Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/c41378-dbdf-4cb3-96ee-0238c910a9bf/1/I8_2Rq3BnAP2QXpuKhxBg8a40_4.mft
File: I8_2Rq3BnAP2QXpuKhxBg8a40_4.mft (raw, json)
Hash identifier: lgIOajmFCs7p3FD5ug0v9nfYyW85OS1bWCjfEK2PzdU=
Subject key identifier: 9C:67:9C:57:E7:54:5B:29:83:5C:FA:FE:4A:53:7B:8A:8D:C8:B0:A2
Authority key identifier: 23:CF:F6:46:AD:C1:9C:03:F6:41:7A:6E:2A:1C:41:83:C6:B8:D3:FE
Certificate issuer: /CN=23cff646adc19c03f6417a6e2a1c4183c6b8d3fe
Certificate serial: 0197B6D72D3F2B24BCF1E8C53624E3CF09B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I8_2Rq3BnAP2QXpuKhxBg8a40_4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/c41378-dbdf-4cb3-96ee-0238c910a9bf/1/I8_2Rq3BnAP2QXpuKhxBg8a40_4.mft
Manifest number: 15B0
Signing time: Sat 28 Jun 2025 14:00:44 +0000
Manifest this update: Sat 28 Jun 2025 14:00:44 +0000
Manifest next update: Sun 29 Jun 2025 14:00:44 +0000
Files and hashes: 1: I8_2Rq3BnAP2QXpuKhxBg8a40_4.crl (hash: fyJTZgjUWOuzXQmkRdp64q3FUGReMdXlxKVBoJVWyfk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/c41378-dbdf-4cb3-96ee-0238c910a9bf/1/I8_2Rq3BnAP2QXpuKhxBg8a40_4.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/c41378-dbdf-4cb3-96ee-0238c910a9bf/1/I8_2Rq3BnAP2QXpuKhxBg8a40_4.mft
rsync://rpki.ripe.net/repository/DEFAULT/I8_2Rq3BnAP2QXpuKhxBg8a40_4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 14:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:2d:3f:2b:24:bc:f1:e8:c5:36:24:e3:cf:09:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23cff646adc19c03f6417a6e2a1c4183c6b8d3fe
Validity
Not Before: Jun 28 14:00:44 2025 GMT
Not After : Jun 29 14:00:44 2025 GMT
Subject: CN=9c679c57e7545b29835cfafe4a537b8a8dc8b0a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:44:72:96:b0:6a:ff:71:e6:aa:47:35:39:f7:
87:28:d0:10:fe:3e:a0:21:07:dd:0b:f3:32:bc:db:
9d:f4:63:96:4a:2a:13:0e:b9:6d:13:43:b7:3f:9c:
ae:60:a7:10:f4:5d:af:d3:bf:82:1f:f8:88:0d:5d:
0f:2c:95:55:19:e2:f4:00:20:a2:de:49:90:13:7b:
9a:a1:4b:61:65:3b:96:ea:3b:fa:15:16:a5:c5:e3:
d8:65:70:5a:1f:17:2d:51:cb:c4:4d:09:48:67:5a:
38:6b:80:ad:d8:1e:9d:7a:b9:65:e3:70:1e:a3:cf:
bf:20:c0:19:2d:45:54:d3:19:e5:b4:fe:b2:7c:48:
d5:6f:cf:b7:d5:66:b9:25:8f:de:f9:de:03:6c:27:
54:d2:35:82:58:ea:d9:20:cc:ff:08:e3:5e:93:2c:
76:60:26:c6:c1:93:81:0d:01:b6:a5:d3:4c:2b:62:
c9:3f:83:10:f9:fa:6a:c6:10:34:d3:62:b8:52:c5:
e9:94:d3:00:be:94:0b:ba:9e:f0:49:e8:89:f2:ca:
c5:aa:a6:e4:e9:cb:cc:5a:0c:70:54:6c:4c:92:f1:
63:8b:e8:09:01:73:fc:87:b5:82:9b:60:8f:be:74:
c0:1e:eb:64:13:84:60:c7:25:ce:e7:5f:9e:f8:f7:
81:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:67:9C:57:E7:54:5B:29:83:5C:FA:FE:4A:53:7B:8A:8D:C8:B0:A2
X509v3 Authority Key Identifier:
keyid:23:CF:F6:46:AD:C1:9C:03:F6:41:7A:6E:2A:1C:41:83:C6:B8:D3:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I8_2Rq3BnAP2QXpuKhxBg8a40_4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/c41378-dbdf-4cb3-96ee-0238c910a9bf/1/I8_2Rq3BnAP2QXpuKhxBg8a40_4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/c41378-dbdf-4cb3-96ee-0238c910a9bf/1/I8_2Rq3BnAP2QXpuKhxBg8a40_4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:78:cd:0f:1d:82:8d:e1:a4:5c:d1:d5:51:bc:e9:9e:43:38:
1a:67:97:43:80:bc:7f:c3:00:32:65:2a:04:ac:37:a6:1e:5e:
36:18:26:9f:5c:96:ab:ca:68:f5:91:38:20:98:f5:c0:54:b4:
e5:88:28:5b:0b:9a:9f:16:eb:df:99:1f:e9:65:18:4b:1c:b8:
88:4e:57:e3:e8:5a:eb:f3:b7:34:b6:5d:cf:51:ed:e7:5a:a3:
bb:44:be:f3:41:0f:e3:00:2b:f8:ff:7a:ac:96:9c:ee:e3:11:
54:dc:8b:96:4c:59:e7:e1:fe:70:9f:9a:46:b8:ed:8a:c5:f8:
a6:55:0e:13:59:1b:e6:14:d0:38:17:6b:a9:9d:69:4b:18:77:
eb:aa:2b:db:f1:6e:1d:f7:16:7a:8e:02:44:7c:13:84:e7:02:
a5:73:ae:14:9c:cd:9e:8e:2f:2c:59:56:6b:7c:12:f5:f6:17:
e8:ca:53:05:c3:c2:12:1e:75:6d:a2:53:c2:a6:e3:f4:fc:b7:
34:d5:ac:e0:3b:1e:47:57:73:58:fb:3f:fa:c8:76:94:e3:81:
04:3a:48:7f:a3:ca:51:5d:e7:fd:f1:a1:ee:02:5e:a3:42:3c:
11:0b:a2:02:66:6e:4d:a6:46:a5:a8:7c:d7:89:c2:51:d7:e9:
3b:3e:5b:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:22:38 2025 by rpki-client