Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/3d6d51-3d57-43a8-b67f-b615df7fce9e/1/I3srUL8MGKUx5tsVZnvn7Xa7KCE.mft
File: I3srUL8MGKUx5tsVZnvn7Xa7KCE.mft (raw, json)
Hash identifier: j8nC+O8r7pNV2MrRWyq7npIN58H6VsX7lxHP2wAtW94=
Subject key identifier: D9:6F:C9:20:74:CB:48:5E:31:95:1B:CF:60:40:FB:E9:ED:50:58:E4
Authority key identifier: 23:7B:2B:50:BF:0C:18:A5:31:E6:DB:15:66:7B:E7:ED:76:BB:28:21
Certificate issuer: /CN=237b2b50bf0c18a531e6db15667be7ed76bb2821
Certificate serial: 01976C2AD766283CDA3FE234A3FEDEDBECA7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I3srUL8MGKUx5tsVZnvn7Xa7KCE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/3d6d51-3d57-43a8-b67f-b615df7fce9e/1/I3srUL8MGKUx5tsVZnvn7Xa7KCE.mft
Manifest number: 14E3
Signing time: Sat 14 Jun 2025 02:00:36 +0000
Manifest this update: Sat 14 Jun 2025 02:00:36 +0000
Manifest next update: Sun 15 Jun 2025 02:00:36 +0000
Files and hashes: 1: I3srUL8MGKUx5tsVZnvn7Xa7KCE.crl (hash: xE72MvCohuQ5MiTe8hlNsVA+5JpY5gYHOYncJ0MgjQM=)
2: ytASscQl-jcvF2Td7QzFghuuoNE.roa (hash: H19QKz9GlVTgCFc+7rr/9vdcrrvYDR0hpeCGpVF7EE0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/3d6d51-3d57-43a8-b67f-b615df7fce9e/1/I3srUL8MGKUx5tsVZnvn7Xa7KCE.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/3d6d51-3d57-43a8-b67f-b615df7fce9e/1/I3srUL8MGKUx5tsVZnvn7Xa7KCE.mft
rsync://rpki.ripe.net/repository/DEFAULT/I3srUL8MGKUx5tsVZnvn7Xa7KCE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:2a:d7:66:28:3c:da:3f:e2:34:a3:fe:de:db:ec:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=237b2b50bf0c18a531e6db15667be7ed76bb2821
Validity
Not Before: Jun 14 02:00:36 2025 GMT
Not After : Jun 15 02:00:36 2025 GMT
Subject: CN=d96fc92074cb485e31951bcf6040fbe9ed5058e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:10:45:e1:d1:85:d1:ad:ff:80:f3:ac:b3:9b:
24:6c:a8:da:8b:36:a6:78:18:a8:31:71:d1:14:d4:
b5:cd:d2:83:20:76:49:75:dc:4b:ef:29:be:5c:34:
69:98:95:e0:96:08:7a:90:14:d9:f8:a4:29:87:b9:
4c:e2:42:71:13:71:05:ea:46:c1:68:1c:11:7b:4f:
5e:c9:5d:f1:3e:72:25:67:01:ca:e8:0e:c8:00:42:
81:ce:47:62:5b:b7:53:96:ef:21:3d:38:c8:a9:61:
33:02:92:ff:b3:68:8d:09:df:4f:76:bd:d3:ac:78:
5e:23:18:bc:6b:2b:5b:a9:f5:19:3b:e9:21:17:2d:
9b:c3:5b:4f:c6:ee:52:d8:eb:81:b4:41:d6:30:67:
df:cd:52:01:16:95:5a:69:bf:54:d7:52:70:ec:f7:
f7:10:14:ef:6f:3a:92:4c:3e:4d:79:8a:b4:7c:40:
2e:e8:1e:b6:e9:a9:4f:47:e4:11:8e:f4:23:67:34:
a6:86:15:1b:bc:17:7c:d3:f7:63:09:51:5b:5e:92:
dd:38:1b:b1:70:5a:17:a0:80:56:e6:08:52:19:fa:
e9:01:d2:df:0e:41:71:08:99:60:50:68:79:47:63:
b2:01:e2:36:ac:77:3a:53:fa:b6:ab:57:19:c8:a8:
5d:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:6F:C9:20:74:CB:48:5E:31:95:1B:CF:60:40:FB:E9:ED:50:58:E4
X509v3 Authority Key Identifier:
keyid:23:7B:2B:50:BF:0C:18:A5:31:E6:DB:15:66:7B:E7:ED:76:BB:28:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I3srUL8MGKUx5tsVZnvn7Xa7KCE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/3d6d51-3d57-43a8-b67f-b615df7fce9e/1/I3srUL8MGKUx5tsVZnvn7Xa7KCE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/3d6d51-3d57-43a8-b67f-b615df7fce9e/1/I3srUL8MGKUx5tsVZnvn7Xa7KCE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:90:c6:75:c0:74:2c:03:c4:1b:64:45:51:72:35:a8:87:be:
8d:68:9c:8d:11:df:89:74:b6:d5:98:7a:ad:a3:1b:43:a4:b3:
2a:bc:95:ff:0e:a4:92:87:3e:68:13:4d:f7:e2:74:13:8b:a2:
bd:ed:e8:2d:b3:19:80:bb:91:6d:fd:c5:55:65:6a:3b:02:64:
22:3f:1e:82:fa:ff:85:eb:7d:3d:d1:4d:8f:99:22:16:02:ae:
33:d6:a9:1e:1c:58:81:2b:ef:e1:e1:4e:37:b6:bc:fc:cf:d8:
8c:d2:34:b1:e1:68:0c:90:4a:5d:7c:8d:80:e0:ac:3b:8c:62:
6d:73:7b:29:95:a1:7d:4b:68:ff:4a:86:8a:69:03:03:b6:5c:
8a:09:97:c7:f1:b9:d9:a4:2b:a0:43:91:f8:be:55:53:36:ea:
94:dc:f3:35:c7:45:91:0f:da:2c:6e:7c:d5:19:6c:34:bf:4b:
15:50:a4:a6:a3:c2:dd:b6:6a:a2:a8:b3:4f:3e:5b:75:bf:c9:
55:7f:8f:5b:84:44:9f:31:0e:9a:46:6f:c1:aa:15:97:53:d6:
18:e7:2a:32:9d:3b:eb:e7:00:0c:f9:59:6d:cb:ba:ec:bd:b9:
4b:a4:f3:cf:fa:de:59:01:9f:a6:31:0d:9c:ac:84:ed:13:23:
7d:a2:5a:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 11:50:58 2025 by rpki-client