
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/fd22ad-f792-475c-8bae-26024e2a5f3e/1/ije4wOFZfNHaZcmgf6wFrNhEzGo.mft
File: ije4wOFZfNHaZcmgf6wFrNhEzGo.mft (raw, json)
Hash identifier: J05VlXDPJ1wHkczYzCtMxoaJMPukfgPfLeVhrq5Vmbo=
Subject key identifier: 03:A2:9A:37:22:45:7E:E6:4E:10:52:9E:7A:F5:CF:84:B3:3B:1E:62
Authority key identifier: 8A:37:B8:C0:E1:59:7C:D1:DA:65:C9:A0:7F:AC:05:AC:D8:44:CC:6A
Certificate issuer: /CN=8a37b8c0e1597cd1da65c9a07fac05acd844cc6a
Certificate serial: 01987D8ADA60522134220B45245BC364B641
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ije4wOFZfNHaZcmgf6wFrNhEzGo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/fd22ad-f792-475c-8bae-26024e2a5f3e/1/ije4wOFZfNHaZcmgf6wFrNhEzGo.mft
Manifest number: 1108
Signing time: Wed 06 Aug 2025 04:01:48 +0000
Manifest this update: Wed 06 Aug 2025 04:01:48 +0000
Manifest next update: Thu 07 Aug 2025 04:01:48 +0000
Files and hashes: 1: ije4wOFZfNHaZcmgf6wFrNhEzGo.crl (hash: 6eAL1Qsn7lsGnbL4v0JINdDr2VJTp+vq/K1/jlN1bkQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/fd22ad-f792-475c-8bae-26024e2a5f3e/1/ije4wOFZfNHaZcmgf6wFrNhEzGo.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/fd22ad-f792-475c-8bae-26024e2a5f3e/1/ije4wOFZfNHaZcmgf6wFrNhEzGo.mft
rsync://rpki.ripe.net/repository/DEFAULT/ije4wOFZfNHaZcmgf6wFrNhEzGo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 04:01:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7d:8a:da:60:52:21:34:22:0b:45:24:5b:c3:64:b6:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a37b8c0e1597cd1da65c9a07fac05acd844cc6a
Validity
Not Before: Aug 6 04:01:48 2025 GMT
Not After : Aug 7 04:01:48 2025 GMT
Subject: CN=03a29a3722457ee64e10529e7af5cf84b33b1e62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:d4:b8:7f:e6:18:f0:6b:9a:af:1b:08:de:11:
38:ec:67:84:56:5c:5c:cf:e6:cf:aa:b2:c0:56:9a:
96:d6:b5:64:31:7e:7b:b2:5c:fc:7b:81:b1:f7:19:
c7:3b:68:c8:8b:67:8a:ce:82:62:92:91:a7:6d:c3:
89:15:ae:c0:89:b5:1e:a8:4b:e9:3a:5a:33:40:39:
29:01:31:93:7c:a8:b5:7f:e7:ed:66:89:ef:5e:72:
f8:de:dc:b9:77:a6:92:99:ec:fb:60:24:61:cc:46:
8a:93:32:95:82:43:88:f3:c3:60:a0:4f:66:b2:d6:
12:f2:a0:36:fc:1c:0f:6e:e9:0c:24:c3:ee:b8:d5:
4a:b6:24:51:7e:17:82:f9:32:fe:b0:49:dc:cc:b5:
46:13:6a:36:48:13:40:7c:44:ac:db:aa:40:b1:0f:
46:a3:eb:f1:11:5a:34:f2:1c:ef:dd:08:14:5c:3a:
21:c5:a5:f8:4e:25:a5:9d:69:c7:4b:21:63:e4:83:
5d:f0:f3:aa:3a:4d:37:b4:00:39:9e:05:6a:b1:1a:
cb:05:6b:23:ab:f0:f2:8c:04:8d:76:11:37:03:c6:
b0:af:e7:14:5e:08:0d:20:22:81:a3:5a:54:91:6e:
67:ca:b5:5a:e5:ed:18:c2:8c:d5:8e:f7:7b:8f:7d:
38:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:A2:9A:37:22:45:7E:E6:4E:10:52:9E:7A:F5:CF:84:B3:3B:1E:62
X509v3 Authority Key Identifier:
keyid:8A:37:B8:C0:E1:59:7C:D1:DA:65:C9:A0:7F:AC:05:AC:D8:44:CC:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ije4wOFZfNHaZcmgf6wFrNhEzGo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/fd22ad-f792-475c-8bae-26024e2a5f3e/1/ije4wOFZfNHaZcmgf6wFrNhEzGo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/fd22ad-f792-475c-8bae-26024e2a5f3e/1/ije4wOFZfNHaZcmgf6wFrNhEzGo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:a4:88:4a:33:ee:92:0b:2b:24:37:ba:a8:9b:d0:30:1a:d8:
5f:a8:0c:c2:2e:2a:00:f1:b0:40:fa:02:9c:78:83:35:89:d5:
d8:db:44:de:22:18:f0:ce:39:aa:07:53:0f:ab:da:16:26:55:
4e:02:8d:a8:b6:45:c1:9d:c8:30:ab:36:db:b5:1b:11:7f:16:
96:23:1a:dc:a3:6e:a5:c9:fa:8c:74:04:10:77:bf:11:0b:a2:
22:5f:ba:e4:43:20:dd:e1:0e:eb:ce:6f:f9:a9:e3:28:1e:ac:
33:cf:22:56:e9:c6:21:13:0b:a2:5d:62:99:46:db:06:f1:1c:
1f:e6:dd:ea:94:69:ca:04:0c:58:2c:cb:a7:11:23:9c:e4:3d:
eb:79:a6:98:ab:9c:1b:ec:2d:8c:56:f0:ef:59:c5:e2:93:bf:
7e:e0:b8:33:8f:0f:6e:cc:53:95:c4:9e:6b:0d:f7:de:66:5d:
60:1c:3c:f3:1d:a9:3f:ea:38:96:55:fe:e7:c2:26:59:3e:c2:
03:7f:0a:5c:ff:aa:6f:25:c4:4f:9f:81:a8:4f:9a:0a:07:a0:
cf:b2:4b:0b:fc:96:96:95:50:2e:23:6f:9a:31:81:0b:f8:c2:
a7:2b:17:f6:00:c4:50:42:23:d1:39:ba:17:7a:ad:24:cc:b5:
3f:24:56:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 12:33:03 2025 by rpki-client