Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/39adc9-db28-4b1e-bf6e-a08bf2c43460/1/iKslD4208gR6QBWFwmTzjA4ih_4.mft
File: iKslD4208gR6QBWFwmTzjA4ih_4.mft (raw, json)
Hash identifier: 1uKTT1qK/P0R7uygbFu+YOZ+3TyCAddz82jrcyWrBCw=
Subject key identifier: 9E:D1:63:79:E9:B5:E3:B6:A3:FD:D7:98:30:16:10:25:11:63:41:F9
Authority key identifier: 88:AB:25:0F:8D:B4:F2:04:7A:40:15:85:C2:64:F3:8C:0E:22:87:FE
Certificate issuer: /CN=88ab250f8db4f2047a401585c264f38c0e2287fe
Certificate serial: 01976C2B4ED9636E4B90ACAD049EE2EF7139
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iKslD4208gR6QBWFwmTzjA4ih_4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/39adc9-db28-4b1e-bf6e-a08bf2c43460/1/iKslD4208gR6QBWFwmTzjA4ih_4.mft
Manifest number: 13BB
Signing time: Sat 14 Jun 2025 02:01:06 +0000
Manifest this update: Sat 14 Jun 2025 02:01:06 +0000
Manifest next update: Sun 15 Jun 2025 02:01:06 +0000
Files and hashes: 1: iKslD4208gR6QBWFwmTzjA4ih_4.crl (hash: sQRJeZXd6e0PJZljM8hdX1J/DmERzekIGpsV/cxhDBY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/39adc9-db28-4b1e-bf6e-a08bf2c43460/1/iKslD4208gR6QBWFwmTzjA4ih_4.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/39adc9-db28-4b1e-bf6e-a08bf2c43460/1/iKslD4208gR6QBWFwmTzjA4ih_4.mft
rsync://rpki.ripe.net/repository/DEFAULT/iKslD4208gR6QBWFwmTzjA4ih_4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:2b:4e:d9:63:6e:4b:90:ac:ad:04:9e:e2:ef:71:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88ab250f8db4f2047a401585c264f38c0e2287fe
Validity
Not Before: Jun 14 02:01:06 2025 GMT
Not After : Jun 15 02:01:06 2025 GMT
Subject: CN=9ed16379e9b5e3b6a3fdd79830161025116341f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:5b:a8:15:48:93:58:28:91:3d:cd:6e:ec:01:
83:e1:e8:80:31:c3:95:df:95:a1:5e:24:60:42:6c:
06:f4:9c:3e:f6:bb:33:c5:d6:cc:65:1f:09:98:2f:
5f:a5:c3:e6:b2:d0:c7:99:52:f1:23:4a:57:c8:53:
55:34:ad:9f:da:09:05:02:39:15:2e:16:44:91:5a:
08:d7:2b:38:5c:5b:36:b5:c4:44:df:a6:1d:60:ed:
42:f7:e2:7b:3c:0e:3b:4e:50:d9:cf:95:95:b1:35:
f7:21:fb:cf:89:88:75:2b:16:7c:7c:99:dd:77:1e:
23:30:a5:ff:f7:b1:3e:38:34:db:7f:15:6f:5a:40:
87:e1:a7:57:8b:4a:71:f4:19:7a:69:b4:99:36:e0:
93:0d:14:bb:9c:6c:f3:50:a0:73:8f:fd:6b:a6:d4:
19:e1:36:5e:b2:8f:b0:57:e9:b5:89:a7:92:61:75:
92:0c:d5:89:be:d2:e1:e3:f5:8a:10:f1:9d:62:11:
95:35:b9:21:10:0b:81:cc:f7:79:b2:fe:2c:40:55:
a3:7e:c7:32:26:62:69:0d:57:3d:80:94:2c:5a:17:
d8:19:17:b3:6b:b6:22:73:cc:0f:22:d0:b9:41:e7:
23:47:fa:34:54:d4:cd:4c:cd:1f:11:47:62:e0:39:
57:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:D1:63:79:E9:B5:E3:B6:A3:FD:D7:98:30:16:10:25:11:63:41:F9
X509v3 Authority Key Identifier:
keyid:88:AB:25:0F:8D:B4:F2:04:7A:40:15:85:C2:64:F3:8C:0E:22:87:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iKslD4208gR6QBWFwmTzjA4ih_4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/39adc9-db28-4b1e-bf6e-a08bf2c43460/1/iKslD4208gR6QBWFwmTzjA4ih_4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/39adc9-db28-4b1e-bf6e-a08bf2c43460/1/iKslD4208gR6QBWFwmTzjA4ih_4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:be:30:73:31:95:c6:15:05:26:7f:51:6a:77:e7:d7:47:3d:
00:c0:e9:26:46:df:88:2e:c2:46:29:be:5e:13:a5:dd:b5:02:
fd:49:28:af:63:fb:57:bf:0c:39:ce:25:64:03:c5:34:b8:bc:
b4:89:cb:3f:5e:02:a1:d2:b1:5f:aa:b5:0e:2c:81:57:46:98:
11:01:1f:bb:27:89:80:99:0e:c9:a4:91:aa:ac:1f:70:a5:07:
43:c5:5b:94:1a:7b:03:d0:a6:59:ac:28:47:18:fa:99:a8:f9:
72:a8:c8:05:8f:c6:0b:11:15:34:e8:be:74:20:2b:4c:77:cc:
db:5b:81:f6:44:c7:ae:b9:dd:24:e6:27:7a:c7:78:40:f9:b8:
07:1f:fb:79:dc:6c:07:f2:29:60:9b:e0:da:bb:5f:fc:4a:12:
d6:6a:24:24:67:99:dc:00:77:52:b3:91:23:7c:88:a3:ba:45:
89:02:31:ef:36:88:b6:a2:0a:97:fa:35:47:c7:11:f4:2d:46:
9e:ce:ce:87:2d:3d:29:e5:c7:29:a1:39:1a:38:98:76:ab:f3:
3a:82:c0:93:26:76:e2:5b:2b:0e:32:16:90:62:34:7d:60:fe:
a8:b1:30:a0:de:fe:a7:c1:ad:11:1e:81:7f:1a:d7:45:bc:9f:
12:28:39:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 11:35:44 2025 by rpki-client