Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/7b2885-3cf3-4367-b64a-99e35c709486/1/cIKkpfKWFe2f7k9nURSF40z3EuA.mft
File: cIKkpfKWFe2f7k9nURSF40z3EuA.mft (raw, json)
Hash identifier: GZ60BuyuQpiwLZVtJXxQhGf9HEiTBTVRtivm3IGFen8=
Subject key identifier: 9F:44:61:F4:5A:AD:4F:21:B5:C9:82:E1:97:00:07:E9:E9:29:41:6C
Authority key identifier: 70:82:A4:A5:F2:96:15:ED:9F:EE:4F:67:51:14:85:E3:4C:F7:12:E0
Certificate issuer: /CN=7082a4a5f29615ed9fee4f67511485e34cf712e0
Certificate serial: 0197B8212BDC3E1B359701F609AB6CB1A9FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cIKkpfKWFe2f7k9nURSF40z3EuA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/7b2885-3cf3-4367-b64a-99e35c709486/1/cIKkpfKWFe2f7k9nURSF40z3EuA.mft
Manifest number: 51
Signing time: Sat 28 Jun 2025 20:01:11 +0000
Manifest this update: Sat 28 Jun 2025 20:01:11 +0000
Manifest next update: Sun 29 Jun 2025 20:01:11 +0000
Files and hashes: 1: cIKkpfKWFe2f7k9nURSF40z3EuA.crl (hash: Yh6WG78P3mUZQiP3MB4at3MVnJwYz1BsnYgmwy7RTAM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/7b2885-3cf3-4367-b64a-99e35c709486/1/cIKkpfKWFe2f7k9nURSF40z3EuA.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/7b2885-3cf3-4367-b64a-99e35c709486/1/cIKkpfKWFe2f7k9nURSF40z3EuA.mft
rsync://rpki.ripe.net/repository/DEFAULT/cIKkpfKWFe2f7k9nURSF40z3EuA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:21:2b:dc:3e:1b:35:97:01:f6:09:ab:6c:b1:a9:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7082a4a5f29615ed9fee4f67511485e34cf712e0
Validity
Not Before: Jun 28 20:01:11 2025 GMT
Not After : Jun 29 20:01:11 2025 GMT
Subject: CN=9f4461f45aad4f21b5c982e1970007e9e929416c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:90:5f:6d:a9:eb:24:71:8a:b9:2b:57:4d:eb:
af:ed:c4:60:1c:4b:4c:81:55:7a:db:a9:f8:1a:ce:
44:c0:f7:1a:84:57:3d:6d:7f:f0:bf:12:b2:cc:9d:
61:6f:19:1e:36:55:f0:8a:5d:50:01:01:e0:a5:ea:
7b:20:f4:0a:d5:4f:95:f4:63:f8:48:b0:b7:70:89:
f7:1c:d1:19:1e:1d:99:ff:3e:d9:2a:c8:2e:94:4d:
7f:07:e2:c7:1a:e7:82:bd:9b:e9:cc:09:4c:04:b6:
18:fe:37:28:5f:86:15:f2:2d:48:63:88:11:a0:ad:
12:e4:37:4e:48:24:fd:3b:a3:bd:66:10:04:d8:db:
9b:f2:5a:93:e1:55:a9:7b:c2:07:4e:50:f0:b9:35:
fe:b6:91:85:76:34:0a:b7:a8:64:f8:e7:28:79:4c:
66:fd:0c:3a:b9:50:10:a8:8f:aa:6b:34:15:b4:e9:
ff:25:40:0c:0a:3c:10:bb:ac:95:9a:74:45:44:1f:
17:0a:dc:a1:a6:3d:5f:05:d4:96:63:04:ce:87:d7:
38:b2:b1:62:59:ad:19:b6:5b:8f:8a:df:af:ee:b9:
cb:24:c9:97:d5:8d:7a:47:89:87:97:eb:0c:73:0a:
47:03:03:f8:59:10:f1:95:e4:df:f8:0e:ad:b9:0d:
e4:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:44:61:F4:5A:AD:4F:21:B5:C9:82:E1:97:00:07:E9:E9:29:41:6C
X509v3 Authority Key Identifier:
keyid:70:82:A4:A5:F2:96:15:ED:9F:EE:4F:67:51:14:85:E3:4C:F7:12:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cIKkpfKWFe2f7k9nURSF40z3EuA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/7b2885-3cf3-4367-b64a-99e35c709486/1/cIKkpfKWFe2f7k9nURSF40z3EuA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/7b2885-3cf3-4367-b64a-99e35c709486/1/cIKkpfKWFe2f7k9nURSF40z3EuA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:98:1a:d5:2e:0b:17:56:c7:b8:d3:8f:a7:bd:f4:d5:91:7c:
3a:3a:b7:61:6b:4f:c7:1f:06:a9:c0:57:75:f0:46:7e:37:40:
91:e5:43:b9:c0:b8:bf:1b:da:10:57:b4:f2:08:6a:d6:f1:ee:
a9:dc:0d:4c:d0:38:07:6d:2d:b7:55:5c:30:d7:e8:e7:74:25:
ed:e7:0b:3c:38:7c:d6:f4:a2:30:06:16:5d:a5:41:6e:44:c0:
48:08:8e:bc:7a:b7:ba:64:d7:7b:6c:f9:12:f2:57:fa:b0:d7:
84:8c:53:16:65:d7:82:a0:a9:c7:cd:92:0c:83:ff:28:94:90:
3a:33:96:d5:24:1d:22:37:7e:b4:56:18:a1:6d:8f:3d:b7:27:
25:46:ed:32:22:a6:a1:5e:95:c7:a9:c8:a6:76:85:b2:d7:3e:
eb:b5:7a:1e:ac:2c:e1:d2:32:49:37:9b:4c:10:3f:88:89:2f:
15:df:25:86:e5:36:ee:1f:02:7d:9a:96:10:65:9c:45:ab:f1:
50:0e:71:c2:14:cb:81:15:c8:8d:f6:93:11:ae:b9:22:bc:31:
85:88:c3:46:c7:d4:0d:9f:8a:f6:72:90:7f:71:c7:f5:8d:00:
34:06:b9:7c:7c:4e:92:b2:4b:b1:55:9c:c8:89:82:6a:d2:ca:
7f:52:f2:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:14:34 2025 by rpki-client