Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/5f2167-6a5d-4d41-8297-c2e9d17d8d4a/1/i4-7JMKLohFyEvDTJzo8KkwnzBI.mft
File: i4-7JMKLohFyEvDTJzo8KkwnzBI.mft (raw, json)
Hash identifier: EjErkt9aXTw0aRapsZyNM/5VhGXlqO0tNBq97RS/0dE=
Subject key identifier: EB:DC:D2:63:5A:89:F9:C4:31:14:FE:43:87:D2:D9:DC:41:3C:4C:36
Authority key identifier: 8B:8F:BB:24:C2:8B:A2:11:72:12:F0:D3:27:3A:3C:2A:4C:27:CC:12
Certificate issuer: /CN=8b8fbb24c28ba2117212f0d3273a3c2a4c27cc12
Certificate serial: 01978922EE8E8A1B3E298ABA8E43AE3B8CAF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i4-7JMKLohFyEvDTJzo8KkwnzBI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/5f2167-6a5d-4d41-8297-c2e9d17d8d4a/1/i4-7JMKLohFyEvDTJzo8KkwnzBI.mft
Manifest number: 0B1A
Signing time: Thu 19 Jun 2025 17:00:57 +0000
Manifest this update: Thu 19 Jun 2025 17:00:57 +0000
Manifest next update: Fri 20 Jun 2025 17:00:57 +0000
Files and hashes: 1: i4-7JMKLohFyEvDTJzo8KkwnzBI.crl (hash: xD9F1AIxvklpWTfboYbSvKqu2ns6wcme8E6Prq01kWA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/5f2167-6a5d-4d41-8297-c2e9d17d8d4a/1/i4-7JMKLohFyEvDTJzo8KkwnzBI.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/5f2167-6a5d-4d41-8297-c2e9d17d8d4a/1/i4-7JMKLohFyEvDTJzo8KkwnzBI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i4-7JMKLohFyEvDTJzo8KkwnzBI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 20 Jun 2025 15:30:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:89:22:ee:8e:8a:1b:3e:29:8a:ba:8e:43:ae:3b:8c:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b8fbb24c28ba2117212f0d3273a3c2a4c27cc12
Validity
Not Before: Jun 19 17:00:57 2025 GMT
Not After : Jun 20 17:00:57 2025 GMT
Subject: CN=ebdcd2635a89f9c43114fe4387d2d9dc413c4c36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:22:94:56:e8:38:0a:0a:d1:ea:f6:70:3a:0a:
d6:85:fd:56:82:f0:35:a7:22:9d:89:d6:0c:a0:44:
8b:53:0b:f2:88:4d:9c:ca:96:1c:e2:8d:7f:cb:30:
90:10:91:03:c9:94:2d:90:67:36:48:d1:b1:fd:36:
a3:00:f0:e8:f6:9f:90:d0:b0:76:fa:82:bb:12:5d:
45:3c:7e:4f:cd:e3:a1:fa:16:c8:5d:05:37:d5:d8:
22:b6:b9:bf:51:1c:d3:9f:90:70:b2:c4:46:cb:a8:
87:87:40:82:d4:59:97:b7:6e:82:79:4b:13:f9:24:
f5:ab:c1:ad:23:1d:e7:a9:28:85:29:4a:3f:a2:f4:
94:39:0f:7e:4b:93:0c:44:5a:0e:dd:5f:6f:57:c0:
82:41:45:3c:13:fb:3b:a2:68:57:e2:a2:b4:5c:af:
a2:56:52:2c:42:15:20:26:3c:e0:d4:42:71:36:90:
82:ed:ce:62:cf:e0:f8:50:d2:25:da:39:eb:9e:88:
de:97:fb:cc:27:f7:3e:82:e6:97:cd:54:1c:54:c7:
b2:d1:0a:bf:bb:04:3d:3c:7e:a6:0f:c3:fb:58:75:
a2:29:d0:89:ad:63:cf:f3:48:20:24:85:05:49:94:
e9:a9:29:c2:aa:6b:52:8d:e0:1f:5e:28:ba:e5:b4:
2f:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:DC:D2:63:5A:89:F9:C4:31:14:FE:43:87:D2:D9:DC:41:3C:4C:36
X509v3 Authority Key Identifier:
keyid:8B:8F:BB:24:C2:8B:A2:11:72:12:F0:D3:27:3A:3C:2A:4C:27:CC:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i4-7JMKLohFyEvDTJzo8KkwnzBI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/5f2167-6a5d-4d41-8297-c2e9d17d8d4a/1/i4-7JMKLohFyEvDTJzo8KkwnzBI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/5f2167-6a5d-4d41-8297-c2e9d17d8d4a/1/i4-7JMKLohFyEvDTJzo8KkwnzBI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:1a:55:a9:9d:f3:8f:92:6f:e0:a2:9f:1a:7f:ef:93:17:11:
b2:05:cc:47:fe:b5:fd:7e:bf:99:65:8b:fc:fe:46:a4:a2:78:
f3:fd:8c:d2:fb:c1:12:e4:19:bd:13:9a:a2:3d:80:d3:ab:a1:
9f:d1:b2:8a:22:15:43:e9:04:ff:00:07:25:c5:66:43:61:13:
50:73:aa:2d:20:1f:30:36:ca:78:5d:3f:b1:08:42:b1:c4:f8:
4a:f0:84:7e:88:84:1a:88:a7:56:d4:14:63:e1:bd:4e:1d:35:
c4:1d:a5:89:2e:4f:8d:08:86:01:6e:ba:87:c0:f3:ee:3d:6d:
1e:f1:79:4a:8a:b8:e7:90:1c:28:fc:9a:e8:7d:33:cb:34:29:
64:20:14:dd:c5:59:58:13:8d:c3:19:89:da:cd:03:91:b7:54:
72:4f:90:a1:fc:c7:78:3b:73:80:87:0b:51:36:4c:af:fb:b5:
52:38:8b:84:96:90:6d:7e:c5:16:2b:cc:ae:e8:1b:9e:89:ec:
50:6d:de:fc:3e:bc:58:b5:07:a3:b6:4e:a1:75:be:51:a8:d6:
84:0e:89:3c:05:36:ba:b2:aa:93:ff:0e:f1:c5:ad:aa:ce:e2:
a6:95:47:ab:98:9e:13:35:d5:c3:f9:9a:22:96:c6:66:5b:5d:
c7:9e:0a:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 21:33:40 2025 by rpki-client