Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/f1d439-7cc7-449f-a9e2-2ea6f5efb27f/1/I_ifV9ByhJ4MqyGVzQuvJVeTXqA.mft
File: I_ifV9ByhJ4MqyGVzQuvJVeTXqA.mft (raw, json)
Hash identifier: /ZbhrqalGpbeGxolFhRP+ZzeztYvp1mxW8WcjuYa1r4=
Subject key identifier: 55:E5:9E:95:A6:DF:A9:EE:31:27:A8:7C:13:6F:48:56:DC:E9:39:57
Authority key identifier: 23:F8:9F:57:D0:72:84:9E:0C:AB:21:95:CD:0B:AF:25:57:93:5E:A0
Certificate issuer: /CN=23f89f57d072849e0cab2195cd0baf2557935ea0
Certificate serial: 01974BC42A49D423EAE1F3DA8E2F48DA359A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I_ifV9ByhJ4MqyGVzQuvJVeTXqA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/f1d439-7cc7-449f-a9e2-2ea6f5efb27f/1/I_ifV9ByhJ4MqyGVzQuvJVeTXqA.mft
Manifest number: 157A
Signing time: Sat 07 Jun 2025 19:00:36 +0000
Manifest this update: Sat 07 Jun 2025 19:00:36 +0000
Manifest next update: Sun 08 Jun 2025 19:00:36 +0000
Files and hashes: 1: I_ifV9ByhJ4MqyGVzQuvJVeTXqA.crl (hash: 9ZqCbcdkDm4GWyCUbHMM0vRpRnd+Ynapp+iFawlg4aE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/f1d439-7cc7-449f-a9e2-2ea6f5efb27f/1/I_ifV9ByhJ4MqyGVzQuvJVeTXqA.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/f1d439-7cc7-449f-a9e2-2ea6f5efb27f/1/I_ifV9ByhJ4MqyGVzQuvJVeTXqA.mft
rsync://rpki.ripe.net/repository/DEFAULT/I_ifV9ByhJ4MqyGVzQuvJVeTXqA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 18:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4b:c4:2a:49:d4:23:ea:e1:f3:da:8e:2f:48:da:35:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23f89f57d072849e0cab2195cd0baf2557935ea0
Validity
Not Before: Jun 7 19:00:36 2025 GMT
Not After : Jun 8 19:00:36 2025 GMT
Subject: CN=55e59e95a6dfa9ee3127a87c136f4856dce93957
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:cc:ce:2a:d9:8a:90:0d:4b:66:43:36:81:84:
63:1c:98:ac:4c:63:43:46:ab:ff:a1:71:d7:98:77:
e9:f4:32:7d:af:ef:51:13:9a:d3:ae:ca:b4:62:44:
04:70:aa:28:2a:94:5f:d6:5d:5b:68:cd:98:24:9f:
b6:65:4f:7a:97:4a:a0:eb:ca:8f:0b:b6:be:45:c3:
13:1e:33:14:98:11:71:6f:90:fe:08:f1:ea:a2:af:
a0:6b:73:68:19:c0:4f:99:81:e7:78:a5:09:25:66:
a6:f1:60:79:e9:e9:1c:f6:4b:4f:1d:6f:95:85:82:
bb:93:26:a4:37:fe:70:98:a0:bc:0c:62:04:54:fe:
65:68:03:f7:c0:f5:e5:9f:e8:a4:58:b4:d4:b8:9a:
bc:db:1f:41:74:93:19:5e:c0:de:68:49:08:5c:08:
86:b3:83:19:09:06:48:ca:9e:18:6d:55:3c:c7:77:
9b:20:c0:15:5a:cf:fa:b4:08:4e:d6:18:21:23:82:
81:67:43:db:a2:47:95:e7:dc:35:fd:b0:f8:f7:81:
08:16:ff:02:57:aa:f6:df:1e:b7:76:32:f1:1a:f8:
21:d0:ba:9b:4d:07:a5:e0:f9:9b:e8:6c:f2:c3:2f:
f4:34:52:52:b7:4e:2c:05:70:c0:c7:c8:80:6f:d1:
df:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:E5:9E:95:A6:DF:A9:EE:31:27:A8:7C:13:6F:48:56:DC:E9:39:57
X509v3 Authority Key Identifier:
keyid:23:F8:9F:57:D0:72:84:9E:0C:AB:21:95:CD:0B:AF:25:57:93:5E:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I_ifV9ByhJ4MqyGVzQuvJVeTXqA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/f1d439-7cc7-449f-a9e2-2ea6f5efb27f/1/I_ifV9ByhJ4MqyGVzQuvJVeTXqA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/f1d439-7cc7-449f-a9e2-2ea6f5efb27f/1/I_ifV9ByhJ4MqyGVzQuvJVeTXqA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:a0:07:ac:69:f9:e2:cc:01:5f:eb:63:12:88:21:c0:89:b0:
22:68:36:e1:10:a5:7e:2e:c9:57:64:ff:57:14:81:88:f1:8e:
4d:f5:8a:5b:7c:5e:69:d5:bd:34:f1:53:57:19:3a:5f:4f:7f:
f3:06:ca:f8:79:01:4d:fc:4f:25:0f:26:26:c2:f2:29:a2:d9:
66:cf:3c:84:bb:d0:84:e5:06:bb:f4:99:31:34:a9:cf:45:31:
3b:78:31:4c:c1:d7:be:79:94:25:45:34:d2:59:a3:8a:50:a0:
77:21:bf:41:09:85:f9:ae:50:c7:bb:ce:01:34:40:40:14:a4:
ee:b4:d4:67:55:ef:99:5b:0c:5d:65:32:18:41:6e:76:85:5f:
b0:11:a8:7c:2a:8c:15:69:fc:44:ec:6a:91:48:f4:f7:73:65:
08:40:5e:e7:8f:17:5c:a9:a2:00:a3:f5:0f:bf:9d:27:38:c8:
44:7b:1e:3f:91:78:fc:b8:94:18:7e:c8:b3:5c:89:5d:8d:7b:
b5:ea:91:12:45:1e:78:bf:87:99:ca:04:b0:a3:eb:ad:7d:a8:
63:ba:2d:43:57:5d:28:86:e7:73:e6:e7:4a:20:aa:20:9e:26:
3d:af:69:af:f9:a3:60:70:63:6b:0d:c2:13:a3:f0:cd:26:e4:
cd:8e:b1:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 01:47:15 2025 by rpki-client