Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/39adc9-db28-4b1e-bf6e-a08bf2c43460/1/iKslD4208gR6QBWFwmTzjA4ih_4.mft
File: iKslD4208gR6QBWFwmTzjA4ih_4.mft (raw, json)
Hash identifier: BApKk/j0IXSQbeNZ60KJOMDfFzk32jwOLG2StbxBnSw=
Subject key identifier: 1E:7D:5A:BA:B1:5C:27:22:F7:2A:E9:D7:E5:BE:E6:45:72:76:25:B7
Authority key identifier: 88:AB:25:0F:8D:B4:F2:04:7A:40:15:85:C2:64:F3:8C:0E:22:87:FE
Certificate issuer: /CN=88ab250f8db4f2047a401585c264f38c0e2287fe
Certificate serial: 01989F3A59C87FAC4DA12536A33554BB475E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iKslD4208gR6QBWFwmTzjA4ih_4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/39adc9-db28-4b1e-bf6e-a08bf2c43460/1/iKslD4208gR6QBWFwmTzjA4ih_4.mft
Manifest number: 145A
Signing time: Tue 12 Aug 2025 17:00:58 +0000
Manifest this update: Tue 12 Aug 2025 17:00:58 +0000
Manifest next update: Wed 13 Aug 2025 17:00:58 +0000
Files and hashes: 1: iKslD4208gR6QBWFwmTzjA4ih_4.crl (hash: NAGWslXiBe7HZLNFwsVkN3ryngxahbRuBzp6cSArPDs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/39adc9-db28-4b1e-bf6e-a08bf2c43460/1/iKslD4208gR6QBWFwmTzjA4ih_4.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/39adc9-db28-4b1e-bf6e-a08bf2c43460/1/iKslD4208gR6QBWFwmTzjA4ih_4.mft
rsync://rpki.ripe.net/repository/DEFAULT/iKslD4208gR6QBWFwmTzjA4ih_4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 17:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:9f:3a:59:c8:7f:ac:4d:a1:25:36:a3:35:54:bb:47:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88ab250f8db4f2047a401585c264f38c0e2287fe
Validity
Not Before: Aug 12 17:00:58 2025 GMT
Not After : Aug 13 17:00:58 2025 GMT
Subject: CN=1e7d5abab15c2722f72ae9d7e5bee645727625b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:ee:37:2f:cb:72:cf:8f:d5:42:44:8a:3b:36:
40:b0:7e:52:b9:50:28:cf:1a:5c:a8:e3:c9:f6:fa:
58:0a:94:a3:a9:a7:ae:a2:2a:9d:56:79:05:a3:b2:
3e:e4:a8:1e:94:ec:ad:f1:9f:0c:fe:d4:8c:24:9d:
27:2c:8a:89:5f:c3:60:f1:6a:23:f6:7b:43:f8:32:
48:eb:cd:49:a7:c8:9b:9d:43:46:d4:56:9f:0f:0a:
03:3e:19:c3:da:87:ab:29:dd:57:20:7f:37:af:cb:
30:4e:a0:b9:94:86:5f:d2:f9:8c:58:96:67:49:b5:
bc:af:22:5d:c5:ba:40:17:27:ce:b8:cd:a9:43:48:
be:41:a6:38:2e:5e:5d:33:db:d2:22:c1:80:c4:7a:
47:fe:3a:84:1b:94:7e:d3:4e:78:9f:33:dc:92:80:
a7:9a:36:bf:b3:e8:bc:1c:05:84:3c:16:ca:e6:49:
93:43:c0:26:30:1a:4f:9d:33:78:ad:9e:21:4e:df:
b8:e7:b5:b9:09:8f:41:fa:d2:53:d0:58:72:5c:54:
51:22:e4:1d:20:75:57:92:f0:06:f2:03:8e:1b:c6:
89:15:da:60:fd:e1:05:45:f7:72:43:27:4b:a4:16:
34:0e:ee:6a:79:fc:9e:d8:d0:e1:f1:b2:17:74:4d:
ea:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:7D:5A:BA:B1:5C:27:22:F7:2A:E9:D7:E5:BE:E6:45:72:76:25:B7
X509v3 Authority Key Identifier:
keyid:88:AB:25:0F:8D:B4:F2:04:7A:40:15:85:C2:64:F3:8C:0E:22:87:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iKslD4208gR6QBWFwmTzjA4ih_4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/39adc9-db28-4b1e-bf6e-a08bf2c43460/1/iKslD4208gR6QBWFwmTzjA4ih_4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/39adc9-db28-4b1e-bf6e-a08bf2c43460/1/iKslD4208gR6QBWFwmTzjA4ih_4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:56:0d:8a:3f:41:f8:b0:42:02:d5:a8:55:ed:7e:50:8e:ee:
16:6e:91:79:f8:1b:3d:90:8d:e2:fa:e7:32:39:3b:5e:0b:24:
0e:dc:9d:83:10:03:68:42:91:08:36:02:7a:d3:78:ee:9a:2d:
7d:0b:2d:a7:8d:d6:6e:cb:32:0f:f8:f8:0a:da:24:a3:79:a6:
92:33:9e:5e:b5:e2:a8:d1:44:68:26:0c:62:7a:f7:2f:3a:15:
39:6f:ba:81:4e:e0:20:cb:b5:11:67:66:df:09:1e:b1:17:3a:
67:b6:73:c4:48:c5:57:47:a0:cc:61:12:13:19:02:ec:13:5a:
61:19:e9:a1:02:24:ba:46:e9:25:93:bc:bc:e7:94:76:41:e6:
d6:b8:5b:c3:d0:0a:4e:c8:99:78:19:d9:a1:c6:4f:c8:de:3a:
d0:04:e4:d7:17:60:e6:ef:6e:d8:eb:b3:cc:fd:cc:63:ee:a4:
b0:ad:ab:43:5d:f5:dd:e2:02:53:a2:b3:07:1c:53:00:f4:cd:
f1:04:52:4b:63:94:24:c7:53:87:21:99:61:f8:1e:f5:0a:c8:
d4:a8:6a:84:40:58:a9:a2:e4:59:a8:89:53:9e:ae:83:26:e3:
09:0c:0c:da:8b:af:f0:96:28:77:02:17:aa:bf:3a:67:20:7a:
97:3f:1e:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 02:20:02 2025 by rpki-client