Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/247c5d-a272-482b-9c8e-37fe395d42f0/1/i3vnpHYGqzg5H7IVQrX0Bh8CqFI.mft
File: i3vnpHYGqzg5H7IVQrX0Bh8CqFI.mft (raw, json)
Hash identifier: z4Mdi5FZHn7n+locAncwsQ3Txyz7FWhF+LSbnhI7hJ0=
Subject key identifier: 48:32:E9:2C:AA:03:56:36:F5:E7:09:7F:28:99:BA:19:55:64:21:B0
Authority key identifier: 8B:7B:E7:A4:76:06:AB:38:39:1F:B2:15:42:B5:F4:06:1F:02:A8:52
Certificate issuer: /CN=8b7be7a47606ab38391fb21542b5f4061f02a852
Certificate serial: 0197C049EE8201EF21BA6C47AD59F7E5108C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i3vnpHYGqzg5H7IVQrX0Bh8CqFI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/247c5d-a272-482b-9c8e-37fe395d42f0/1/i3vnpHYGqzg5H7IVQrX0Bh8CqFI.mft
Manifest number: 0C33
Signing time: Mon 30 Jun 2025 10:02:40 +0000
Manifest this update: Mon 30 Jun 2025 10:02:40 +0000
Manifest next update: Tue 01 Jul 2025 10:02:40 +0000
Files and hashes: 1: i3vnpHYGqzg5H7IVQrX0Bh8CqFI.crl (hash: RnyZy42eAs3rDdGu24K5q+n3hFtWMJeJbISjbWO6WJE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/247c5d-a272-482b-9c8e-37fe395d42f0/1/i3vnpHYGqzg5H7IVQrX0Bh8CqFI.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/247c5d-a272-482b-9c8e-37fe395d42f0/1/i3vnpHYGqzg5H7IVQrX0Bh8CqFI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i3vnpHYGqzg5H7IVQrX0Bh8CqFI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Jul 2025 10:02:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c0:49:ee:82:01:ef:21:ba:6c:47:ad:59:f7:e5:10:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b7be7a47606ab38391fb21542b5f4061f02a852
Validity
Not Before: Jun 30 10:02:40 2025 GMT
Not After : Jul 1 10:02:40 2025 GMT
Subject: CN=4832e92caa035636f5e7097f2899ba19556421b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:2e:46:0b:59:51:9c:e7:ca:d8:4b:4f:d8:91:
de:eb:9b:71:eb:8c:b6:f9:53:27:e3:10:46:5b:03:
be:52:99:7a:00:c3:67:ec:17:97:82:da:36:1c:49:
ad:79:09:23:66:75:a9:e0:de:06:5d:8d:cf:b0:03:
3f:71:bf:04:0b:d6:2a:4e:e3:40:80:ab:70:2f:bb:
bc:82:87:10:42:61:cc:13:39:81:ef:60:3a:d6:88:
24:3f:c1:f4:88:12:d6:41:e4:55:f4:dc:00:41:98:
89:52:f0:7e:fb:f5:93:66:28:e8:b0:30:10:a4:75:
a0:bf:e4:64:ba:56:ed:d0:39:be:60:37:da:23:a3:
e9:45:51:33:6d:ea:9b:e3:a2:8f:99:52:3a:b0:ee:
79:6f:79:fa:4b:70:d9:6c:bb:a3:94:8d:9c:72:da:
8a:ea:10:27:ed:e4:a5:d3:d3:e2:61:78:9c:91:68:
7f:53:25:a4:1b:fe:0c:72:46:0d:df:a7:dd:7c:31:
97:0c:cf:f6:68:05:a8:18:1f:f5:93:c2:5d:5f:f1:
42:55:a2:6e:21:47:c1:af:da:d0:93:61:d2:df:08:
10:c5:ef:60:9d:9c:85:d7:b8:ba:dd:eb:9e:75:04:
bb:02:1c:e4:7b:3f:fb:95:58:46:58:bc:79:0f:67:
29:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:32:E9:2C:AA:03:56:36:F5:E7:09:7F:28:99:BA:19:55:64:21:B0
X509v3 Authority Key Identifier:
keyid:8B:7B:E7:A4:76:06:AB:38:39:1F:B2:15:42:B5:F4:06:1F:02:A8:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i3vnpHYGqzg5H7IVQrX0Bh8CqFI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/247c5d-a272-482b-9c8e-37fe395d42f0/1/i3vnpHYGqzg5H7IVQrX0Bh8CqFI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/247c5d-a272-482b-9c8e-37fe395d42f0/1/i3vnpHYGqzg5H7IVQrX0Bh8CqFI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:51:b6:58:9c:e0:f8:c6:62:26:cb:6f:a1:22:59:f3:ae:92:
81:75:a2:23:a1:9e:4e:48:b5:59:c9:c2:96:5a:66:79:fc:15:
57:6b:35:74:4a:1a:bc:8a:41:61:fd:f9:ab:9d:fe:81:37:b7:
82:7b:96:3f:b8:ec:7b:c9:2c:7f:0a:5a:e2:64:52:79:e5:9a:
18:ad:d9:73:27:15:5c:bf:f1:19:ba:0f:03:95:ef:a1:18:a4:
9b:58:f6:c6:dc:f3:72:af:8a:15:0e:0c:6e:33:f7:f7:eb:e0:
67:d2:3a:dc:77:88:a5:0c:85:30:39:b1:35:de:a0:1e:02:a5:
a5:b1:c3:b8:75:87:77:d1:3e:85:86:16:f8:cf:f6:06:0c:4b:
5b:89:46:75:73:ab:d0:38:da:d3:ba:10:2a:b7:a0:c3:a4:06:
88:ad:e0:69:21:d7:10:fa:62:0a:20:50:d1:57:aa:aa:b6:65:
95:c1:47:e0:70:b3:3d:69:e0:51:7f:17:02:e5:8c:1d:58:27:
8a:e6:11:01:87:da:a1:b4:86:75:01:95:04:0c:d0:b5:4c:5a:
60:62:3b:7e:33:87:34:a4:1e:4b:80:8e:64:ae:db:d3:eb:15:
79:10:e2:93:5f:3c:36:a2:0d:f2:b9:e3:f5:c2:79:d1:9e:38:
02:d8:92:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 19:22:22 2025 by rpki-client