Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/38c26f-25a2-4b20-9ecd-0e6bced00463/1/IMnySVGbH_R5NQ8xclT0Bei_yr0.mft
File: IMnySVGbH_R5NQ8xclT0Bei_yr0.mft (raw, json)
Hash identifier: AGDp1jq7jyEhVcjdqllP6DOjZoJiO266YZg3SvEEXFo=
Subject key identifier: 2B:AF:C1:F4:14:F9:5C:65:4E:D8:1B:2E:4D:BC:93:C2:37:B9:21:71
Authority key identifier: 20:C9:F2:49:51:9B:1F:F4:79:35:0F:31:72:54:F4:05:E8:BF:CA:BD
Certificate issuer: /CN=20c9f249519b1ff479350f317254f405e8bfcabd
Certificate serial: 019771F5B8DF4D2AD6E24AA1AA6B41778DED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IMnySVGbH_R5NQ8xclT0Bei_yr0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/38c26f-25a2-4b20-9ecd-0e6bced00463/1/IMnySVGbH_R5NQ8xclT0Bei_yr0.mft
Manifest number: 0F87
Signing time: Sun 15 Jun 2025 05:00:18 +0000
Manifest this update: Sun 15 Jun 2025 05:00:18 +0000
Manifest next update: Mon 16 Jun 2025 05:00:18 +0000
Files and hashes: 1: IMnySVGbH_R5NQ8xclT0Bei_yr0.crl (hash: uANzekBI5npjhqUnD7bNHVgtfcssbdvEAUrQNgJlH+4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/38c26f-25a2-4b20-9ecd-0e6bced00463/1/IMnySVGbH_R5NQ8xclT0Bei_yr0.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/38c26f-25a2-4b20-9ecd-0e6bced00463/1/IMnySVGbH_R5NQ8xclT0Bei_yr0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IMnySVGbH_R5NQ8xclT0Bei_yr0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 04:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:71:f5:b8:df:4d:2a:d6:e2:4a:a1:aa:6b:41:77:8d:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20c9f249519b1ff479350f317254f405e8bfcabd
Validity
Not Before: Jun 15 05:00:18 2025 GMT
Not After : Jun 16 05:00:18 2025 GMT
Subject: CN=2bafc1f414f95c654ed81b2e4dbc93c237b92171
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:ea:06:f0:59:2d:8d:be:27:93:df:e6:0f:b5:
31:5b:58:17:6c:a5:83:07:c2:ba:75:1b:01:77:8d:
86:20:e1:9d:71:28:2e:ce:7a:dc:17:b2:27:03:f1:
22:df:99:7b:f8:ec:a7:0a:0e:ea:78:df:70:c2:2c:
20:12:ea:5b:0b:e7:57:36:b1:93:a1:85:4d:bd:a9:
9e:bd:4f:8b:fe:42:ac:81:b4:f9:31:3b:3f:f6:64:
42:d5:63:c7:f3:b6:ce:6e:37:3a:e5:4c:90:0f:3a:
c7:de:c5:29:3b:27:21:04:0d:86:87:b7:9c:ef:e0:
21:fd:08:f3:ea:ab:55:83:38:97:bf:4d:19:ad:bc:
6b:fe:be:21:aa:86:86:1a:14:39:94:2e:69:00:2d:
76:fb:dd:ba:91:c5:e6:15:a9:9d:d1:16:c4:e5:f3:
fc:ef:2f:31:1a:2f:e1:d8:dc:fe:05:0c:67:07:ec:
6c:39:c2:32:b5:7f:91:28:71:89:c0:01:69:f8:88:
f2:e0:a4:d0:7a:f6:ae:70:fb:a3:e8:b1:06:60:af:
53:39:cf:3b:5e:bd:fd:3b:e0:c2:b9:64:d5:4e:6b:
cf:2d:33:b7:61:af:31:3a:48:4e:e1:22:3e:3f:ba:
ac:b2:48:75:d3:2e:4b:de:1f:f3:82:6a:34:ba:03:
a3:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:AF:C1:F4:14:F9:5C:65:4E:D8:1B:2E:4D:BC:93:C2:37:B9:21:71
X509v3 Authority Key Identifier:
keyid:20:C9:F2:49:51:9B:1F:F4:79:35:0F:31:72:54:F4:05:E8:BF:CA:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IMnySVGbH_R5NQ8xclT0Bei_yr0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/38c26f-25a2-4b20-9ecd-0e6bced00463/1/IMnySVGbH_R5NQ8xclT0Bei_yr0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/38c26f-25a2-4b20-9ecd-0e6bced00463/1/IMnySVGbH_R5NQ8xclT0Bei_yr0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:e4:c6:c3:5f:84:a1:ae:ab:71:91:47:e7:1e:dc:0c:05:92:
50:b6:50:2c:5b:cc:3d:20:e4:33:eb:fb:b9:09:17:69:77:cd:
5e:01:26:ef:a4:4c:c8:8d:46:52:3b:58:c6:c5:3b:80:75:9e:
7e:88:aa:a4:82:7e:f7:54:39:33:ab:03:72:a3:41:d5:da:06:
a3:39:6f:be:28:92:f8:37:c6:d3:1d:e1:71:49:68:1d:f3:5b:
fe:79:0c:95:ba:ee:36:aa:3d:42:46:14:4c:c3:1a:b8:00:68:
4b:4c:15:e0:fe:01:25:6f:f6:14:72:14:82:79:62:69:cd:38:
aa:bf:2c:46:31:80:0b:80:e6:44:a7:dd:d9:91:7c:73:6c:86:
68:a4:29:2b:0c:bb:2b:a7:12:35:ce:6e:ea:b3:f5:ec:8a:76:
48:5d:a7:fa:bb:41:74:91:1b:bb:87:16:89:0f:2c:16:e7:ec:
4a:32:e5:f4:e5:d0:5e:4c:61:96:ea:33:90:17:c4:7d:f5:83:
19:32:fb:5d:29:ae:2d:7b:34:a3:be:86:a7:84:75:c7:16:a3:
74:72:4a:38:b3:6e:f9:ce:ee:1b:8d:cb:2a:a7:60:87:c8:13:
e4:7e:1e:e6:70:8f:f6:dc:b0:9e:7b:04:34:61:db:e4:0c:56:
75:4f:f9:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 11:35:07 2025 by rpki-client