Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/839828-ce59-4d22-a621-8c6aa10695b2/1/Iu8SfmGVSrmJNlydukuMBkzu2fA.mft
File: Iu8SfmGVSrmJNlydukuMBkzu2fA.mft (raw, json)
Hash identifier: 4SWneNRnQSnszf1hwLS1Bi53WH98WGoDJLSl9Bl0M4w=
Subject key identifier: DD:FD:2C:2B:61:BA:7D:C0:52:B1:62:08:07:9A:EC:1B:08:71:F1:DE
Authority key identifier: 22:EF:12:7E:61:95:4A:B9:89:36:5C:9D:BA:4B:8C:06:4C:EE:D9:F0
Certificate issuer: /CN=22ef127e61954ab989365c9dba4b8c064ceed9f0
Certificate serial: 01977FE94CE5D4515A5912663F40FB57C749
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Iu8SfmGVSrmJNlydukuMBkzu2fA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/839828-ce59-4d22-a621-8c6aa10695b2/1/Iu8SfmGVSrmJNlydukuMBkzu2fA.mft
Manifest number: 03F0
Signing time: Tue 17 Jun 2025 22:01:25 +0000
Manifest this update: Tue 17 Jun 2025 22:01:25 +0000
Manifest next update: Wed 18 Jun 2025 22:01:25 +0000
Files and hashes: 1: Iu8SfmGVSrmJNlydukuMBkzu2fA.crl (hash: Jm7kml7yKqOg0venU94yWUmsf3OOytm9oauqcj4ebH8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/839828-ce59-4d22-a621-8c6aa10695b2/1/Iu8SfmGVSrmJNlydukuMBkzu2fA.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/839828-ce59-4d22-a621-8c6aa10695b2/1/Iu8SfmGVSrmJNlydukuMBkzu2fA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Iu8SfmGVSrmJNlydukuMBkzu2fA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 18 Jun 2025 22:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:7f:e9:4c:e5:d4:51:5a:59:12:66:3f:40:fb:57:c7:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22ef127e61954ab989365c9dba4b8c064ceed9f0
Validity
Not Before: Jun 17 22:01:25 2025 GMT
Not After : Jun 18 22:01:25 2025 GMT
Subject: CN=ddfd2c2b61ba7dc052b16208079aec1b0871f1de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:2f:e0:f2:f4:4a:88:ba:a0:0f:a0:56:67:e2:
13:a7:f2:6d:07:0e:7f:ff:5d:f0:64:e1:8a:b2:96:
6f:0b:f7:28:84:e7:e4:73:48:f7:a4:2f:69:10:79:
dd:7f:17:f0:54:1f:b6:c3:f0:4a:4a:36:8c:66:a2:
43:dd:26:11:9c:4c:28:72:2a:17:b3:5e:fa:85:64:
c4:0f:bf:6f:16:c8:db:64:15:f3:be:9d:85:ff:b9:
89:a2:82:95:45:85:6a:83:32:63:4c:7d:64:13:47:
5b:71:41:3f:c5:f0:88:cb:d8:f4:bb:d5:ae:09:45:
19:55:26:66:35:0a:69:fa:93:51:5a:f2:ff:19:49:
a4:94:f3:15:06:0d:1f:b9:ea:d5:f1:c4:2f:ed:21:
e6:5c:dc:3f:be:19:b8:1c:f0:1e:61:ee:03:06:b3:
5e:c2:e0:c6:e3:b5:ba:72:f9:53:d0:ba:27:24:7b:
51:b5:e3:2e:37:aa:b6:a3:3c:34:bc:ad:49:f1:a6:
f9:53:10:4b:cc:65:79:ac:9a:23:45:cf:8b:94:57:
67:46:4f:f8:8f:ae:67:f9:20:37:1f:aa:58:32:14:
7c:a9:ee:1d:4a:c3:9d:05:85:81:a8:c6:e0:31:c7:
14:f1:97:fa:0c:41:1f:9e:6b:e7:83:90:44:29:69:
93:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:FD:2C:2B:61:BA:7D:C0:52:B1:62:08:07:9A:EC:1B:08:71:F1:DE
X509v3 Authority Key Identifier:
keyid:22:EF:12:7E:61:95:4A:B9:89:36:5C:9D:BA:4B:8C:06:4C:EE:D9:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Iu8SfmGVSrmJNlydukuMBkzu2fA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/839828-ce59-4d22-a621-8c6aa10695b2/1/Iu8SfmGVSrmJNlydukuMBkzu2fA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/839828-ce59-4d22-a621-8c6aa10695b2/1/Iu8SfmGVSrmJNlydukuMBkzu2fA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:d1:e4:e2:90:10:2d:39:a3:a4:d9:31:61:b9:23:45:bf:16:
f0:67:19:92:98:7b:c6:cc:ac:86:8c:22:91:e2:df:1c:a1:51:
19:4c:48:d0:68:da:e4:8b:07:e0:7c:82:d2:f9:c2:d4:da:16:
72:e7:34:ec:af:34:9f:10:39:8f:24:9e:4d:8b:06:c7:bd:19:
b3:f3:48:b0:6a:c0:cc:54:56:2e:0b:a8:17:13:7c:ce:2e:16:
99:14:b4:29:9e:93:15:b4:f3:e6:98:77:5f:27:1e:83:0c:c7:
8e:cf:c9:e4:24:49:f4:4c:eb:aa:57:33:93:fc:1b:dc:23:96:
79:9c:2d:5d:f3:64:da:1d:22:6b:bf:72:c2:32:92:60:2b:69:
34:ba:a2:90:f5:98:ae:9d:58:c4:c9:96:d7:7d:9c:c2:6f:62:
b9:7a:63:28:d9:77:45:f9:76:b7:4a:6a:24:2b:cd:7a:bf:4c:
24:aa:81:57:14:a0:d4:f4:2b:ac:cb:01:05:0f:6a:14:12:ef:
15:96:05:81:7b:8b:e5:3e:20:b6:45:2d:90:5c:d4:42:84:8f:
6a:ac:81:56:4f:93:91:7e:c5:2e:f8:38:18:e4:0e:f6:57:7a:
72:0b:ad:ac:22:08:e9:2b:2f:0f:81:61:6c:d3:18:f6:28:73:
79:10:49:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 08:25:20 2025 by rpki-client