
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/7895f8-ac31-4798-8404-4e278dd48a3f/1/iTbfSsL0Z-pmwRl6hinT9ku1Y_A.mft
File: iTbfSsL0Z-pmwRl6hinT9ku1Y_A.mft (raw, json)
Hash identifier: P1Gh4zFrRuWzLLIF3OcuXh9/jUk5tPOyNawCk1P2Tqo=
Subject key identifier: 94:54:BA:59:EF:97:C1:92:34:DE:44:95:23:4E:ED:9A:28:7B:FA:19
Authority key identifier: 89:36:DF:4A:C2:F4:67:EA:66:C1:19:7A:86:29:D3:F6:4B:B5:63:F0
Certificate issuer: /CN=8936df4ac2f467ea66c1197a8629d3f64bb563f0
Certificate serial: 01987B9C056255F7B5A1E2C746DC87D10803
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iTbfSsL0Z-pmwRl6hinT9ku1Y_A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/7895f8-ac31-4798-8404-4e278dd48a3f/1/iTbfSsL0Z-pmwRl6hinT9ku1Y_A.mft
Manifest number: 1260
Signing time: Tue 05 Aug 2025 19:01:19 +0000
Manifest this update: Tue 05 Aug 2025 19:01:19 +0000
Manifest next update: Wed 06 Aug 2025 19:01:19 +0000
Files and hashes: 1: iTbfSsL0Z-pmwRl6hinT9ku1Y_A.crl (hash: m777ZG1duuB7D+SLMeCisBHE1Ho3WysZjJ7rCHUTp+Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/7895f8-ac31-4798-8404-4e278dd48a3f/1/iTbfSsL0Z-pmwRl6hinT9ku1Y_A.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/7895f8-ac31-4798-8404-4e278dd48a3f/1/iTbfSsL0Z-pmwRl6hinT9ku1Y_A.mft
rsync://rpki.ripe.net/repository/DEFAULT/iTbfSsL0Z-pmwRl6hinT9ku1Y_A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 17:44:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7b:9c:05:62:55:f7:b5:a1:e2:c7:46:dc:87:d1:08:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8936df4ac2f467ea66c1197a8629d3f64bb563f0
Validity
Not Before: Aug 5 19:01:19 2025 GMT
Not After : Aug 6 19:01:19 2025 GMT
Subject: CN=9454ba59ef97c19234de4495234eed9a287bfa19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:a2:00:d7:c8:66:2d:5b:b9:07:95:45:6b:30:
ba:3f:36:3b:23:3e:bf:3e:2e:18:b6:f8:65:13:a9:
ae:b3:9c:19:b7:01:6e:5d:07:9b:d2:31:c0:e1:34:
52:55:b5:99:0d:68:6c:cf:92:d5:55:1a:6e:74:bd:
57:99:e5:93:56:f2:fa:f4:e2:99:c1:20:f8:57:bd:
d8:6b:ed:5a:27:47:bd:21:ad:5f:e5:d2:b9:db:d2:
37:fe:f9:01:f3:a5:a6:dd:fb:b4:8c:6e:5d:2d:92:
54:c9:c5:83:f6:a0:2b:f2:db:8b:b0:ff:fb:ba:bd:
35:61:5c:5a:58:d3:7c:31:fd:56:91:8c:e0:c4:49:
21:32:58:63:e3:f6:98:0f:13:da:7a:ad:94:1c:39:
5c:ae:0b:82:82:74:e0:cc:e8:18:43:8d:4a:d3:cc:
da:24:ec:0e:a8:5c:f7:76:b8:b1:bf:87:c8:43:17:
11:13:6f:35:7e:41:ea:cd:8f:8e:47:a3:1f:7c:a0:
ad:eb:dd:c8:b9:e2:b0:b6:99:4e:b5:91:0d:82:7a:
65:27:79:0f:71:d2:89:9f:1b:29:76:ed:92:78:38:
11:db:13:99:3d:a4:ac:0f:f8:3a:22:f6:86:48:ec:
9f:d1:6d:24:1f:bf:8b:96:af:83:23:d9:6a:f6:ad:
aa:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:54:BA:59:EF:97:C1:92:34:DE:44:95:23:4E:ED:9A:28:7B:FA:19
X509v3 Authority Key Identifier:
keyid:89:36:DF:4A:C2:F4:67:EA:66:C1:19:7A:86:29:D3:F6:4B:B5:63:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iTbfSsL0Z-pmwRl6hinT9ku1Y_A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/7895f8-ac31-4798-8404-4e278dd48a3f/1/iTbfSsL0Z-pmwRl6hinT9ku1Y_A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/7895f8-ac31-4798-8404-4e278dd48a3f/1/iTbfSsL0Z-pmwRl6hinT9ku1Y_A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:72:74:1a:ed:15:29:78:c1:66:e7:4d:c2:63:bf:77:d3:aa:
0b:40:ff:18:c2:c3:5b:8b:08:b0:0b:a6:51:3d:4b:81:de:d3:
b4:d6:0a:48:b1:52:0d:19:90:37:ad:b9:0e:cc:02:3f:44:8a:
e9:17:9c:cb:ff:99:c4:21:49:b4:99:7d:a2:b6:1e:5d:24:41:
13:3f:e1:0b:e0:02:e3:db:ff:c1:3e:de:f0:8e:ec:31:7c:fa:
30:8d:eb:91:66:d9:20:ce:00:7d:67:16:13:91:50:b7:3b:d9:
ea:2e:b5:87:fc:bd:8c:93:0c:ef:51:af:64:00:12:07:7f:61:
25:c2:f3:2e:4c:bd:4b:81:3e:33:f9:93:4e:44:4a:dd:39:bd:
e1:b0:17:93:ad:48:8b:cd:35:c6:62:f9:a3:a5:29:52:e2:0f:
ba:ff:83:29:95:68:d1:28:92:ba:75:ec:9f:bd:ff:bf:a7:6a:
7c:51:34:68:b8:7b:e1:cc:1d:c1:99:63:a0:d2:8e:3d:b2:2f:
25:fe:97:f1:a7:af:76:15:08:42:a9:0c:f4:08:e8:98:f0:b4:
fa:c3:47:ab:0d:89:64:83:e5:7f:f5:e9:8c:ed:c4:19:ff:82:
99:e8:f5:53:30:ad:1f:7d:63:fd:ac:6d:e5:99:c6:a3:da:8f:
54:40:e8:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 00:53:24 2025 by rpki-client