Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/e212d6-b81b-4e8a-8e05-f986551a707d/1/iSPXAiS3vTwqfOfceofJKtWv8mk.mft
File: iSPXAiS3vTwqfOfceofJKtWv8mk.mft (raw, json)
Hash identifier: edQELXNdpB1NJhQQmqmvQKu40uutNGtaK0U+JB+01bw=
Subject key identifier: 3C:12:47:F0:64:C7:97:EF:4A:F1:F4:3D:14:7F:6B:A0:1E:5D:F8:FE
Authority key identifier: 89:23:D7:02:24:B7:BD:3C:2A:7C:E7:DC:7A:87:C9:2A:D5:AF:F2:69
Certificate issuer: /CN=8923d70224b7bd3c2a7ce7dc7a87c92ad5aff269
Certificate serial: 01987419487677CA7456C61B54F65781D358
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iSPXAiS3vTwqfOfceofJKtWv8mk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/e212d6-b81b-4e8a-8e05-f986551a707d/1/iSPXAiS3vTwqfOfceofJKtWv8mk.mft
Manifest number: 161A
Signing time: Mon 04 Aug 2025 08:01:10 +0000
Manifest this update: Mon 04 Aug 2025 08:01:10 +0000
Manifest next update: Tue 05 Aug 2025 08:01:10 +0000
Files and hashes: 1: iSPXAiS3vTwqfOfceofJKtWv8mk.crl (hash: Y4XRf8q2HAJNFhjfTfMxNhQy0XHQxWDl8C+Bhd5k964=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/e212d6-b81b-4e8a-8e05-f986551a707d/1/iSPXAiS3vTwqfOfceofJKtWv8mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/e212d6-b81b-4e8a-8e05-f986551a707d/1/iSPXAiS3vTwqfOfceofJKtWv8mk.mft
rsync://rpki.ripe.net/repository/DEFAULT/iSPXAiS3vTwqfOfceofJKtWv8mk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 08:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:19:48:76:77:ca:74:56:c6:1b:54:f6:57:81:d3:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8923d70224b7bd3c2a7ce7dc7a87c92ad5aff269
Validity
Not Before: Aug 4 08:01:10 2025 GMT
Not After : Aug 5 08:01:10 2025 GMT
Subject: CN=3c1247f064c797ef4af1f43d147f6ba01e5df8fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:06:5a:11:57:28:2a:f5:e0:35:87:6a:ec:92:
7a:d6:3a:ce:fd:1b:e1:d8:28:30:7d:44:d3:fb:93:
b1:5d:d7:6a:6f:6c:7c:be:95:d6:12:c5:24:ca:50:
e5:e9:32:d3:da:56:c4:52:13:cd:b8:f7:69:96:4c:
06:f2:01:6a:24:ec:86:cd:47:f8:49:53:eb:27:00:
58:ac:d2:f2:c5:61:c9:89:b5:5d:72:c0:d7:e5:51:
88:2a:14:aa:66:f4:5d:c9:39:8d:e5:19:f9:3d:24:
d6:eb:4d:bf:0e:1b:14:2f:cb:5e:31:a0:bf:94:db:
d8:cc:ab:79:80:ea:c5:ce:58:6d:9a:ca:29:43:3f:
aa:16:ff:2a:53:28:f4:59:91:1c:f1:89:13:ba:06:
ef:d7:4e:a0:e3:12:dd:67:b7:76:cd:ab:27:6f:62:
52:c9:c1:a6:ff:d9:45:1b:d5:d8:64:b7:94:08:dd:
2d:04:00:67:19:5e:df:37:ea:1d:17:f3:ee:90:9e:
66:60:ad:ad:e9:0a:0c:f3:fa:fd:a1:03:db:e6:6a:
4d:c9:1f:2a:82:e0:6b:e0:5c:c6:89:11:54:01:9f:
75:8d:ce:8c:9a:e1:8c:79:7b:b0:81:58:32:52:f9:
4f:90:fd:1f:90:ab:36:f1:dd:36:54:2f:f4:e4:57:
9d:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:12:47:F0:64:C7:97:EF:4A:F1:F4:3D:14:7F:6B:A0:1E:5D:F8:FE
X509v3 Authority Key Identifier:
keyid:89:23:D7:02:24:B7:BD:3C:2A:7C:E7:DC:7A:87:C9:2A:D5:AF:F2:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iSPXAiS3vTwqfOfceofJKtWv8mk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/e212d6-b81b-4e8a-8e05-f986551a707d/1/iSPXAiS3vTwqfOfceofJKtWv8mk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/e212d6-b81b-4e8a-8e05-f986551a707d/1/iSPXAiS3vTwqfOfceofJKtWv8mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:96:b9:56:7b:a6:18:0c:d2:76:6c:e1:18:69:da:92:48:c5:
6f:87:6f:49:f6:40:22:f1:ee:f7:be:eb:4b:89:82:44:4f:ce:
3f:32:fb:10:2c:8c:5d:0f:67:b4:18:24:71:a5:5c:a6:0e:2f:
18:c1:da:7b:c6:76:b6:65:1c:96:c7:bb:ec:ce:24:49:54:aa:
5d:cb:a2:0d:4f:7a:9f:c3:6f:e1:e1:e4:27:4e:da:77:55:bf:
98:57:bc:53:49:62:32:55:ce:45:93:aa:c2:48:0e:91:bf:f8:
53:33:70:de:c0:08:70:68:71:97:36:e7:2e:1b:a1:c1:26:03:
eb:9d:01:0f:59:63:ec:34:36:6c:92:b8:1f:10:f2:fa:ff:3f:
7a:19:5b:ca:c3:8b:0a:6d:81:78:54:b4:7e:af:b2:b1:96:3a:
d9:61:8e:a2:6e:af:cc:f6:4c:05:9a:5f:3e:26:a8:15:bb:d7:
2c:1f:ca:17:a3:89:aa:6d:a9:92:28:a2:aa:c0:9e:ad:1b:0b:
18:36:c3:00:60:9e:0c:1e:0a:9c:f7:47:cb:05:24:0d:17:64:
19:2e:e2:71:18:88:b4:32:c9:12:b4:66:2a:12:97:8a:86:0d:
28:58:22:1d:1f:d5:52:f2:07:55:b6:11:a9:f1:7d:2e:3a:39:
c5:24:ec:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 18:21:49 2025 by rpki-client