Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/7ac7bb-21dc-4a11-9791-4ee16d6c80a6/1/i9iTH2NXlCi_CMyxmaOpjcumuCQ.mft
File: i9iTH2NXlCi_CMyxmaOpjcumuCQ.mft (raw, json)
Hash identifier: JUYKvrEXxJUiKTqjGJJ3YQzD/vcORukEVuEViMzC5UU=
Subject key identifier: 5B:7E:3C:F6:8F:1E:0F:74:C0:C5:79:3E:18:70:39:45:DD:6A:43:1C
Authority key identifier: 8B:D8:93:1F:63:57:94:28:BF:08:CC:B1:99:A3:A9:8D:CB:A6:B8:24
Certificate issuer: /CN=8bd8931f63579428bf08ccb199a3a98dcba6b824
Certificate serial: 0197707567BFCA56838C710D09BE0790852C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i9iTH2NXlCi_CMyxmaOpjcumuCQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/7ac7bb-21dc-4a11-9791-4ee16d6c80a6/1/i9iTH2NXlCi_CMyxmaOpjcumuCQ.mft
Manifest number: 0A68
Signing time: Sat 14 Jun 2025 22:00:31 +0000
Manifest this update: Sat 14 Jun 2025 22:00:31 +0000
Manifest next update: Sun 15 Jun 2025 22:00:31 +0000
Files and hashes: 1: i9iTH2NXlCi_CMyxmaOpjcumuCQ.crl (hash: vL2HMq6/eiPT3odnxOM+VVUeZgahVlM+0bY4SwGzVkE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/7ac7bb-21dc-4a11-9791-4ee16d6c80a6/1/i9iTH2NXlCi_CMyxmaOpjcumuCQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/7ac7bb-21dc-4a11-9791-4ee16d6c80a6/1/i9iTH2NXlCi_CMyxmaOpjcumuCQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/i9iTH2NXlCi_CMyxmaOpjcumuCQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 19:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:70:75:67:bf:ca:56:83:8c:71:0d:09:be:07:90:85:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bd8931f63579428bf08ccb199a3a98dcba6b824
Validity
Not Before: Jun 14 22:00:31 2025 GMT
Not After : Jun 15 22:00:31 2025 GMT
Subject: CN=5b7e3cf68f1e0f74c0c5793e18703945dd6a431c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:34:c0:09:4b:1f:8a:9c:51:45:5a:1b:51:c9:
18:d5:53:39:a0:06:d9:06:eb:60:a3:90:e6:61:f2:
88:49:b0:e8:01:02:1f:f0:f9:ca:4c:f6:1a:e8:e7:
58:61:41:16:89:60:98:b2:df:35:03:cd:24:d4:10:
d2:28:5b:76:44:f7:8c:ad:b4:05:3a:8c:a8:cf:2d:
61:fb:39:a8:3c:86:60:1e:e7:e2:06:f3:cd:35:e8:
bc:d1:3a:7d:47:b7:e2:75:0d:a7:fc:94:cc:8c:f2:
5f:5b:01:9f:a5:01:95:5a:ad:88:99:c7:a6:66:65:
64:75:ec:ec:8e:92:ba:44:1f:02:0b:38:cb:9f:20:
69:9a:7b:c5:8b:ff:31:6a:cc:b9:d6:77:d6:72:65:
17:e6:50:84:7e:48:00:fa:80:a4:36:e6:c1:66:61:
30:e5:22:8b:b4:fb:9f:7b:e5:67:9b:8c:75:03:e4:
3b:e8:28:b7:fc:05:4c:7f:e6:3b:86:8f:3f:12:58:
12:72:9c:d0:b1:7b:b3:91:3e:03:cd:bd:da:1e:76:
a9:c9:26:7c:24:80:10:ce:61:c1:a4:b4:42:9b:2b:
1d:d4:4d:7e:41:e6:8d:28:cb:92:8f:4b:f3:90:f6:
44:c5:26:58:97:ee:bb:15:72:82:5b:bb:4b:6c:58:
ad:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:7E:3C:F6:8F:1E:0F:74:C0:C5:79:3E:18:70:39:45:DD:6A:43:1C
X509v3 Authority Key Identifier:
keyid:8B:D8:93:1F:63:57:94:28:BF:08:CC:B1:99:A3:A9:8D:CB:A6:B8:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i9iTH2NXlCi_CMyxmaOpjcumuCQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/7ac7bb-21dc-4a11-9791-4ee16d6c80a6/1/i9iTH2NXlCi_CMyxmaOpjcumuCQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/7ac7bb-21dc-4a11-9791-4ee16d6c80a6/1/i9iTH2NXlCi_CMyxmaOpjcumuCQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:f7:59:9a:fb:d8:3e:b7:37:8f:f3:c8:bd:72:a4:31:f7:26:
81:71:41:bf:90:41:8f:23:68:0e:f3:41:b6:79:1d:02:9e:fb:
64:5f:6c:a6:7c:15:29:e7:0f:57:be:bd:42:97:ec:52:b5:bf:
90:bd:b5:c5:81:98:ab:55:5c:ae:1d:b5:cf:1a:55:69:15:76:
55:cb:78:9b:97:da:9b:29:01:bd:40:a4:da:fc:69:e3:4a:7a:
39:2d:d3:75:16:1f:a8:df:b8:0c:1d:7d:72:a8:54:72:f7:70:
37:c6:92:7a:9c:8e:38:4e:1d:ac:5c:c4:4d:24:2e:44:1c:2b:
80:37:c6:ee:78:1e:15:29:f1:1f:da:4b:b1:09:6d:25:76:50:
db:da:ee:28:4c:32:64:52:ba:c3:ee:15:05:6b:29:a5:82:5e:
af:64:b8:b4:84:9b:a8:19:c0:e1:ee:e7:ff:fc:cc:5d:40:7e:
2c:eb:76:82:4c:4b:41:f9:45:ef:82:b8:ff:1c:d2:c4:97:24:
f2:ab:0a:64:47:e7:8d:1b:6c:19:b3:79:33:a5:d9:02:d5:18:
a6:e1:88:c5:9b:9e:15:34:7a:bf:d4:80:c6:8e:89:f5:95:59:
15:4d:5d:ed:8c:27:aa:b5:39:43:54:43:84:64:4a:b4:64:0b:
19:ba:e1:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 04:17:22 2025 by rpki-client