Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/efece3-e530-46c8-b388-9873afa73e7e/1/I1HFLSNz9aW3LcbdEqddE7JluQQ.mft
File: I1HFLSNz9aW3LcbdEqddE7JluQQ.mft (raw, json)
Hash identifier: S5p1CMh58f03MZv3fbF5FTGxJKfhd6Qeo97jwCDEfVg=
Subject key identifier: 80:AA:71:B2:18:47:4B:59:D3:16:24:CB:8E:92:43:F5:76:CB:73:86
Authority key identifier: 23:51:C5:2D:23:73:F5:A5:B7:2D:C6:DD:12:A7:5D:13:B2:65:B9:04
Certificate issuer: /CN=2351c52d2373f5a5b72dc6dd12a75d13b265b904
Certificate serial: 0198A084400E3F79843B8862E54E02BAA839
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I1HFLSNz9aW3LcbdEqddE7JluQQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/efece3-e530-46c8-b388-9873afa73e7e/1/I1HFLSNz9aW3LcbdEqddE7JluQQ.mft
Manifest number: 134D
Signing time: Tue 12 Aug 2025 23:01:18 +0000
Manifest this update: Tue 12 Aug 2025 23:01:18 +0000
Manifest next update: Wed 13 Aug 2025 23:01:18 +0000
Files and hashes: 1: I1HFLSNz9aW3LcbdEqddE7JluQQ.crl (hash: D+Met7GFcKdsmkUI257WL378fGzCKWYo9/2p3naQhww=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/efece3-e530-46c8-b388-9873afa73e7e/1/I1HFLSNz9aW3LcbdEqddE7JluQQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/efece3-e530-46c8-b388-9873afa73e7e/1/I1HFLSNz9aW3LcbdEqddE7JluQQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/I1HFLSNz9aW3LcbdEqddE7JluQQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 22:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:a0:84:40:0e:3f:79:84:3b:88:62:e5:4e:02:ba:a8:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2351c52d2373f5a5b72dc6dd12a75d13b265b904
Validity
Not Before: Aug 12 23:01:18 2025 GMT
Not After : Aug 13 23:01:18 2025 GMT
Subject: CN=80aa71b218474b59d31624cb8e9243f576cb7386
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:8b:8a:2e:34:69:00:0c:c1:52:66:13:e3:b0:
75:76:f1:6a:1f:fd:5e:af:69:98:4e:ea:66:40:5a:
bb:0f:7b:71:c7:e7:1e:77:3e:4c:64:1e:4c:ab:66:
69:49:76:e0:bb:6d:38:63:85:b4:4e:26:96:59:e1:
2b:2e:49:d2:65:8b:19:3a:8f:3b:e7:f7:ed:cb:f5:
fb:31:7a:dd:4f:3c:a4:6c:ab:ee:33:7a:ee:1f:5b:
ad:82:7f:5c:57:9e:91:12:8a:e3:26:ae:a7:e8:fa:
1d:ce:8d:7c:40:04:b6:88:45:df:71:d5:bb:38:99:
7e:f9:ef:29:50:b0:57:db:69:53:d0:77:40:ba:2e:
77:e9:5e:47:b1:f9:7a:31:5c:ae:5b:3b:5c:0c:2b:
e0:fd:f4:75:a9:00:6d:d6:df:33:52:25:71:27:a4:
4e:8b:bb:95:f0:a4:ac:91:11:6d:a8:b6:1b:99:39:
2f:8f:a0:ea:80:58:b9:26:0b:e9:bb:01:2f:95:7b:
1d:6d:ef:e2:e7:28:65:6e:d5:20:31:8c:5d:a2:ec:
9b:60:18:6d:cd:58:07:36:ad:e7:f5:4a:7a:74:d0:
c4:05:13:1c:66:c3:cd:66:27:a5:fc:87:75:ec:6a:
89:5a:2c:00:1f:38:c8:9d:f6:3d:4a:e5:81:d8:b7:
4c:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:AA:71:B2:18:47:4B:59:D3:16:24:CB:8E:92:43:F5:76:CB:73:86
X509v3 Authority Key Identifier:
keyid:23:51:C5:2D:23:73:F5:A5:B7:2D:C6:DD:12:A7:5D:13:B2:65:B9:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I1HFLSNz9aW3LcbdEqddE7JluQQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/efece3-e530-46c8-b388-9873afa73e7e/1/I1HFLSNz9aW3LcbdEqddE7JluQQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/efece3-e530-46c8-b388-9873afa73e7e/1/I1HFLSNz9aW3LcbdEqddE7JluQQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:76:b8:03:fb:1e:2a:95:6f:72:32:a6:25:cb:e5:6f:6a:6e:
d5:a1:ea:8e:93:24:72:fc:37:b4:1c:01:60:b2:cc:75:0d:23:
45:69:04:1d:cf:a3:7b:62:a3:56:ea:cb:d9:85:f4:83:81:80:
8e:27:ee:5c:88:98:84:c0:94:57:fc:58:2a:24:84:32:51:ec:
61:04:06:85:02:cc:26:af:ef:7f:20:e0:93:a8:d5:d2:c7:c1:
59:b5:d4:bf:44:27:71:4d:67:7f:88:47:95:a4:a2:c4:5d:03:
73:99:f6:6b:96:03:e6:44:c5:8a:d8:07:c5:bd:a7:57:ec:f3:
ee:0d:d4:3b:8a:23:5a:55:e5:84:e5:a1:b4:d0:8a:a3:d5:72:
48:0c:64:68:00:8b:9e:87:00:1f:b0:f9:43:5c:7b:2f:90:c0:
43:b1:05:98:7e:f2:c5:99:52:db:1d:82:33:32:39:0b:69:c1:
78:83:6d:7c:c4:d8:8a:0d:a4:29:be:52:19:b7:7b:78:a2:c8:
94:e6:d2:a3:45:34:83:9c:27:17:40:8e:91:be:4f:0c:a2:90:
41:81:eb:45:3c:d4:94:ce:4a:dd:e8:bd:66:bb:76:48:0f:03:
0a:86:41:aa:49:b1:17:84:33:46:5e:f7:bc:71:2c:af:7d:ac:
18:9b:96:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 05:30:03 2025 by rpki-client