Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/1f1af6-dd1b-4117-ac17-deab8586f2ce/1/I1PVKkAkkfT5n-VHG90aXdb0K7w.mft
File: I1PVKkAkkfT5n-VHG90aXdb0K7w.mft (raw, json)
Hash identifier: tFBBY3VPhHV3Ug8kvxr4L/yAfxu2rOk6yqSd1f48dFk=
Subject key identifier: 7C:96:45:71:0E:EB:F7:EA:61:E0:F3:44:1E:28:13:5B:0C:5F:28:FC
Authority key identifier: 23:53:D5:2A:40:24:91:F4:F9:9F:E5:47:1B:DD:1A:5D:D6:F4:2B:BC
Certificate issuer: /CN=2353d52a402491f4f99fe5471bdd1a5dd6f42bbc
Certificate serial: 0197B8FD08540BB6F71C7428F54486D7B8C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I1PVKkAkkfT5n-VHG90aXdb0K7w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/1f1af6-dd1b-4117-ac17-deab8586f2ce/1/I1PVKkAkkfT5n-VHG90aXdb0K7w.mft
Manifest number: 15B0
Signing time: Sun 29 Jun 2025 00:01:19 +0000
Manifest this update: Sun 29 Jun 2025 00:01:19 +0000
Manifest next update: Mon 30 Jun 2025 00:01:19 +0000
Files and hashes: 1: I1PVKkAkkfT5n-VHG90aXdb0K7w.crl (hash: lP1M1WCMK/plIzcAXMBeL6pDDBxBEM2tLgTqvGVMqww=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/1f1af6-dd1b-4117-ac17-deab8586f2ce/1/I1PVKkAkkfT5n-VHG90aXdb0K7w.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/1f1af6-dd1b-4117-ac17-deab8586f2ce/1/I1PVKkAkkfT5n-VHG90aXdb0K7w.mft
rsync://rpki.ripe.net/repository/DEFAULT/I1PVKkAkkfT5n-VHG90aXdb0K7w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 00:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:fd:08:54:0b:b6:f7:1c:74:28:f5:44:86:d7:b8:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2353d52a402491f4f99fe5471bdd1a5dd6f42bbc
Validity
Not Before: Jun 29 00:01:19 2025 GMT
Not After : Jun 30 00:01:19 2025 GMT
Subject: CN=7c9645710eebf7ea61e0f3441e28135b0c5f28fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:3c:23:a0:ce:b6:26:fd:38:56:b6:9b:4d:e2:
29:6d:5f:cf:79:7d:1e:f8:5c:f1:f9:55:78:8b:61:
59:cd:bb:88:19:35:9e:c9:02:67:d0:c3:bc:77:70:
cf:de:59:46:b4:a6:24:a4:34:ea:18:02:3d:db:b4:
92:d3:ce:37:f5:de:9b:f1:da:24:e8:75:1e:a8:53:
8b:1f:20:64:14:2d:74:9b:0b:b1:ca:6f:53:62:45:
3c:02:36:8d:16:41:a5:67:b0:6b:07:4f:ee:86:bd:
0e:72:40:f7:f5:0e:bf:73:19:6a:dc:e9:dd:b9:ec:
5a:ab:4b:43:27:09:3a:cc:42:ed:b8:5d:87:c8:2b:
6d:1d:85:60:8a:2d:3e:f3:39:5e:14:6e:0a:ef:b7:
59:b5:a8:d8:f8:ff:7e:9d:89:8b:25:3f:10:ac:18:
96:57:05:b0:88:e0:db:6e:1c:b1:91:34:5b:e0:0f:
6b:38:5f:26:6d:5d:ee:ff:ad:48:35:e4:56:7a:68:
52:cc:7c:37:09:9c:13:79:a9:ea:b1:22:b0:1c:b7:
cc:35:11:c7:ba:49:75:0f:30:86:12:9c:f0:99:08:
29:6e:2b:f7:43:d3:55:e4:4f:ce:06:ee:6d:01:31:
d5:e2:2e:0f:4a:a7:b0:0a:a5:5d:65:77:2e:f9:65:
32:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:96:45:71:0E:EB:F7:EA:61:E0:F3:44:1E:28:13:5B:0C:5F:28:FC
X509v3 Authority Key Identifier:
keyid:23:53:D5:2A:40:24:91:F4:F9:9F:E5:47:1B:DD:1A:5D:D6:F4:2B:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I1PVKkAkkfT5n-VHG90aXdb0K7w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/1f1af6-dd1b-4117-ac17-deab8586f2ce/1/I1PVKkAkkfT5n-VHG90aXdb0K7w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/1f1af6-dd1b-4117-ac17-deab8586f2ce/1/I1PVKkAkkfT5n-VHG90aXdb0K7w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:54:e3:ef:90:97:bd:d5:ee:d0:70:8f:98:b6:66:36:ed:ca:
3f:27:90:55:7d:9b:6d:d8:dd:48:34:a2:7f:c9:fb:68:f3:76:
c1:fa:78:a0:68:4b:cf:e2:80:a8:89:6d:9f:68:fe:24:a9:06:
59:40:cf:f7:bd:5c:a1:06:35:ac:f4:d5:6b:d4:fe:6a:d4:72:
eb:d8:7b:55:63:42:b3:d6:2a:b4:dd:cc:1c:93:d3:da:32:35:
d4:86:d8:f1:d5:47:e8:f6:af:5e:8d:1e:75:17:a9:29:34:4d:
7a:ce:4c:19:b9:11:d0:4a:7d:41:2e:f5:66:a6:4a:91:2a:be:
96:6e:0b:6d:f1:db:f9:1e:3f:0e:29:4a:ef:97:a3:8e:4c:1e:
b6:29:d2:07:68:f5:a5:be:70:08:8e:a9:c1:fc:9f:8e:92:87:
a1:be:36:d9:e4:3f:d3:89:8c:e4:73:a7:bc:1e:7f:e5:da:f8:
ac:b4:d0:20:6c:4c:68:ce:64:17:2a:e3:f2:3a:f6:af:bb:00:
b1:fd:d6:d0:52:9d:27:3e:b0:f8:ac:f3:e0:12:12:ba:fb:be:
ed:45:0f:7d:92:3d:a3:bf:f6:26:8c:85:04:30:91:9f:80:90:
d8:b3:ff:94:ed:29:49:83:40:48:c7:86:38:8e:b9:2c:e0:01:
c8:3f:55:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 06:40:08 2025 by rpki-client