Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/d7de10-5dc0-4d89-9a68-f704b1f53ace/1/itMkK15lo9DZHGsZ60CRlZskMUg.mft
File: itMkK15lo9DZHGsZ60CRlZskMUg.mft (raw, json)
Hash identifier: MqnUpQ/qtb+3+RrNVBx+11V3USMTCWFwjsZ2hML1SNs=
Subject key identifier: EF:12:40:E1:7D:80:DD:97:E6:52:BF:0E:15:92:88:30:71:AE:A3:9B
Authority key identifier: 8A:D3:24:2B:5E:65:A3:D0:D9:1C:6B:19:EB:40:91:95:9B:24:31:48
Certificate issuer: /CN=8ad3242b5e65a3d0d91c6b19eb4091959b243148
Certificate serial: 01988EED1A37C873B5EC35EA1D9655249F4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/itMkK15lo9DZHGsZ60CRlZskMUg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/d7de10-5dc0-4d89-9a68-f704b1f53ace/1/itMkK15lo9DZHGsZ60CRlZskMUg.mft
Manifest number: 0331
Signing time: Sat 09 Aug 2025 13:02:39 +0000
Manifest this update: Sat 09 Aug 2025 13:02:39 +0000
Manifest next update: Sun 10 Aug 2025 13:02:39 +0000
Files and hashes: 1: itMkK15lo9DZHGsZ60CRlZskMUg.crl (hash: w9kM94rt+dr+yiqZT4c8tfVn2fpZ6hzNHv78NQp/xFA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/d7de10-5dc0-4d89-9a68-f704b1f53ace/1/itMkK15lo9DZHGsZ60CRlZskMUg.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/d7de10-5dc0-4d89-9a68-f704b1f53ace/1/itMkK15lo9DZHGsZ60CRlZskMUg.mft
rsync://rpki.ripe.net/repository/DEFAULT/itMkK15lo9DZHGsZ60CRlZskMUg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 13:02:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8e:ed:1a:37:c8:73:b5:ec:35:ea:1d:96:55:24:9f:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ad3242b5e65a3d0d91c6b19eb4091959b243148
Validity
Not Before: Aug 9 13:02:39 2025 GMT
Not After : Aug 10 13:02:39 2025 GMT
Subject: CN=ef1240e17d80dd97e652bf0e1592883071aea39b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:57:c1:d1:5c:c2:b4:20:5f:50:78:ac:c8:74:
42:41:32:4d:c0:a0:b0:f1:99:f0:a7:6d:f8:5c:43:
99:11:d1:14:f3:1e:17:c0:ff:bf:cc:b1:f0:4a:ab:
f6:c9:0c:17:47:93:dd:9e:ca:77:b2:ac:9c:e5:cf:
e6:d8:c1:6d:a4:94:f1:f1:aa:99:80:0c:cf:97:40:
87:20:e0:44:c0:2b:33:a0:95:37:53:35:c8:7f:46:
e3:68:4f:4d:ee:18:d2:f2:62:34:99:6a:f2:f9:58:
9d:2c:e4:fe:54:f6:b5:aa:4d:5f:b4:d6:c4:ce:63:
b0:b9:5b:7a:93:cb:2b:65:d6:89:0a:c2:e0:df:6e:
fd:1b:32:27:6d:87:1c:4d:33:dd:b2:c2:e5:d4:e1:
48:34:09:fb:25:e2:bd:d6:55:1c:38:28:5d:c4:6b:
3f:ee:db:42:a6:f5:e0:c6:84:1a:88:77:9f:45:ca:
c6:17:ae:07:11:e5:e1:97:5b:eb:71:17:88:89:45:
14:cd:f9:9d:60:95:5e:d6:9c:0f:c6:51:f2:34:e3:
a8:73:d6:2e:b6:39:bd:45:de:55:05:fe:11:30:f2:
61:34:ee:86:76:a5:97:93:fa:fb:6d:14:58:90:70:
6b:42:41:17:d2:34:31:58:af:8a:b4:89:0a:0d:94:
a7:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:12:40:E1:7D:80:DD:97:E6:52:BF:0E:15:92:88:30:71:AE:A3:9B
X509v3 Authority Key Identifier:
keyid:8A:D3:24:2B:5E:65:A3:D0:D9:1C:6B:19:EB:40:91:95:9B:24:31:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/itMkK15lo9DZHGsZ60CRlZskMUg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/d7de10-5dc0-4d89-9a68-f704b1f53ace/1/itMkK15lo9DZHGsZ60CRlZskMUg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/d7de10-5dc0-4d89-9a68-f704b1f53ace/1/itMkK15lo9DZHGsZ60CRlZskMUg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:f8:d9:78:34:b2:67:83:c2:b3:67:0f:73:b7:cd:01:0a:a6:
71:34:30:de:ba:ca:db:8e:0e:74:39:c1:29:f9:47:1a:33:6b:
de:d9:0e:32:14:83:7b:95:a8:b3:d1:b7:fb:c2:f9:b0:6b:a4:
7f:4a:d3:6c:57:e2:62:52:d8:a1:c3:07:2c:c9:99:8a:5f:69:
a6:10:be:fb:ac:29:db:05:a8:e2:3e:8e:ae:35:a0:d6:67:47:
cc:55:ff:1e:74:8d:9e:2c:98:94:28:c1:17:43:3e:54:64:38:
09:34:15:8f:62:d4:cd:a7:db:8c:35:e8:16:1f:5e:88:f4:36:
f9:50:29:2c:57:3a:bc:93:4f:ec:fa:41:13:59:c3:5c:80:e9:
21:98:1d:dd:26:49:74:77:d6:c9:a5:6c:b1:76:51:1f:d9:7d:
68:fc:12:a5:47:9a:3f:c4:5d:b4:39:eb:da:83:16:04:70:98:
9b:de:00:89:b9:8b:c9:a8:3e:93:b4:aa:db:a0:53:05:2f:23:
c7:e5:d5:ce:33:96:65:48:f9:e7:e6:f4:e8:d3:bb:fc:d0:93:
41:67:2d:08:83:d2:af:ba:bc:d6:e5:78:9c:92:14:1e:a0:e3:
7c:b6:c9:5a:9f:50:48:51:17:85:13:80:b0:f5:5f:10:5d:5b:
d8:33:5b:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 20:35:05 2025 by rpki-client