Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/7895f8-ac31-4798-8404-4e278dd48a3f/1/iTbfSsL0Z-pmwRl6hinT9ku1Y_A.mft
File: iTbfSsL0Z-pmwRl6hinT9ku1Y_A.mft (raw, json)
Hash identifier: ph8r/mjuuH4KALHQ9iEAJhpL/DAb00izq6ku6r3ekbs=
Subject key identifier: EE:D8:60:9C:87:BE:11:02:05:D6:6B:B0:50:30:CA:94:BB:C1:DD:E7
Authority key identifier: 89:36:DF:4A:C2:F4:67:EA:66:C1:19:7A:86:29:D3:F6:4B:B5:63:F0
Certificate issuer: /CN=8936df4ac2f467ea66c1197a8629d3f64bb563f0
Certificate serial: 0197696172430520C4AEDC75960F71C4401C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iTbfSsL0Z-pmwRl6hinT9ku1Y_A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/7895f8-ac31-4798-8404-4e278dd48a3f/1/iTbfSsL0Z-pmwRl6hinT9ku1Y_A.mft
Manifest number: 11D2
Signing time: Fri 13 Jun 2025 13:01:23 +0000
Manifest this update: Fri 13 Jun 2025 13:01:23 +0000
Manifest next update: Sat 14 Jun 2025 13:01:23 +0000
Files and hashes: 1: iTbfSsL0Z-pmwRl6hinT9ku1Y_A.crl (hash: owtJI6BAqALtp9B4hXkU8F5t4CbhlkMYd0vhmmSCS3I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/7895f8-ac31-4798-8404-4e278dd48a3f/1/iTbfSsL0Z-pmwRl6hinT9ku1Y_A.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/7895f8-ac31-4798-8404-4e278dd48a3f/1/iTbfSsL0Z-pmwRl6hinT9ku1Y_A.mft
rsync://rpki.ripe.net/repository/DEFAULT/iTbfSsL0Z-pmwRl6hinT9ku1Y_A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:61:72:43:05:20:c4:ae:dc:75:96:0f:71:c4:40:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8936df4ac2f467ea66c1197a8629d3f64bb563f0
Validity
Not Before: Jun 13 13:01:23 2025 GMT
Not After : Jun 14 13:01:23 2025 GMT
Subject: CN=eed8609c87be110205d66bb05030ca94bbc1dde7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:7f:d9:53:fb:7c:64:2b:63:7f:39:93:63:fe:
4e:e2:7e:0a:03:32:2c:62:c0:0f:5a:28:ec:29:4e:
b6:8f:49:74:97:d1:1c:45:d3:3e:a7:25:6c:f4:5e:
04:50:ed:80:30:ea:23:dd:ae:5a:eb:64:25:fe:f8:
ee:fa:ad:6c:70:1d:06:d3:4b:49:0b:bb:d9:a6:71:
8f:17:71:8e:79:5e:d8:ba:b8:fc:75:9a:f1:86:f3:
4a:8c:6f:b7:55:4f:60:ab:03:9b:a5:64:24:44:b3:
bb:1f:85:12:c9:8a:bc:8f:4f:65:b3:1a:93:6d:6d:
5b:2b:09:18:ab:db:cd:75:ab:d2:0d:d2:54:b4:b1:
7e:1e:ef:d8:de:59:e7:1a:30:33:d4:c3:40:14:b3:
03:f2:d6:64:6e:e4:d2:c6:ed:85:17:b2:47:6d:be:
27:fa:41:af:be:74:a0:75:2d:87:f2:a9:ed:85:21:
f5:1b:ea:e7:44:fd:5f:3e:6b:41:29:ef:85:c4:3a:
e4:a6:96:af:50:d4:3b:12:7f:88:67:59:89:cb:cb:
e5:a7:05:20:38:0f:13:0e:e7:55:a3:0f:bc:e7:40:
02:c2:1b:03:bb:cc:af:f6:8c:ad:df:af:11:48:f6:
ea:30:a5:0e:3c:ff:64:bb:9d:48:b4:58:06:7c:d5:
82:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:D8:60:9C:87:BE:11:02:05:D6:6B:B0:50:30:CA:94:BB:C1:DD:E7
X509v3 Authority Key Identifier:
keyid:89:36:DF:4A:C2:F4:67:EA:66:C1:19:7A:86:29:D3:F6:4B:B5:63:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iTbfSsL0Z-pmwRl6hinT9ku1Y_A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/7895f8-ac31-4798-8404-4e278dd48a3f/1/iTbfSsL0Z-pmwRl6hinT9ku1Y_A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/7895f8-ac31-4798-8404-4e278dd48a3f/1/iTbfSsL0Z-pmwRl6hinT9ku1Y_A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:c9:d7:d1:39:ab:ff:a6:e5:c7:2f:11:52:9e:ca:6f:38:58:
07:49:41:d7:ad:4b:a1:99:50:60:35:9d:be:af:97:d9:ad:d0:
84:43:81:a4:8b:88:f3:56:c4:ad:37:58:22:8b:99:4d:55:f9:
e1:11:c5:c0:af:3d:ad:2b:73:92:bf:05:7e:ab:dd:82:71:b5:
cd:ff:46:b3:9e:c7:3e:44:ba:f4:f3:d7:37:4f:95:1a:d4:3b:
df:d2:0d:39:67:fc:0b:08:18:a0:0c:f3:a7:4c:dd:59:53:d2:
22:55:0e:6f:77:7a:9a:46:a9:98:15:b9:a5:f0:e2:61:b8:43:
92:8b:3d:8c:67:00:10:12:6f:03:0f:76:68:33:13:03:5f:f9:
63:6d:a3:74:f2:ff:73:f7:06:08:ea:d1:15:d4:5b:7f:f8:ea:
ed:49:8b:05:c3:6d:d4:46:1b:81:76:5b:7d:0f:69:ea:f1:25:
91:46:07:01:e7:ef:5c:f6:fd:4c:d8:af:a3:12:dc:1b:ac:f5:
d2:bb:1e:60:dd:ab:7a:60:39:10:38:5a:36:59:9d:06:0c:85:
e2:f0:e7:2e:46:a1:fd:51:8f:ca:08:5a:2e:90:16:ce:03:dc:
cf:b2:1e:8c:b6:fa:99:ae:51:38:78:c2:bc:28:f1:31:6d:4a:
bc:d2:c9:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:29:07 2025 by rpki-client