
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/5e43c3-cadf-4374-99aa-4e2f89cae1da/1/1II6TKTXaJe13f55iOJx_2gTGPI.mft
File: 1II6TKTXaJe13f55iOJx_2gTGPI.mft (raw, json)
Hash identifier: z55cTb26U6yhD/JW6IPVOVEciNUXnPRdBK4HQz3yOv0=
Subject key identifier: 31:A5:01:16:47:19:DF:28:BE:A6:AF:A8:72:33:E4:87:61:E4:CA:46
Authority key identifier: D4:82:3A:4C:A4:D7:68:97:B5:DD:FE:79:88:E2:71:FF:68:13:18:F2
Certificate issuer: /CN=d4823a4ca4d76897b5ddfe7988e271ff681318f2
Certificate serial: 0198733D7CA8FD0494353BB282AFBBE34E71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1II6TKTXaJe13f55iOJx_2gTGPI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/5e43c3-cadf-4374-99aa-4e2f89cae1da/1/1II6TKTXaJe13f55iOJx_2gTGPI.mft
Manifest number: 12FB
Signing time: Mon 04 Aug 2025 04:01:06 +0000
Manifest this update: Mon 04 Aug 2025 04:01:06 +0000
Manifest next update: Tue 05 Aug 2025 04:01:06 +0000
Files and hashes: 1: 1II6TKTXaJe13f55iOJx_2gTGPI.crl (hash: /Y4gw05U6DBY+59dy52HxofAXm4mRntYlEuC6sYV0mI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/5e43c3-cadf-4374-99aa-4e2f89cae1da/1/1II6TKTXaJe13f55iOJx_2gTGPI.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/5e43c3-cadf-4374-99aa-4e2f89cae1da/1/1II6TKTXaJe13f55iOJx_2gTGPI.mft
rsync://rpki.ripe.net/repository/DEFAULT/1II6TKTXaJe13f55iOJx_2gTGPI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:3d:7c:a8:fd:04:94:35:3b:b2:82:af:bb:e3:4e:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4823a4ca4d76897b5ddfe7988e271ff681318f2
Validity
Not Before: Aug 4 04:01:06 2025 GMT
Not After : Aug 5 04:01:06 2025 GMT
Subject: CN=31a501164719df28bea6afa87233e48761e4ca46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:2a:8c:4c:53:ca:10:9a:b5:df:53:de:e1:bb:
62:54:f1:f5:55:d2:8f:3d:ac:82:a5:da:2a:c2:5c:
45:e2:53:e0:6e:92:c5:7f:7d:f2:56:d6:27:ee:d6:
f2:b5:b2:4b:15:75:c5:68:b5:95:ee:df:ce:bb:7c:
49:fa:0b:51:01:57:b9:88:fe:8f:5e:a0:53:5e:82:
12:2b:52:66:7f:9c:9c:0c:9a:d4:ab:f9:48:ed:75:
42:c1:f9:2d:eb:a9:16:c2:ea:5e:49:d8:ef:7b:80:
5e:64:ac:07:ae:ee:24:cb:07:c3:41:93:5c:69:45:
cd:7d:3f:e6:ad:66:0b:f0:2a:f8:5b:ee:90:f9:74:
36:22:19:2e:a3:60:e7:89:db:87:ed:c0:50:30:6c:
8c:e2:01:52:0b:db:36:87:b5:3a:ed:dd:5e:5a:be:
e2:2a:0a:52:0b:68:a9:50:3c:55:3e:ba:df:22:f6:
96:e7:42:a9:88:62:02:2b:ee:53:89:4a:c2:f6:f1:
7a:f8:bd:e3:1c:c1:84:10:a8:73:5c:67:41:e3:c6:
24:69:f0:81:6c:a1:0a:26:d2:15:27:07:e6:6c:3a:
b7:df:89:86:66:e5:7b:89:cf:0f:af:2d:f4:47:9b:
d5:90:4a:7f:d4:e0:11:a0:df:ca:00:6e:a5:21:18:
3f:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:A5:01:16:47:19:DF:28:BE:A6:AF:A8:72:33:E4:87:61:E4:CA:46
X509v3 Authority Key Identifier:
keyid:D4:82:3A:4C:A4:D7:68:97:B5:DD:FE:79:88:E2:71:FF:68:13:18:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1II6TKTXaJe13f55iOJx_2gTGPI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/5e43c3-cadf-4374-99aa-4e2f89cae1da/1/1II6TKTXaJe13f55iOJx_2gTGPI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/5e43c3-cadf-4374-99aa-4e2f89cae1da/1/1II6TKTXaJe13f55iOJx_2gTGPI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:bb:50:0e:95:43:6e:be:50:f5:92:26:e2:b9:1e:c8:d9:ad:
21:55:80:1f:bf:05:e5:3c:9b:c2:96:35:1f:23:08:57:f0:a5:
65:85:96:7a:9d:ea:93:17:19:b3:d5:d6:d7:01:02:95:a4:ad:
c8:c3:d0:b3:ed:d5:d5:cd:6b:b6:cd:00:4e:55:cc:8f:b4:33:
92:80:cd:4b:1e:17:18:80:ea:2a:33:d8:fd:f4:d3:ec:f8:cf:
54:0a:39:46:0d:60:fa:84:de:57:a4:fa:33:90:bf:fb:b8:eb:
d1:51:4c:02:d5:04:67:7d:ec:46:69:16:58:40:47:07:d5:62:
d7:fe:4c:c5:10:03:78:dd:01:0a:9e:27:d2:41:ce:77:a9:c7:
86:a5:95:a7:8a:9e:41:19:5f:39:d1:9d:54:15:76:e7:1f:37:
70:fa:8b:76:21:65:6e:3a:9b:c6:6c:f9:4e:7a:c0:d4:be:f7:
e1:ba:08:b3:bd:cb:fa:f6:29:52:6c:2d:2d:0c:1f:22:0a:66:
03:37:e9:0e:e8:70:b1:c8:3b:2c:24:85:a5:38:b3:9d:7e:e8:
73:ae:83:aa:26:c7:6c:af:d7:52:bb:95:12:62:82:54:69:b9:
b8:18:1b:f1:65:0a:e9:4b:6d:7c:2d:69:df:cd:01:a2:fa:d8:
b9:ae:ca:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:01:30 2025 by rpki-client