Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/f184a9-c2fe-4279-acdc-7ce6980cb1cc/1/I8cVVBujctWQ1odn14zmmEABMFk.mft
File: I8cVVBujctWQ1odn14zmmEABMFk.mft (raw, json)
Hash identifier: /LXJvG1ioOfs0QGB1/WZ5/6bjxu27T22Ik0fw08XYPE=
Subject key identifier: 4A:11:60:43:D7:86:2F:D6:6E:FF:0B:B2:E5:F4:D2:15:19:EC:F1:27
Authority key identifier: 23:C7:15:54:1B:A3:72:D5:90:D6:87:67:D7:8C:E6:98:40:01:30:59
Certificate issuer: /CN=23c715541ba372d590d68767d78ce69840013059
Certificate serial: 0197B6A1A82CD0500F4F09F91B3C8034758B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I8cVVBujctWQ1odn14zmmEABMFk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/f184a9-c2fe-4279-acdc-7ce6980cb1cc/1/I8cVVBujctWQ1odn14zmmEABMFk.mft
Manifest number: 15B1
Signing time: Sat 28 Jun 2025 13:02:16 +0000
Manifest this update: Sat 28 Jun 2025 13:02:16 +0000
Manifest next update: Sun 29 Jun 2025 13:02:16 +0000
Files and hashes: 1: I8cVVBujctWQ1odn14zmmEABMFk.crl (hash: WRIqgFFAU1R0H0F+L9cuDEpxMRct/m0pMwbaodIITmM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/f184a9-c2fe-4279-acdc-7ce6980cb1cc/1/I8cVVBujctWQ1odn14zmmEABMFk.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/f184a9-c2fe-4279-acdc-7ce6980cb1cc/1/I8cVVBujctWQ1odn14zmmEABMFk.mft
rsync://rpki.ripe.net/repository/DEFAULT/I8cVVBujctWQ1odn14zmmEABMFk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:a8:2c:d0:50:0f:4f:09:f9:1b:3c:80:34:75:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23c715541ba372d590d68767d78ce69840013059
Validity
Not Before: Jun 28 13:02:16 2025 GMT
Not After : Jun 29 13:02:16 2025 GMT
Subject: CN=4a116043d7862fd66eff0bb2e5f4d21519ecf127
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:29:1a:cb:bc:c3:48:9a:d4:7c:8f:ff:37:f9:
76:a5:78:e1:01:2c:03:6d:90:c8:f2:76:60:db:30:
30:63:3c:07:87:f0:bc:ea:ca:44:75:64:25:a8:9a:
8e:ac:78:4f:91:b0:86:2b:6d:b9:92:e4:f7:63:1a:
0d:8f:f4:0c:12:f7:b4:62:6d:90:ad:d8:3a:29:a6:
61:1f:19:06:2f:78:94:ee:d8:69:dc:3b:86:25:97:
02:40:40:17:4c:9b:ff:13:e1:a6:a5:b4:fe:54:96:
e0:f2:5c:c5:ea:a1:02:3a:cb:0d:cd:b0:01:59:5c:
df:86:b9:25:27:87:e7:59:ad:89:5e:08:44:f2:54:
6c:23:20:29:70:e7:d2:01:96:3c:4f:e1:35:bf:3c:
ab:5e:ac:98:ab:fc:02:46:0f:e6:9a:c6:43:dc:cf:
5d:24:c1:3b:6d:a9:a0:4f:2f:b4:9c:f1:d0:97:1d:
58:fc:12:f5:83:ef:6b:14:88:90:b8:0c:53:56:4e:
ce:ef:9c:ec:59:90:41:ac:ba:04:95:43:3f:db:71:
b0:de:2e:f8:02:4d:e1:23:56:86:68:8b:cb:59:8e:
48:3e:8f:f2:62:9c:30:b4:50:5a:0b:a2:40:05:03:
a5:82:a6:d7:38:f6:75:64:63:4c:8d:6b:09:04:75:
5f:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:11:60:43:D7:86:2F:D6:6E:FF:0B:B2:E5:F4:D2:15:19:EC:F1:27
X509v3 Authority Key Identifier:
keyid:23:C7:15:54:1B:A3:72:D5:90:D6:87:67:D7:8C:E6:98:40:01:30:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I8cVVBujctWQ1odn14zmmEABMFk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/f184a9-c2fe-4279-acdc-7ce6980cb1cc/1/I8cVVBujctWQ1odn14zmmEABMFk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/f184a9-c2fe-4279-acdc-7ce6980cb1cc/1/I8cVVBujctWQ1odn14zmmEABMFk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:10:12:2b:7b:5d:17:ad:47:30:2c:c1:13:5b:26:00:48:e5:
7f:a1:2c:9e:66:c7:81:ba:de:19:b1:fb:a2:66:a3:a7:5e:21:
ad:32:d7:af:36:eb:35:eb:70:b2:d3:a2:3e:04:39:10:c7:d2:
de:56:e2:e2:48:cf:b8:3a:87:81:56:a2:78:44:87:4c:7d:42:
be:dc:d8:ec:02:1d:0a:ef:a2:8f:36:f8:dc:f0:8a:31:42:f5:
73:58:f1:fd:69:db:22:93:6c:a1:7a:e2:2a:5f:a8:ad:23:80:
20:92:15:c6:be:4f:10:b2:93:e4:bd:31:4d:9d:78:b7:27:77:
56:40:0c:56:63:07:3d:82:fe:e7:d3:6a:33:86:ea:84:d5:8d:
15:5c:91:4f:5f:7f:a0:b9:a5:18:41:82:be:2c:c7:5e:1d:f2:
76:81:3e:5b:bc:90:73:e7:5c:ce:f4:67:ea:70:15:35:66:94:
55:f6:df:2e:1c:ae:0e:c3:4c:37:1f:94:b9:0f:ae:1c:10:ad:
6c:ed:16:3f:47:15:e8:bc:c6:5e:8c:bb:42:11:13:a3:e2:1f:
bd:11:76:88:02:24:f8:e2:ae:60:cc:37:20:42:46:ae:47:99:
37:64:97:ea:63:12:0f:31:d2:3b:06:5e:8d:9e:ac:f1:d4:08:
f8:f7:eb:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:19:29 2025 by rpki-client