Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/247c5d-a272-482b-9c8e-37fe395d42f0/1/i3vnpHYGqzg5H7IVQrX0Bh8CqFI.mft
File: i3vnpHYGqzg5H7IVQrX0Bh8CqFI.mft (raw, json)
Hash identifier: dU/7RvSe6VmTyqdzSTt4it1vPbbbUsQKGGYF4RI+oeE=
Subject key identifier: 6C:58:FC:BB:11:F7:E2:AA:1E:09:90:A7:FC:A2:20:53:4C:19:D1:A8
Authority key identifier: 8B:7B:E7:A4:76:06:AB:38:39:1F:B2:15:42:B5:F4:06:1F:02:A8:52
Certificate issuer: /CN=8b7be7a47606ab38391fb21542b5f4061f02a852
Certificate serial: 0198D66031C7E745070407148CCD3A17F177
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i3vnpHYGqzg5H7IVQrX0Bh8CqFI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/247c5d-a272-482b-9c8e-37fe395d42f0/1/i3vnpHYGqzg5H7IVQrX0Bh8CqFI.mft
Manifest number: 0CC3
Signing time: Sat 23 Aug 2025 10:01:24 +0000
Manifest this update: Sat 23 Aug 2025 10:01:24 +0000
Manifest next update: Sun 24 Aug 2025 10:01:24 +0000
Files and hashes: 1: i3vnpHYGqzg5H7IVQrX0Bh8CqFI.crl (hash: e/PE7W5Wtxp2Y9k9t40oiyNrp+gHZVJzYp59hl8WWeQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/247c5d-a272-482b-9c8e-37fe395d42f0/1/i3vnpHYGqzg5H7IVQrX0Bh8CqFI.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/247c5d-a272-482b-9c8e-37fe395d42f0/1/i3vnpHYGqzg5H7IVQrX0Bh8CqFI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i3vnpHYGqzg5H7IVQrX0Bh8CqFI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:31:c7:e7:45:07:04:07:14:8c:cd:3a:17:f1:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b7be7a47606ab38391fb21542b5f4061f02a852
Validity
Not Before: Aug 23 10:01:24 2025 GMT
Not After : Aug 24 10:01:24 2025 GMT
Subject: CN=6c58fcbb11f7e2aa1e0990a7fca220534c19d1a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:46:e2:38:52:1e:6b:c3:12:af:95:11:ce:09:
9a:11:30:f0:6d:c8:fa:12:e7:8e:92:15:04:f5:14:
f1:1c:5b:b3:3c:56:cb:8e:60:7b:b7:29:16:31:06:
60:d9:83:87:99:92:2a:ad:d6:31:38:eb:92:15:35:
37:89:a4:3b:71:79:51:d8:93:8e:21:10:de:89:90:
9b:f9:f7:79:69:ad:2a:25:bf:45:4b:03:32:9e:9a:
87:3a:6c:3b:f0:11:5b:51:e6:47:2b:8c:48:9e:cc:
63:3f:41:6b:c8:42:da:2c:c2:d3:ab:05:71:dd:65:
92:bb:9f:30:b1:36:37:53:c3:8c:0b:c7:b2:c6:22:
22:27:2e:88:e8:07:92:7f:4d:4f:d9:0f:7f:a1:af:
07:77:31:10:98:f8:87:a6:48:51:64:4b:85:ae:14:
ed:3e:99:c5:c3:93:ee:25:2c:dd:e4:8e:ba:bb:62:
74:18:e8:d1:9e:3c:24:4d:ba:f7:74:6e:35:34:7b:
49:ec:9e:21:aa:3d:49:07:42:d4:4d:8f:89:1f:7f:
ed:a9:ec:62:5b:9d:92:b9:18:33:d4:e1:0a:bd:3f:
b4:94:27:fe:0d:c5:61:f4:90:e3:48:9f:b3:71:f1:
24:72:18:11:42:a5:70:c4:ae:94:b1:c8:f4:1e:0a:
b4:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:58:FC:BB:11:F7:E2:AA:1E:09:90:A7:FC:A2:20:53:4C:19:D1:A8
X509v3 Authority Key Identifier:
keyid:8B:7B:E7:A4:76:06:AB:38:39:1F:B2:15:42:B5:F4:06:1F:02:A8:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i3vnpHYGqzg5H7IVQrX0Bh8CqFI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/247c5d-a272-482b-9c8e-37fe395d42f0/1/i3vnpHYGqzg5H7IVQrX0Bh8CqFI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/247c5d-a272-482b-9c8e-37fe395d42f0/1/i3vnpHYGqzg5H7IVQrX0Bh8CqFI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:c4:bc:61:f3:88:10:87:82:b4:e7:f5:25:97:4d:12:8e:d9:
02:d7:5c:24:55:fa:1d:a9:9f:8c:36:77:4b:f0:60:82:75:16:
db:08:de:0e:d1:93:dd:30:86:db:a3:39:c0:3e:ec:5d:4e:b3:
72:f5:2c:53:c9:e9:c9:2d:32:a7:df:6b:e2:cc:2c:20:14:fc:
46:a0:1b:7c:13:5b:69:37:a1:e0:20:7f:bc:b3:7f:a8:e2:84:
ea:30:d2:6b:0d:28:73:e6:d1:9e:79:04:8e:db:4b:e9:26:2b:
5c:aa:26:cc:93:09:05:c3:a8:61:07:bd:90:3b:e9:5f:1b:62:
75:61:fa:a7:bf:58:bc:a8:10:1b:25:8c:d8:a3:60:ed:aa:fe:
9d:6d:38:13:97:40:8d:22:7d:0a:4a:0a:de:c3:c5:cc:57:bf:
84:1c:d7:51:b3:79:66:eb:ce:31:c5:7a:d6:fe:15:fc:c8:56:
f2:60:0c:9e:35:f4:ec:fe:4b:53:1b:45:05:2f:1a:81:57:84:
ed:80:f8:2a:ec:ce:ad:5b:24:e8:c3:3b:29:04:91:c2:45:c7:
7c:58:91:78:31:f5:df:58:89:05:22:83:a4:33:89:9c:16:bc:
f6:66:5e:f4:b3:4c:2d:29:b1:b9:f7:45:15:69:f0:ca:a0:2f:
67:88:ed:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:26:46 2025 by rpki-client