Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/018fe7-e86a-466c-b710-fed55e6e52ef/1/i7AWzMBcV2V0az92QtBD6BEgNwU.mft
File: i7AWzMBcV2V0az92QtBD6BEgNwU.mft (raw, json)
Hash identifier: 4RUVkf7BnyEe4iR5SOPji9nbTWKCZOO51GUrbTIkTTI=
Subject key identifier: 9A:4E:96:28:9B:1E:27:C3:00:E9:66:38:BD:FE:35:F2:D5:3A:B1:AA
Authority key identifier: 8B:B0:16:CC:C0:5C:57:65:74:6B:3F:76:42:D0:43:E8:11:20:37:05
Certificate issuer: /CN=8bb016ccc05c5765746b3f7642d043e811203705
Certificate serial: 01976997D494F0E761CE8AFD7327415A7ACC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i7AWzMBcV2V0az92QtBD6BEgNwU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/018fe7-e86a-466c-b710-fed55e6e52ef/1/i7AWzMBcV2V0az92QtBD6BEgNwU.mft
Manifest number: 77
Signing time: Fri 13 Jun 2025 14:00:47 +0000
Manifest this update: Fri 13 Jun 2025 14:00:47 +0000
Manifest next update: Sat 14 Jun 2025 14:00:47 +0000
Files and hashes: 1: i7AWzMBcV2V0az92QtBD6BEgNwU.crl (hash: 6gHVPK/pxHw0XMy7xmo6piobRHstzOC+nx5Dd3VVvZM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/018fe7-e86a-466c-b710-fed55e6e52ef/1/i7AWzMBcV2V0az92QtBD6BEgNwU.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/018fe7-e86a-466c-b710-fed55e6e52ef/1/i7AWzMBcV2V0az92QtBD6BEgNwU.mft
rsync://rpki.ripe.net/repository/DEFAULT/i7AWzMBcV2V0az92QtBD6BEgNwU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:97:d4:94:f0:e7:61:ce:8a:fd:73:27:41:5a:7a:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bb016ccc05c5765746b3f7642d043e811203705
Validity
Not Before: Jun 13 14:00:47 2025 GMT
Not After : Jun 14 14:00:47 2025 GMT
Subject: CN=9a4e96289b1e27c300e96638bdfe35f2d53ab1aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:b3:e4:82:56:33:b3:ed:55:aa:61:19:4e:82:
f4:d5:f7:86:bc:15:51:0c:a8:05:0b:09:81:41:72:
04:b9:d0:4f:15:7d:d9:8d:fe:8d:14:6f:16:54:db:
aa:6b:b8:fa:f9:93:09:a5:89:08:5f:d6:18:a6:11:
c1:88:c7:0f:85:5c:1b:d9:63:7d:be:bc:c6:13:a9:
74:f9:54:86:f5:b2:8c:23:a8:f0:5a:65:5a:84:12:
40:06:d2:d7:c4:4f:19:26:f1:5f:8d:6a:46:10:fc:
0e:53:38:50:21:72:3b:99:3e:db:3e:4b:bd:24:65:
69:04:ef:76:e3:85:32:d2:f3:bd:db:15:86:f8:09:
0f:dd:f1:9c:b2:22:f5:91:45:4f:92:ee:c3:ce:27:
f0:2c:cd:01:da:d7:c5:e7:d4:81:65:1d:01:af:1d:
a0:4a:07:21:a9:23:7e:6f:a9:43:25:50:96:d2:1c:
b1:25:89:af:11:bf:f1:4f:59:c0:dc:1c:ff:17:f5:
4c:98:d8:d5:72:22:76:09:30:db:8e:e5:75:61:0d:
3a:26:c1:60:94:35:2a:1c:3f:1e:c8:80:04:2d:fa:
04:f8:18:de:0b:bc:c9:db:84:31:ff:81:aa:af:65:
24:0b:ff:db:76:02:68:bf:ac:f1:91:81:8c:3b:e5:
5a:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:4E:96:28:9B:1E:27:C3:00:E9:66:38:BD:FE:35:F2:D5:3A:B1:AA
X509v3 Authority Key Identifier:
keyid:8B:B0:16:CC:C0:5C:57:65:74:6B:3F:76:42:D0:43:E8:11:20:37:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i7AWzMBcV2V0az92QtBD6BEgNwU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/018fe7-e86a-466c-b710-fed55e6e52ef/1/i7AWzMBcV2V0az92QtBD6BEgNwU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/018fe7-e86a-466c-b710-fed55e6e52ef/1/i7AWzMBcV2V0az92QtBD6BEgNwU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:e8:55:9e:de:64:9f:88:e9:d5:30:26:49:48:ca:38:39:76:
39:af:ab:a3:ea:11:b8:24:e5:e3:35:25:fb:9f:73:22:19:f0:
7a:23:5c:ce:e6:a3:3f:69:33:9b:fe:ec:84:32:a3:80:34:c8:
9a:e8:11:c7:d9:57:4c:9b:b2:8a:55:db:7f:08:99:a2:e1:23:
8d:fd:a8:25:76:ac:bf:9c:2b:81:32:7b:59:a3:3f:9d:0e:91:
79:c0:7f:d4:c9:41:a0:c2:94:05:fc:a3:0e:59:fa:a6:e3:56:
92:93:83:17:99:70:76:f1:df:84:73:0e:f5:33:98:8c:d5:09:
f0:5f:ca:43:c4:2f:48:8b:5e:d2:84:f5:18:81:bd:fa:a7:2d:
86:fd:dd:fe:b6:bd:30:1f:5b:00:17:8a:07:27:13:4d:c8:20:
c2:38:47:88:2f:b4:5d:9b:cc:c0:e1:5f:e3:39:58:32:65:c5:
20:f0:89:3a:26:92:6e:b4:ce:10:d9:2c:92:74:99:0c:31:1c:
25:82:03:ef:ce:0e:01:e9:71:4d:2e:96:1c:e9:ad:49:85:fe:
a7:e6:ee:68:02:0d:b8:69:cf:ad:82:c4:22:e6:31:9b:29:e2:
92:93:f7:aa:b5:df:4f:a2:a5:b3:f2:f1:e4:e1:2e:f5:1e:4f:
ba:6d:dc:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:07:52 2025 by rpki-client