Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/efece3-e530-46c8-b388-9873afa73e7e/1/I1HFLSNz9aW3LcbdEqddE7JluQQ.mft
File: I1HFLSNz9aW3LcbdEqddE7JluQQ.mft (raw, json)
Hash identifier: UZS/BQvZT1ohQYqmaaWVoL4onj58D1GVht1B6eWmOX4=
Subject key identifier: B5:B4:3C:8A:78:B9:3B:54:93:78:F5:F6:BB:BB:EE:9B:31:80:67:12
Authority key identifier: 23:51:C5:2D:23:73:F5:A5:B7:2D:C6:DD:12:A7:5D:13:B2:65:B9:04
Certificate issuer: /CN=2351c52d2373f5a5b72dc6dd12a75d13b265b904
Certificate serial: 0198D697F7ED317B4811B4BC36897F8FA988
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I1HFLSNz9aW3LcbdEqddE7JluQQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/efece3-e530-46c8-b388-9873afa73e7e/1/I1HFLSNz9aW3LcbdEqddE7JluQQ.mft
Manifest number: 1369
Signing time: Sat 23 Aug 2025 11:02:20 +0000
Manifest this update: Sat 23 Aug 2025 11:02:20 +0000
Manifest next update: Sun 24 Aug 2025 11:02:20 +0000
Files and hashes: 1: I1HFLSNz9aW3LcbdEqddE7JluQQ.crl (hash: tvt1+erf/bU1xQkx0OS3dDAwHAAzenwmSkVjjVnlbAs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/efece3-e530-46c8-b388-9873afa73e7e/1/I1HFLSNz9aW3LcbdEqddE7JluQQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/efece3-e530-46c8-b388-9873afa73e7e/1/I1HFLSNz9aW3LcbdEqddE7JluQQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/I1HFLSNz9aW3LcbdEqddE7JluQQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 11:02:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:97:f7:ed:31:7b:48:11:b4:bc:36:89:7f:8f:a9:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2351c52d2373f5a5b72dc6dd12a75d13b265b904
Validity
Not Before: Aug 23 11:02:20 2025 GMT
Not After : Aug 24 11:02:20 2025 GMT
Subject: CN=b5b43c8a78b93b549378f5f6bbbbee9b31806712
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:cc:8e:da:ec:a1:ab:c1:a2:cd:3e:a4:cf:7a:
2f:59:66:37:45:6c:4e:86:91:0e:1f:14:a9:e2:03:
02:1f:76:fd:05:c1:bd:46:c7:a0:52:ea:b9:c6:fe:
95:34:c4:71:37:3d:7c:b2:95:8a:21:04:b9:8b:6e:
b9:79:be:76:2f:30:29:a1:3b:45:69:30:3b:9d:1d:
5b:da:9a:74:d0:b6:42:b3:71:49:7a:70:a8:60:ca:
ee:20:c8:3c:c5:14:6e:50:7b:b1:11:29:80:6a:a7:
a9:5e:34:23:3d:90:11:02:5a:f5:ab:4c:44:1a:91:
83:0e:d6:04:aa:0a:96:af:22:90:bc:29:b4:16:aa:
04:f2:5d:91:15:67:2b:cc:67:58:05:57:2f:6a:cc:
57:61:9a:3a:27:ce:99:09:c4:5a:a0:9b:33:ec:05:
0e:bc:02:ff:f6:f8:6b:f3:ea:0d:b8:fa:70:84:e8:
4e:b2:a5:44:e2:b2:29:95:4e:09:f9:00:d8:d6:39:
1e:14:e3:00:b2:f5:8d:ba:b0:d0:c9:81:08:5c:1b:
8f:90:ab:59:a8:86:73:08:0d:76:bb:8e:42:4d:c2:
eb:38:51:75:0f:6a:03:3e:d8:c6:71:56:53:bc:6c:
0d:18:f3:b6:cc:b1:31:52:64:e9:c2:27:ec:ca:07:
05:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:B4:3C:8A:78:B9:3B:54:93:78:F5:F6:BB:BB:EE:9B:31:80:67:12
X509v3 Authority Key Identifier:
keyid:23:51:C5:2D:23:73:F5:A5:B7:2D:C6:DD:12:A7:5D:13:B2:65:B9:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I1HFLSNz9aW3LcbdEqddE7JluQQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/efece3-e530-46c8-b388-9873afa73e7e/1/I1HFLSNz9aW3LcbdEqddE7JluQQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/efece3-e530-46c8-b388-9873afa73e7e/1/I1HFLSNz9aW3LcbdEqddE7JluQQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:75:27:5b:98:5a:0b:84:02:6a:73:f1:f6:14:ca:5e:1a:e1:
05:d4:dd:16:09:8d:cc:22:2a:74:6c:f4:77:e1:b2:5d:5c:c1:
4d:23:84:40:59:92:1b:98:9b:63:fa:37:c7:1e:ed:0d:5d:49:
42:74:53:ce:89:1e:b1:6f:6d:fe:39:2d:67:9a:61:2a:24:a6:
a1:6e:cb:1a:99:b1:98:6c:23:6b:92:fe:01:ea:5e:64:63:98:
ca:11:27:c0:ae:a6:9a:03:ba:aa:1e:9d:2d:f4:f0:e1:52:d7:
bd:20:f9:d4:f5:94:85:85:85:09:39:9a:20:fe:aa:8a:12:14:
29:f1:8d:05:05:ba:a6:6f:44:83:02:4e:97:9b:b7:02:ce:6f:
12:00:77:09:2c:98:78:fb:82:94:f2:28:ca:6b:4b:bf:7e:f9:
b4:31:86:39:c2:05:7c:1c:f1:71:6f:f0:c2:1f:a1:ca:e5:3d:
7d:d6:6b:0e:64:06:64:90:5a:e2:5f:71:35:ff:e7:19:f4:4b:
62:29:c8:c8:ee:1d:c0:bc:b1:2c:52:25:3c:f7:2e:52:cc:11:
08:d2:15:7f:a9:e0:53:f3:dd:97:ed:0a:cb:18:fb:b8:dc:51:
02:e3:2e:5a:d2:8b:25:32:69:ab:18:68:7f:7c:40:de:a8:4a:
47:3e:ea:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:14:24 2025 by rpki-client