
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/bf69c4-d64a-4340-9bf1-364854cbc0e8/1/ikHi8tFFLnxMwH2_p4OdWN9X8hg.mft
File: ikHi8tFFLnxMwH2_p4OdWN9X8hg.mft (raw, json)
Hash identifier: 4jDpA6R4abvvkEhH6lhQ1EMyoWNq/bvksXraElhJ8Bk=
Subject key identifier: 96:61:51:25:62:67:C7:31:85:A2:AE:70:BB:53:8B:8E:35:C0:08:A7
Authority key identifier: 8A:41:E2:F2:D1:45:2E:7C:4C:C0:7D:BF:A7:83:9D:58:DF:57:F2:18
Certificate issuer: /CN=8a41e2f2d1452e7c4cc07dbfa7839d58df57f218
Certificate serial: 01976F2CA4E3ECBA996ECED34D787EF01E77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ikHi8tFFLnxMwH2_p4OdWN9X8hg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/bf69c4-d64a-4340-9bf1-364854cbc0e8/1/ikHi8tFFLnxMwH2_p4OdWN9X8hg.mft
Manifest number: 158C
Signing time: Sat 14 Jun 2025 16:01:25 +0000
Manifest this update: Sat 14 Jun 2025 16:01:25 +0000
Manifest next update: Sun 15 Jun 2025 16:01:25 +0000
Files and hashes: 1: ikHi8tFFLnxMwH2_p4OdWN9X8hg.crl (hash: 3l1U1QHbr8UGsnUHwuhxEWGxW7Tu3uC6RcnjZqwWzVA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/bf69c4-d64a-4340-9bf1-364854cbc0e8/1/ikHi8tFFLnxMwH2_p4OdWN9X8hg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/bf69c4-d64a-4340-9bf1-364854cbc0e8/1/ikHi8tFFLnxMwH2_p4OdWN9X8hg.mft
rsync://rpki.ripe.net/repository/DEFAULT/ikHi8tFFLnxMwH2_p4OdWN9X8hg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 10:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6f:2c:a4:e3:ec:ba:99:6e:ce:d3:4d:78:7e:f0:1e:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a41e2f2d1452e7c4cc07dbfa7839d58df57f218
Validity
Not Before: Jun 14 16:01:25 2025 GMT
Not After : Jun 15 16:01:25 2025 GMT
Subject: CN=966151256267c73185a2ae70bb538b8e35c008a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:06:f4:6d:11:e7:b2:36:be:67:e1:f8:d8:a5:
5c:fd:45:c5:5e:07:e9:28:e7:1d:e4:75:b3:7f:a8:
f9:6d:a5:ea:75:74:85:1a:ca:3f:ef:66:2a:7c:c1:
d5:7f:4d:79:d5:80:20:fd:68:a9:de:ff:83:02:d5:
94:ca:a9:9d:d8:66:91:7b:d2:94:ae:06:3c:16:e6:
92:78:25:a6:2a:da:59:e0:22:c8:b4:53:b3:42:48:
6d:d9:4e:10:fb:e7:ca:03:cf:d5:2b:f7:3b:ff:4f:
cf:c2:63:a1:f8:b6:3e:e1:da:3d:13:5a:90:e1:1b:
69:aa:bd:d1:8d:38:e0:69:72:28:f0:34:63:be:b5:
0b:61:0e:2e:42:ff:bb:17:60:8d:7d:b0:e9:c2:08:
6e:f9:27:8d:ef:46:8b:21:e5:e4:c8:cf:2b:d5:57:
cd:ba:86:42:e1:30:d0:63:f4:25:aa:a6:ef:69:28:
00:a1:36:2c:0c:47:bf:60:f0:bb:85:0d:7a:b0:3d:
e3:61:80:0f:25:bb:78:33:4b:02:54:9d:78:9e:f1:
19:c2:75:b2:09:95:b7:90:5e:64:12:56:dd:04:4e:
1a:e4:60:07:08:45:af:5e:c3:1e:14:c4:ef:d3:df:
29:20:b0:e2:c4:d0:32:40:3d:11:e0:66:ef:1b:21:
42:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:61:51:25:62:67:C7:31:85:A2:AE:70:BB:53:8B:8E:35:C0:08:A7
X509v3 Authority Key Identifier:
keyid:8A:41:E2:F2:D1:45:2E:7C:4C:C0:7D:BF:A7:83:9D:58:DF:57:F2:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ikHi8tFFLnxMwH2_p4OdWN9X8hg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/bf69c4-d64a-4340-9bf1-364854cbc0e8/1/ikHi8tFFLnxMwH2_p4OdWN9X8hg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/bf69c4-d64a-4340-9bf1-364854cbc0e8/1/ikHi8tFFLnxMwH2_p4OdWN9X8hg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:18:c0:21:44:b9:4a:b5:37:d5:ac:e0:db:1d:c3:ce:2e:54:
95:d7:ac:f0:05:70:2a:e1:d6:1c:63:96:51:de:2c:d5:35:50:
14:9e:23:f4:d6:07:19:fc:ee:a4:cd:6d:4b:07:28:34:6f:e9:
93:81:88:af:4a:3d:55:af:30:85:25:e5:90:36:69:26:4c:f1:
f8:a9:a7:6d:36:16:8a:cf:58:9a:f6:03:19:68:16:2a:d4:1b:
53:51:ee:68:a6:94:cd:04:3a:ad:5b:80:6c:1a:c8:ac:4e:d9:
31:a1:37:24:e7:cd:ad:9d:08:24:1a:ea:5b:b1:4f:95:25:84:
ac:98:8b:68:46:02:81:0b:f4:e9:59:20:e5:b0:79:fc:64:0f:
5a:43:d9:ad:19:fd:f0:08:31:9a:bc:40:d2:0b:7e:9a:15:29:
fc:dd:f9:5c:04:56:5e:c5:14:a1:53:1c:c3:af:a3:e4:ec:64:
51:3f:5d:57:74:af:cd:13:26:9e:7d:16:b7:e2:c2:53:59:94:
0c:4a:d9:cd:0f:fa:db:e7:da:cf:a8:71:c4:c7:12:27:07:e8:
7d:d3:e9:16:c2:e0:cc:15:65:44:cc:11:2d:5d:2d:76:e1:87:
ea:06:48:c7:db:1d:44:61:f6:9b:00:f0:24:4b:35:07:92:d8:
28:e3:43:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 19:47:41 2025 by rpki-client