Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/4d3d98-51f2-4d95-bc37-2d32426e141d/1/itC83pWbIDJiNJG_MnmtRanKC-g.mft
File: itC83pWbIDJiNJG_MnmtRanKC-g.mft (raw, json)
Hash identifier: KJuBQ/XlD35IT8RGaKlsT2kS+oLc7il3DKsNEU/RG50=
Subject key identifier: 24:D9:46:06:67:B0:ED:F4:8D:3F:5C:64:3F:91:D1:7B:88:9E:69:A3
Authority key identifier: 8A:D0:BC:DE:95:9B:20:32:62:34:91:BF:32:79:AD:45:A9:CA:0B:E8
Certificate issuer: /CN=8ad0bcde959b2032623491bf3279ad45a9ca0be8
Certificate serial: 01976884F08FC044458E13FF6F48F3ACD7DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/itC83pWbIDJiNJG_MnmtRanKC-g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/4d3d98-51f2-4d95-bc37-2d32426e141d/1/itC83pWbIDJiNJG_MnmtRanKC-g.mft
Manifest number: 2D
Signing time: Fri 13 Jun 2025 09:00:32 +0000
Manifest this update: Fri 13 Jun 2025 09:00:32 +0000
Manifest next update: Sat 14 Jun 2025 09:00:32 +0000
Files and hashes: 1: itC83pWbIDJiNJG_MnmtRanKC-g.crl (hash: xfIEIiEN6gXECn//nhTaelgzrynXoNfVkeKatOCjuU4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/4d3d98-51f2-4d95-bc37-2d32426e141d/1/itC83pWbIDJiNJG_MnmtRanKC-g.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/4d3d98-51f2-4d95-bc37-2d32426e141d/1/itC83pWbIDJiNJG_MnmtRanKC-g.mft
rsync://rpki.ripe.net/repository/DEFAULT/itC83pWbIDJiNJG_MnmtRanKC-g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 09:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:68:84:f0:8f:c0:44:45:8e:13:ff:6f:48:f3:ac:d7:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ad0bcde959b2032623491bf3279ad45a9ca0be8
Validity
Not Before: Jun 13 09:00:32 2025 GMT
Not After : Jun 14 09:00:32 2025 GMT
Subject: CN=24d9460667b0edf48d3f5c643f91d17b889e69a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:6e:7b:20:4f:c1:0e:60:dc:81:c3:ea:d4:98:
28:11:66:48:e8:88:5e:61:bb:c8:56:ef:f9:c2:92:
61:fa:27:49:1b:f8:fd:9b:5f:dc:10:da:9c:c8:ff:
b1:0f:d0:02:26:95:f8:04:b9:25:48:4e:9b:47:f6:
7a:4c:24:26:8f:ec:30:64:85:a6:e6:31:c1:08:b2:
82:b5:70:a6:87:3a:79:38:6b:cc:a8:9f:bd:33:9a:
e3:5c:d3:7b:a6:a4:cb:8d:d8:4c:1f:b1:8d:6f:1c:
7c:7c:66:1f:25:62:ab:a7:30:a7:ae:ed:ec:48:e8:
fa:27:80:47:25:77:8f:2b:02:2d:cc:90:2a:f9:5f:
b4:d1:97:a3:65:02:fa:cc:bd:21:f8:18:49:49:be:
44:e9:be:36:13:b3:bf:c6:45:3b:3f:fa:b9:50:8d:
7e:26:8e:9c:cb:23:ee:97:de:d9:d1:f1:fb:31:a2:
6b:19:ef:ff:0a:d0:cc:f4:fd:ca:38:a8:05:26:b5:
21:db:ff:08:28:be:94:c6:c1:12:cd:cc:f5:fa:ec:
45:af:d3:d4:3e:ea:bb:f0:87:91:8c:7e:a9:aa:dc:
1d:52:52:27:81:29:11:0d:d7:cb:3d:a5:fd:34:4e:
c1:a1:4a:31:50:6b:fd:f3:df:15:02:41:9d:ec:2e:
7e:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:D9:46:06:67:B0:ED:F4:8D:3F:5C:64:3F:91:D1:7B:88:9E:69:A3
X509v3 Authority Key Identifier:
keyid:8A:D0:BC:DE:95:9B:20:32:62:34:91:BF:32:79:AD:45:A9:CA:0B:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/itC83pWbIDJiNJG_MnmtRanKC-g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/4d3d98-51f2-4d95-bc37-2d32426e141d/1/itC83pWbIDJiNJG_MnmtRanKC-g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/4d3d98-51f2-4d95-bc37-2d32426e141d/1/itC83pWbIDJiNJG_MnmtRanKC-g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:fa:d3:e5:23:05:a0:7a:fc:af:61:45:e0:c9:e8:a1:d4:a9:
11:e0:56:99:97:bb:ee:7e:9e:0b:22:58:63:fd:f5:79:0a:fa:
db:f4:21:65:ea:c7:a6:7d:d4:47:1d:70:29:cd:db:e8:d2:58:
d0:29:59:f3:20:06:b2:63:6c:cf:10:e9:d4:a6:93:4c:25:3c:
92:78:c3:c6:0e:fb:c3:6b:3a:87:a9:34:11:ad:3b:0d:84:e9:
a7:45:62:12:ee:0f:d7:0c:6e:00:35:06:ed:7b:59:3f:b9:a5:
a9:02:ea:cd:65:bc:06:d5:7f:9d:2e:e2:18:fc:69:98:80:35:
cc:40:04:d7:89:71:c2:7d:99:7d:f9:a1:66:33:d4:44:80:71:
46:92:49:26:56:ad:32:26:c3:d3:0c:f9:7c:50:fd:26:e2:d3:
1b:fe:12:da:6c:ce:63:70:42:60:73:c7:26:1f:fe:f0:63:7e:
a8:3f:13:e1:dd:94:da:73:e0:b1:ab:c6:fd:c1:1f:b9:20:bf:
1f:01:24:02:2b:0c:34:5b:a3:cd:b5:fa:ec:bf:44:7e:f9:76:
51:de:fe:48:71:0c:c0:07:37:1f:41:aa:6e:c9:52:50:b1:c6:
60:6c:20:c2:1e:7e:52:d7:3d:02:8f:e2:bc:dd:9e:48:f9:56:
61:7b:e3:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:10:02 2025 by rpki-client