Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/345c62-2e0a-4ce1-befb-0cf54cfa8da1/1/Iaw4_oEF-1mizSV_UZ-FhZWEAwE.mft
File: Iaw4_oEF-1mizSV_UZ-FhZWEAwE.mft (raw, json)
Hash identifier: FMLj1k6Y45Ku7BqjEG0oJbTHce1UT+xTVdXfgxRoEmQ=
Subject key identifier: F1:39:F0:8D:A6:37:DB:2F:B4:F5:31:AD:57:E3:32:48:E1:1A:15:5A
Authority key identifier: 21:AC:38:FE:81:05:FB:59:A2:CD:25:7F:51:9F:85:85:95:84:03:01
Certificate issuer: /CN=21ac38fe8105fb59a2cd257f519f858595840301
Certificate serial: 01977F0CDD0BECCC5D65207E6810CCAFA47F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Iaw4_oEF-1mizSV_UZ-FhZWEAwE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/345c62-2e0a-4ce1-befb-0cf54cfa8da1/1/Iaw4_oEF-1mizSV_UZ-FhZWEAwE.mft
Manifest number: 0534
Signing time: Tue 17 Jun 2025 18:00:38 +0000
Manifest this update: Tue 17 Jun 2025 18:00:38 +0000
Manifest next update: Wed 18 Jun 2025 18:00:38 +0000
Files and hashes: 1: Iaw4_oEF-1mizSV_UZ-FhZWEAwE.crl (hash: BL6vpT2r4MlFV5x5vydZSSCQ0bBQ+DI5omJjk5seGrM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/345c62-2e0a-4ce1-befb-0cf54cfa8da1/1/Iaw4_oEF-1mizSV_UZ-FhZWEAwE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/345c62-2e0a-4ce1-befb-0cf54cfa8da1/1/Iaw4_oEF-1mizSV_UZ-FhZWEAwE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Iaw4_oEF-1mizSV_UZ-FhZWEAwE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 18 Jun 2025 18:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:7f:0c:dd:0b:ec:cc:5d:65:20:7e:68:10:cc:af:a4:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21ac38fe8105fb59a2cd257f519f858595840301
Validity
Not Before: Jun 17 18:00:38 2025 GMT
Not After : Jun 18 18:00:38 2025 GMT
Subject: CN=f139f08da637db2fb4f531ad57e33248e11a155a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:92:27:7b:24:48:df:63:1b:0c:a2:12:be:2d:
93:30:41:48:e0:f5:07:25:09:95:11:75:48:1e:22:
e8:e3:90:8c:e9:a3:b9:20:5d:f4:07:62:a3:23:0e:
c8:40:bb:23:48:cc:94:44:f8:3e:d5:41:c7:d6:55:
04:5c:29:20:e5:f4:0a:3c:b7:a9:7b:0d:1e:89:96:
bc:e9:5d:e3:e7:55:2d:70:ae:8f:69:5d:93:a7:7a:
a5:5b:8f:ed:66:ae:fc:da:25:4b:ca:91:85:5b:78:
53:de:b4:66:2b:b9:22:8c:cc:9d:94:e1:5d:50:91:
22:7c:bf:63:6b:00:4c:f7:e5:e1:fe:5a:a3:9a:23:
bc:27:ea:f7:d3:8d:ed:0d:3b:38:b0:f8:59:02:38:
e2:c0:49:06:8c:9b:b0:01:04:d5:07:4d:1e:71:d5:
90:3e:b7:b3:7b:ba:5d:b8:3c:53:cd:70:81:89:b6:
ed:a2:1d:7f:d2:ca:5b:95:9d:01:3e:54:33:52:99:
ee:64:a4:30:bc:39:d3:56:22:00:47:da:c3:ae:a3:
3e:a0:cc:44:37:7a:24:e8:6a:2a:67:ec:01:88:3e:
fd:f7:14:94:91:95:ea:fa:07:81:09:83:62:ca:80:
a3:fe:d8:8f:14:75:42:15:79:04:0f:92:05:3c:5a:
e0:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:39:F0:8D:A6:37:DB:2F:B4:F5:31:AD:57:E3:32:48:E1:1A:15:5A
X509v3 Authority Key Identifier:
keyid:21:AC:38:FE:81:05:FB:59:A2:CD:25:7F:51:9F:85:85:95:84:03:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Iaw4_oEF-1mizSV_UZ-FhZWEAwE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/345c62-2e0a-4ce1-befb-0cf54cfa8da1/1/Iaw4_oEF-1mizSV_UZ-FhZWEAwE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/345c62-2e0a-4ce1-befb-0cf54cfa8da1/1/Iaw4_oEF-1mizSV_UZ-FhZWEAwE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:b4:78:d0:35:20:ef:44:4f:0c:46:69:a9:d6:3a:b8:1e:fb:
cc:54:15:55:ae:74:73:0c:59:9a:08:ba:9c:6a:fc:78:82:e4:
45:69:88:ac:9d:2e:ba:c6:97:37:2b:f5:c1:df:29:ec:43:ea:
a9:68:e6:32:46:83:f8:27:38:e7:0e:43:b2:55:2b:f4:02:1e:
4b:4e:1f:28:10:55:70:87:31:3f:fb:20:69:e6:cd:97:75:a5:
06:9f:c5:bb:ec:67:2c:4f:0d:2c:97:8e:c2:18:84:92:20:6d:
fc:50:5e:54:59:c1:14:22:5f:5f:2b:2f:9f:f4:04:ba:31:fc:
07:f9:a7:16:c8:cc:27:6b:d2:b4:43:fe:7e:54:09:6d:92:df:
9d:70:93:74:2d:b9:d2:11:32:71:f8:2e:69:0a:4b:b7:46:5a:
1d:ef:07:28:ef:98:83:02:a2:6c:c5:d0:e8:75:3d:57:24:14:
17:a3:9c:65:c7:08:10:5e:4b:e3:40:4f:1b:62:6e:af:51:a8:
2e:c5:ac:5f:05:ca:b9:68:23:5e:12:d1:54:be:cc:76:58:0f:
14:29:3e:c0:97:a9:2b:83:60:41:41:3a:bc:25:22:fe:a6:4b:
33:07:82:62:61:2b:90:38:31:05:16:55:93:79:a0:4e:cc:ff:
42:ed:51:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 01:53:51 2025 by rpki-client