Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/383b70-dbf3-4ff3-b153-3fe4f7cbadab/1/ifGFjNN_s4sqz6XLTvQ-PDCNPWE.mft
File: ifGFjNN_s4sqz6XLTvQ-PDCNPWE.mft (raw, json)
Hash identifier: iH+rTGXqhtv56+KqK3u8T3khee3zUvuiu86R7uMCboI=
Subject key identifier: 42:BC:FF:E3:C0:26:5F:F5:B9:98:38:81:8A:A8:81:39:EF:30:BF:8B
Authority key identifier: 89:F1:85:8C:D3:7F:B3:8B:2A:CF:A5:CB:4E:F4:3E:3C:30:8D:3D:61
Certificate issuer: /CN=89f1858cd37fb38b2acfa5cb4ef43e3c308d3d61
Certificate serial: 0198733D2DBD1F97FE7A1780FF07A3760D4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ifGFjNN_s4sqz6XLTvQ-PDCNPWE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/383b70-dbf3-4ff3-b153-3fe4f7cbadab/1/ifGFjNN_s4sqz6XLTvQ-PDCNPWE.mft
Manifest number: 1614
Signing time: Mon 04 Aug 2025 04:00:45 +0000
Manifest this update: Mon 04 Aug 2025 04:00:45 +0000
Manifest next update: Tue 05 Aug 2025 04:00:45 +0000
Files and hashes: 1: ifGFjNN_s4sqz6XLTvQ-PDCNPWE.crl (hash: EOMdUyeiRiLEIHXPW3OxU53pWMUMYqRdJ1AJdckUDQM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/383b70-dbf3-4ff3-b153-3fe4f7cbadab/1/ifGFjNN_s4sqz6XLTvQ-PDCNPWE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/383b70-dbf3-4ff3-b153-3fe4f7cbadab/1/ifGFjNN_s4sqz6XLTvQ-PDCNPWE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ifGFjNN_s4sqz6XLTvQ-PDCNPWE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:3d:2d:bd:1f:97:fe:7a:17:80:ff:07:a3:76:0d:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89f1858cd37fb38b2acfa5cb4ef43e3c308d3d61
Validity
Not Before: Aug 4 04:00:45 2025 GMT
Not After : Aug 5 04:00:45 2025 GMT
Subject: CN=42bcffe3c0265ff5b99838818aa88139ef30bf8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:b1:ce:16:40:3e:3d:ad:9d:05:4f:88:b7:48:
44:c6:6f:90:0b:ea:0f:bd:1e:c8:82:3e:2c:4b:f4:
61:7d:d5:b5:22:dd:6b:5a:a1:fb:d7:96:d6:79:73:
4f:c2:8f:7a:f8:49:d0:98:75:d6:93:e4:af:cf:e1:
e5:b2:54:8f:38:4b:6a:4a:04:d8:e9:62:49:b8:1b:
85:14:fe:55:af:72:e4:ed:87:d0:89:ac:70:b9:bb:
70:56:37:b0:a0:a8:95:37:8b:a9:83:21:66:e5:3e:
2c:2d:6a:fe:96:77:38:c3:ec:0d:c3:34:70:bb:b6:
75:83:42:af:2d:0e:c8:67:44:2e:6a:26:9e:f1:b4:
f6:23:b5:36:55:05:00:b6:bc:e5:35:95:e5:80:ea:
35:38:00:4c:0d:0f:0b:27:c3:e4:93:f5:5f:6f:b2:
59:43:9e:10:d3:48:45:c5:0f:fb:ea:b1:17:17:42:
7d:59:3a:f5:98:d7:e0:64:83:c6:50:62:4f:59:86:
8a:62:60:ae:ac:c4:0a:64:97:42:dc:73:c3:53:51:
8e:67:31:08:21:8e:49:f2:82:de:55:e5:d6:04:88:
f2:42:10:c7:d4:a0:73:92:9c:9e:68:74:b6:4a:1d:
e1:3a:38:83:3d:8b:87:36:5c:84:46:e1:08:37:a9:
6e:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:BC:FF:E3:C0:26:5F:F5:B9:98:38:81:8A:A8:81:39:EF:30:BF:8B
X509v3 Authority Key Identifier:
keyid:89:F1:85:8C:D3:7F:B3:8B:2A:CF:A5:CB:4E:F4:3E:3C:30:8D:3D:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ifGFjNN_s4sqz6XLTvQ-PDCNPWE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/383b70-dbf3-4ff3-b153-3fe4f7cbadab/1/ifGFjNN_s4sqz6XLTvQ-PDCNPWE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/383b70-dbf3-4ff3-b153-3fe4f7cbadab/1/ifGFjNN_s4sqz6XLTvQ-PDCNPWE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:87:63:c1:3a:25:35:50:8d:1e:bb:72:e1:34:34:27:9b:09:
45:95:7a:52:b5:a5:9a:d4:80:23:46:8f:58:fe:26:ab:0c:20:
a5:2b:6f:5b:49:e8:7c:44:9a:28:50:51:db:af:61:64:3e:30:
da:e9:44:d6:e1:25:54:cb:2f:75:a7:77:20:0b:86:3f:9c:9a:
f6:ce:85:82:1b:a3:e8:8c:54:f5:50:2d:c5:4b:0d:5e:b3:20:
e1:26:b9:84:30:83:c1:1e:bc:95:f6:b6:5d:26:80:c0:79:ce:
0e:ca:51:01:85:06:cc:f3:05:01:78:31:f1:64:ca:a4:d6:2b:
36:ce:22:05:1d:d8:d5:68:8f:30:82:99:b6:0c:de:d9:ef:43:
84:5a:c1:dd:db:42:f8:06:4a:80:86:ab:37:67:e0:09:66:8f:
81:c0:a8:21:44:46:ca:33:bf:d1:64:dd:b9:38:ac:26:da:82:
6e:bf:de:c4:0f:81:6a:25:55:7d:8a:f2:e0:dc:49:82:9a:35:
5a:5c:be:b2:8a:a4:c8:ce:ce:81:30:b6:aa:81:03:f2:d2:11:
54:b5:c2:64:80:45:54:08:65:83:bc:2c:eb:a0:ad:b7:3f:e2:
2c:41:5f:1d:d1:f4:15:ec:e8:22:6c:df:34:d3:88:eb:1b:1c:
a5:23:d2:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:14:16 2025 by rpki-client