Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/68a4b2-5894-47c5-be01-66aa2a23239e/1/I-RRZMVy7d5d8lORfMEqLf05i5c.mft
File: I-RRZMVy7d5d8lORfMEqLf05i5c.mft (raw, json)
Hash identifier: FbA7RQpaagDKAaxIpoUoh9HzAMfb79xMQeMUUlNCKP8=
Subject key identifier: 54:0A:84:F5:FF:13:4D:B4:37:43:58:CF:FD:98:1C:AD:A6:69:6C:79
Authority key identifier: 23:E4:51:64:C5:72:ED:DE:5D:F2:53:91:7C:C1:2A:2D:FD:39:8B:97
Certificate issuer: /CN=23e45164c572edde5df253917cc12a2dfd398b97
Certificate serial: 0197B6A1219C8F60FC299516CB6D0670DD0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I-RRZMVy7d5d8lORfMEqLf05i5c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/68a4b2-5894-47c5-be01-66aa2a23239e/1/I-RRZMVy7d5d8lORfMEqLf05i5c.mft
Manifest number: 0685
Signing time: Sat 28 Jun 2025 13:01:42 +0000
Manifest this update: Sat 28 Jun 2025 13:01:42 +0000
Manifest next update: Sun 29 Jun 2025 13:01:42 +0000
Files and hashes: 1: I-RRZMVy7d5d8lORfMEqLf05i5c.crl (hash: EGBIOA4AEGIOq1ycAd+k1Gc+Yo+X3ORvtgydDRsNCzc=)
2: Qf0cAOk73br7c02Yp4LiYn6tSvI.roa (hash: Uq615z1vQ76UBbAOWh8ANumqrOuVi1i2JY2ord8ybMc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/68a4b2-5894-47c5-be01-66aa2a23239e/1/I-RRZMVy7d5d8lORfMEqLf05i5c.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/68a4b2-5894-47c5-be01-66aa2a23239e/1/I-RRZMVy7d5d8lORfMEqLf05i5c.mft
rsync://rpki.ripe.net/repository/DEFAULT/I-RRZMVy7d5d8lORfMEqLf05i5c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:01:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:21:9c:8f:60:fc:29:95:16:cb:6d:06:70:dd:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23e45164c572edde5df253917cc12a2dfd398b97
Validity
Not Before: Jun 28 13:01:42 2025 GMT
Not After : Jun 29 13:01:42 2025 GMT
Subject: CN=540a84f5ff134db4374358cffd981cada6696c79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:95:43:c1:e4:dd:5f:04:52:72:1f:7f:eb:fa:
e3:70:71:6a:dd:56:a5:75:ef:b9:a0:c7:28:c3:1c:
87:7b:36:9f:e4:8f:6c:a6:15:5d:bf:e3:9b:f5:9d:
73:9c:79:ef:7b:88:69:13:64:4c:3a:ba:eb:c0:a0:
00:c6:e2:79:7f:ef:68:b1:c3:f3:ec:13:32:89:7a:
1c:f5:e8:b9:86:38:e9:a3:5b:0b:52:91:0c:07:3c:
e0:82:4b:e8:da:2c:2f:30:e1:2d:72:de:31:91:e4:
58:68:61:89:b3:1a:2e:16:7f:9f:85:b5:f8:29:65:
a3:09:77:b2:6f:34:6e:f5:b9:f2:67:5b:aa:81:ba:
c7:14:c1:b0:73:f2:b6:e8:df:cc:8a:58:62:9e:6d:
03:ab:f9:49:74:41:c2:8b:45:af:3e:c6:a1:3c:fb:
ba:84:43:93:64:8a:53:f3:42:15:89:3b:72:50:e1:
58:d0:c5:3d:ce:1a:40:b7:01:05:49:12:91:92:96:
23:c8:ed:8e:d0:33:24:75:ab:8b:3b:e7:73:d2:44:
1f:f0:80:77:85:2b:99:f8:4a:22:65:87:72:a4:38:
c1:ea:72:98:f1:ca:88:67:0e:50:04:b9:56:9f:ef:
13:ba:15:56:79:90:52:9a:01:66:a9:fe:91:84:11:
2c:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:0A:84:F5:FF:13:4D:B4:37:43:58:CF:FD:98:1C:AD:A6:69:6C:79
X509v3 Authority Key Identifier:
keyid:23:E4:51:64:C5:72:ED:DE:5D:F2:53:91:7C:C1:2A:2D:FD:39:8B:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I-RRZMVy7d5d8lORfMEqLf05i5c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/68a4b2-5894-47c5-be01-66aa2a23239e/1/I-RRZMVy7d5d8lORfMEqLf05i5c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/68a4b2-5894-47c5-be01-66aa2a23239e/1/I-RRZMVy7d5d8lORfMEqLf05i5c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:54:bc:2f:a9:96:9e:d2:9b:b8:63:f2:70:10:ac:00:d7:70:
dc:84:7f:2a:65:29:97:1f:92:a1:b8:c2:bd:0c:7e:19:7a:bd:
c7:3c:e3:c6:00:cc:31:57:50:0f:22:5a:b4:03:3f:50:b3:00:
33:9c:3d:39:96:b2:d0:d1:c3:a9:f5:87:19:9b:51:ee:a4:f7:
2e:d0:37:a6:66:a6:f8:a8:2b:2c:5e:bc:80:33:1f:e4:0b:8b:
7a:d9:ac:a0:e2:48:54:ea:3f:63:ec:7d:e0:ce:2d:20:49:14:
ea:99:9a:65:22:89:33:b5:5b:8b:2f:c4:ee:e8:fd:a5:0d:1f:
59:a5:cc:b3:24:f1:79:73:76:bd:43:9f:39:fe:6a:c4:9a:77:
30:fd:0c:4d:4e:22:f4:d8:09:6b:df:19:5a:f7:63:57:a7:d8:
33:f6:ae:f8:2e:e6:fb:d9:e5:c9:f5:87:43:94:d3:9e:df:e8:
38:c0:46:f5:b4:f5:c7:47:51:40:a1:77:81:9a:fe:1b:6c:d2:
85:9b:72:89:af:4f:97:bf:ec:51:17:29:3c:c8:c3:c1:67:95:
b7:b9:13:7e:dc:8e:bb:73:c5:f2:fe:28:51:db:11:a7:fa:38:
fa:90:c0:f9:b2:5d:33:2c:31:99:c7:19:61:29:07:9b:a1:12:
d6:64:90:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:38:54 2025 by rpki-client