Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/1f1af6-dd1b-4117-ac17-deab8586f2ce/1/I1PVKkAkkfT5n-VHG90aXdb0K7w.mft
File: I1PVKkAkkfT5n-VHG90aXdb0K7w.mft (raw, json)
Hash identifier: k4Dcn36t+9tBsDUiL4GrVfRheEJuxQcRc4448IHVwtw=
Subject key identifier: 03:C5:B0:3E:6C:D3:92:E6:A1:E0:34:BC:F0:A4:59:36:B5:D6:C8:22
Authority key identifier: 23:53:D5:2A:40:24:91:F4:F9:9F:E5:47:1B:DD:1A:5D:D6:F4:2B:BC
Certificate issuer: /CN=2353d52a402491f4f99fe5471bdd1a5dd6f42bbc
Certificate serial: 0196BDEEADA88DEC9D3D4B410C6E3271E8E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I1PVKkAkkfT5n-VHG90aXdb0K7w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/1f1af6-dd1b-4117-ac17-deab8586f2ce/1/I1PVKkAkkfT5n-VHG90aXdb0K7w.mft
Manifest number: 152E
Signing time: Sun 11 May 2025 06:00:57 +0000
Manifest this update: Sun 11 May 2025 06:00:57 +0000
Manifest next update: Mon 12 May 2025 06:00:57 +0000
Files and hashes: 1: I1PVKkAkkfT5n-VHG90aXdb0K7w.crl (hash: WR60Whe7hf34o3bIL4qaw6weQlv22xe9BcxJ2iMhHeA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/1f1af6-dd1b-4117-ac17-deab8586f2ce/1/I1PVKkAkkfT5n-VHG90aXdb0K7w.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/1f1af6-dd1b-4117-ac17-deab8586f2ce/1/I1PVKkAkkfT5n-VHG90aXdb0K7w.mft
rsync://rpki.ripe.net/repository/DEFAULT/I1PVKkAkkfT5n-VHG90aXdb0K7w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bd:ee:ad:a8:8d:ec:9d:3d:4b:41:0c:6e:32:71:e8:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2353d52a402491f4f99fe5471bdd1a5dd6f42bbc
Validity
Not Before: May 11 06:00:57 2025 GMT
Not After : May 12 06:00:57 2025 GMT
Subject: CN=03c5b03e6cd392e6a1e034bcf0a45936b5d6c822
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:58:37:23:7c:83:c4:59:0c:c9:7c:c1:bd:5a:
69:02:a7:c8:37:fc:c8:7d:35:de:be:60:3d:79:42:
09:a2:1a:d0:70:ba:b2:07:81:1d:ad:1d:1a:91:1e:
8b:93:45:01:14:33:79:fe:60:44:b3:52:67:b3:68:
21:33:73:95:cc:be:3a:09:64:d2:89:e4:44:9e:0f:
a3:81:52:4d:8a:a7:26:4a:4d:2b:42:45:b2:d6:37:
77:19:a6:7a:22:83:82:c8:e6:6e:74:04:eb:9d:68:
3a:d2:c0:87:76:95:0b:b9:8f:60:39:17:af:1e:8a:
19:80:0b:da:9e:52:76:cc:27:03:da:b7:93:74:02:
b9:8a:b7:8d:0c:e6:9d:07:92:eb:6f:80:7d:f4:6d:
d3:1b:c7:a8:41:a8:f7:5d:92:ae:69:cd:79:bd:7a:
a8:37:38:ea:b0:ea:61:9d:7d:ca:b3:35:fb:55:78:
ee:cf:9a:d7:b6:ee:7b:ad:4a:ec:b4:70:88:c4:0b:
80:f9:ff:1b:08:6f:d6:3f:68:8a:f4:26:d0:46:d6:
dd:66:8d:3f:95:9d:8a:de:c9:46:a7:d5:fc:95:33:
ee:7c:53:bb:6e:a1:d1:42:97:88:ea:28:2f:4f:57:
87:08:3c:48:2e:7a:b5:8c:5c:b1:5e:b0:76:ad:b9:
30:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:C5:B0:3E:6C:D3:92:E6:A1:E0:34:BC:F0:A4:59:36:B5:D6:C8:22
X509v3 Authority Key Identifier:
keyid:23:53:D5:2A:40:24:91:F4:F9:9F:E5:47:1B:DD:1A:5D:D6:F4:2B:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I1PVKkAkkfT5n-VHG90aXdb0K7w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/1f1af6-dd1b-4117-ac17-deab8586f2ce/1/I1PVKkAkkfT5n-VHG90aXdb0K7w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/1f1af6-dd1b-4117-ac17-deab8586f2ce/1/I1PVKkAkkfT5n-VHG90aXdb0K7w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:ef:a2:2c:89:75:5c:f2:98:38:91:29:4b:27:4c:28:82:3f:
f5:7f:61:21:a3:d6:84:7a:01:66:fa:17:6f:8c:44:ac:78:29:
a4:c9:37:d8:41:c4:43:3e:d2:3d:45:bf:1e:54:af:35:dd:7d:
89:fc:d1:42:1b:bf:2f:e6:0b:67:9a:f6:a2:32:55:b1:4d:2a:
00:7b:b3:13:fe:ad:72:55:83:1e:08:d0:6b:aa:28:fa:0e:b1:
95:03:56:63:99:57:a3:d0:a7:98:ab:70:b0:3c:f6:74:6d:bd:
2d:85:8e:21:08:56:f7:0b:9a:7e:04:9d:75:e9:33:74:d1:8f:
40:15:55:21:b4:07:60:88:64:97:c8:cf:15:fe:85:42:99:2a:
b5:4b:fd:73:11:f7:e2:e9:ff:85:f9:9c:7d:9f:4c:47:15:fd:
34:f9:f7:08:3a:7e:dd:25:06:0c:31:10:2e:f9:e8:b7:39:af:
95:37:7f:8d:4f:eb:aa:ba:6c:4a:cb:2d:20:de:f5:c8:9e:59:
4f:3e:bd:d7:52:00:68:13:13:94:e7:e2:dd:52:8b:15:4a:3c:
bc:05:09:9d:a7:70:1c:7e:26:ae:85:e7:ac:ed:94:9d:ad:55:
96:64:4d:ce:88:3a:9d:8e:4d:64:37:99:c7:9f:57:6e:a0:82:
ea:72:cd:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 08:11:12 2025 by rpki-client