Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/fa1004-e450-41ec-9d5e-4a1f7c1bdf78/1/IZt8FF4Kz4FIQY1UJH393_wZ-kw.mft
File: IZt8FF4Kz4FIQY1UJH393_wZ-kw.mft (raw, json)
Hash identifier: qqxtW4v2cFkbilRq4m36afSheHsKA4wPwShVxKRLc6c=
Subject key identifier: 04:A3:58:D0:35:0A:21:4C:39:05:71:25:B6:7A:42:7D:9F:0B:30:4C
Authority key identifier: 21:9B:7C:14:5E:0A:CF:81:48:41:8D:54:24:7D:FD:DF:FC:19:FA:4C
Certificate issuer: /CN=219b7c145e0acf8148418d54247dfddffc19fa4c
Certificate serial: 0198A083CFB43347A7354AA72D23B5B1DBBE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IZt8FF4Kz4FIQY1UJH393_wZ-kw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/fa1004-e450-41ec-9d5e-4a1f7c1bdf78/1/IZt8FF4Kz4FIQY1UJH393_wZ-kw.mft
Manifest number: 01E1
Signing time: Tue 12 Aug 2025 23:00:49 +0000
Manifest this update: Tue 12 Aug 2025 23:00:49 +0000
Manifest next update: Wed 13 Aug 2025 23:00:49 +0000
Files and hashes: 1: IZt8FF4Kz4FIQY1UJH393_wZ-kw.crl (hash: BtsQaFYJ20+vcwWLJltB1/Nl2X9tL8MKVL12dA69j84=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/fa1004-e450-41ec-9d5e-4a1f7c1bdf78/1/IZt8FF4Kz4FIQY1UJH393_wZ-kw.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/fa1004-e450-41ec-9d5e-4a1f7c1bdf78/1/IZt8FF4Kz4FIQY1UJH393_wZ-kw.mft
rsync://rpki.ripe.net/repository/DEFAULT/IZt8FF4Kz4FIQY1UJH393_wZ-kw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 22:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:a0:83:cf:b4:33:47:a7:35:4a:a7:2d:23:b5:b1:db:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=219b7c145e0acf8148418d54247dfddffc19fa4c
Validity
Not Before: Aug 12 23:00:49 2025 GMT
Not After : Aug 13 23:00:49 2025 GMT
Subject: CN=04a358d0350a214c39057125b67a427d9f0b304c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:ff:ff:99:25:4e:4e:a1:10:d2:80:b3:fa:f4:
26:ff:82:cc:e3:e0:b6:7e:c4:d6:b1:48:58:80:d2:
af:53:9b:ee:10:62:7c:8f:2d:e3:67:96:26:b4:98:
f7:ba:02:0b:e6:63:23:26:6b:f9:ab:8c:e5:4d:5a:
4d:e9:a7:5a:5d:ba:fd:e3:01:6c:ad:15:3d:f4:d5:
3a:8b:ae:78:82:ac:fa:83:d8:76:4e:f8:bd:54:35:
a2:53:fa:9d:2e:ad:47:a3:7f:39:a6:47:33:f8:8c:
f5:5b:60:61:61:dd:f8:5f:b9:08:b4:8b:0a:8e:3a:
58:92:cc:7f:bb:bf:7f:d0:01:14:ae:a2:91:8d:d8:
51:a4:e3:3f:44:34:d3:87:06:7c:63:c3:a7:9d:b6:
3c:0d:2c:78:bb:c2:20:44:6a:69:f3:c5:ab:3b:c6:
92:38:96:32:f9:ec:fc:2b:d7:91:34:e0:35:90:74:
ce:29:5d:00:55:26:b2:6a:75:cb:5d:3a:a8:b1:7f:
ef:30:ae:de:2f:3b:47:28:19:1d:45:54:fa:0b:47:
41:2d:6d:ca:e0:c3:b7:fc:fb:6f:01:9f:28:ea:4a:
f2:cb:42:15:36:b2:79:f9:c3:a3:05:69:94:10:02:
d8:36:ec:23:a0:53:df:54:9a:d9:f1:d8:45:fc:38:
67:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:A3:58:D0:35:0A:21:4C:39:05:71:25:B6:7A:42:7D:9F:0B:30:4C
X509v3 Authority Key Identifier:
keyid:21:9B:7C:14:5E:0A:CF:81:48:41:8D:54:24:7D:FD:DF:FC:19:FA:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IZt8FF4Kz4FIQY1UJH393_wZ-kw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/fa1004-e450-41ec-9d5e-4a1f7c1bdf78/1/IZt8FF4Kz4FIQY1UJH393_wZ-kw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/fa1004-e450-41ec-9d5e-4a1f7c1bdf78/1/IZt8FF4Kz4FIQY1UJH393_wZ-kw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:8c:85:08:06:dc:2b:29:76:77:00:e3:2d:16:75:53:09:7a:
bf:12:66:60:b9:ac:f8:7f:1e:7f:40:49:0c:a0:d6:dc:7c:65:
0a:51:f7:fb:60:8c:06:95:4b:38:d8:11:80:f2:44:82:c2:15:
a4:ac:d7:59:94:f4:8f:35:58:9d:35:57:30:f3:0c:be:63:96:
f6:cc:11:96:01:7d:5a:81:73:45:ed:32:1d:69:ee:86:4c:80:
f8:51:72:c6:90:4a:82:07:d6:eb:e7:2e:d7:70:7e:7d:06:d0:
d2:d3:81:31:fe:90:f5:6b:36:e1:34:aa:fa:f2:4b:6b:44:df:
06:f6:1f:7e:33:c2:74:30:83:b8:6f:2f:1c:13:95:5c:be:7d:
f8:4e:c1:61:ae:32:8c:5d:d2:87:49:a8:4a:cf:f7:bd:21:e4:
62:7a:78:e1:df:b3:81:99:79:3b:bb:e4:8a:f3:ab:75:26:9a:
bb:11:57:fe:c3:6f:b1:c4:00:88:71:31:3f:5f:db:a7:c7:d3:
39:cd:c7:53:6d:bc:ec:c7:93:3b:4e:34:35:86:45:c2:d8:93:
07:30:66:c0:52:31:a6:35:17:5d:32:40:e3:32:d3:d2:27:b0:
a4:c0:ce:e8:8c:7b:4c:c8:ed:ad:52:2a:5d:6a:a4:3c:88:d3:
06:93:43:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 02:43:10 2025 by rpki-client