Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/09f6d3-972f-4b05-b27a-b77c1f9729ff/1/igr5b5WYkhMXjTPWXwcOj7L-N98.mft
File: igr5b5WYkhMXjTPWXwcOj7L-N98.mft (raw, json)
Hash identifier: VnMdvcXu9aU1ZxdDtB7y3USWHA3EKoTnjdMZq8UNdIA=
Subject key identifier: 98:62:5E:E8:9D:F6:A2:D5:9B:C8:B4:74:A2:3C:A3:C2:1E:C6:99:A6
Authority key identifier: 8A:0A:F9:6F:95:98:92:13:17:8D:33:D6:5F:07:0E:8F:B2:FE:37:DF
Certificate issuer: /CN=8a0af96f95989213178d33d65f070e8fb2fe37df
Certificate serial: 01976929DCC200FEFABBF92C5CB013FD69CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/igr5b5WYkhMXjTPWXwcOj7L-N98.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/09f6d3-972f-4b05-b27a-b77c1f9729ff/1/igr5b5WYkhMXjTPWXwcOj7L-N98.mft
Manifest number: 0634
Signing time: Fri 13 Jun 2025 12:00:40 +0000
Manifest this update: Fri 13 Jun 2025 12:00:40 +0000
Manifest next update: Sat 14 Jun 2025 12:00:40 +0000
Files and hashes: 1: igr5b5WYkhMXjTPWXwcOj7L-N98.crl (hash: al80+Vz2QVdcZ+aJoZmaYc3OCtQ90KrD7I45xDEXDIY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/09f6d3-972f-4b05-b27a-b77c1f9729ff/1/igr5b5WYkhMXjTPWXwcOj7L-N98.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/09f6d3-972f-4b05-b27a-b77c1f9729ff/1/igr5b5WYkhMXjTPWXwcOj7L-N98.mft
rsync://rpki.ripe.net/repository/DEFAULT/igr5b5WYkhMXjTPWXwcOj7L-N98.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 12:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:29:dc:c2:00:fe:fa:bb:f9:2c:5c:b0:13:fd:69:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a0af96f95989213178d33d65f070e8fb2fe37df
Validity
Not Before: Jun 13 12:00:40 2025 GMT
Not After : Jun 14 12:00:40 2025 GMT
Subject: CN=98625ee89df6a2d59bc8b474a23ca3c21ec699a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:5c:85:e1:1e:23:e6:be:f4:18:53:8e:ca:e2:
ff:18:19:f3:56:c8:d7:6d:ea:ed:af:b9:2a:2c:38:
12:9d:77:29:18:12:00:38:27:32:ab:dd:20:5e:4e:
a0:9b:a6:85:10:3a:cd:b1:8b:f9:54:39:0c:37:7f:
0b:62:90:ea:37:7b:27:d5:2d:b4:10:ef:84:dd:8f:
1f:15:86:91:66:02:e2:0a:f1:22:26:fd:84:b1:99:
25:a9:34:dd:08:8a:bc:86:b0:43:99:e0:d2:6f:91:
5a:27:98:f3:36:3e:ce:51:e9:ff:c1:eb:7a:d4:17:
a3:12:ab:72:11:e0:34:5a:4c:d6:a1:70:c1:5c:5b:
e6:38:65:25:9b:c9:5e:a6:ac:c0:3c:c1:b8:6f:34:
f2:81:ca:98:d7:77:cd:15:92:52:7d:1f:c0:4e:e6:
bc:f0:cc:79:8a:10:32:61:3d:0a:ad:64:50:23:f8:
21:cc:62:2e:cf:e8:a1:65:ea:44:b0:b9:29:67:1f:
ad:59:b3:64:c2:39:ee:9a:3c:05:f8:29:17:e3:20:
48:b0:71:3a:85:7c:01:7c:75:bc:c2:82:99:e4:c0:
85:4d:d3:38:7c:12:09:60:15:5d:7f:ec:9b:e1:97:
ae:c4:ab:6c:e9:d5:dd:cb:b0:36:cd:11:b4:be:f8:
7f:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:62:5E:E8:9D:F6:A2:D5:9B:C8:B4:74:A2:3C:A3:C2:1E:C6:99:A6
X509v3 Authority Key Identifier:
keyid:8A:0A:F9:6F:95:98:92:13:17:8D:33:D6:5F:07:0E:8F:B2:FE:37:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/igr5b5WYkhMXjTPWXwcOj7L-N98.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/09f6d3-972f-4b05-b27a-b77c1f9729ff/1/igr5b5WYkhMXjTPWXwcOj7L-N98.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/09f6d3-972f-4b05-b27a-b77c1f9729ff/1/igr5b5WYkhMXjTPWXwcOj7L-N98.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:7b:bb:3d:6c:be:81:6b:1a:de:4d:9d:d3:0d:ba:c0:c0:27:
22:9b:e7:1b:20:59:b5:12:b0:5e:06:db:d9:73:8d:39:94:7e:
35:ed:8d:ce:4b:16:00:84:0a:a8:af:d5:fe:86:79:b1:6d:40:
b7:1b:70:b9:85:61:a3:ee:80:28:8f:4a:a6:c1:28:9b:f8:06:
a2:2b:f7:5e:92:93:83:07:09:08:bd:82:b3:a9:ba:6e:ab:73:
09:3f:27:27:5a:87:a7:63:a4:82:8c:f5:1b:79:fc:18:e0:04:
9d:90:ab:4d:89:da:26:bd:4e:e7:14:dd:af:8a:da:e8:29:ab:
03:14:d0:1b:ab:ea:eb:fe:56:1d:da:82:b7:43:21:83:d1:3d:
22:e6:a6:05:f6:ed:90:63:c5:a6:bf:52:79:dd:07:ef:ce:ad:
a1:0b:28:1f:49:a1:60:be:a0:c1:d8:f7:4a:a4:14:9e:5b:98:
6d:0a:d3:dc:3e:94:2b:f8:e6:ca:46:70:71:4e:64:09:e0:69:
ca:82:59:c5:40:83:95:81:20:71:2b:ec:35:a8:a2:71:11:ca:
b7:b3:81:6e:70:55:f6:01:61:a0:96:9c:74:29:c7:52:98:c1:
8e:e5:42:42:e2:c1:dd:ac:5f:37:83:00:1e:c2:fa:c7:0e:23:
5d:94:1b:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:00:20 2025 by rpki-client