Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/baeddc-dbf2-447f-b42d-5b30639babf6/1/I5P_Icb3MQdXqdzXgdqIBfI3lNg.mft
File: I5P_Icb3MQdXqdzXgdqIBfI3lNg.mft (raw, json)
Hash identifier: V+jUGo6V5Kfrzty0iw2++Upd5oPCqnhaLdudmYJLwXM=
Subject key identifier: 05:5E:B4:0F:CE:2D:6F:C5:A6:83:5E:5D:73:E5:70:0E:A3:46:66:BE
Authority key identifier: 23:93:FF:21:C6:F7:31:07:57:A9:DC:D7:81:DA:88:05:F2:37:94:D8
Certificate issuer: /CN=2393ff21c6f7310757a9dcd781da8805f23794d8
Certificate serial: 0197B6A2058CAA5765635C037ECBC1BDA9D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I5P_Icb3MQdXqdzXgdqIBfI3lNg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/baeddc-dbf2-447f-b42d-5b30639babf6/1/I5P_Icb3MQdXqdzXgdqIBfI3lNg.mft
Manifest number: 08FD
Signing time: Sat 28 Jun 2025 13:02:40 +0000
Manifest this update: Sat 28 Jun 2025 13:02:40 +0000
Manifest next update: Sun 29 Jun 2025 13:02:40 +0000
Files and hashes: 1: I5P_Icb3MQdXqdzXgdqIBfI3lNg.crl (hash: 3a0uOQbVf8zbs4TkNvYpUDM4E+iAXjtRQiiTqgFnaAU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/baeddc-dbf2-447f-b42d-5b30639babf6/1/I5P_Icb3MQdXqdzXgdqIBfI3lNg.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/baeddc-dbf2-447f-b42d-5b30639babf6/1/I5P_Icb3MQdXqdzXgdqIBfI3lNg.mft
rsync://rpki.ripe.net/repository/DEFAULT/I5P_Icb3MQdXqdzXgdqIBfI3lNg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:02:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a2:05:8c:aa:57:65:63:5c:03:7e:cb:c1:bd:a9:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2393ff21c6f7310757a9dcd781da8805f23794d8
Validity
Not Before: Jun 28 13:02:40 2025 GMT
Not After : Jun 29 13:02:40 2025 GMT
Subject: CN=055eb40fce2d6fc5a6835e5d73e5700ea34666be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:21:e1:99:02:cf:7b:32:24:f9:f4:99:0b:c9:
9b:23:7b:6d:d9:a1:0b:ac:6e:be:37:56:06:33:f3:
30:ed:88:70:9a:34:bb:4e:3c:9a:f3:2e:42:fc:52:
86:2c:52:7a:bb:0e:07:c4:89:ea:52:d4:62:1f:62:
16:5c:58:8b:86:9b:2c:b5:a7:46:bd:b6:80:2d:ed:
6b:da:89:e5:33:5c:0d:de:1c:69:9f:e4:92:d0:ec:
64:91:0b:fd:40:20:b0:2b:ba:8d:b8:01:1c:3f:73:
c7:ac:0a:ae:fb:cb:c0:90:a8:a1:41:80:2b:ed:f0:
76:94:7c:df:b8:ac:9f:86:8b:37:c1:20:52:7c:2e:
13:17:5a:59:30:75:86:99:69:2a:b2:6c:a6:ae:50:
59:5b:d1:7f:db:23:92:c9:c4:4a:97:e8:d1:d9:bf:
b5:d6:08:94:0c:07:9e:3e:23:12:a2:83:4a:50:0b:
49:43:89:1f:ac:e5:18:79:1f:e8:f5:00:fe:aa:2e:
ba:74:df:2e:6a:68:e1:4f:18:89:24:53:a9:19:ae:
c2:94:79:b2:62:16:48:4c:a8:c5:34:37:a8:78:0e:
51:86:81:e5:91:f5:dc:d7:81:fa:12:13:cc:d6:9d:
25:b9:63:f0:23:50:5b:8c:2f:e4:fd:a2:86:bc:91:
33:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:5E:B4:0F:CE:2D:6F:C5:A6:83:5E:5D:73:E5:70:0E:A3:46:66:BE
X509v3 Authority Key Identifier:
keyid:23:93:FF:21:C6:F7:31:07:57:A9:DC:D7:81:DA:88:05:F2:37:94:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I5P_Icb3MQdXqdzXgdqIBfI3lNg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/baeddc-dbf2-447f-b42d-5b30639babf6/1/I5P_Icb3MQdXqdzXgdqIBfI3lNg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/baeddc-dbf2-447f-b42d-5b30639babf6/1/I5P_Icb3MQdXqdzXgdqIBfI3lNg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:08:7a:d9:66:58:9a:c3:89:73:e0:b9:75:af:de:50:e9:e0:
24:50:56:29:84:69:c8:c3:a5:e2:40:bf:d6:c6:81:ef:f0:01:
43:0e:cc:ef:0a:03:7c:ec:cc:25:43:69:35:50:97:96:94:a1:
30:ca:72:bb:c0:00:4c:cd:c1:c3:df:1e:3a:da:88:06:30:9d:
39:a1:6d:cd:64:77:f7:ed:cd:98:c9:6c:1d:44:79:d9:03:cf:
73:ab:9c:bb:63:30:be:84:75:80:e1:4d:5f:29:90:84:b7:4e:
6e:e8:3e:63:d6:02:3f:9e:f1:fc:fc:df:24:ff:34:57:ec:d4:
db:37:0e:7c:d9:94:9f:b0:9e:d5:32:d9:3f:02:36:f9:4d:b8:
28:43:be:86:d4:10:95:22:6c:20:e3:b3:be:f7:f6:2d:75:c3:
78:ff:d4:20:28:2f:c3:51:1d:69:6a:04:7b:d4:13:ba:88:2b:
e1:a8:4c:03:8f:64:f9:e5:f6:2a:45:27:f3:e1:ba:f4:6a:05:
de:58:c7:8a:3e:37:b8:5b:aa:a0:87:a7:11:b1:16:ba:cd:1b:
ef:26:a9:be:a2:1f:69:09:76:a0:56:f2:90:c1:7f:bd:71:a1:
83:10:89:af:2f:84:62:07:63:0b:0d:96:02:9b:84:53:33:22:
4d:ca:18:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:14:54 2025 by rpki-client