Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/93e301-62f8-49f1-a0f7-7ed6ef73ff6d/1/i2nPHqZfCOKQoEFSd-ZeyVt4DXc.mft
File: i2nPHqZfCOKQoEFSd-ZeyVt4DXc.mft (raw, json)
Hash identifier: CH5vFon0PXXsunPI+3OiXfxynDXpXv+aP3I40MROZEs=
Subject key identifier: 7C:F2:42:48:69:AA:FB:59:2A:17:F8:23:E9:78:95:8A:95:37:A7:A8
Authority key identifier: 8B:69:CF:1E:A6:5F:08:E2:90:A0:41:52:77:E6:5E:C9:5B:78:0D:77
Certificate issuer: /CN=8b69cf1ea65f08e290a0415277e65ec95b780d77
Certificate serial: 0198477683B39A1C7EE6797F3C592BF5F98C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2nPHqZfCOKQoEFSd-ZeyVt4DXc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/93e301-62f8-49f1-a0f7-7ed6ef73ff6d/1/i2nPHqZfCOKQoEFSd-ZeyVt4DXc.mft
Manifest number: 0D36
Signing time: Sat 26 Jul 2025 16:00:05 +0000
Manifest this update: Sat 26 Jul 2025 16:00:05 +0000
Manifest next update: Sun 27 Jul 2025 16:00:05 +0000
Files and hashes: 1: i2nPHqZfCOKQoEFSd-ZeyVt4DXc.crl (hash: qjQyHw33hqTlVeSW17r7IMI4rd/iYLrS1IOrP0riNJE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/93e301-62f8-49f1-a0f7-7ed6ef73ff6d/1/i2nPHqZfCOKQoEFSd-ZeyVt4DXc.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/93e301-62f8-49f1-a0f7-7ed6ef73ff6d/1/i2nPHqZfCOKQoEFSd-ZeyVt4DXc.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2nPHqZfCOKQoEFSd-ZeyVt4DXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 16:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:47:76:83:b3:9a:1c:7e:e6:79:7f:3c:59:2b:f5:f9:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b69cf1ea65f08e290a0415277e65ec95b780d77
Validity
Not Before: Jul 26 16:00:05 2025 GMT
Not After : Jul 27 16:00:05 2025 GMT
Subject: CN=7cf2424869aafb592a17f823e978958a9537a7a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:f8:04:1e:1d:8b:59:1f:08:e6:d7:e9:32:b0:
c6:c3:d1:7f:d1:f2:49:2d:10:bc:7c:7c:12:b8:ab:
16:0d:2e:95:5e:59:cf:b9:5c:5e:f8:11:59:5e:37:
e0:51:03:cf:2c:dc:8d:3e:47:8a:fa:1b:b1:35:d0:
a3:6f:e4:81:88:ab:64:f5:b5:7c:fe:2a:3a:26:0a:
a4:6f:ad:f8:a4:87:0a:21:c9:23:15:d3:e2:bd:2c:
7a:e9:32:18:a7:26:4d:ad:9f:b9:31:a1:05:0c:52:
17:4a:27:1c:ce:e1:8a:e5:8b:d5:b2:a8:dc:f4:c7:
13:a6:27:66:d0:8f:d6:b9:43:09:d4:db:37:65:0f:
7c:17:c6:af:fa:e2:95:00:cc:a6:ec:9e:ad:cf:e7:
db:b1:e1:15:44:c6:cb:38:1e:4e:d6:7f:f9:34:92:
c3:20:af:6c:22:19:cc:ef:de:5e:e9:eb:11:d3:72:
75:99:ea:1d:f5:a2:d2:11:32:61:39:90:f3:84:60:
d8:7b:78:59:e4:bd:48:b5:fb:3b:e1:5f:42:93:3b:
b7:0a:b8:c4:5c:de:b7:f3:95:0a:ae:b8:6f:00:8b:
32:72:f0:96:b3:55:c0:d6:23:cc:12:fc:3f:76:59:
2c:f5:2e:c2:d8:09:10:f4:7b:d6:6a:93:79:cf:1a:
8d:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:F2:42:48:69:AA:FB:59:2A:17:F8:23:E9:78:95:8A:95:37:A7:A8
X509v3 Authority Key Identifier:
keyid:8B:69:CF:1E:A6:5F:08:E2:90:A0:41:52:77:E6:5E:C9:5B:78:0D:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2nPHqZfCOKQoEFSd-ZeyVt4DXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/93e301-62f8-49f1-a0f7-7ed6ef73ff6d/1/i2nPHqZfCOKQoEFSd-ZeyVt4DXc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/93e301-62f8-49f1-a0f7-7ed6ef73ff6d/1/i2nPHqZfCOKQoEFSd-ZeyVt4DXc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
be:36:da:4c:5f:75:1f:3c:36:e8:75:df:8a:94:5e:21:94:fc:
f3:16:44:98:7c:a9:32:e0:03:b1:59:59:63:b6:84:50:29:00:
50:82:d6:6d:20:e6:f9:5e:8c:1a:a4:ea:00:04:ac:a6:b9:c7:
08:fe:85:02:c9:19:bf:4b:40:41:3e:b7:17:e4:53:5d:a2:c2:
7c:bd:1d:70:5e:01:d1:83:9f:ac:c1:bb:56:1b:7b:0a:e1:96:
70:39:98:9f:6e:be:de:e8:93:6d:b0:86:1b:89:7b:6e:93:d2:
67:42:b6:96:af:fa:c5:f7:08:c5:bb:ce:aa:8f:5f:63:bd:2e:
c6:34:65:3d:96:b5:69:ca:d8:26:bc:b7:be:63:14:cc:c7:a5:
71:09:2c:c7:53:4b:fa:85:23:59:6b:01:31:35:fb:39:29:76:
82:a5:74:ff:54:46:b7:cb:94:f7:a6:33:26:60:a8:6d:62:45:
50:d2:85:bf:b7:e6:0c:33:0a:56:00:4c:35:df:a4:8e:3b:e7:
09:c7:66:13:e0:f8:c5:21:a0:45:0d:62:21:6e:29:1d:23:cc:
1e:7d:dc:e3:91:ef:cf:22:90:c5:6b:cc:10:ef:84:b4:03:3e:
09:88:30:d1:f3:54:86:2e:74:e6:8d:44:3b:32:56:44:fe:3c:
6d:81:bd:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 01:23:39 2025 by rpki-client