Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/981b84-9ff0-48e9-ab21-9b6cbfb43246/1/X-C-IOAv_HNU1bLTPg_ncVGa_R8.mft
File: X-C-IOAv_HNU1bLTPg_ncVGa_R8.mft (raw, json)
Hash identifier: vnnoNmikWUW6T+irHXtnchdtswJ+X+B/lqoDYAJIy2s=
Subject key identifier: F9:A6:DD:E6:74:0D:34:D1:3E:BB:F2:C2:01:05:D6:EB:BD:B2:B2:1E
Authority key identifier: 5F:E0:BE:20:E0:2F:FC:73:54:D5:B2:D3:3E:0F:E7:71:51:9A:FD:1F
Certificate issuer: /CN=5fe0be20e02ffc7354d5b2d33e0fe771519afd1f
Certificate serial: 0197B6A22B8094C5109DC7AAE692CD9F7B35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X-C-IOAv_HNU1bLTPg_ncVGa_R8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/981b84-9ff0-48e9-ab21-9b6cbfb43246/1/X-C-IOAv_HNU1bLTPg_ncVGa_R8.mft
Manifest number: 0661
Signing time: Sat 28 Jun 2025 13:02:50 +0000
Manifest this update: Sat 28 Jun 2025 13:02:50 +0000
Manifest next update: Sun 29 Jun 2025 13:02:50 +0000
Files and hashes: 1: X-C-IOAv_HNU1bLTPg_ncVGa_R8.crl (hash: SkFdT7vl//gePxRrkonIvW0JxAZKHWgSq4QLLLY3iGo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/981b84-9ff0-48e9-ab21-9b6cbfb43246/1/X-C-IOAv_HNU1bLTPg_ncVGa_R8.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/981b84-9ff0-48e9-ab21-9b6cbfb43246/1/X-C-IOAv_HNU1bLTPg_ncVGa_R8.mft
rsync://rpki.ripe.net/repository/DEFAULT/X-C-IOAv_HNU1bLTPg_ncVGa_R8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a2:2b:80:94:c5:10:9d:c7:aa:e6:92:cd:9f:7b:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5fe0be20e02ffc7354d5b2d33e0fe771519afd1f
Validity
Not Before: Jun 28 13:02:50 2025 GMT
Not After : Jun 29 13:02:50 2025 GMT
Subject: CN=f9a6dde6740d34d13ebbf2c20105d6ebbdb2b21e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:64:f6:2f:a7:ee:ec:78:65:3a:4b:a0:d8:ac:
76:19:5b:7f:e9:58:e7:47:1b:27:b9:5f:d9:db:f7:
e2:0d:e8:66:57:1b:c9:53:fa:0a:36:b1:d6:8a:c2:
fd:11:9d:a4:25:22:7d:88:f0:8d:b6:13:f1:71:16:
70:9b:dd:1c:c6:9f:c0:ae:86:ac:83:8e:bc:b9:28:
87:35:09:ca:73:b0:08:92:da:62:2f:72:15:1c:62:
63:96:51:ae:81:99:61:2d:1e:ea:42:4c:9e:ae:50:
ea:29:61:39:33:9e:6f:c0:38:2a:7a:66:8e:c1:b1:
12:ea:19:ca:57:cf:d9:8e:b8:b3:7b:54:99:bf:d2:
d8:6e:43:a5:03:99:06:82:d2:21:b9:2b:1a:20:56:
7f:85:1c:3d:b9:b6:d2:f1:c6:f4:56:06:03:0d:13:
c3:f0:f0:65:77:97:35:ca:30:03:33:e5:1f:5b:b4:
d8:cc:3c:10:e3:61:c5:8f:b3:cb:04:cd:bb:40:9f:
ba:20:cd:3e:5e:ae:7c:19:b3:05:07:00:66:e6:f3:
ac:fc:5e:e4:27:5f:98:8d:6e:73:34:4c:a3:2b:76:
e1:f5:0f:eb:4d:2e:55:8f:1d:b7:d1:52:42:3a:e4:
95:3b:9b:c2:05:72:46:fa:b7:2d:77:40:d3:27:d8:
38:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:A6:DD:E6:74:0D:34:D1:3E:BB:F2:C2:01:05:D6:EB:BD:B2:B2:1E
X509v3 Authority Key Identifier:
keyid:5F:E0:BE:20:E0:2F:FC:73:54:D5:B2:D3:3E:0F:E7:71:51:9A:FD:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X-C-IOAv_HNU1bLTPg_ncVGa_R8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/981b84-9ff0-48e9-ab21-9b6cbfb43246/1/X-C-IOAv_HNU1bLTPg_ncVGa_R8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/981b84-9ff0-48e9-ab21-9b6cbfb43246/1/X-C-IOAv_HNU1bLTPg_ncVGa_R8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:38:67:13:9a:93:49:57:ca:ae:0e:05:0e:a2:9e:32:69:09:
7c:fe:15:72:75:9f:88:85:77:da:eb:85:79:3d:0c:9e:ec:00:
41:73:1c:ae:04:da:7a:1d:48:3b:a2:27:21:fd:f8:76:f6:f8:
30:9c:ab:44:ec:2e:38:50:3b:25:b9:2a:2f:ee:56:91:d3:b3:
ec:a8:16:34:13:69:ae:6b:76:a8:be:82:dc:28:5e:94:04:18:
c8:cb:5c:ba:ca:fe:ea:2f:b3:e5:a4:d1:fe:81:8c:27:12:ff:
d3:c2:dd:fc:09:d2:54:86:53:44:49:7c:8f:eb:fc:49:c0:c8:
7f:57:54:e0:d0:e4:2a:b9:d6:12:98:42:30:66:94:62:69:28:
88:47:31:2a:93:90:09:29:44:c4:ad:ef:68:8e:96:3f:f5:c8:
e7:e4:36:30:8a:5c:1b:2e:5e:b2:a5:9b:c0:77:02:51:e2:fc:
0d:be:0c:aa:19:cf:5e:6e:41:d8:1e:92:ff:01:cc:59:d4:a2:
0a:1d:f7:f4:33:07:39:58:aa:ba:02:de:d7:c7:37:c0:2b:b7:
06:11:e6:ca:e3:32:c3:1a:5c:53:95:78:7d:31:27:28:9a:76:
fe:a1:4c:db:db:af:c3:f4:b0:f8:19:c2:eb:89:b1:ac:93:c9:
eb:c7:0d:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:23:36 2025 by rpki-client