Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/7d4a29-023f-42d7-aab7-d87b361acd89/1/i5epFTYKSH1c9dXGZeW_4f_1Np8.mft
File: i5epFTYKSH1c9dXGZeW_4f_1Np8.mft (raw, json)
Hash identifier: zRBC7BeCEd7WuQjHrJ4NDemGfjD3FqDSXVV6d/N5IoE=
Subject key identifier: 3E:94:D3:77:D2:62:A3:BD:7A:C5:77:36:B5:9A:30:89:EC:3F:34:65
Authority key identifier: 8B:97:A9:15:36:0A:48:7D:5C:F5:D5:C6:65:E5:BF:E1:FF:F5:36:9F
Certificate issuer: /CN=8b97a915360a487d5cf5d5c665e5bfe1fff5369f
Certificate serial: 019769615DE0F3444AC30D24EC12D8043D58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i5epFTYKSH1c9dXGZeW_4f_1Np8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/7d4a29-023f-42d7-aab7-d87b361acd89/1/i5epFTYKSH1c9dXGZeW_4f_1Np8.mft
Manifest number: 042A
Signing time: Fri 13 Jun 2025 13:01:18 +0000
Manifest this update: Fri 13 Jun 2025 13:01:18 +0000
Manifest next update: Sat 14 Jun 2025 13:01:18 +0000
Files and hashes: 1: i5epFTYKSH1c9dXGZeW_4f_1Np8.crl (hash: sIxIDwPY8zOv1h5dVa2U+OZY0DR0kHic/ljIQMtyA68=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/7d4a29-023f-42d7-aab7-d87b361acd89/1/i5epFTYKSH1c9dXGZeW_4f_1Np8.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/7d4a29-023f-42d7-aab7-d87b361acd89/1/i5epFTYKSH1c9dXGZeW_4f_1Np8.mft
rsync://rpki.ripe.net/repository/DEFAULT/i5epFTYKSH1c9dXGZeW_4f_1Np8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:61:5d:e0:f3:44:4a:c3:0d:24:ec:12:d8:04:3d:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b97a915360a487d5cf5d5c665e5bfe1fff5369f
Validity
Not Before: Jun 13 13:01:18 2025 GMT
Not After : Jun 14 13:01:18 2025 GMT
Subject: CN=3e94d377d262a3bd7ac57736b59a3089ec3f3465
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:f7:1c:08:db:05:35:71:0d:cc:bb:80:47:81:
1e:d6:3f:26:60:7d:a5:e3:8f:02:ef:6f:29:5a:d7:
78:f7:2f:5f:5e:33:53:44:88:61:92:c3:62:23:22:
82:8f:7f:ae:a0:3f:5d:de:9e:bd:8f:d9:28:9e:e7:
b0:4c:fe:ef:8c:49:f0:bc:e6:9a:53:55:9a:fc:eb:
9c:89:94:69:3e:c2:8e:c8:af:ac:ed:37:cd:a8:d8:
0e:32:3a:19:b1:2e:52:1c:fb:07:ea:5d:7d:e6:c5:
bc:13:cd:56:d7:cd:82:42:b7:b4:67:f1:db:5f:d0:
b9:33:f3:57:87:d4:f5:98:e3:2b:09:11:65:9d:75:
88:0d:c4:c0:86:43:a0:93:84:22:59:a9:b5:0b:e3:
48:8a:23:a2:80:ff:98:39:8d:5c:5c:d6:d1:a1:84:
47:31:8a:53:97:62:86:3c:e9:b8:9b:0a:0e:d1:39:
ac:93:ae:46:32:3e:37:89:68:3e:c9:05:4e:10:a1:
b9:67:8b:60:7a:f5:f1:8c:3d:d0:ed:4f:63:27:4e:
65:d4:35:d4:82:4a:9a:3a:01:9f:60:20:96:dd:92:
da:5c:bb:2a:b9:0c:1b:55:01:49:a3:68:9a:38:7f:
57:f5:66:1e:9a:bc:60:67:24:30:16:26:8d:d1:fc:
b8:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:94:D3:77:D2:62:A3:BD:7A:C5:77:36:B5:9A:30:89:EC:3F:34:65
X509v3 Authority Key Identifier:
keyid:8B:97:A9:15:36:0A:48:7D:5C:F5:D5:C6:65:E5:BF:E1:FF:F5:36:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i5epFTYKSH1c9dXGZeW_4f_1Np8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/7d4a29-023f-42d7-aab7-d87b361acd89/1/i5epFTYKSH1c9dXGZeW_4f_1Np8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/7d4a29-023f-42d7-aab7-d87b361acd89/1/i5epFTYKSH1c9dXGZeW_4f_1Np8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:fc:27:dc:59:7e:d6:7d:35:ac:88:aa:66:67:dd:5f:49:e0:
fc:5b:a3:0e:fb:c8:de:84:7d:54:01:8f:d5:48:e0:13:84:08:
c6:6d:d7:1c:69:67:68:f8:74:14:d1:8e:ac:7d:36:c3:a3:6c:
d0:10:84:24:a8:da:ab:8e:db:b9:10:49:92:81:7c:81:3b:b8:
4e:ed:60:1f:e0:76:6a:27:4b:2f:7f:df:f1:8b:3f:d4:e7:13:
88:5d:a6:69:2b:29:6f:bd:a5:b2:dd:bd:b7:cc:32:0a:c6:c2:
03:3f:02:37:d1:ad:47:ea:18:7f:72:78:06:11:ff:96:09:bb:
3b:bd:f5:77:01:5d:fd:62:e1:73:41:01:82:3c:be:d5:4b:60:
db:99:0c:38:c7:0c:31:b3:d9:82:be:8f:f8:09:f7:d7:53:aa:
b0:36:02:91:7f:c9:56:2e:7a:7b:75:2d:e0:40:e3:e0:4d:06:
7a:d1:28:8e:bc:6d:9c:8e:18:94:ad:91:3a:f6:d0:8c:ee:eb:
0c:d6:29:dc:c5:a9:73:8e:a1:25:8e:40:c9:e9:64:8e:60:ea:
f2:34:8d:26:b2:52:17:04:f0:cf:eb:51:58:40:49:e8:f7:01:
f4:89:94:3e:28:95:66:80:19:e5:89:5b:ed:bb:ab:23:f3:f0:
a8:29:ab:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:09:17 2025 by rpki-client