Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/2923da-2f91-4ff1-b7ff-9620322e4f15/1/i2kUmIGXbuJzxREEPlgLfR0bp8Q.mft
File: i2kUmIGXbuJzxREEPlgLfR0bp8Q.mft (raw, json)
Hash identifier: ubrgv1/8WZzPM6R3VZy4O2X1WaOFiQ3jXbwGqGb1siI=
Subject key identifier: 2C:2A:9E:4E:77:26:B7:09:05:98:1B:69:66:39:C3:7B:A3:D4:4E:90
Authority key identifier: 8B:69:14:98:81:97:6E:E2:73:C5:11:04:3E:58:0B:7D:1D:1B:A7:C4
Certificate issuer: /CN=8b69149881976ee273c511043e580b7d1d1ba7c4
Certificate serial: 0197C56F3D887CC05150335C92086828101C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2kUmIGXbuJzxREEPlgLfR0bp8Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/2923da-2f91-4ff1-b7ff-9620322e4f15/1/i2kUmIGXbuJzxREEPlgLfR0bp8Q.mft
Manifest number: 01BE
Signing time: Tue 01 Jul 2025 10:01:31 +0000
Manifest this update: Tue 01 Jul 2025 10:01:31 +0000
Manifest next update: Wed 02 Jul 2025 10:01:31 +0000
Files and hashes: 1: i2kUmIGXbuJzxREEPlgLfR0bp8Q.crl (hash: A2W7j7hKkPV7vld9h78ge5go/MCaqGJ2NDeBdky7HCQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/2923da-2f91-4ff1-b7ff-9620322e4f15/1/i2kUmIGXbuJzxREEPlgLfR0bp8Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/2923da-2f91-4ff1-b7ff-9620322e4f15/1/i2kUmIGXbuJzxREEPlgLfR0bp8Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2kUmIGXbuJzxREEPlgLfR0bp8Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 02 Jul 2025 08:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c5:6f:3d:88:7c:c0:51:50:33:5c:92:08:68:28:10:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b69149881976ee273c511043e580b7d1d1ba7c4
Validity
Not Before: Jul 1 10:01:31 2025 GMT
Not After : Jul 2 10:01:31 2025 GMT
Subject: CN=2c2a9e4e7726b70905981b696639c37ba3d44e90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:88:4c:e8:99:1d:4d:5d:7d:4b:a4:d8:d1:48:
02:1b:ef:03:b8:4c:e4:88:82:4e:2b:7e:37:11:e9:
b8:61:52:43:ee:c6:ea:30:ae:eb:09:8a:d2:55:6d:
9c:b2:29:e5:da:23:00:7e:4d:b7:a8:31:70:d6:e5:
4c:9c:54:0a:7c:29:9f:f7:a1:94:87:a3:42:f1:34:
98:bf:96:62:66:19:a1:db:56:01:a1:fd:00:ee:39:
37:e7:a9:84:d4:cb:4d:c1:b4:c1:a6:61:8f:4f:9b:
a1:81:be:66:9e:11:6d:51:92:24:3c:1a:7c:34:58:
45:b1:57:78:a0:57:d5:b4:03:3b:fc:30:d7:1e:ad:
29:21:02:28:65:ad:85:2d:04:3d:55:32:10:e5:74:
ca:10:11:12:72:3b:e3:af:41:05:ce:4f:5c:85:df:
2f:ea:3c:6c:53:ff:69:3b:49:ec:34:67:8a:13:d3:
97:24:5f:89:8a:7e:54:47:4b:7f:4b:bf:5a:d3:9f:
4f:ed:da:aa:f2:8f:8b:0d:b6:d9:79:b7:6b:fe:04:
45:f4:cd:44:78:a1:db:3d:58:64:d8:a5:af:36:7e:
7f:c2:e8:99:ed:58:5a:2f:2a:0d:31:fc:95:1d:6d:
6f:75:5f:a9:8e:83:4a:48:49:77:01:48:a1:d5:e8:
ba:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:2A:9E:4E:77:26:B7:09:05:98:1B:69:66:39:C3:7B:A3:D4:4E:90
X509v3 Authority Key Identifier:
keyid:8B:69:14:98:81:97:6E:E2:73:C5:11:04:3E:58:0B:7D:1D:1B:A7:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2kUmIGXbuJzxREEPlgLfR0bp8Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/2923da-2f91-4ff1-b7ff-9620322e4f15/1/i2kUmIGXbuJzxREEPlgLfR0bp8Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/2923da-2f91-4ff1-b7ff-9620322e4f15/1/i2kUmIGXbuJzxREEPlgLfR0bp8Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:50:01:51:22:ee:3a:7c:d5:dd:1e:e5:84:f5:10:89:b4:c8:
d9:38:3b:f0:17:b1:a1:63:dd:fb:ff:79:20:a6:1a:5e:c9:b1:
b1:ea:fe:47:86:89:ea:4d:9a:ed:9f:c3:52:78:22:1e:ce:12:
7f:80:a3:1c:94:be:82:4a:f1:6b:69:b6:79:09:d9:ee:a6:85:
74:fb:da:ea:a7:15:87:93:06:5f:63:e3:40:3e:5f:11:84:33:
e1:c0:34:61:d9:c2:e6:61:4b:44:ac:85:95:c0:63:29:ed:84:
8a:01:65:50:be:4e:14:f3:a8:cf:ab:e5:81:a7:43:b1:8b:40:
dd:55:92:3e:97:3a:22:f3:38:42:48:ab:3d:e7:33:42:40:86:
ff:ee:ee:a7:cb:9c:c7:ea:ef:ed:f9:c8:0e:5b:76:48:d7:b7:
d1:da:11:cd:cb:03:c6:49:a1:cb:de:94:ba:d8:e2:72:d9:ac:
79:82:3e:07:e3:f0:99:b3:a8:1f:c1:26:82:2c:23:91:cf:ed:
57:2c:4d:cf:04:ca:73:b6:06:5c:45:20:b5:f2:da:2f:2d:7b:
5a:9f:73:bc:db:29:f1:55:0b:eb:0f:e3:d8:91:d9:c7:44:4d:
3f:08:23:39:f3:fe:be:70:5c:26:88:99:cc:7d:3d:e5:0c:c6:
31:45:e9:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 17:26:33 2025 by rpki-client