Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/5ff708-cb7a-41e9-9093-1d00ea841d3e/1/INyR5mZJTQ3FaiuB0imr1u41-Ew.mft
File: INyR5mZJTQ3FaiuB0imr1u41-Ew.mft (raw, json)
Hash identifier: r/dQJ7d0+z1/hlSqFADdiFt82fdeYPn+7FJ7jjcyrW8=
Subject key identifier: 2D:97:EB:EA:48:52:DA:62:70:C8:76:A5:03:A2:1F:4B:92:8C:34:BD
Authority key identifier: 20:DC:91:E6:66:49:4D:0D:C5:6A:2B:81:D2:29:AB:D6:EE:35:F8:4C
Certificate issuer: /CN=20dc91e666494d0dc56a2b81d229abd6ee35f84c
Certificate serial: 019885447096662263C8C6750FAA7219FDA2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/INyR5mZJTQ3FaiuB0imr1u41-Ew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/5ff708-cb7a-41e9-9093-1d00ea841d3e/1/INyR5mZJTQ3FaiuB0imr1u41-Ew.mft
Manifest number: 161B
Signing time: Thu 07 Aug 2025 16:01:51 +0000
Manifest this update: Thu 07 Aug 2025 16:01:51 +0000
Manifest next update: Fri 08 Aug 2025 16:01:51 +0000
Files and hashes: 1: INyR5mZJTQ3FaiuB0imr1u41-Ew.crl (hash: rscuAjhjx3rOiMOA5mXQks0XNPIOrI66rcNw3Mt/Yqg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/5ff708-cb7a-41e9-9093-1d00ea841d3e/1/INyR5mZJTQ3FaiuB0imr1u41-Ew.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/5ff708-cb7a-41e9-9093-1d00ea841d3e/1/INyR5mZJTQ3FaiuB0imr1u41-Ew.mft
rsync://rpki.ripe.net/repository/DEFAULT/INyR5mZJTQ3FaiuB0imr1u41-Ew.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 08 Aug 2025 16:01:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:85:44:70:96:66:22:63:c8:c6:75:0f:aa:72:19:fd:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20dc91e666494d0dc56a2b81d229abd6ee35f84c
Validity
Not Before: Aug 7 16:01:51 2025 GMT
Not After : Aug 8 16:01:51 2025 GMT
Subject: CN=2d97ebea4852da6270c876a503a21f4b928c34bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:63:35:aa:4e:21:a4:b4:21:4b:e9:60:f8:5f:
bb:45:85:0b:a8:ca:7c:9c:cd:dc:da:2e:4e:e4:65:
0e:10:92:ec:66:b0:d0:f3:22:22:9b:fc:29:ba:1e:
32:5c:41:ce:b6:b0:d0:87:9e:09:7e:e5:a4:08:26:
e7:10:78:16:2e:bf:f5:f7:b2:0e:65:a3:65:d2:b5:
ef:c7:49:49:a6:25:79:c9:d6:90:db:2b:1d:02:78:
e0:89:18:da:42:94:ff:8c:44:2a:44:12:10:23:b7:
02:13:cc:65:88:23:d0:bb:58:9d:34:01:c0:8c:51:
21:7a:f9:d0:92:82:33:36:e2:82:b7:e4:c9:0e:b8:
55:36:29:62:30:e2:5b:26:ac:d1:38:97:41:87:9f:
6b:1e:f9:18:1b:1d:a2:bb:e6:38:c7:03:b9:ff:ee:
12:4f:89:4d:65:22:f5:b1:38:ed:9a:43:6b:d4:34:
14:85:11:91:c4:5d:b3:c9:67:45:34:1d:aa:5d:4b:
d6:1a:f8:bf:76:96:a8:92:76:dd:02:4b:b3:94:b6:
44:33:10:8a:04:5f:4c:ee:d6:f7:d4:17:e5:db:cf:
b7:c1:b7:18:f0:79:52:36:64:ac:39:0d:db:2c:eb:
82:80:d4:b9:4f:91:c8:c4:82:df:49:85:c5:2c:9e:
60:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:97:EB:EA:48:52:DA:62:70:C8:76:A5:03:A2:1F:4B:92:8C:34:BD
X509v3 Authority Key Identifier:
keyid:20:DC:91:E6:66:49:4D:0D:C5:6A:2B:81:D2:29:AB:D6:EE:35:F8:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/INyR5mZJTQ3FaiuB0imr1u41-Ew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/5ff708-cb7a-41e9-9093-1d00ea841d3e/1/INyR5mZJTQ3FaiuB0imr1u41-Ew.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/5ff708-cb7a-41e9-9093-1d00ea841d3e/1/INyR5mZJTQ3FaiuB0imr1u41-Ew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:b4:41:de:71:21:92:0f:28:37:89:f3:a1:7c:a2:0d:2b:fa:
a6:55:77:99:15:cb:ca:68:e6:1b:fc:9f:c8:28:0d:80:f2:09:
6b:2b:c9:b9:b9:61:19:ce:52:47:5e:f4:2e:db:6c:61:7a:89:
b1:70:33:1a:92:44:ee:c4:bb:70:32:00:c9:98:c8:27:10:29:
8d:99:8d:b2:48:d1:6c:2c:b7:aa:99:e1:08:06:22:57:84:05:
de:d3:7b:05:c7:19:59:33:2d:a9:d5:b4:0c:d9:d6:f6:3b:4a:
a0:14:e9:9d:64:a1:07:77:45:90:e1:fe:86:89:c2:6a:be:31:
10:17:fb:80:d6:0b:1b:cc:8d:17:ba:2c:0d:7c:62:c1:83:46:
52:52:59:a0:cb:66:28:06:89:c6:a5:b4:37:7f:2e:16:96:35:
34:04:2d:d8:e8:d4:9c:23:bf:86:47:d7:93:11:38:03:25:6b:
52:a2:b7:66:e1:b5:16:59:af:6c:a6:e4:d8:43:95:e6:42:df:
ad:69:c3:74:89:87:c2:e5:bb:56:42:dd:40:22:85:13:e1:a9:
8f:ba:fb:10:49:54:7f:1e:69:b8:f7:45:52:cd:4e:f8:8e:0c:
7d:b6:7b:84:d5:ac:fe:6d:b4:ca:db:47:df:db:ae:bb:d9:36:
4a:fe:cd:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 20:25:03 2025 by rpki-client