
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/187f0b-4be9-474a-b435-885bc54dce62/1/its62HX3YlxjkjZZ8UKVjbeHijI.mft
File: its62HX3YlxjkjZZ8UKVjbeHijI.mft (raw, json)
Hash identifier: Pi8PLePz+I/d9q5zeBtPJ82n/a555k04rqPr0wFIcbY=
Subject key identifier: 11:D0:E0:73:AA:28:91:C1:33:48:F6:F4:00:B4:46:27:79:D4:65:A6
Authority key identifier: 8A:DB:3A:D8:75:F7:62:5C:63:92:36:59:F1:42:95:8D:B7:87:8A:32
Certificate issuer: /CN=8adb3ad875f7625c63923659f142958db7878a32
Certificate serial: 0197CBDEE25286856328E3EF709996F1C207
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/its62HX3YlxjkjZZ8UKVjbeHijI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/187f0b-4be9-474a-b435-885bc54dce62/1/its62HX3YlxjkjZZ8UKVjbeHijI.mft
Manifest number: 15BC
Signing time: Wed 02 Jul 2025 16:01:11 +0000
Manifest this update: Wed 02 Jul 2025 16:01:11 +0000
Manifest next update: Thu 03 Jul 2025 16:01:11 +0000
Files and hashes: 1: its62HX3YlxjkjZZ8UKVjbeHijI.crl (hash: P+pry6pI5lYwT6QOhBgjngTgXpzhjUzfN9M8Bgos7Vw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/187f0b-4be9-474a-b435-885bc54dce62/1/its62HX3YlxjkjZZ8UKVjbeHijI.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/187f0b-4be9-474a-b435-885bc54dce62/1/its62HX3YlxjkjZZ8UKVjbeHijI.mft
rsync://rpki.ripe.net/repository/DEFAULT/its62HX3YlxjkjZZ8UKVjbeHijI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 16:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:cb:de:e2:52:86:85:63:28:e3:ef:70:99:96:f1:c2:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8adb3ad875f7625c63923659f142958db7878a32
Validity
Not Before: Jul 2 16:01:11 2025 GMT
Not After : Jul 3 16:01:11 2025 GMT
Subject: CN=11d0e073aa2891c13348f6f400b4462779d465a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:c0:31:e9:c5:3a:ab:ef:5a:6e:2e:c7:0d:9e:
83:89:cf:1c:c7:14:b4:3d:d9:5a:03:a1:b3:fb:1b:
56:19:6b:60:16:72:6d:c1:c4:bf:69:5a:4f:b3:0b:
87:0a:40:10:da:39:37:8c:f0:fd:c1:d4:a5:5d:7e:
6f:f9:32:c6:6a:c4:a9:a7:32:ea:e8:77:44:5f:3f:
95:ab:27:6a:4e:01:d5:41:03:46:2f:8e:71:75:c2:
18:e6:2a:6b:96:bb:35:0e:60:36:5c:c0:4e:07:71:
60:79:dd:e0:eb:46:94:cf:7a:65:c2:a4:f7:a3:97:
91:5d:46:97:1c:96:f0:8c:08:41:09:8d:51:a3:1a:
1d:5a:27:3f:83:86:bf:04:f4:98:e6:be:aa:66:f0:
c5:b3:ce:9e:92:fd:4a:00:0a:fd:2f:45:b5:b7:87:
51:94:d8:78:07:8c:04:f1:64:91:37:dd:ec:71:20:
5a:5c:12:41:5d:b3:0b:21:02:1a:94:ee:c1:be:b4:
35:32:7a:ce:29:c2:ef:f6:9c:86:11:eb:0f:3d:3b:
3a:cc:5a:60:d6:65:c5:b5:ea:ba:50:7c:57:80:b5:
47:aa:9f:5c:25:cd:10:13:ff:58:55:34:02:bd:b6:
52:ed:8b:37:2c:c6:06:02:dc:9f:bc:e1:f3:17:19:
9d:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:D0:E0:73:AA:28:91:C1:33:48:F6:F4:00:B4:46:27:79:D4:65:A6
X509v3 Authority Key Identifier:
keyid:8A:DB:3A:D8:75:F7:62:5C:63:92:36:59:F1:42:95:8D:B7:87:8A:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/its62HX3YlxjkjZZ8UKVjbeHijI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/187f0b-4be9-474a-b435-885bc54dce62/1/its62HX3YlxjkjZZ8UKVjbeHijI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/187f0b-4be9-474a-b435-885bc54dce62/1/its62HX3YlxjkjZZ8UKVjbeHijI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:2d:e3:1c:b7:41:59:81:2f:c1:e9:4b:77:53:7a:e8:3f:f5:
8b:3b:3d:8f:c9:ff:bf:2c:ef:fa:2d:de:50:ec:4c:8d:66:bc:
af:ba:5b:98:1a:1a:14:8c:2e:65:de:bc:45:a5:fa:11:a3:4f:
9a:38:c3:58:0f:55:09:0f:01:df:40:1b:29:1e:3c:0c:fe:5f:
e7:1a:b0:9a:43:70:c7:a6:37:27:15:95:a2:f7:a8:be:43:33:
40:25:e7:49:1f:f3:2e:33:9b:53:fb:64:91:08:4d:a7:f1:57:
95:8e:bf:fe:50:a4:7e:cc:5b:02:9f:19:1a:c8:69:e8:7b:f5:
83:1b:1f:9f:28:5b:22:79:33:ba:84:84:d1:72:0c:fd:8b:83:
3f:f4:fb:4e:55:e3:7b:11:c5:27:04:b4:18:fa:87:c2:44:a6:
17:4c:25:bd:96:5e:5a:f7:a8:4d:fe:90:54:18:a1:90:c0:ed:
1c:03:06:52:f8:ec:c5:e9:0a:b0:9d:af:ec:4e:56:5f:e8:9a:
f5:b2:99:ba:63:2c:8e:2f:9a:e3:4a:47:26:ef:48:11:8a:a7:
42:2d:c0:a2:0e:7c:c6:23:eb:4e:43:99:18:2d:9c:62:11:2e:
49:4b:8d:04:c8:17:89:d5:64:9a:3a:97:46:eb:30:ee:8e:c1:
93:c2:d3:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 21:11:38 2025 by rpki-client