Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/7b2885-3cf3-4367-b64a-99e35c709486/1/cIKkpfKWFe2f7k9nURSF40z3EuA.mft
File: cIKkpfKWFe2f7k9nURSF40z3EuA.mft (raw, json)
Hash identifier: 8taFkB5YQiU8/mg6CvbfbdylZF550Z+MHPxAQ/HiKq0=
Subject key identifier: E1:14:04:AA:FE:13:38:17:F5:12:9E:92:65:04:2B:DA:AC:3A:6B:CF
Authority key identifier: 70:82:A4:A5:F2:96:15:ED:9F:EE:4F:67:51:14:85:E3:4C:F7:12:E0
Certificate issuer: /CN=7082a4a5f29615ed9fee4f67511485e34cf712e0
Certificate serial: 01976CCF6FAE6B9403EAC64DEF2953E7AD83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cIKkpfKWFe2f7k9nURSF40z3EuA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/7b2885-3cf3-4367-b64a-99e35c709486/1/cIKkpfKWFe2f7k9nURSF40z3EuA.mft
Manifest number: 2A
Signing time: Sat 14 Jun 2025 05:00:23 +0000
Manifest this update: Sat 14 Jun 2025 05:00:23 +0000
Manifest next update: Sun 15 Jun 2025 05:00:23 +0000
Files and hashes: 1: cIKkpfKWFe2f7k9nURSF40z3EuA.crl (hash: lnpdddepGNMYNON98THaxjwxsM7jXIRQgZhzvY6qbX4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/7b2885-3cf3-4367-b64a-99e35c709486/1/cIKkpfKWFe2f7k9nURSF40z3EuA.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/7b2885-3cf3-4367-b64a-99e35c709486/1/cIKkpfKWFe2f7k9nURSF40z3EuA.mft
rsync://rpki.ripe.net/repository/DEFAULT/cIKkpfKWFe2f7k9nURSF40z3EuA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:cf:6f:ae:6b:94:03:ea:c6:4d:ef:29:53:e7:ad:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7082a4a5f29615ed9fee4f67511485e34cf712e0
Validity
Not Before: Jun 14 05:00:23 2025 GMT
Not After : Jun 15 05:00:23 2025 GMT
Subject: CN=e11404aafe133817f5129e9265042bdaac3a6bcf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:62:ec:ed:32:a3:26:ef:87:07:78:08:50:b2:
20:b1:29:7d:8d:cd:06:b1:6b:fa:9e:eb:81:8d:18:
cc:d8:b8:cf:9e:20:0e:83:c9:d8:7a:a8:8e:5e:17:
80:95:1f:23:b1:29:ce:d8:2a:4a:2a:d1:02:1b:55:
0d:91:7e:16:5f:35:59:f0:a3:10:70:ec:fb:bc:7c:
bb:b7:13:0e:93:ed:65:3c:4e:eb:11:d1:c2:06:61:
a6:b1:30:b9:66:1b:1e:d9:7f:35:a2:22:3c:7b:f4:
ad:f7:64:c5:fa:29:1b:df:26:b8:47:fc:f9:5c:92:
c7:15:29:d6:79:0d:2a:92:60:cb:ca:1a:b3:e2:3b:
94:9d:3b:f7:91:de:a5:55:a7:f7:38:ee:32:08:2f:
c0:2b:db:89:16:ab:74:68:01:a0:e5:5e:53:00:6d:
90:e0:3c:b9:02:f8:42:93:8b:f6:a7:27:85:a8:1f:
2a:72:58:97:f2:4d:db:1b:ba:cb:43:37:0a:00:61:
43:00:06:9a:a1:18:23:1f:4c:98:a7:30:82:43:5c:
0a:95:92:65:6a:87:e0:7e:38:3b:a7:f5:36:68:af:
ce:bc:70:87:09:f8:dc:44:29:dd:98:d0:68:65:6d:
d0:67:68:b4:9a:46:7b:6a:4e:78:21:ab:da:bf:0a:
bb:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:14:04:AA:FE:13:38:17:F5:12:9E:92:65:04:2B:DA:AC:3A:6B:CF
X509v3 Authority Key Identifier:
keyid:70:82:A4:A5:F2:96:15:ED:9F:EE:4F:67:51:14:85:E3:4C:F7:12:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cIKkpfKWFe2f7k9nURSF40z3EuA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/7b2885-3cf3-4367-b64a-99e35c709486/1/cIKkpfKWFe2f7k9nURSF40z3EuA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/7b2885-3cf3-4367-b64a-99e35c709486/1/cIKkpfKWFe2f7k9nURSF40z3EuA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:31:d6:e1:94:b7:32:93:2b:62:9d:db:e5:24:90:c5:b8:23:
bf:4b:ff:0a:b8:1f:7a:4f:dd:f2:f8:82:b3:d2:32:d5:df:b1:
75:ce:f1:39:b1:85:ee:54:4b:0d:74:79:2d:f7:b8:5c:01:74:
47:52:48:75:7a:86:74:5a:f0:07:41:02:f4:84:a0:b8:b3:1d:
c5:99:07:43:01:ed:97:aa:ac:37:e4:f0:a6:2f:c8:8a:76:12:
6d:25:98:8e:08:5c:51:27:b2:81:30:2c:1c:1b:10:b4:f9:e7:
5c:5e:47:91:ed:67:9e:a2:1d:1a:e1:0d:42:06:81:75:c3:45:
f4:5a:17:83:79:a8:1b:ff:11:d0:d7:39:cb:33:90:9e:10:72:
d1:7f:66:49:d8:20:3d:ab:44:6b:47:5a:9a:9d:1f:be:5d:00:
1a:99:77:44:30:0e:f6:bd:e8:dc:c6:f5:ef:99:93:86:7b:27:
a4:6e:21:7c:9a:58:74:5b:d5:d8:1a:1e:8f:64:a3:d9:c4:fc:
24:e3:0e:45:db:e7:9e:5a:18:28:8f:4d:37:4e:43:47:34:b2:
99:2e:bf:b2:24:5e:31:29:3d:b4:71:53:68:b9:d2:e3:dc:73:
be:f4:5e:6f:ba:8b:0f:bf:31:5d:dc:e3:50:10:c0:b0:62:72:
09:c3:f2:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 09:37:36 2025 by rpki-client