Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/a40bbb-556a-40c5-b97c-32b2be06222c/1/iFeQ87X0pUUjTzIwv4lmOFbge8c.mft
File: iFeQ87X0pUUjTzIwv4lmOFbge8c.mft (raw, json)
Hash identifier: KLo1mHVRozPk5eMJuhv1q3YBIlYH0ExqypJf68xex2M=
Subject key identifier: 39:4B:46:16:65:B9:CF:9C:A5:32:B3:95:49:16:AF:5B:EE:AA:9F:5A
Authority key identifier: 88:57:90:F3:B5:F4:A5:45:23:4F:32:30:BF:89:66:38:56:E0:7B:C7
Certificate issuer: /CN=885790f3b5f4a545234f3230bf89663856e07bc7
Certificate serial: 019873E3FAFC38A60B892EB23A44FC4BD2DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iFeQ87X0pUUjTzIwv4lmOFbge8c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/a40bbb-556a-40c5-b97c-32b2be06222c/1/iFeQ87X0pUUjTzIwv4lmOFbge8c.mft
Manifest number: 1613
Signing time: Mon 04 Aug 2025 07:02:57 +0000
Manifest this update: Mon 04 Aug 2025 07:02:57 +0000
Manifest next update: Tue 05 Aug 2025 07:02:57 +0000
Files and hashes: 1: iFeQ87X0pUUjTzIwv4lmOFbge8c.crl (hash: CrTE1W9XeEYhNTe7yMrqWtAEQAZnhj1/Bwqmhqn+RNg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/a40bbb-556a-40c5-b97c-32b2be06222c/1/iFeQ87X0pUUjTzIwv4lmOFbge8c.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/a40bbb-556a-40c5-b97c-32b2be06222c/1/iFeQ87X0pUUjTzIwv4lmOFbge8c.mft
rsync://rpki.ripe.net/repository/DEFAULT/iFeQ87X0pUUjTzIwv4lmOFbge8c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 07:02:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e3:fa:fc:38:a6:0b:89:2e:b2:3a:44:fc:4b:d2:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=885790f3b5f4a545234f3230bf89663856e07bc7
Validity
Not Before: Aug 4 07:02:57 2025 GMT
Not After : Aug 5 07:02:57 2025 GMT
Subject: CN=394b461665b9cf9ca532b3954916af5beeaa9f5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:39:e5:aa:b1:cd:f1:22:f0:1c:2c:a2:d8:36:
0e:04:3d:a4:28:c0:de:4f:10:50:81:72:0a:7e:3b:
8f:2f:53:01:2b:b8:a9:61:1d:e0:f3:0f:98:fd:f9:
5f:f6:44:39:73:ab:69:f6:5e:a4:e9:17:c8:31:ae:
4d:8d:c6:52:cc:b8:31:c1:65:43:aa:9f:71:80:f6:
32:2d:fb:11:11:da:cf:a2:4d:ce:e1:36:37:b2:db:
2d:61:45:7c:68:43:34:b5:7d:d0:82:25:20:97:e0:
99:4d:46:d5:52:19:bd:ea:47:91:f4:b7:75:8a:ac:
30:ff:3b:99:ed:52:4f:d0:aa:78:7e:72:44:69:34:
cc:3a:38:c9:03:b6:77:5e:4f:c3:3c:0e:7b:d0:10:
b8:d3:4b:e8:f7:fe:85:07:09:e4:c6:ee:94:e0:ab:
21:2d:e5:3d:0b:22:bf:29:33:b0:06:2a:12:8d:51:
6c:ed:25:17:64:8a:01:af:0a:a9:29:84:59:88:6b:
fd:97:6d:e9:08:5e:9f:7c:06:b1:47:cf:bf:b4:db:
c5:32:bf:a6:5c:59:49:36:dc:f5:68:ed:fb:63:e5:
bc:51:66:63:2e:bb:d4:c6:73:28:50:ea:57:5e:46:
74:82:67:15:bb:34:0b:11:19:86:3c:9e:5c:ab:fa:
9f:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:4B:46:16:65:B9:CF:9C:A5:32:B3:95:49:16:AF:5B:EE:AA:9F:5A
X509v3 Authority Key Identifier:
keyid:88:57:90:F3:B5:F4:A5:45:23:4F:32:30:BF:89:66:38:56:E0:7B:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iFeQ87X0pUUjTzIwv4lmOFbge8c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/a40bbb-556a-40c5-b97c-32b2be06222c/1/iFeQ87X0pUUjTzIwv4lmOFbge8c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/a40bbb-556a-40c5-b97c-32b2be06222c/1/iFeQ87X0pUUjTzIwv4lmOFbge8c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:a8:10:18:a2:3b:ff:f1:46:4e:b6:c5:14:e2:ad:ad:df:14:
44:8c:23:16:2b:30:00:5c:d3:5c:02:db:75:df:e2:c8:92:27:
16:33:2e:87:e8:05:53:55:61:55:9d:c1:f2:5f:c2:fd:49:e3:
c4:68:3b:e7:12:74:7f:7a:29:56:f0:22:47:86:4f:47:09:54:
66:0c:9c:a4:27:58:75:49:97:5d:e2:43:e3:8d:48:01:38:e7:
8d:86:a3:16:a2:f8:91:79:7f:ce:6c:3e:61:b5:85:5f:7b:e5:
d4:cf:5b:1f:df:0e:bf:b9:34:e6:dc:8f:1c:db:b6:0e:8a:68:
7b:58:cc:d7:61:3e:44:2d:d5:e2:98:08:56:e8:c1:ba:74:e9:
ff:d2:2d:39:1b:8b:f4:4c:da:73:81:4e:c8:08:d5:bb:e1:7e:
23:e1:ef:a8:a8:0a:15:a3:3e:78:97:2e:7b:4d:93:d7:f1:bc:
59:63:19:36:b7:c6:23:f6:f4:d4:3d:98:ac:5f:35:e3:96:71:
30:31:bc:62:6d:b3:45:01:40:42:24:6b:a1:da:b7:89:98:47:
ba:d6:f9:39:e3:23:ee:5f:4f:c5:ed:90:25:c9:e8:f1:56:64:
c4:41:9f:46:dc:37:a3:24:3e:c8:94:3e:ea:81:11:08:3d:81:
ae:e4:fd:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 14:00:39 2025 by rpki-client