfaf-4ef9-8f5f-d5eb621fc3ac/1/iJNH62PbDmEjDFwx6eGd_OfpQcQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/iJNH62PbDmEjDFwx6eGd_OfpQcQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 20:46:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:81:d4:f5:c8:db:2d:0c:fc:5b:63:83:7e:b4:8e:ee:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=889347eb63db0e61230c5c31e9e19dfce7e941c4
Validity
Not Before: Aug 7 00:01:14 2025 GMT
Not After : Aug 8 00:01:14 2025 GMT
Subject: CN=ff3aa415351dec926fd238685baf66c86f83c1c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:0a:64:20:f2:ea:0a:d0:01:c5:fe:23:4f:3d:
1c:61:9e:02:ac:8f:05:0d:54:14:0f:af:30:c4:45:
dc:ba:a4:93:87:7b:78:c2:4b:74:ed:94:55:c6:98:
0c:36:44:7e:97:51:e2:44:78:e2:c0:bf:3c:c3:10:
fd:17:db:d6:cb:8f:d9:a8:16:3b:7a:f4:9e:2e:57:
b5:47:75:94:6b:08:99:f3:38:3c:6b:51:1c:fe:a1:
37:34:27:05:08:fd:b2:89:c3:30:7f:f5:d2:85:17:
d1:c7:ac:40:90:ba:78:6d:c5:b2:2b:eb:a5:9e:c1:
e4:ce:c8:d5:ed:b6:7c:af:80:95:57:9f:a4:22:ab:
d3:45:b3:12:41:fa:f6:4e:e5:6f:cc:05:bd:c5:a0:
38:6d:c9:fb:f9:ca:38:36:11:0b:2d:7e:0e:3e:3c:
da:8d:4a:4b:6c:e2:83:07:2c:d4:f2:9e:b6:7c:06:
09:db:fe:6b:85:d0:a7:24:06:24:c6:85:0e:f4:00:
41:e9:63:fd:15:bd:50:70:59:0b:20:f0:ae:a7:33:
04:94:7f:cc:e3:3e:9a:00:6d:5d:cf:f6:26:e6:96:
f2:d0:70:07:44:9c:a1:7e:f3:4c:9e:76:ee:6c:f0:
18:ef:eb:76:10:e6:a9:cf:97:2b:32:d1:13:ae:18:
60:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:3A:A4:15:35:1D:EC:92:6F:D2:38:68:5B:AF:66:C8:6F:83:C1:C3
X509v3 Authority Key Identifier:
keyid:88:93:47:EB:63:DB:0E:61:23:0C:5C:31:E9:E1:9D:FC:E7:E9:41:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iJNH62PbDmEjDFwx6eGd_OfpQcQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/69daa7-cfaf-4ef9-8f5f-d5eb621fc3ac/1/iJNH62PbDmEjDFwx6eGd_OfpQcQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/69daa7-cfaf-4ef9-8f5f-d5eb621fc3ac/1/iJNH62PbDmEjDFwx6eGd_OfpQcQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:49:71:f4:62:c1:5a:14:2d:ca:07:58:24:fa:d1:30:25:67:
c6:cf:c4:9d:51:a0:d4:43:69:0b:c7:4b:28:51:fd:b1:04:4d:
d8:22:0c:fa:ef:bc:81:9c:3d:a8:d7:db:1d:ef:f4:8c:8b:47:
51:97:91:62:6f:d2:9b:0b:68:5d:63:4d:74:41:b7:8d:85:b5:
3f:70:ac:95:2a:b5:d3:e5:fe:32:8b:f2:f8:24:20:24:b6:77:
b9:03:e4:5c:c9:f0:cb:41:70:94:00:9e:4d:9c:e9:7e:ce:a4:
20:ba:b1:91:da:bf:4a:dd:cc:55:4c:46:67:df:85:3e:90:79:
29:26:f4:6f:7b:36:7f:98:1c:ab:57:1f:5e:bc:8e:b4:89:1a:
46:0c:da:4c:90:62:92:e8:a4:64:89:5e:5e:3d:90:11:d3:7a:
83:be:dc:86:c1:d4:c3:9c:8c:6f:ce:4c:da:91:78:c2:9e:3d:
7e:b6:32:be:87:45:5d:a9:fd:0f:f4:42:da:2e:7b:a8:0d:ff:
f3:24:19:be:d8:63:4c:04:63:ba:85:e7:65:2b:77:0e:04:87:
66:cc:2d:ab:e6:ed:41:c4:0c:f8:4e:10:f6:aa:03:61:11:18:
f0:5f:35:03:e6:bc:5e:8b:34:94:ea:61:df:19:1c:32:a4:4d:
a8:b7:15:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 04:42:15 2025 by rpki-client