Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/eddbcc-22e3-4cda-910a-6f4421b9d525/1/IV-8e-5GcW9jbLfZU7Y-vjS37uk.mft
File: IV-8e-5GcW9jbLfZU7Y-vjS37uk.mft (raw, json)
Hash identifier: EeY57aPy4o6LXXvY86YlCIyT0dZMfPbEt8fYxKmGY8M=
Subject key identifier: D2:77:85:7E:B6:E2:3D:14:56:57:4F:2A:F4:A8:BB:FD:BF:0B:E2:3C
Authority key identifier: 21:5F:BC:7B:EE:46:71:6F:63:6C:B7:D9:53:B6:3E:BE:34:B7:EE:E9
Certificate issuer: /CN=215fbc7bee46716f636cb7d953b63ebe34b7eee9
Certificate serial: 01976DAB90F697757991DA3ACFAB665BE556
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IV-8e-5GcW9jbLfZU7Y-vjS37uk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/eddbcc-22e3-4cda-910a-6f4421b9d525/1/IV-8e-5GcW9jbLfZU7Y-vjS37uk.mft
Manifest number: 04FB
Signing time: Sat 14 Jun 2025 09:00:49 +0000
Manifest this update: Sat 14 Jun 2025 09:00:49 +0000
Manifest next update: Sun 15 Jun 2025 09:00:49 +0000
Files and hashes: 1: IV-8e-5GcW9jbLfZU7Y-vjS37uk.crl (hash: aIGkxhDek9gq7PGG4dOTX6J0GSOBWIZ+w5g9QJBJxxk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/eddbcc-22e3-4cda-910a-6f4421b9d525/1/IV-8e-5GcW9jbLfZU7Y-vjS37uk.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/eddbcc-22e3-4cda-910a-6f4421b9d525/1/IV-8e-5GcW9jbLfZU7Y-vjS37uk.mft
rsync://rpki.ripe.net/repository/DEFAULT/IV-8e-5GcW9jbLfZU7Y-vjS37uk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:ab:90:f6:97:75:79:91:da:3a:cf:ab:66:5b:e5:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=215fbc7bee46716f636cb7d953b63ebe34b7eee9
Validity
Not Before: Jun 14 09:00:49 2025 GMT
Not After : Jun 15 09:00:49 2025 GMT
Subject: CN=d277857eb6e23d1456574f2af4a8bbfdbf0be23c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:44:a2:3a:17:86:a7:42:c2:71:42:4a:2e:06:
07:72:06:3f:ae:93:a4:c5:2b:47:41:54:b4:0d:6e:
1c:84:2f:b6:87:bf:93:8e:82:f5:1f:4e:0f:f5:18:
a9:af:c5:71:05:ec:3d:2f:7b:c3:c9:f1:b2:21:00:
03:0f:3b:95:44:e7:58:fb:22:9a:dd:1b:c9:27:4d:
98:28:0c:25:f7:91:01:e1:45:b0:08:36:52:dc:c5:
2e:7b:03:b4:c0:5c:c8:4f:74:75:8a:1e:8e:22:fd:
96:10:ae:d7:de:47:2e:ff:19:e0:88:e9:03:9f:80:
1f:01:81:1a:67:fe:ae:7a:6f:0d:84:8a:fa:33:10:
26:fa:f7:50:bc:b4:fc:be:95:c0:7c:ed:27:47:b2:
ea:38:69:81:44:3c:45:84:ec:0c:d3:40:cb:12:8d:
8f:1d:2a:1d:5a:bf:6e:1a:49:1e:bc:88:2c:67:66:
3c:c9:f0:62:34:bc:eb:84:77:49:d5:f3:80:c1:23:
92:61:97:f8:63:f7:9b:15:34:fb:d9:20:bd:7a:89:
da:37:f2:b4:ba:40:15:b2:f5:b8:d0:a5:d1:c3:b5:
a9:14:f9:d1:e8:ad:81:49:67:dc:77:a0:28:6f:63:
3d:48:78:cb:f2:14:48:0c:5a:11:21:12:b6:0b:c6:
b9:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:77:85:7E:B6:E2:3D:14:56:57:4F:2A:F4:A8:BB:FD:BF:0B:E2:3C
X509v3 Authority Key Identifier:
keyid:21:5F:BC:7B:EE:46:71:6F:63:6C:B7:D9:53:B6:3E:BE:34:B7:EE:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IV-8e-5GcW9jbLfZU7Y-vjS37uk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/eddbcc-22e3-4cda-910a-6f4421b9d525/1/IV-8e-5GcW9jbLfZU7Y-vjS37uk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/eddbcc-22e3-4cda-910a-6f4421b9d525/1/IV-8e-5GcW9jbLfZU7Y-vjS37uk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:b9:94:7e:83:28:c5:98:44:c0:b9:dd:e2:71:2b:c1:3a:55:
03:d2:12:24:72:01:3c:bd:cf:38:5a:75:a1:05:6d:30:7c:57:
6c:8c:0e:1c:8b:7d:c6:56:bc:b7:d8:6f:eb:a9:6a:e3:5a:2e:
b9:23:1a:12:86:7f:43:ad:e5:55:a9:db:cf:c7:2f:e6:60:5a:
bf:c7:4f:9a:10:46:7e:81:87:5e:fc:f8:23:0d:19:a0:c2:4d:
8a:9d:6f:2c:0d:10:ef:18:33:84:01:44:0a:2f:3e:a1:e3:c0:
43:17:d7:e6:05:7e:29:3e:79:77:80:4e:ec:14:f2:98:bd:51:
0f:63:d4:d7:19:b6:97:57:14:13:96:9c:9f:e9:fc:99:60:31:
d9:03:e6:22:23:71:55:2d:48:15:1e:38:23:4e:7b:b0:86:d1:
bf:2c:e5:fb:50:a6:a0:cb:46:bc:d9:2c:17:f1:f3:27:dc:2f:
33:b8:a0:5a:2b:b1:b4:9a:6b:38:88:43:97:18:0c:a5:67:e8:
7b:86:6a:c7:62:3d:e2:84:80:a6:16:ae:eb:2e:3f:fb:01:42:
63:07:60:89:82:ee:1f:21:11:30:14:59:60:65:89:31:f1:e6:
0d:02:4b:2b:59:46:22:5b:8d:ab:1c:0f:50:9c:e7:f8:9b:f7:
bc:63:9f:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 12:13:22 2025 by rpki-client