Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/247c5d-a272-482b-9c8e-37fe395d42f0/1/i3vnpHYGqzg5H7IVQrX0Bh8CqFI.mft
File: i3vnpHYGqzg5H7IVQrX0Bh8CqFI.mft (raw, json)
Hash identifier: n52t2rPtX9cV8iK8kpiqKSs3RWPBnMu0lpooGpHa9cg=
Subject key identifier: 16:24:BE:01:B6:50:4F:E4:A4:BE:52:49:BE:C8:BA:91:ED:D5:9C:A0
Authority key identifier: 8B:7B:E7:A4:76:06:AB:38:39:1F:B2:15:42:B5:F4:06:1F:02:A8:52
Certificate issuer: /CN=8b7be7a47606ab38391fb21542b5f4061f02a852
Certificate serial: 019892C9161983D3EAE79DC062B151473E26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i3vnpHYGqzg5H7IVQrX0Bh8CqFI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/247c5d-a272-482b-9c8e-37fe395d42f0/1/i3vnpHYGqzg5H7IVQrX0Bh8CqFI.mft
Manifest number: 0CA0
Signing time: Sun 10 Aug 2025 07:01:48 +0000
Manifest this update: Sun 10 Aug 2025 07:01:48 +0000
Manifest next update: Mon 11 Aug 2025 07:01:48 +0000
Files and hashes: 1: i3vnpHYGqzg5H7IVQrX0Bh8CqFI.crl (hash: 3tc0Vpwf/k5ePtb49ysL5snqEixDNaHoA2sQY86aWNM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/247c5d-a272-482b-9c8e-37fe395d42f0/1/i3vnpHYGqzg5H7IVQrX0Bh8CqFI.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/247c5d-a272-482b-9c8e-37fe395d42f0/1/i3vnpHYGqzg5H7IVQrX0Bh8CqFI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i3vnpHYGqzg5H7IVQrX0Bh8CqFI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 07:01:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:92:c9:16:19:83:d3:ea:e7:9d:c0:62:b1:51:47:3e:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b7be7a47606ab38391fb21542b5f4061f02a852
Validity
Not Before: Aug 10 07:01:48 2025 GMT
Not After : Aug 11 07:01:48 2025 GMT
Subject: CN=1624be01b6504fe4a4be5249bec8ba91edd59ca0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:62:e3:cd:37:66:fc:90:68:cf:09:6c:97:c0:
55:67:f1:fb:2f:39:0d:e5:74:f7:fe:5f:15:9a:61:
98:e6:bd:77:aa:a8:06:0d:a5:46:ba:11:27:61:cc:
f0:21:cc:7c:1b:3c:e5:0f:23:7d:73:fb:f2:83:dc:
53:59:f8:9f:30:dc:02:ea:84:0c:18:25:f6:1f:12:
d2:57:be:91:07:9a:38:e7:a3:0c:15:09:41:d5:e5:
01:f9:fa:7d:0d:cf:02:03:a3:19:dd:27:b4:9d:e9:
50:f4:45:3c:83:a6:a8:63:f2:07:2a:2c:c0:c7:2b:
65:a4:e2:d6:de:89:0d:47:1f:a0:fc:fc:72:7b:03:
32:3d:45:e0:bb:1c:73:40:b6:cc:89:17:0a:00:40:
ac:4e:9d:0f:15:12:8d:c3:20:ac:0f:38:84:a7:1d:
21:b5:bc:ee:b6:f3:76:24:19:d0:59:30:9c:c6:40:
b8:1a:c0:f6:98:25:78:a6:78:40:2b:06:9f:f8:2e:
34:dc:f9:55:b1:3b:cb:bd:9f:1d:9f:ac:88:65:de:
ef:30:b1:1d:c7:90:1c:e3:b2:f5:64:63:64:10:06:
1d:3d:85:0a:47:11:88:49:97:c3:6c:0d:f1:0c:7c:
a0:a2:29:9c:77:1e:b5:57:a6:a3:df:85:81:51:13:
4a:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:24:BE:01:B6:50:4F:E4:A4:BE:52:49:BE:C8:BA:91:ED:D5:9C:A0
X509v3 Authority Key Identifier:
keyid:8B:7B:E7:A4:76:06:AB:38:39:1F:B2:15:42:B5:F4:06:1F:02:A8:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i3vnpHYGqzg5H7IVQrX0Bh8CqFI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/247c5d-a272-482b-9c8e-37fe395d42f0/1/i3vnpHYGqzg5H7IVQrX0Bh8CqFI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/247c5d-a272-482b-9c8e-37fe395d42f0/1/i3vnpHYGqzg5H7IVQrX0Bh8CqFI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:01:37:53:e5:db:6b:a1:24:c0:64:21:25:64:b7:e0:3d:0c:
72:9a:6b:03:4d:1e:df:74:c9:8c:8b:b7:ee:79:e3:22:db:b8:
f7:33:19:72:df:41:63:d0:42:39:44:da:fb:e2:7e:21:06:80:
df:5b:26:7d:de:23:22:2c:83:8e:9b:b6:09:bc:03:e1:09:0d:
c6:98:6d:49:e7:e2:8e:1c:0e:5b:a4:02:21:89:a8:d0:93:9e:
93:04:0e:a5:a1:79:32:44:0b:74:62:14:e7:d8:00:76:4c:0d:
10:47:e6:61:e8:c8:e4:43:f5:6c:ea:2a:e4:e1:56:25:be:28:
a0:68:0d:1e:da:5c:f7:5d:29:49:8b:9e:ba:ef:ce:68:78:56:
e5:7d:1c:28:80:54:c0:61:f7:a9:e1:83:e3:d7:2b:3d:08:f5:
d8:28:52:35:80:cd:6e:49:66:6d:e5:26:b4:ff:87:52:91:13:
91:f0:dd:37:e7:7b:f9:5c:2a:ab:5f:4d:1a:ac:94:20:39:e8:
4f:de:0a:20:d2:a4:b6:35:c3:79:60:7f:30:3d:52:bf:65:0c:
f2:59:90:1c:e1:0a:95:b3:23:08:9e:f9:0a:be:42:b8:75:b6:
3f:09:89:15:56:74:e6:bf:99:b7:55:5a:d6:1e:fc:b1:69:89:
16:e2:f4:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 13:45:32 2025 by rpki-client