Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/63ecd9-3d18-4810-9db4-d36c16279552/1/iRXDvI1ZBfJPvjBRvOcgCSE4MAk.mft
File: iRXDvI1ZBfJPvjBRvOcgCSE4MAk.mft (raw, json)
Hash identifier: ZRF7KinCkfpiwkOu73H9W/UapFfceqChwULSOCwVH7I=
Subject key identifier: 7C:68:46:71:C3:07:6B:BB:4E:24:D8:E9:0A:D4:5C:4B:DD:FD:0C:77
Authority key identifier: 89:15:C3:BC:8D:59:05:F2:4F:BE:30:51:BC:E7:20:09:21:38:30:09
Certificate issuer: /CN=8915c3bc8d5905f24fbe3051bce7200921383009
Certificate serial: 01977E31636625CB2D5DD67DC60E2D996D1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iRXDvI1ZBfJPvjBRvOcgCSE4MAk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/63ecd9-3d18-4810-9db4-d36c16279552/1/iRXDvI1ZBfJPvjBRvOcgCSE4MAk.mft
Manifest number: 69
Signing time: Tue 17 Jun 2025 14:00:55 +0000
Manifest this update: Tue 17 Jun 2025 14:00:55 +0000
Manifest next update: Wed 18 Jun 2025 14:00:55 +0000
Files and hashes: 1: iRXDvI1ZBfJPvjBRvOcgCSE4MAk.crl (hash: m7334I5RHkuSkHDRWuVXefG30tjYmD8SY8UUEnI8QrU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/63ecd9-3d18-4810-9db4-d36c16279552/1/iRXDvI1ZBfJPvjBRvOcgCSE4MAk.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/63ecd9-3d18-4810-9db4-d36c16279552/1/iRXDvI1ZBfJPvjBRvOcgCSE4MAk.mft
rsync://rpki.ripe.net/repository/DEFAULT/iRXDvI1ZBfJPvjBRvOcgCSE4MAk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 18 Jun 2025 13:26:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:7e:31:63:66:25:cb:2d:5d:d6:7d:c6:0e:2d:99:6d:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8915c3bc8d5905f24fbe3051bce7200921383009
Validity
Not Before: Jun 17 14:00:55 2025 GMT
Not After : Jun 18 14:00:55 2025 GMT
Subject: CN=7c684671c3076bbb4e24d8e90ad45c4bddfd0c77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:2e:f6:37:ec:f3:10:cf:95:cb:6e:cf:45:bf:
44:70:b8:94:fa:7b:b8:f4:1e:e5:33:4c:84:fc:66:
fb:eb:d3:b5:4a:72:6c:d0:7e:c7:8b:dd:26:31:9c:
2e:7e:fb:ef:31:88:80:04:07:18:df:fd:3a:50:4d:
dd:80:b2:81:cd:13:f0:47:89:ef:18:bc:b3:a2:d8:
fd:c9:a4:39:ac:b1:27:e3:ef:7d:32:52:76:47:18:
ba:1b:43:3d:e2:ce:4b:7f:76:d6:ee:1d:45:e6:00:
0d:fb:2d:05:ab:8e:d1:55:a7:d7:76:37:dd:c7:ad:
47:7a:59:f8:0d:de:86:c3:00:94:73:54:92:dc:42:
9c:f5:f0:6f:ce:4c:f9:a4:1e:67:04:fd:3a:9a:61:
9c:22:99:c9:0b:a7:58:51:10:0d:34:62:40:1f:26:
c7:4a:67:62:90:89:9d:79:f7:52:4b:ee:5a:98:5e:
24:ba:ad:aa:5b:a2:0b:90:4d:a0:09:94:f5:36:31:
ef:8f:ec:1b:34:3d:83:00:8a:a2:28:eb:fa:fd:58:
e5:5c:d8:52:03:c7:79:34:d3:9a:b9:c5:ec:b3:5a:
18:99:8d:f4:90:81:1b:fd:81:19:a4:28:d1:ff:9c:
e9:ca:e0:04:0a:c1:57:75:cd:00:95:3b:3d:f0:53:
ac:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:68:46:71:C3:07:6B:BB:4E:24:D8:E9:0A:D4:5C:4B:DD:FD:0C:77
X509v3 Authority Key Identifier:
keyid:89:15:C3:BC:8D:59:05:F2:4F:BE:30:51:BC:E7:20:09:21:38:30:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iRXDvI1ZBfJPvjBRvOcgCSE4MAk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/63ecd9-3d18-4810-9db4-d36c16279552/1/iRXDvI1ZBfJPvjBRvOcgCSE4MAk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/63ecd9-3d18-4810-9db4-d36c16279552/1/iRXDvI1ZBfJPvjBRvOcgCSE4MAk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:25:10:30:5e:aa:06:9b:59:9c:0d:60:9b:f8:e2:ed:9b:fb:
e7:89:f8:9e:57:2e:7a:d3:7c:98:c2:b1:66:28:bf:32:21:c3:
92:aa:79:e6:bc:65:ba:7a:46:92:68:1e:d3:4c:f8:20:ed:5d:
74:d2:77:d1:9d:3b:ca:73:ff:8f:87:0d:3c:d3:ad:63:21:ac:
2f:66:eb:c1:67:cb:db:f2:a9:ea:a2:f5:0b:c0:73:e4:c2:4e:
55:9a:69:59:f1:f5:31:bd:d7:3f:a2:23:2a:a2:ed:2f:cc:db:
5f:6f:ce:e0:fc:36:78:1e:b6:d3:03:43:00:48:73:99:8b:34:
c9:1f:fa:d0:db:56:3e:cd:81:31:c6:6c:6d:94:bd:d8:cf:8f:
ab:96:fa:ae:f0:88:03:ae:38:c2:90:2e:5a:bc:a0:22:d1:82:
4d:03:f8:82:02:95:fb:a8:61:93:26:86:38:13:dd:e6:69:0b:
d2:35:2f:8c:3e:ac:95:a1:2f:d4:24:1d:60:e6:d3:dd:73:0d:
a8:fd:81:f9:5f:6b:ac:22:a4:cf:b9:fc:ae:99:4b:7c:1e:1b:
ff:b6:74:e4:c2:6c:4a:bf:8a:62:72:9b:3d:58:83:d7:d9:e4:
8c:d8:f6:c6:02:5a:e5:de:4b:51:8a:6a:00:c4:b3:80:86:bd:
48:d6:e5:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 17:51:04 2025 by rpki-client