Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/638a9c-ec64-45de-bc2e-2be7edc7932d/1/I08I-kIiU1wK8moNc0fb8XJUcZY.mft
File: I08I-kIiU1wK8moNc0fb8XJUcZY.mft (raw, json)
Hash identifier: T9ysIDcEQ1449OR0a5Nq6HCXr7Rq41RP25ltXV0eLyE=
Subject key identifier: DB:C1:42:8F:20:F1:7A:CF:80:53:4C:FB:12:75:E7:C6:E0:F3:87:AF
Authority key identifier: 23:4F:08:FA:42:22:53:5C:0A:F2:6A:0D:73:47:DB:F1:72:54:71:96
Certificate issuer: /CN=234f08fa4222535c0af26a0d7347dbf172547196
Certificate serial: 01977754046502BFB2BB2AAD95022B076389
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I08I-kIiU1wK8moNc0fb8XJUcZY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/638a9c-ec64-45de-bc2e-2be7edc7932d/1/I08I-kIiU1wK8moNc0fb8XJUcZY.mft
Manifest number: 82
Signing time: Mon 16 Jun 2025 06:01:24 +0000
Manifest this update: Mon 16 Jun 2025 06:01:24 +0000
Manifest next update: Tue 17 Jun 2025 06:01:24 +0000
Files and hashes: 1: I08I-kIiU1wK8moNc0fb8XJUcZY.crl (hash: RPeQer6BwMcvJIKMz+QXBp47GGQsR3tsxPjf4UZrHQw=)
2: PMihf48EDZLf86f7BmXfYmZbV4M.roa (hash: kAi2yEZhpDZ5dFlA+0hzmB2XiAS3L8tb6zCyB/FGwDw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/638a9c-ec64-45de-bc2e-2be7edc7932d/1/I08I-kIiU1wK8moNc0fb8XJUcZY.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/638a9c-ec64-45de-bc2e-2be7edc7932d/1/I08I-kIiU1wK8moNc0fb8XJUcZY.mft
rsync://rpki.ripe.net/repository/DEFAULT/I08I-kIiU1wK8moNc0fb8XJUcZY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 06:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:77:54:04:65:02:bf:b2:bb:2a:ad:95:02:2b:07:63:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=234f08fa4222535c0af26a0d7347dbf172547196
Validity
Not Before: Jun 16 06:01:24 2025 GMT
Not After : Jun 17 06:01:24 2025 GMT
Subject: CN=dbc1428f20f17acf80534cfb1275e7c6e0f387af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:c5:5a:37:b9:90:c9:dc:09:92:80:ed:b1:e8:
de:15:50:43:a0:b7:4a:3e:e8:35:7e:ba:7c:d7:8e:
08:0a:f0:f7:d8:8f:d6:52:52:f5:f0:a7:54:74:c3:
31:0c:82:65:45:d2:0d:9e:1c:2f:22:ae:f1:a8:12:
af:a0:02:81:e7:3f:bd:47:ee:39:cd:c3:36:d8:e5:
a5:5e:57:04:15:ad:3a:0e:12:e3:98:a1:0b:8b:fd:
ea:f5:67:6d:14:d4:a7:1c:d9:45:5d:be:1d:eb:73:
77:ba:d4:0b:1f:41:66:d1:39:a9:d3:c2:ca:62:c0:
ab:5c:2e:1a:cc:f7:a5:a4:e7:a4:0a:0a:bb:d8:55:
b8:d9:93:aa:97:f0:32:29:f2:26:a0:0e:35:9f:4e:
69:a4:5a:ca:46:e4:85:96:b8:b9:56:3f:70:53:76:
35:70:57:a1:cf:ec:10:67:07:b8:74:0b:20:49:7e:
16:19:ac:fb:d2:6a:f5:bc:29:fb:4a:ea:25:d4:37:
6b:09:91:b3:d4:87:c3:0f:7e:5b:3d:b3:1b:c3:58:
c8:e5:d7:b9:32:94:fa:cb:aa:3a:45:c7:20:a9:c9:
3c:11:d5:02:cd:63:f5:f2:9b:50:48:be:af:df:44:
88:4d:46:cf:2e:25:eb:f9:88:ef:08:9b:83:37:9b:
43:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:C1:42:8F:20:F1:7A:CF:80:53:4C:FB:12:75:E7:C6:E0:F3:87:AF
X509v3 Authority Key Identifier:
keyid:23:4F:08:FA:42:22:53:5C:0A:F2:6A:0D:73:47:DB:F1:72:54:71:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I08I-kIiU1wK8moNc0fb8XJUcZY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/638a9c-ec64-45de-bc2e-2be7edc7932d/1/I08I-kIiU1wK8moNc0fb8XJUcZY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/638a9c-ec64-45de-bc2e-2be7edc7932d/1/I08I-kIiU1wK8moNc0fb8XJUcZY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:52:b6:ee:94:9c:50:d5:62:65:ad:63:f6:2d:56:dc:a3:6d:
60:28:3d:dc:7f:fb:03:f4:86:f5:35:cf:82:8c:ab:17:6c:22:
9a:e3:c0:20:db:fb:3d:b9:8a:9f:06:6c:44:21:bc:f7:22:95:
67:71:e5:e8:35:f0:f3:1e:17:ef:54:15:76:60:96:09:f7:43:
19:99:f6:34:be:d5:1e:3a:ea:fc:33:b3:2e:a7:a9:b1:7f:06:
d9:d0:65:b3:43:df:45:a9:bc:4c:cb:1b:ba:5e:72:73:ea:2a:
79:bf:c5:e6:ea:48:d9:26:88:4b:c0:f7:e8:7a:18:c1:ac:36:
80:4e:75:5c:4d:24:72:c8:87:65:66:b9:99:f9:f7:11:8e:47:
31:f9:1b:18:93:e3:a8:40:9e:57:21:99:6e:e9:39:78:d4:37:
36:32:1d:d6:74:d7:d3:2b:91:fc:4c:df:87:e8:5c:d4:a6:74:
13:b3:ca:25:8b:f2:c6:89:52:05:7f:35:2c:f5:a8:8a:9e:02:
f6:1d:9a:33:77:e9:aa:d7:01:13:33:74:8d:db:21:fd:d8:ec:
df:92:61:0d:4f:f7:cf:99:a4:12:eb:fe:6a:cf:28:6e:18:d8:
85:a6:b9:bc:fc:31:a7:49:ce:59:c8:7a:93:d7:18:5f:15:f4:
0f:9d:2d:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 15:32:32 2025 by rpki-client