Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/981b84-9ff0-48e9-ab21-9b6cbfb43246/1/X-C-IOAv_HNU1bLTPg_ncVGa_R8.mft
File: X-C-IOAv_HNU1bLTPg_ncVGa_R8.mft (raw, json)
Hash identifier: Gcu0/0gff4ZYrG3J4YilauH+N4ggoBS+NHMAmAr20QQ=
Subject key identifier: 43:F6:7C:06:B3:5D:E0:A7:6B:44:82:9B:BB:F5:17:8B:63:98:D0:9A
Authority key identifier: 5F:E0:BE:20:E0:2F:FC:73:54:D5:B2:D3:3E:0F:E7:71:51:9A:FD:1F
Certificate issuer: /CN=5fe0be20e02ffc7354d5b2d33e0fe771519afd1f
Certificate serial: 01976F2C0FA8F3020EF123D9575943264C4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X-C-IOAv_HNU1bLTPg_ncVGa_R8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/981b84-9ff0-48e9-ab21-9b6cbfb43246/1/X-C-IOAv_HNU1bLTPg_ncVGa_R8.mft
Manifest number: 063C
Signing time: Sat 14 Jun 2025 16:00:47 +0000
Manifest this update: Sat 14 Jun 2025 16:00:47 +0000
Manifest next update: Sun 15 Jun 2025 16:00:47 +0000
Files and hashes: 1: X-C-IOAv_HNU1bLTPg_ncVGa_R8.crl (hash: yEVIbpVZJXgbjB/enYREBPbdK+W/ov+kKGGwYR40Y5c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/981b84-9ff0-48e9-ab21-9b6cbfb43246/1/X-C-IOAv_HNU1bLTPg_ncVGa_R8.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/981b84-9ff0-48e9-ab21-9b6cbfb43246/1/X-C-IOAv_HNU1bLTPg_ncVGa_R8.mft
rsync://rpki.ripe.net/repository/DEFAULT/X-C-IOAv_HNU1bLTPg_ncVGa_R8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 10:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6f:2c:0f:a8:f3:02:0e:f1:23:d9:57:59:43:26:4c:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5fe0be20e02ffc7354d5b2d33e0fe771519afd1f
Validity
Not Before: Jun 14 16:00:47 2025 GMT
Not After : Jun 15 16:00:47 2025 GMT
Subject: CN=43f67c06b35de0a76b44829bbbf5178b6398d09a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:7e:e2:b3:7c:25:34:da:24:0e:34:6c:7d:d4:
0d:9a:0e:9b:1e:75:f1:70:7e:9d:cc:e7:43:bb:0d:
b0:83:64:a9:bf:d2:b9:45:6c:6d:a0:56:73:90:bd:
09:be:f6:cf:d2:c1:64:b6:00:d9:8c:5b:20:7c:d0:
46:0e:4b:d6:46:29:1a:a2:d3:11:a7:60:2f:95:24:
ff:f3:2f:8c:b7:40:de:a7:e4:84:97:c5:5f:31:b1:
78:26:68:52:10:09:04:0a:5c:30:3b:72:8e:f0:04:
67:69:70:0b:be:a6:69:0c:87:4d:e3:e8:f1:45:70:
05:ef:ff:00:1e:07:b6:4c:21:68:d4:64:b8:d8:5a:
4d:03:4f:41:ea:f8:ce:5e:52:e7:29:8e:0c:ad:46:
61:cf:b2:d0:ab:49:63:e7:a5:30:ea:df:92:2c:64:
0e:4e:ae:24:84:db:75:4f:40:0e:47:4f:51:e2:c2:
74:1c:31:f6:bd:7f:e9:55:ab:ab:46:87:ed:65:f8:
62:4d:fe:dd:99:ca:c9:19:1b:2f:6a:bd:99:b0:5d:
bd:97:4e:1d:10:9f:00:af:d5:19:f2:f3:b3:f8:b5:
9b:b2:df:c2:f7:39:a7:29:04:d4:f8:6a:92:5d:b5:
8a:ed:83:c0:11:58:b3:bb:f2:e4:ce:72:0a:38:dc:
d0:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:F6:7C:06:B3:5D:E0:A7:6B:44:82:9B:BB:F5:17:8B:63:98:D0:9A
X509v3 Authority Key Identifier:
keyid:5F:E0:BE:20:E0:2F:FC:73:54:D5:B2:D3:3E:0F:E7:71:51:9A:FD:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X-C-IOAv_HNU1bLTPg_ncVGa_R8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/981b84-9ff0-48e9-ab21-9b6cbfb43246/1/X-C-IOAv_HNU1bLTPg_ncVGa_R8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/981b84-9ff0-48e9-ab21-9b6cbfb43246/1/X-C-IOAv_HNU1bLTPg_ncVGa_R8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:45:89:0a:6f:ed:2d:f7:d4:0f:52:38:8a:82:a6:c7:ae:98:
92:3b:bd:bb:63:46:84:21:ba:c6:2d:eb:dd:e4:16:ea:6e:6b:
14:13:43:ed:6f:cc:27:c8:e3:a0:27:85:5c:59:89:51:1e:66:
49:6a:68:81:96:f7:e4:2d:c0:b4:c9:a8:41:f6:37:05:7b:b9:
35:13:a1:3e:9a:33:0c:4d:f7:33:65:f7:6b:1d:aa:37:02:bb:
46:2b:2a:4c:2d:d5:da:92:58:0c:9e:e7:f0:6f:a9:36:87:eb:
bd:95:2f:20:ed:66:61:00:0f:78:b2:a8:7b:62:1c:51:fb:41:
0f:bf:b1:4f:7a:a1:87:86:eb:4f:1e:1e:76:2a:48:a9:ff:06:
89:2b:dd:9f:e5:92:ec:b0:bf:d9:32:f3:d7:0b:75:25:2d:6a:
dd:c3:fc:4b:b3:b2:15:78:8f:c4:be:51:43:3e:90:e9:f3:bd:
f7:23:e7:7d:96:6a:f0:3a:3a:b8:ea:ee:8c:23:b4:fc:3e:25:
96:41:a0:91:f0:2f:e7:e0:1c:d0:cc:25:71:d2:c1:65:b3:63:
42:f8:0a:76:09:39:99:79:28:9d:db:84:4a:bf:7d:38:57:26:
83:f1:09:a5:f6:b1:71:f8:3f:e7:2f:52:bb:97:db:28:4d:b1:
6c:cf:77:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 20:04:40 2025 by rpki-client