Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/daf850-f587-44b2-8de4-a8585ff93546/1/ItxuR0PtXMhDAyhSiW7xX0iS7bA.mft
File: ItxuR0PtXMhDAyhSiW7xX0iS7bA.mft (raw, json)
Hash identifier: LyVUIkAB5VAEDnC00kRBvS+Jn11FRzrjMTD5wLuGivc=
Subject key identifier: 73:47:01:1E:85:9A:A2:12:8D:1E:72:AB:08:5E:32:BB:0F:4C:CF:A4
Authority key identifier: 22:DC:6E:47:43:ED:5C:C8:43:03:28:52:89:6E:F1:5F:48:92:ED:B0
Certificate issuer: /CN=22dc6e4743ed5cc843032852896ef15f4892edb0
Certificate serial: 0197BB2240A86BE77A450A9EC449DE997E7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ItxuR0PtXMhDAyhSiW7xX0iS7bA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/daf850-f587-44b2-8de4-a8585ff93546/1/ItxuR0PtXMhDAyhSiW7xX0iS7bA.mft
Manifest number: 0BBB
Signing time: Sun 29 Jun 2025 10:01:13 +0000
Manifest this update: Sun 29 Jun 2025 10:01:13 +0000
Manifest next update: Mon 30 Jun 2025 10:01:13 +0000
Files and hashes: 1: ItxuR0PtXMhDAyhSiW7xX0iS7bA.crl (hash: w2QtxF6gTqkCx+jHgPFuDnS4GO4Roh8YvpbogzhJ0Zk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/daf850-f587-44b2-8de4-a8585ff93546/1/ItxuR0PtXMhDAyhSiW7xX0iS7bA.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/daf850-f587-44b2-8de4-a8585ff93546/1/ItxuR0PtXMhDAyhSiW7xX0iS7bA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ItxuR0PtXMhDAyhSiW7xX0iS7bA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 07:42:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:bb:22:40:a8:6b:e7:7a:45:0a:9e:c4:49:de:99:7e:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22dc6e4743ed5cc843032852896ef15f4892edb0
Validity
Not Before: Jun 29 10:01:13 2025 GMT
Not After : Jun 30 10:01:13 2025 GMT
Subject: CN=7347011e859aa2128d1e72ab085e32bb0f4ccfa4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:96:68:89:76:c1:15:c2:47:ee:42:b4:c0:75:
ee:e2:0a:9f:2d:3e:85:e4:76:1a:09:4d:9d:c1:19:
f8:fe:6e:d9:1b:21:23:8f:76:4f:29:c5:18:38:90:
b1:69:1e:28:35:b5:c7:82:2a:82:c8:9c:f0:4c:aa:
04:03:ee:e8:40:38:ec:de:e0:a6:fc:25:c4:ff:c9:
7c:6f:81:8f:06:00:24:e5:12:d1:81:eb:fc:6b:13:
0b:c5:9d:e4:dd:b2:e4:e3:60:52:ef:e6:f0:dd:12:
19:da:f4:5b:2f:1e:6b:50:9c:ba:14:89:df:bb:78:
d6:f7:9c:d7:be:57:ab:4d:e5:85:ea:b3:8b:43:3b:
7f:a4:fb:5a:15:65:d3:1a:43:02:4d:53:6e:b5:52:
43:9d:3e:ed:3f:89:35:95:91:5c:65:8f:eb:6f:2e:
81:34:58:8c:64:e0:56:84:01:be:0f:6c:50:34:ef:
ea:60:07:0c:d7:1f:80:89:31:f6:29:a7:64:6d:94:
3c:7e:6e:ef:7f:4d:6c:1f:50:ee:80:a8:d7:dd:ae:
be:0c:a4:fc:f9:ea:e6:a4:de:4b:83:5b:db:33:c2:
7c:71:11:f6:e9:22:c5:a8:33:35:06:f5:56:8b:0d:
03:42:02:55:cb:69:e4:bf:15:40:47:97:c8:75:7e:
f8:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:47:01:1E:85:9A:A2:12:8D:1E:72:AB:08:5E:32:BB:0F:4C:CF:A4
X509v3 Authority Key Identifier:
keyid:22:DC:6E:47:43:ED:5C:C8:43:03:28:52:89:6E:F1:5F:48:92:ED:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ItxuR0PtXMhDAyhSiW7xX0iS7bA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/daf850-f587-44b2-8de4-a8585ff93546/1/ItxuR0PtXMhDAyhSiW7xX0iS7bA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/daf850-f587-44b2-8de4-a8585ff93546/1/ItxuR0PtXMhDAyhSiW7xX0iS7bA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:95:54:63:42:aa:b1:cb:7a:44:85:22:13:29:a2:e4:a4:9d:
6b:7b:16:04:79:d7:e9:5c:6b:c9:0b:39:f4:45:9d:59:42:0e:
a7:43:63:1d:dc:33:23:40:76:90:02:b8:15:03:6f:d9:d6:16:
72:37:c6:7a:81:6f:bb:5e:84:58:fd:e3:d8:42:d7:c8:d8:68:
f8:66:0d:d7:bd:4c:3b:f8:b6:96:8e:89:90:99:f3:91:17:48:
a6:93:23:c9:c4:a6:ed:99:02:52:f4:5d:8a:8f:de:ce:a5:ea:
ff:18:0e:16:0e:68:93:22:42:72:f8:b3:60:70:18:57:b2:e2:
84:0e:0c:42:58:ee:a5:26:57:e6:13:1a:0b:c8:b4:b5:02:a6:
bb:5c:15:2d:96:94:85:97:6d:ff:2a:6e:ce:0c:4b:ce:98:45:
64:51:cc:f0:fe:77:0b:f1:64:e6:70:16:35:67:99:2b:87:0f:
da:32:e9:8a:f2:b5:e4:db:fd:ec:c6:e1:39:00:7d:84:4f:58:
3f:e3:dc:c5:da:e8:e3:0c:14:99:ac:a5:b1:be:95:f3:20:12:
79:9d:08:2b:e7:44:cf:bf:44:a7:8d:06:0c:a9:6c:86:77:98:
9f:4d:82:73:31:85:a5:7a:f2:dc:be:49:db:17:2c:a7:d5:e6:
65:ad:b4:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 16:56:53 2025 by rpki-client