Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/6bac55-9aaa-4530-8ff4-6027a6839ae4/1/Ic4xHI7WC-8bXk99O4ZBB4FEGKM.mft
File: Ic4xHI7WC-8bXk99O4ZBB4FEGKM.mft (raw, json)
Hash identifier: r4psFZuF1CedC7Kn0gYYKfrypgelxpZM5EI06J84fCM=
Subject key identifier: 52:3C:A1:0C:98:D4:C6:5D:0D:C8:91:A0:78:A4:D8:53:0C:3A:D2:4B
Authority key identifier: 21:CE:31:1C:8E:D6:0B:EF:1B:5E:4F:7D:3B:86:41:07:81:44:18:A3
Certificate issuer: /CN=21ce311c8ed60bef1b5e4f7d3b864107814418a3
Certificate serial: 01988E46AA85C6D84801FFA37CA211473709
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ic4xHI7WC-8bXk99O4ZBB4FEGKM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/6bac55-9aaa-4530-8ff4-6027a6839ae4/1/Ic4xHI7WC-8bXk99O4ZBB4FEGKM.mft
Manifest number: 09C5
Signing time: Sat 09 Aug 2025 10:00:52 +0000
Manifest this update: Sat 09 Aug 2025 10:00:52 +0000
Manifest next update: Sun 10 Aug 2025 10:00:52 +0000
Files and hashes: 1: Ic4xHI7WC-8bXk99O4ZBB4FEGKM.crl (hash: I3Ys5DCabFFny882ZpmSJnnZft+aVR2HcNLKAZ72T6U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/6bac55-9aaa-4530-8ff4-6027a6839ae4/1/Ic4xHI7WC-8bXk99O4ZBB4FEGKM.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/6bac55-9aaa-4530-8ff4-6027a6839ae4/1/Ic4xHI7WC-8bXk99O4ZBB4FEGKM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ic4xHI7WC-8bXk99O4ZBB4FEGKM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 05:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8e:46:aa:85:c6:d8:48:01:ff:a3:7c:a2:11:47:37:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21ce311c8ed60bef1b5e4f7d3b864107814418a3
Validity
Not Before: Aug 9 10:00:52 2025 GMT
Not After : Aug 10 10:00:52 2025 GMT
Subject: CN=523ca10c98d4c65d0dc891a078a4d8530c3ad24b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:dd:97:4a:91:07:47:3a:e0:31:02:b6:46:1c:
45:6c:1d:c3:9a:f2:9a:25:e4:61:b5:ce:ff:e2:5f:
88:15:70:a1:ae:dd:1f:a1:08:5a:ce:57:e2:c6:8a:
72:0e:c4:50:00:6d:26:0f:d2:fa:0a:0c:e6:63:d1:
a7:f3:14:0e:47:26:26:d4:8a:48:fc:52:75:0d:e9:
da:7d:d4:93:22:a4:28:f3:08:5b:9c:e2:a1:4d:8e:
69:c2:92:8c:e0:1c:c8:64:e0:1b:05:50:12:bf:30:
dd:73:f9:05:4d:f9:df:e0:96:15:b3:76:60:43:03:
90:37:b5:ed:1a:95:1e:a7:99:b2:9a:7e:16:58:0f:
ef:e7:72:02:af:90:65:6c:82:7e:8c:20:d9:a8:c4:
1e:a4:00:ba:e6:5a:ba:5f:8e:98:8f:bc:52:db:7a:
f5:f9:af:6d:7a:45:9c:fc:16:53:2c:cd:f8:54:2a:
71:c9:cd:a6:b9:b4:dd:d1:ff:39:c6:13:62:24:e6:
bd:72:23:56:0d:7f:84:3f:7d:4e:cd:64:bd:86:de:
e0:f4:a6:b0:fc:6f:3d:84:ec:ce:55:75:42:82:36:
f1:cc:1f:9d:d9:cf:e7:84:3d:bc:0f:81:27:25:80:
6a:1f:80:e6:e5:bb:2e:e9:04:41:f5:9a:28:e7:a4:
be:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:3C:A1:0C:98:D4:C6:5D:0D:C8:91:A0:78:A4:D8:53:0C:3A:D2:4B
X509v3 Authority Key Identifier:
keyid:21:CE:31:1C:8E:D6:0B:EF:1B:5E:4F:7D:3B:86:41:07:81:44:18:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ic4xHI7WC-8bXk99O4ZBB4FEGKM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/6bac55-9aaa-4530-8ff4-6027a6839ae4/1/Ic4xHI7WC-8bXk99O4ZBB4FEGKM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/6bac55-9aaa-4530-8ff4-6027a6839ae4/1/Ic4xHI7WC-8bXk99O4ZBB4FEGKM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:57:3a:73:84:87:92:26:fb:6e:4b:93:c5:cb:95:35:8a:54:
ba:3f:a1:33:06:a1:0e:4d:3f:ed:2a:85:6e:4e:8e:05:9e:ca:
a9:68:c0:93:a9:3a:36:20:55:7f:7c:f5:87:da:53:da:5a:e3:
51:b4:5f:46:1d:b2:2d:94:8c:cb:17:4e:fe:9f:6f:58:22:e2:
e7:bd:bd:d7:7d:29:cd:9b:6d:9e:a0:79:56:7b:a1:70:52:e4:
b1:98:de:99:2b:4e:4a:e9:f7:2f:b8:fa:12:85:30:4d:9c:4f:
80:af:9c:20:c5:7a:3e:a3:74:f9:33:8a:57:ae:d8:db:70:b6:
ca:c8:c6:1a:f0:50:f5:98:64:b1:4b:af:8f:79:c0:2e:4a:f8:
bb:39:ee:8a:17:a4:db:9e:25:60:3f:bc:2a:c0:b8:31:b5:0c:
5c:5e:1b:5f:b1:38:d9:6b:3e:bc:52:96:e8:8e:ee:ac:60:3f:
d3:39:ef:36:65:60:31:c2:bd:d9:7c:42:c7:1b:93:12:76:18:
86:f2:40:23:ef:04:bb:5a:04:ba:23:7f:95:3f:15:e0:a8:20:
cf:b9:15:8d:ea:1e:bb:01:74:87:87:e9:17:66:17:c7:f2:f8:
3c:9c:c6:be:23:6e:1e:15:31:6f:5e:b6:16:64:88:d2:e7:e6:
2e:a1:70:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 14:28:42 2025 by rpki-client