Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/f184a9-c2fe-4279-acdc-7ce6980cb1cc/1/I8cVVBujctWQ1odn14zmmEABMFk.mft
File: I8cVVBujctWQ1odn14zmmEABMFk.mft (raw, json)
Hash identifier: Xk9N4j/KMWeVeaQaquasQn+MWhhgGrMOH8i+POGxguI=
Subject key identifier: AB:24:1A:5A:1D:00:A2:B1:AF:90:CB:91:AA:B4:F6:5D:B0:52:AB:EC
Authority key identifier: 23:C7:15:54:1B:A3:72:D5:90:D6:87:67:D7:8C:E6:98:40:01:30:59
Certificate issuer: /CN=23c715541ba372d590d68767d78ce69840013059
Certificate serial: 0197711A002EF51646BE8967DAF2FF9E61E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I8cVVBujctWQ1odn14zmmEABMFk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/f184a9-c2fe-4279-acdc-7ce6980cb1cc/1/I8cVVBujctWQ1odn14zmmEABMFk.mft
Manifest number: 158D
Signing time: Sun 15 Jun 2025 01:00:18 +0000
Manifest this update: Sun 15 Jun 2025 01:00:18 +0000
Manifest next update: Mon 16 Jun 2025 01:00:18 +0000
Files and hashes: 1: I8cVVBujctWQ1odn14zmmEABMFk.crl (hash: OWIWsFJHuxz5Y7XVUlVcN2+6ngp0Q+oTtZUW9HH91N8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/f184a9-c2fe-4279-acdc-7ce6980cb1cc/1/I8cVVBujctWQ1odn14zmmEABMFk.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/f184a9-c2fe-4279-acdc-7ce6980cb1cc/1/I8cVVBujctWQ1odn14zmmEABMFk.mft
rsync://rpki.ripe.net/repository/DEFAULT/I8cVVBujctWQ1odn14zmmEABMFk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 22:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:71:1a:00:2e:f5:16:46:be:89:67:da:f2:ff:9e:61:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23c715541ba372d590d68767d78ce69840013059
Validity
Not Before: Jun 15 01:00:18 2025 GMT
Not After : Jun 16 01:00:18 2025 GMT
Subject: CN=ab241a5a1d00a2b1af90cb91aab4f65db052abec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:30:18:eb:84:cc:66:db:ec:42:cf:69:e1:2d:
4c:b3:87:19:e5:0e:8f:52:86:6f:51:38:d0:cc:a1:
de:50:43:e9:88:8e:a4:dd:8a:b5:99:b8:9f:2f:75:
bc:87:29:8a:cc:7f:f2:d5:62:33:c8:c9:50:4e:a8:
c0:b2:02:a1:90:c4:04:c2:e5:50:8e:81:4c:8d:da:
76:a4:ad:e0:ee:18:25:48:04:39:53:49:f1:d6:9d:
ce:1a:a3:f4:b5:7a:a0:a5:80:21:2c:e4:5e:97:10:
32:59:99:8c:d6:da:00:2c:5a:ca:c4:7a:05:26:d6:
10:71:aa:4e:90:e9:29:28:8d:f9:ba:bc:a5:50:a9:
6a:ff:02:37:cb:ba:d2:b8:46:e2:b0:2f:40:f0:94:
a2:64:e8:5c:bc:be:e4:08:fb:19:d9:f2:5e:f9:44:
d5:c6:6e:bf:f6:c7:02:bd:3b:f6:77:15:79:55:e0:
24:8e:67:ee:9f:f6:58:38:21:8a:a9:60:b9:2b:62:
08:53:68:1e:34:65:3c:39:69:0b:99:bb:2c:e5:37:
01:27:37:26:63:5d:80:20:a7:f3:49:3d:30:16:fa:
90:1c:73:54:9f:53:9d:31:e3:c0:53:56:36:3a:0d:
a3:29:0e:9c:2f:74:ea:35:cc:f6:f4:3f:ea:52:9c:
e7:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:24:1A:5A:1D:00:A2:B1:AF:90:CB:91:AA:B4:F6:5D:B0:52:AB:EC
X509v3 Authority Key Identifier:
keyid:23:C7:15:54:1B:A3:72:D5:90:D6:87:67:D7:8C:E6:98:40:01:30:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I8cVVBujctWQ1odn14zmmEABMFk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/f184a9-c2fe-4279-acdc-7ce6980cb1cc/1/I8cVVBujctWQ1odn14zmmEABMFk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/f184a9-c2fe-4279-acdc-7ce6980cb1cc/1/I8cVVBujctWQ1odn14zmmEABMFk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:70:0b:a0:e1:37:8f:1c:e0:e6:eb:e4:dd:ed:fd:64:28:df:
73:a1:5d:6d:07:0c:34:1e:fd:c9:c0:7f:47:52:bf:d1:07:a7:
df:d2:3f:dc:e1:4f:b5:c5:a0:cc:f8:99:11:18:42:22:f8:10:
a4:24:1d:b0:de:53:8a:16:73:ad:27:cb:41:55:4c:ab:9a:6f:
65:84:81:a9:13:0f:7c:13:4c:f4:75:de:33:32:3a:17:7b:00:
de:a1:26:82:f3:c2:b0:89:c1:bd:7b:65:0e:aa:d6:6e:f7:b7:
95:70:05:d8:7e:a6:e5:41:36:6b:7a:1a:67:66:90:bf:53:fb:
a3:39:9f:99:90:0d:54:2d:c2:32:5a:08:29:03:23:59:7d:37:
f6:08:78:4c:37:77:a5:10:6b:e5:d8:9d:04:86:de:d3:17:ed:
66:c6:2e:88:96:d6:a1:ff:1a:ec:17:3d:6b:ec:3a:61:12:3d:
fe:af:e7:c8:31:e4:0a:d6:56:4a:74:83:ea:68:90:b5:ce:45:
d4:d6:ad:11:1c:98:41:53:3c:f5:c9:bf:1d:ab:fd:d5:90:b2:
e6:0e:4a:93:80:f3:10:0a:55:f9:31:3f:f9:5f:ad:9a:0f:03:
c9:d5:27:df:fc:37:c6:c0:5d:68:4e:5a:5b:4a:29:b7:a5:6a:
5a:69:89:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 07:34:10 2025 by rpki-client