Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/93e301-62f8-49f1-a0f7-7ed6ef73ff6d/1/i2nPHqZfCOKQoEFSd-ZeyVt4DXc.mft
File: i2nPHqZfCOKQoEFSd-ZeyVt4DXc.mft (raw, json)
Hash identifier: bwyiMHXVlip7wz0bnXZzbToPPZ2ckj1gY3JQV0A4cCQ=
Subject key identifier: 83:59:B9:ED:EA:39:71:B9:73:E9:36:AD:C7:CE:34:C2:36:9E:C3:C3
Authority key identifier: 8B:69:CF:1E:A6:5F:08:E2:90:A0:41:52:77:E6:5E:C9:5B:78:0D:77
Certificate issuer: /CN=8b69cf1ea65f08e290a0415277e65ec95b780d77
Certificate serial: 0197B6A09E493406C6D93F735CDF1FD0D807
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2nPHqZfCOKQoEFSd-ZeyVt4DXc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/93e301-62f8-49f1-a0f7-7ed6ef73ff6d/1/i2nPHqZfCOKQoEFSd-ZeyVt4DXc.mft
Manifest number: 0CEB
Signing time: Sat 28 Jun 2025 13:01:08 +0000
Manifest this update: Sat 28 Jun 2025 13:01:08 +0000
Manifest next update: Sun 29 Jun 2025 13:01:08 +0000
Files and hashes: 1: i2nPHqZfCOKQoEFSd-ZeyVt4DXc.crl (hash: BdTEHX6xOBM4/FOHAV1OGMszRYnIm/NOPBgJSO+R5oA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/93e301-62f8-49f1-a0f7-7ed6ef73ff6d/1/i2nPHqZfCOKQoEFSd-ZeyVt4DXc.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/93e301-62f8-49f1-a0f7-7ed6ef73ff6d/1/i2nPHqZfCOKQoEFSd-ZeyVt4DXc.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2nPHqZfCOKQoEFSd-ZeyVt4DXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:9e:49:34:06:c6:d9:3f:73:5c:df:1f:d0:d8:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b69cf1ea65f08e290a0415277e65ec95b780d77
Validity
Not Before: Jun 28 13:01:08 2025 GMT
Not After : Jun 29 13:01:08 2025 GMT
Subject: CN=8359b9edea3971b973e936adc7ce34c2369ec3c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:92:5a:b8:46:c1:bb:8a:df:3c:77:9e:87:d6:
bb:31:2c:4e:6a:f4:b7:56:ab:cb:68:5b:60:0d:8d:
cd:17:84:9c:da:1e:25:48:3f:c9:54:ce:e7:dc:45:
1a:6f:1e:37:04:78:d7:ec:70:d5:1a:1d:84:61:1c:
56:95:2e:82:2e:04:4a:58:88:38:8a:2d:f1:74:9b:
ee:15:a2:82:4b:f3:6b:77:25:49:32:6b:4f:91:ec:
4f:96:a3:cb:d4:8a:8e:03:50:a7:e6:01:10:28:ce:
83:f9:a4:16:09:c4:f0:72:a2:75:5c:47:2c:32:70:
7b:66:84:1b:f5:af:9e:b0:cd:54:8b:12:95:d1:68:
3f:8d:d7:82:aa:4f:b2:4e:13:f4:dd:4b:98:cf:0b:
6a:78:e9:3f:18:f4:85:d2:20:32:bb:ac:2c:e0:75:
87:b2:a2:b6:0e:13:58:97:dc:ae:dd:c4:17:05:ef:
a9:82:d1:c8:e1:db:1b:d3:a9:33:4f:69:12:e4:22:
17:ad:2c:65:e3:23:3c:25:4a:bb:bd:ae:e0:11:d4:
e0:b0:b8:f6:8d:fb:93:00:99:02:66:5d:f9:00:f7:
4e:83:13:fd:ef:76:db:c4:f7:62:a9:d9:57:05:4c:
a1:0f:1b:68:6c:a8:9a:65:f9:db:52:f3:62:44:c2:
08:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:59:B9:ED:EA:39:71:B9:73:E9:36:AD:C7:CE:34:C2:36:9E:C3:C3
X509v3 Authority Key Identifier:
keyid:8B:69:CF:1E:A6:5F:08:E2:90:A0:41:52:77:E6:5E:C9:5B:78:0D:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2nPHqZfCOKQoEFSd-ZeyVt4DXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/93e301-62f8-49f1-a0f7-7ed6ef73ff6d/1/i2nPHqZfCOKQoEFSd-ZeyVt4DXc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/93e301-62f8-49f1-a0f7-7ed6ef73ff6d/1/i2nPHqZfCOKQoEFSd-ZeyVt4DXc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:93:10:38:71:d6:19:f6:8f:0c:7d:f3:4d:8b:09:01:47:30:
86:7f:db:3f:6d:87:38:89:25:da:fd:99:44:1b:18:9d:3a:f2:
8e:e3:22:70:36:21:04:41:ec:64:b3:e5:08:d7:86:38:ce:2d:
9c:cb:e3:f0:b3:12:44:33:27:34:4f:d0:6f:8d:a9:70:fe:1f:
51:cd:9c:71:2c:61:11:e4:b2:ae:69:82:ad:85:96:88:64:2e:
41:bd:76:dc:f0:8f:0d:df:b1:4e:16:d7:42:23:f8:9c:d7:78:
ee:7b:26:27:76:50:21:9f:0e:82:32:2c:de:d9:6f:d4:74:8c:
ee:8c:ab:bc:a5:9b:9a:3f:ed:03:a4:42:1b:d4:df:87:0e:75:
de:86:a5:bf:6c:8d:35:7c:bd:28:c5:a1:3d:a8:8a:1a:b6:ee:
22:56:dc:54:c8:5c:1d:40:ef:7b:3c:6a:ef:a8:f0:30:c3:7e:
2f:08:45:a8:38:68:ac:53:4b:28:52:ae:8f:75:c1:0c:3b:cd:
2e:e2:96:e8:b8:b2:af:28:82:fe:03:44:24:85:a3:7d:70:ed:
ad:91:cb:9d:db:37:95:cb:20:3a:94:a9:d8:fc:d8:89:ee:b7:
88:f5:aa:ce:c6:c1:b4:66:51:7e:8b:81:50:bd:17:d4:23:bd:
8d:1e:ea:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:55:51 2025 by rpki-client