Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/ddf559-433b-408f-a5b2-3fb5adde6040/1/I6e1k8gEpoPwyPo-2pM1r5KokEQ.mft
File: I6e1k8gEpoPwyPo-2pM1r5KokEQ.mft (raw, json)
Hash identifier: b8tTnXpq9U4kxPXmFQuSIK4UYI7NFa2griRSuARyQf0=
Subject key identifier: 4E:46:7E:E8:75:3A:8E:05:5C:4F:18:2C:2C:5B:6B:23:69:8C:67:F0
Authority key identifier: 23:A7:B5:93:C8:04:A6:83:F0:C8:FA:3E:DA:93:35:AF:92:A8:90:44
Certificate issuer: /CN=23a7b593c804a683f0c8fa3eda9335af92a89044
Certificate serial: 0196C615C365D60FDE22F9D5672E8A1362FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I6e1k8gEpoPwyPo-2pM1r5KokEQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/ddf559-433b-408f-a5b2-3fb5adde6040/1/I6e1k8gEpoPwyPo-2pM1r5KokEQ.mft
Manifest number: 1280
Signing time: Mon 12 May 2025 20:00:36 +0000
Manifest this update: Mon 12 May 2025 20:00:36 +0000
Manifest next update: Tue 13 May 2025 20:00:36 +0000
Files and hashes: 1: I6e1k8gEpoPwyPo-2pM1r5KokEQ.crl (hash: 5qA1P+9zWTXjLcqyASsDppMsHTMSrjBHLGJKn1AETMA=)
2: i8Q4g4VsliGNNp87vd6oYtqJ_zk.roa (hash: O+cLxQgdSxj9HwSnDkkvV/wDo/+EE05gj69lFrqob6U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/ddf559-433b-408f-a5b2-3fb5adde6040/1/I6e1k8gEpoPwyPo-2pM1r5KokEQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/ddf559-433b-408f-a5b2-3fb5adde6040/1/I6e1k8gEpoPwyPo-2pM1r5KokEQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/I6e1k8gEpoPwyPo-2pM1r5KokEQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 14:31:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c6:15:c3:65:d6:0f:de:22:f9:d5:67:2e:8a:13:62:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23a7b593c804a683f0c8fa3eda9335af92a89044
Validity
Not Before: May 12 20:00:36 2025 GMT
Not After : May 13 20:00:36 2025 GMT
Subject: CN=4e467ee8753a8e055c4f182c2c5b6b23698c67f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:a6:f8:6d:b5:6e:af:44:86:b3:99:67:d4:25:
d1:d4:87:40:5d:50:55:05:f2:83:d9:33:d1:e6:58:
6a:ca:85:4e:eb:46:27:31:28:53:2d:0b:dd:62:a2:
c7:54:03:69:08:89:cb:ed:9f:2f:17:12:a7:48:ee:
42:38:de:29:46:76:4e:c8:3f:0e:5f:e5:95:7c:05:
d1:a9:80:76:75:c0:46:9c:99:7f:44:d2:4a:f1:ea:
3f:de:48:97:72:bf:89:07:c3:e9:98:1d:43:ca:8e:
fd:5a:c7:73:9f:5a:01:c1:eb:31:28:ca:9e:f6:8d:
34:00:03:fa:5d:f0:87:7b:64:e3:6d:d1:34:77:f7:
1e:7e:5a:3d:70:9f:de:1e:30:99:20:75:60:3a:8b:
4f:f3:c4:07:82:16:b9:9b:ae:9f:e5:49:61:2f:39:
69:82:27:14:ab:ed:e9:f8:61:41:b0:a2:c9:63:9b:
70:a7:b3:f1:be:a7:22:9c:3b:26:fb:80:46:be:e7:
c8:cf:04:f5:4f:ff:a2:bb:74:9d:78:92:70:1f:4f:
35:79:7e:74:d3:53:8a:23:7b:95:e8:70:51:a4:35:
54:75:04:bd:b0:4f:73:75:fb:71:9a:e6:42:51:e7:
06:35:40:e3:78:37:9f:5d:a4:18:2a:59:4c:b8:41:
00:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:46:7E:E8:75:3A:8E:05:5C:4F:18:2C:2C:5B:6B:23:69:8C:67:F0
X509v3 Authority Key Identifier:
keyid:23:A7:B5:93:C8:04:A6:83:F0:C8:FA:3E:DA:93:35:AF:92:A8:90:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I6e1k8gEpoPwyPo-2pM1r5KokEQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/ddf559-433b-408f-a5b2-3fb5adde6040/1/I6e1k8gEpoPwyPo-2pM1r5KokEQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/ddf559-433b-408f-a5b2-3fb5adde6040/1/I6e1k8gEpoPwyPo-2pM1r5KokEQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:e5:ba:a7:d3:f7:d9:cf:62:bb:d7:8e:c1:81:03:31:ac:89:
0c:ce:3c:19:11:fd:a6:b8:83:f9:7b:ca:e9:d9:72:42:b5:a0:
a9:eb:ff:d2:19:c6:52:1d:9e:f0:df:17:a6:65:27:1d:11:7c:
0d:68:a4:8d:b9:10:2b:2b:ea:98:ba:1c:b2:b4:46:49:5f:e1:
38:37:72:64:84:7d:df:e9:48:a4:77:c3:6b:f3:d2:9e:c5:48:
7a:ec:b8:97:d4:6f:66:05:50:1a:de:b0:87:96:15:84:6c:c7:
92:ba:a7:ba:a8:48:ec:b2:22:46:ed:0f:6b:9c:42:9d:89:b4:
46:cc:64:60:49:79:38:52:5a:49:5c:3f:39:68:e4:37:23:57:
6f:7b:d5:47:47:b9:35:8f:40:16:4a:c4:3e:bb:b3:eb:9b:f5:
3f:a0:24:27:0d:1b:c7:bd:c5:da:19:de:2d:ca:7f:25:7c:d8:
8c:26:0e:78:11:2a:63:43:87:52:32:43:6b:bc:f7:a7:07:52:
e4:4f:f1:01:82:ef:16:68:5b:bf:fb:71:7d:bb:c2:9c:74:ed:
80:09:19:d1:2a:13:73:64:df:2f:cf:67:ba:ac:88:d5:e9:53:
81:60:cc:1a:f1:14:17:31:9b:5d:df:f9:ea:d2:7b:e7:0d:d7:
4c:3b:38:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 00:14:06 2025 by rpki-client