Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/cbf67b-a65a-42a3-8908-07369e14cade/1/IlVxaqH0w8EChxihwzHiKzOerXw.mft
File: IlVxaqH0w8EChxihwzHiKzOerXw.mft (raw, json)
Hash identifier: 8U0hSIRge9ksR950kIYrxhyDQ80M56sKIVt6IYBP0ZE=
Subject key identifier: BA:92:30:B9:BB:48:7B:79:BE:11:7A:20:55:07:0A:33:A2:35:53:6C
Authority key identifier: 22:55:71:6A:A1:F4:C3:C1:02:87:18:A1:C3:31:E2:2B:33:9E:AD:7C
Certificate issuer: /CN=2255716aa1f4c3c1028718a1c331e22b339ead7c
Certificate serial: 01976C2AAC658BD6FFC13971CF54441F63EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IlVxaqH0w8EChxihwzHiKzOerXw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/cbf67b-a65a-42a3-8908-07369e14cade/1/IlVxaqH0w8EChxihwzHiKzOerXw.mft
Manifest number: 120F
Signing time: Sat 14 Jun 2025 02:00:25 +0000
Manifest this update: Sat 14 Jun 2025 02:00:25 +0000
Manifest next update: Sun 15 Jun 2025 02:00:25 +0000
Files and hashes: 1: IlVxaqH0w8EChxihwzHiKzOerXw.crl (hash: qL7ss3AdXMZQ1ksrxecnfG5KD4k2WDl/rEshjVGlp+k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/cbf67b-a65a-42a3-8908-07369e14cade/1/IlVxaqH0w8EChxihwzHiKzOerXw.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/cbf67b-a65a-42a3-8908-07369e14cade/1/IlVxaqH0w8EChxihwzHiKzOerXw.mft
rsync://rpki.ripe.net/repository/DEFAULT/IlVxaqH0w8EChxihwzHiKzOerXw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:2a:ac:65:8b:d6:ff:c1:39:71:cf:54:44:1f:63:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2255716aa1f4c3c1028718a1c331e22b339ead7c
Validity
Not Before: Jun 14 02:00:25 2025 GMT
Not After : Jun 15 02:00:25 2025 GMT
Subject: CN=ba9230b9bb487b79be117a2055070a33a235536c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:47:09:4f:6f:d9:64:34:9d:89:ca:9c:45:dc:
a0:1a:75:ef:40:57:3e:ae:ce:52:4c:8b:77:1f:4c:
6a:31:28:1f:31:e4:c3:e7:24:5f:66:a7:cc:8f:7a:
f1:1b:fd:a7:c6:e6:6f:59:f1:64:fe:68:a7:54:31:
db:72:8f:51:f7:00:84:ec:50:6a:7f:29:07:b3:89:
e1:8c:17:e6:9c:ea:c6:a5:8e:98:23:9e:f8:4d:bf:
f4:c3:23:55:b4:96:cb:8d:17:80:35:ef:98:e5:09:
5a:a9:bc:6a:90:03:ec:52:42:56:b1:bb:6d:f4:16:
b9:86:49:ea:c6:cf:3e:ce:f0:36:bb:8e:37:81:c8:
22:df:9b:fc:f4:d4:7c:46:d9:31:71:c4:bb:8f:cd:
a9:25:fa:bb:c8:14:99:b3:42:2c:23:30:30:68:1d:
08:15:b2:72:c4:46:27:4a:20:5c:57:9a:5d:22:b1:
e2:d2:f7:72:88:52:e4:f6:fc:cb:79:18:43:67:a7:
49:4e:2a:a8:8f:d8:62:c4:4c:0b:61:8e:a9:cf:06:
ef:d5:86:16:bc:c8:74:a3:0b:a8:c9:7d:29:f3:c0:
55:8c:ae:f7:77:5f:e3:29:c7:04:80:23:eb:c3:8c:
65:3b:7b:4c:7c:af:dd:8e:b6:23:55:ee:3d:7f:d2:
2c:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:92:30:B9:BB:48:7B:79:BE:11:7A:20:55:07:0A:33:A2:35:53:6C
X509v3 Authority Key Identifier:
keyid:22:55:71:6A:A1:F4:C3:C1:02:87:18:A1:C3:31:E2:2B:33:9E:AD:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IlVxaqH0w8EChxihwzHiKzOerXw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/cbf67b-a65a-42a3-8908-07369e14cade/1/IlVxaqH0w8EChxihwzHiKzOerXw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/cbf67b-a65a-42a3-8908-07369e14cade/1/IlVxaqH0w8EChxihwzHiKzOerXw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:21:d8:58:23:a2:f2:82:f0:74:54:c9:39:d2:26:aa:d7:5f:
78:1c:c1:40:83:3e:2b:c7:8f:9a:b5:18:d4:80:ba:1b:ad:16:
d2:ca:6a:d5:e6:92:d4:1d:a7:15:37:97:51:02:ef:c1:10:bc:
24:5c:90:19:97:c7:50:4d:f8:ac:9a:0d:40:fd:21:ca:50:b4:
7f:bc:cd:25:e2:f2:0b:00:67:d4:98:96:16:5f:e5:34:3e:43:
93:b4:a3:79:ea:28:0f:8e:00:2d:7e:84:42:f5:ea:63:fc:5c:
01:23:06:ce:98:1e:c5:c9:b0:37:29:5a:f5:12:af:13:07:be:
16:84:50:1d:d3:b0:c0:e5:67:df:2b:38:22:c9:40:26:a7:dd:
f8:e7:4d:a4:01:86:da:30:d7:30:a2:d6:9a:f6:ca:41:2b:47:
76:ab:6d:ed:98:dc:c9:1e:6d:1e:b5:6f:e2:d4:be:b1:62:0f:
56:77:16:19:04:39:a5:c6:e8:6d:92:02:3b:9b:66:cf:9e:92:
d0:5f:50:55:6d:ce:11:b0:99:1c:4c:49:6e:d1:f8:77:13:ca:
46:52:12:01:21:9b:96:cf:3a:c3:bd:d5:53:b1:26:ac:82:1d:
fb:06:55:31:5b:ff:68:0f:32:ea:00:9e:e5:af:6d:1a:85:34:
2c:c5:b0:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 10:40:50 2025 by rpki-client