Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/2923da-2f91-4ff1-b7ff-9620322e4f15/1/i2kUmIGXbuJzxREEPlgLfR0bp8Q.mft
File: i2kUmIGXbuJzxREEPlgLfR0bp8Q.mft (raw, json)
Hash identifier: 0lXIzmeza0pmc768ILNizwBixs8h0T7oZ0gIGtyNiZM=
Subject key identifier: 02:5C:1F:8E:A9:B5:F6:42:BF:7C:6A:2A:0B:E0:68:C1:D4:61:1C:A0
Authority key identifier: 8B:69:14:98:81:97:6E:E2:73:C5:11:04:3E:58:0B:7D:1D:1B:A7:C4
Certificate issuer: /CN=8b69149881976ee273c511043e580b7d1d1ba7c4
Certificate serial: 0196CC4EAD81583A36F0D31F2ED42FF9636E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2kUmIGXbuJzxREEPlgLfR0bp8Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/2923da-2f91-4ff1-b7ff-9620322e4f15/1/i2kUmIGXbuJzxREEPlgLfR0bp8Q.mft
Manifest number: 013D
Signing time: Wed 14 May 2025 01:00:30 +0000
Manifest this update: Wed 14 May 2025 01:00:30 +0000
Manifest next update: Thu 15 May 2025 01:00:30 +0000
Files and hashes: 1: i2kUmIGXbuJzxREEPlgLfR0bp8Q.crl (hash: ELbcuQSbJ7hJgb+q+8/3ZRh6X04sEJFOgvUmDh3iB/o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/2923da-2f91-4ff1-b7ff-9620322e4f15/1/i2kUmIGXbuJzxREEPlgLfR0bp8Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/2923da-2f91-4ff1-b7ff-9620322e4f15/1/i2kUmIGXbuJzxREEPlgLfR0bp8Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2kUmIGXbuJzxREEPlgLfR0bp8Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 22:19:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:cc:4e:ad:81:58:3a:36:f0:d3:1f:2e:d4:2f:f9:63:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b69149881976ee273c511043e580b7d1d1ba7c4
Validity
Not Before: May 14 01:00:30 2025 GMT
Not After : May 15 01:00:30 2025 GMT
Subject: CN=025c1f8ea9b5f642bf7c6a2a0be068c1d4611ca0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:f0:b9:51:b7:51:80:46:5a:93:00:b3:76:c9:
fd:0d:74:52:4e:9f:60:91:24:58:ba:18:05:7d:cf:
71:d2:93:1d:ef:53:23:29:9f:c1:36:0e:55:bf:38:
37:55:03:64:4d:d6:f4:96:de:6f:9d:f9:23:68:14:
76:4b:9c:7a:ed:0c:46:e8:b8:f7:c9:47:d2:72:f5:
0a:72:25:61:ce:99:df:e8:de:b8:18:66:59:cd:d0:
c4:92:89:14:26:31:68:c6:cf:d7:9e:ee:7a:ed:74:
9c:01:e1:0e:2b:9c:19:23:f5:0e:09:08:30:2d:19:
6d:86:7c:d7:bb:ca:55:4d:b3:fe:2c:1d:7f:0e:6d:
35:0d:fb:06:f3:5e:c1:a4:ca:68:ac:9b:3a:b6:79:
62:46:2e:97:f9:d5:a8:00:d6:45:68:fc:1a:ad:65:
38:49:dd:24:2f:27:eb:b6:0c:bb:51:ec:17:d5:0e:
e2:36:1e:5c:de:26:4f:fb:fa:43:ec:c8:91:95:93:
b7:e7:a9:d7:d5:40:24:2f:53:c7:5f:04:e6:34:57:
49:4d:8a:b9:96:42:65:0f:bd:e5:aa:fa:c3:c0:a5:
c8:51:cc:6b:58:9a:ad:6c:e7:12:19:79:63:eb:b1:
26:ff:9a:f7:bd:87:6f:77:42:5b:b9:c8:8f:f3:6d:
88:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:5C:1F:8E:A9:B5:F6:42:BF:7C:6A:2A:0B:E0:68:C1:D4:61:1C:A0
X509v3 Authority Key Identifier:
keyid:8B:69:14:98:81:97:6E:E2:73:C5:11:04:3E:58:0B:7D:1D:1B:A7:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2kUmIGXbuJzxREEPlgLfR0bp8Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/2923da-2f91-4ff1-b7ff-9620322e4f15/1/i2kUmIGXbuJzxREEPlgLfR0bp8Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/2923da-2f91-4ff1-b7ff-9620322e4f15/1/i2kUmIGXbuJzxREEPlgLfR0bp8Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:d1:78:7e:c9:0b:60:81:19:28:d8:9d:9b:52:20:c1:e0:00:
05:75:e9:4a:4a:5a:75:35:db:b8:fb:20:7e:cb:92:d5:be:bf:
f3:f3:4f:3a:a8:c0:b3:36:00:02:3c:e1:f0:8a:b3:43:86:11:
40:ac:54:10:9d:4e:ea:51:4a:a2:b2:92:eb:7c:1e:81:ec:07:
8b:68:24:07:aa:11:a3:b1:19:e5:ba:f0:3c:c4:dd:d1:fc:fd:
23:bd:6a:f9:01:1a:b7:db:62:3c:b4:57:99:2c:ea:a9:31:9f:
d5:ea:07:39:9c:f3:8d:b4:28:09:f4:73:a3:e6:2f:74:e4:83:
02:c1:02:5e:3f:e2:4c:b8:e6:aa:bd:46:38:30:82:08:2c:b3:
44:47:f4:d3:b6:1d:ef:45:c9:87:45:0e:7e:1d:dc:61:6b:7b:
0a:58:ff:e1:f0:1f:1d:e1:f5:b9:27:01:b9:d3:fa:62:78:a8:
73:76:c3:e9:a0:5e:b8:3e:ed:f4:48:b8:af:6c:1b:ac:75:7e:
5d:1d:37:53:3b:0c:86:b2:d4:09:01:9a:4b:ed:01:81:12:75:
6d:80:67:4c:1c:5a:45:88:31:bc:90:f9:be:21:56:a1:cc:7e:
01:62:e7:ae:ab:e8:57:7e:22:75:25:e0:bf:a9:1a:cb:05:33:
e3:77:1a:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 06:03:55 2025 by rpki-client