Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/81b00a-f68d-44f4-8825-982736b45bdf/1/iMaZNJivBRiWLl9I1chG3BddGIQ.mft
File: iMaZNJivBRiWLl9I1chG3BddGIQ.mft (raw, json)
Hash identifier: V2Et+HeE2n+EuTTLg/fS7/WzvrLIxDzdzDh4MIJIYnw=
Subject key identifier: 61:7E:39:E6:26:9D:25:B9:64:C8:A3:80:5F:72:96:23:76:63:5E:CC
Authority key identifier: 88:C6:99:34:98:AF:05:18:96:2E:5F:48:D5:C8:46:DC:17:5D:18:84
Certificate issuer: /CN=88c6993498af0518962e5f48d5c846dc175d1884
Certificate serial: 0197B8FCC55D03FDCA55D8212E16F6D41C2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iMaZNJivBRiWLl9I1chG3BddGIQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/81b00a-f68d-44f4-8825-982736b45bdf/1/iMaZNJivBRiWLl9I1chG3BddGIQ.mft
Manifest number: 15B4
Signing time: Sun 29 Jun 2025 00:01:02 +0000
Manifest this update: Sun 29 Jun 2025 00:01:02 +0000
Manifest next update: Mon 30 Jun 2025 00:01:02 +0000
Files and hashes: 1: iMaZNJivBRiWLl9I1chG3BddGIQ.crl (hash: 77vUMvs+pLkKZMUTMbsGUNYeTv7LQ3zTYChcp9Ogdrc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/81b00a-f68d-44f4-8825-982736b45bdf/1/iMaZNJivBRiWLl9I1chG3BddGIQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/81b00a-f68d-44f4-8825-982736b45bdf/1/iMaZNJivBRiWLl9I1chG3BddGIQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/iMaZNJivBRiWLl9I1chG3BddGIQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:fc:c5:5d:03:fd:ca:55:d8:21:2e:16:f6:d4:1c:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88c6993498af0518962e5f48d5c846dc175d1884
Validity
Not Before: Jun 29 00:01:02 2025 GMT
Not After : Jun 30 00:01:02 2025 GMT
Subject: CN=617e39e6269d25b964c8a3805f72962376635ecc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:2d:7a:d9:06:90:20:36:d6:f6:b3:96:70:2f:
3c:37:d5:ce:07:ad:87:9b:f4:5a:2c:88:05:d8:05:
fd:f6:79:20:9d:fe:09:be:39:eb:8f:27:fd:52:cc:
96:8b:2d:9a:63:a5:68:2b:3e:59:da:f0:7f:a1:bd:
3a:38:31:2f:22:1e:71:fe:61:f7:dd:be:ac:91:f4:
42:b0:6e:7b:d3:93:d7:cd:62:2a:af:21:fc:fc:96:
ff:35:fd:b8:00:d9:b9:1f:4b:82:9b:13:f7:1d:46:
8e:6a:bd:b8:00:da:54:7b:a1:8c:8a:1c:9c:d1:15:
d5:38:f4:d9:73:bf:55:dc:41:fc:69:b4:b8:7c:29:
2e:54:9a:1d:9b:d6:ae:5e:ee:2c:96:6f:b2:bd:02:
d4:38:f6:8c:45:36:e0:51:da:37:91:74:83:54:c1:
7a:3c:cc:7a:b2:6a:2b:42:43:31:f0:67:79:07:77:
e4:19:aa:b0:bc:17:0c:92:d6:5b:36:69:4a:59:b7:
74:9b:8b:c2:44:b7:19:cc:87:3c:6a:6e:78:90:c1:
ee:1a:1d:c0:06:60:c9:50:74:67:c0:f9:be:ef:10:
5e:12:a1:01:1a:3a:3b:09:a7:a6:92:01:15:50:ed:
4d:2f:8b:90:60:59:9d:0b:99:5c:83:87:36:92:ca:
74:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:7E:39:E6:26:9D:25:B9:64:C8:A3:80:5F:72:96:23:76:63:5E:CC
X509v3 Authority Key Identifier:
keyid:88:C6:99:34:98:AF:05:18:96:2E:5F:48:D5:C8:46:DC:17:5D:18:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iMaZNJivBRiWLl9I1chG3BddGIQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/81b00a-f68d-44f4-8825-982736b45bdf/1/iMaZNJivBRiWLl9I1chG3BddGIQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/81b00a-f68d-44f4-8825-982736b45bdf/1/iMaZNJivBRiWLl9I1chG3BddGIQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:c8:fa:21:f7:50:8f:74:cc:2a:a4:68:80:25:64:40:79:27:
a0:73:45:b0:f9:43:ce:66:e3:2d:09:aa:03:6d:bd:22:50:07:
9f:a1:bc:1b:4a:a0:3f:db:a1:51:f1:12:46:89:5e:67:3d:6a:
9b:05:2e:4f:9e:ea:10:51:9a:c0:7f:87:a7:1f:dd:01:25:83:
20:ec:f6:fc:c2:ed:ed:f1:55:b4:93:e7:01:3e:8e:04:08:ed:
9e:19:d5:92:51:35:11:7b:55:ea:ed:06:0c:a2:1e:97:71:4e:
b8:25:48:fb:d2:17:72:8f:75:95:45:16:56:56:e3:5e:48:3d:
2c:53:9f:0c:90:b8:c9:76:dd:aa:07:a0:20:ab:b2:9d:61:57:
9b:38:fe:e2:62:09:a1:ca:03:bd:bd:5c:e9:06:72:d0:e5:e6:
b6:18:47:a3:d3:09:50:a1:1c:bc:f4:bd:d1:8c:c0:72:24:47:
67:3d:d3:da:98:92:88:3b:20:e7:37:35:21:da:1f:a8:61:28:
d1:e7:d8:9a:18:fa:af:87:d5:e4:a8:75:82:ef:0b:fa:3c:fa:
c0:48:26:fb:21:9e:c6:0b:f5:50:0a:a1:fb:d2:b0:de:7e:d3:
3d:3e:a7:56:61:de:79:bd:25:52:2f:43:2c:55:89:2c:96:ea:
a5:4d:25:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 02:08:08 2025 by rpki-client