Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/6a6b55-ca02-458d-8b5d-74d77302b184/1/IdhdIxrVS4Q5wqrtkaV3WGrEYAA.mft
File: IdhdIxrVS4Q5wqrtkaV3WGrEYAA.mft (raw, json)
Hash identifier: RXEbHS2S/ri895aqS49B19WjCldwNrqh+vh8eZG/3d0=
Subject key identifier: 45:B8:18:3D:1C:14:48:80:E8:B8:10:03:D1:49:6D:33:95:2C:8F:08
Authority key identifier: 21:D8:5D:23:1A:D5:4B:84:39:C2:AA:ED:91:A5:77:58:6A:C4:60:00
Certificate issuer: /CN=21d85d231ad54b8439c2aaed91a577586ac46000
Certificate serial: 0197B7EA8899FBF8AA4484986237E53D922E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IdhdIxrVS4Q5wqrtkaV3WGrEYAA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/6a6b55-ca02-458d-8b5d-74d77302b184/1/IdhdIxrVS4Q5wqrtkaV3WGrEYAA.mft
Manifest number: 10B7
Signing time: Sat 28 Jun 2025 19:01:30 +0000
Manifest this update: Sat 28 Jun 2025 19:01:30 +0000
Manifest next update: Sun 29 Jun 2025 19:01:30 +0000
Files and hashes: 1: IdhdIxrVS4Q5wqrtkaV3WGrEYAA.crl (hash: th38mVjVyfrxt5vgFY9883whdLP/06jkk6W9XxaPNP8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/6a6b55-ca02-458d-8b5d-74d77302b184/1/IdhdIxrVS4Q5wqrtkaV3WGrEYAA.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/6a6b55-ca02-458d-8b5d-74d77302b184/1/IdhdIxrVS4Q5wqrtkaV3WGrEYAA.mft
rsync://rpki.ripe.net/repository/DEFAULT/IdhdIxrVS4Q5wqrtkaV3WGrEYAA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:88:99:fb:f8:aa:44:84:98:62:37:e5:3d:92:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21d85d231ad54b8439c2aaed91a577586ac46000
Validity
Not Before: Jun 28 19:01:30 2025 GMT
Not After : Jun 29 19:01:30 2025 GMT
Subject: CN=45b8183d1c144880e8b81003d1496d33952c8f08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:35:e5:8d:49:ef:71:9f:98:74:71:71:ee:0e:
bd:48:81:9c:00:64:60:d7:8e:d7:0b:33:73:03:7b:
d2:0a:d9:49:90:76:3c:a7:d0:40:5a:c5:47:2b:d4:
1e:bf:4a:37:4e:bc:69:8e:4b:cc:e0:f0:eb:e0:63:
ca:b6:19:59:a4:a9:7a:d6:26:f7:e4:54:7d:e0:16:
59:fe:33:24:8b:7e:55:b8:43:28:9a:55:05:72:3d:
65:f5:ae:1f:60:31:13:51:54:d6:9f:ed:f4:20:d0:
c4:e2:8e:00:2c:aa:5d:f0:73:d4:52:70:b7:5b:01:
e6:c8:06:ef:6f:8e:56:58:6e:e1:62:92:9e:e7:b9:
c7:10:08:58:00:b5:76:48:d3:8b:e2:87:1f:6b:c3:
a3:4a:cd:07:6e:0a:b2:75:f2:1d:fb:e3:ae:35:7c:
94:a3:ac:68:a9:4e:34:dc:1f:64:f7:2f:e7:e7:02:
be:6e:54:52:be:99:de:a9:17:b1:74:e6:25:95:33:
61:79:1e:c9:2b:91:67:82:c6:2f:e9:21:bb:bc:14:
e4:b3:5a:c6:e4:59:92:79:03:31:46:d3:c4:b5:fe:
02:ea:ce:3e:59:c6:5c:5e:17:ab:9b:96:4e:97:af:
d2:45:37:ed:03:bf:eb:9c:8b:7b:d1:3b:d6:fe:8d:
88:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:B8:18:3D:1C:14:48:80:E8:B8:10:03:D1:49:6D:33:95:2C:8F:08
X509v3 Authority Key Identifier:
keyid:21:D8:5D:23:1A:D5:4B:84:39:C2:AA:ED:91:A5:77:58:6A:C4:60:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IdhdIxrVS4Q5wqrtkaV3WGrEYAA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/6a6b55-ca02-458d-8b5d-74d77302b184/1/IdhdIxrVS4Q5wqrtkaV3WGrEYAA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/6a6b55-ca02-458d-8b5d-74d77302b184/1/IdhdIxrVS4Q5wqrtkaV3WGrEYAA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:ca:13:31:af:ea:da:e2:69:e0:7f:02:92:1d:b4:72:c3:46:
12:b6:44:c5:09:5f:fc:0d:59:34:6b:5f:68:3b:12:3d:a5:48:
a6:26:ba:9a:18:89:68:db:e8:ba:8e:38:4e:29:92:c6:2a:b1:
52:32:73:98:d6:bc:72:04:57:78:29:98:c7:f6:3b:6e:48:d6:
16:3a:ca:46:1f:5c:f3:ce:11:3a:3c:31:ec:92:85:c1:ec:f3:
65:c5:2d:3d:1e:03:c3:b9:93:de:65:31:9d:81:7f:bd:0c:e3:
eb:fb:82:59:b5:1c:7d:44:6c:09:55:a0:4c:4f:1c:d0:a2:10:
dd:5a:5b:cb:18:6c:b6:19:15:f4:9e:6b:f4:52:2d:3b:f6:34:
36:6f:01:59:ed:66:15:29:40:43:2c:74:1b:fa:34:73:f5:38:
a2:eb:f4:bf:f0:48:17:7a:bb:72:48:b9:25:cc:04:b2:13:d3:
5e:c4:71:db:3d:6b:d8:6a:c2:54:c0:58:2b:e3:34:ed:7e:4f:
67:68:1e:e6:1c:4c:0f:ed:45:f3:57:9a:d1:89:4a:d7:3f:da:
3b:4a:17:b0:05:95:7d:29:ae:9a:82:45:21:ae:0b:73:be:62:
b6:49:d1:dc:70:bc:00:7a:17:17:36:f1:57:ca:43:df:d0:87:
51:31:7f:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:08:21 2025 by rpki-client