Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/cbf67b-a65a-42a3-8908-07369e14cade/1/IlVxaqH0w8EChxihwzHiKzOerXw.mft
File: IlVxaqH0w8EChxihwzHiKzOerXw.mft (raw, json)
Hash identifier: 6iw0n6NiOkTtRwGOuHrhpeHDSfjI3nxsd3HU1WaqXio=
Subject key identifier: A3:34:E1:7A:C6:26:22:E5:11:1B:4B:8A:4F:FC:3B:F0:DD:D4:12:2B
Authority key identifier: 22:55:71:6A:A1:F4:C3:C1:02:87:18:A1:C3:31:E2:2B:33:9E:AD:7C
Certificate issuer: /CN=2255716aa1f4c3c1028718a1c331e22b339ead7c
Certificate serial: 0198959284E29BF292667FD512C17C121688
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IlVxaqH0w8EChxihwzHiKzOerXw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/cbf67b-a65a-42a3-8908-07369e14cade/1/IlVxaqH0w8EChxihwzHiKzOerXw.mft
Manifest number: 12A9
Signing time: Sun 10 Aug 2025 20:01:03 +0000
Manifest this update: Sun 10 Aug 2025 20:01:03 +0000
Manifest next update: Mon 11 Aug 2025 20:01:03 +0000
Files and hashes: 1: IlVxaqH0w8EChxihwzHiKzOerXw.crl (hash: PcV4zIZoXxX7W/T4Z1r9VxeM5VJHwT776lzOss7oxmc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/cbf67b-a65a-42a3-8908-07369e14cade/1/IlVxaqH0w8EChxihwzHiKzOerXw.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/cbf67b-a65a-42a3-8908-07369e14cade/1/IlVxaqH0w8EChxihwzHiKzOerXw.mft
rsync://rpki.ripe.net/repository/DEFAULT/IlVxaqH0w8EChxihwzHiKzOerXw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 20:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:95:92:84:e2:9b:f2:92:66:7f:d5:12:c1:7c:12:16:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2255716aa1f4c3c1028718a1c331e22b339ead7c
Validity
Not Before: Aug 10 20:01:03 2025 GMT
Not After : Aug 11 20:01:03 2025 GMT
Subject: CN=a334e17ac62622e5111b4b8a4ffc3bf0ddd4122b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:f0:ed:85:a1:a7:4c:44:8e:8a:d8:8e:25:da:
51:03:fe:e1:36:cf:91:45:b8:76:ab:c8:b5:15:83:
bf:64:81:de:69:0c:b6:e8:41:00:a0:53:fc:a5:a4:
52:90:7e:19:4c:00:22:63:b9:28:6b:9c:cc:be:90:
52:53:8d:c1:d0:a2:f9:f8:4e:e1:d2:b3:8f:33:9d:
a4:1a:49:01:0d:7e:7c:7b:6c:6d:6b:1d:d8:24:cd:
ca:11:6c:b7:c4:62:94:79:d7:f7:2a:e0:9b:f5:08:
92:73:1b:e3:db:69:dc:de:ee:ef:fd:4b:f3:57:4a:
7d:e5:e4:8c:89:30:f8:88:58:45:c9:c7:47:c0:4b:
d7:cf:38:fb:d2:c9:02:3f:5b:1e:da:ba:f0:22:d3:
98:29:62:7a:b5:40:0d:c7:cc:e4:9e:57:8c:72:c2:
4e:d1:91:49:2d:a4:13:b0:8c:20:37:ce:e9:9d:c7:
de:a7:ef:97:9f:55:d0:81:fa:c9:88:ec:24:82:57:
fa:49:2c:0b:37:6a:e7:99:3f:dc:94:e3:4f:8b:0d:
61:32:23:ab:ed:00:28:03:05:65:64:fe:47:ee:54:
62:ec:b1:6a:57:c9:31:79:30:eb:93:31:fb:01:de:
0f:ed:49:35:e3:71:dc:cf:5d:7f:40:4b:4c:00:46:
bc:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:34:E1:7A:C6:26:22:E5:11:1B:4B:8A:4F:FC:3B:F0:DD:D4:12:2B
X509v3 Authority Key Identifier:
keyid:22:55:71:6A:A1:F4:C3:C1:02:87:18:A1:C3:31:E2:2B:33:9E:AD:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IlVxaqH0w8EChxihwzHiKzOerXw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/cbf67b-a65a-42a3-8908-07369e14cade/1/IlVxaqH0w8EChxihwzHiKzOerXw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/cbf67b-a65a-42a3-8908-07369e14cade/1/IlVxaqH0w8EChxihwzHiKzOerXw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:1b:4d:0c:d7:65:4f:e0:2f:69:f7:d7:26:7a:b7:a7:a2:f7:
37:0c:53:1e:6d:be:08:d9:73:55:df:dd:15:22:8c:f7:39:28:
d0:35:53:1b:94:85:25:8b:2b:cf:e3:82:a9:6e:9e:8d:14:93:
02:f4:5e:56:e4:09:14:66:91:c7:a0:94:a2:8a:e8:eb:0b:1e:
18:ba:94:19:17:bd:87:41:00:2f:29:0b:4d:63:e4:78:0d:dd:
73:72:85:3e:df:3d:3e:46:2f:01:8a:c4:34:17:dc:09:37:44:
4c:c0:97:9e:04:1f:9b:96:20:a9:9a:7d:30:df:ee:f4:e7:51:
57:97:97:87:6d:d0:3f:45:d2:97:ff:6f:5c:62:ce:4a:a5:70:
5e:ae:43:8f:86:dc:3e:0f:da:bc:de:5e:b9:ec:d3:f6:05:cc:
52:71:d6:f4:b4:4a:ff:46:35:4f:5f:46:35:5e:7b:da:d0:b0:
f8:25:f1:4e:03:f2:9b:d7:2e:83:bb:a3:a1:3a:c4:c8:41:57:
23:16:6d:2b:7d:f8:47:cc:78:32:d7:fe:ca:82:4f:9a:90:16:
9b:96:ed:29:2a:05:cf:e8:b6:b7:2e:53:91:2c:74:63:ab:00:
cd:22:c9:dd:bc:67:61:4c:4d:1e:42:a3:f1:0a:5d:4b:49:6b:
b5:8e:1d:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 04:09:45 2025 by rpki-client