Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/7d4a29-023f-42d7-aab7-d87b361acd89/1/i5epFTYKSH1c9dXGZeW_4f_1Np8.mft
File: i5epFTYKSH1c9dXGZeW_4f_1Np8.mft (raw, json)
Hash identifier: i8Zi1pwvdaAAqhvjJv29c2302ZLLkMtvrJFlRWMjMBk=
Subject key identifier: 4E:EC:F0:D8:80:FF:DB:FF:1E:51:57:A2:10:0B:96:0E:60:4D:DD:07
Authority key identifier: 8B:97:A9:15:36:0A:48:7D:5C:F5:D5:C6:65:E5:BF:E1:FF:F5:36:9F
Certificate issuer: /CN=8b97a915360a487d5cf5d5c665e5bfe1fff5369f
Certificate serial: 0197488CF40188EF2482B9C51E1FEB583486
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i5epFTYKSH1c9dXGZeW_4f_1Np8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/7d4a29-023f-42d7-aab7-d87b361acd89/1/i5epFTYKSH1c9dXGZeW_4f_1Np8.mft
Manifest number: 0419
Signing time: Sat 07 Jun 2025 04:01:26 +0000
Manifest this update: Sat 07 Jun 2025 04:01:26 +0000
Manifest next update: Sun 08 Jun 2025 04:01:26 +0000
Files and hashes: 1: i5epFTYKSH1c9dXGZeW_4f_1Np8.crl (hash: hPJtf5cAcj0lpkSfmqYagRzVMlmHZ8hWc4dnSZyNsZE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/7d4a29-023f-42d7-aab7-d87b361acd89/1/i5epFTYKSH1c9dXGZeW_4f_1Np8.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/7d4a29-023f-42d7-aab7-d87b361acd89/1/i5epFTYKSH1c9dXGZeW_4f_1Np8.mft
rsync://rpki.ripe.net/repository/DEFAULT/i5epFTYKSH1c9dXGZeW_4f_1Np8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 04:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:8c:f4:01:88:ef:24:82:b9:c5:1e:1f:eb:58:34:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b97a915360a487d5cf5d5c665e5bfe1fff5369f
Validity
Not Before: Jun 7 04:01:26 2025 GMT
Not After : Jun 8 04:01:26 2025 GMT
Subject: CN=4eecf0d880ffdbff1e5157a2100b960e604ddd07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:6a:4f:0a:8c:81:03:58:34:03:1e:75:cb:90:
4e:41:4d:24:d0:eb:af:1f:46:f3:1e:dc:4b:ac:17:
06:e5:95:46:8a:eb:61:cc:06:2f:76:66:8a:ae:a6:
86:0f:c0:3c:9a:cb:a1:8f:49:c6:48:da:99:84:4e:
e8:d4:a9:6b:fb:1f:17:0f:04:cf:04:80:83:e2:e1:
d9:7c:82:de:82:e6:e1:de:8e:88:fb:7e:8c:cd:62:
6a:17:1b:0f:21:e8:48:d9:11:4c:ba:d5:df:d8:bc:
35:3f:67:10:2d:e7:76:8b:ab:9c:92:12:28:c5:1f:
80:d9:aa:f4:80:2b:b4:e3:ea:f1:db:07:09:75:1c:
21:9a:d0:51:68:fd:f7:e1:05:30:44:93:78:15:fb:
ee:7f:d1:79:21:0b:1e:9e:38:cd:ef:d7:d5:04:6c:
67:15:ea:0f:03:3e:8a:b3:00:fc:9f:42:5f:dd:8b:
2b:21:c6:a6:55:9a:10:1e:0e:86:78:6f:d6:bb:14:
60:b2:62:37:3d:46:76:2a:66:36:10:9a:5d:f4:fd:
ac:05:a4:44:5b:3f:25:17:78:c6:fd:6e:0c:14:01:
dd:a7:94:ae:35:39:23:bb:f2:cc:10:73:8a:d4:8e:
bf:47:80:1c:35:18:ac:f3:24:dd:5e:5c:ed:b2:b7:
bf:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:EC:F0:D8:80:FF:DB:FF:1E:51:57:A2:10:0B:96:0E:60:4D:DD:07
X509v3 Authority Key Identifier:
keyid:8B:97:A9:15:36:0A:48:7D:5C:F5:D5:C6:65:E5:BF:E1:FF:F5:36:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i5epFTYKSH1c9dXGZeW_4f_1Np8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/7d4a29-023f-42d7-aab7-d87b361acd89/1/i5epFTYKSH1c9dXGZeW_4f_1Np8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/7d4a29-023f-42d7-aab7-d87b361acd89/1/i5epFTYKSH1c9dXGZeW_4f_1Np8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:e8:30:55:40:02:cd:8c:9b:81:eb:70:40:15:47:63:3a:d7:
79:51:50:39:72:13:1e:15:72:e6:08:97:05:39:56:c9:28:89:
ef:19:af:6d:29:88:da:cc:24:4c:81:9f:ea:b6:a8:74:2d:d2:
24:ad:e4:69:8a:40:e7:65:e7:07:62:c0:c6:a9:1a:51:64:f1:
bd:a6:3a:24:60:29:73:36:f6:94:07:20:96:1a:ec:85:38:68:
ed:be:d9:b8:b7:3a:ef:7c:e6:57:4d:c5:94:d9:e6:be:8f:d4:
36:59:5c:b3:bc:eb:81:f5:90:dd:83:19:94:48:01:6c:00:7d:
bf:37:52:b7:63:82:8a:05:0d:54:5b:76:af:15:d1:78:e5:df:
62:f4:cc:8b:8a:57:cc:c7:5b:3b:49:18:41:b1:d1:2d:15:5a:
76:dd:c8:a4:0a:03:b3:3a:2a:7d:f8:a4:80:02:a2:6b:29:33:
dd:c4:a1:58:d4:5d:a4:f6:34:5e:f2:da:0a:44:45:53:1f:15:
99:48:b8:5d:2c:08:d3:67:57:db:30:db:09:72:1f:9d:98:bf:
93:52:d5:5c:6a:6d:96:b4:84:d3:3e:98:3b:1f:8c:9a:ad:91:
2d:38:f4:c8:dc:d0:d7:f8:2c:db:fa:95:11:37:8c:ac:8e:c1:
7f:e3:93:ff
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdIjPQBiO8kgrnFHh/rWDSGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhiOTdhOTE1MzYwYTQ4N2Q1Y2Y1ZDVjNjY1ZTViZmUxZmZm
NTM2OWYwHhcNMjUwNjA3MDQwMTI2WhcNMjUwNjA4MDQwMTI2WjAzMTEwLwYDVQQD
Eyg0ZWVjZjBkODgwZmZkYmZmMWU1MTU3YTIxMDBiOTYwZTYwNGRkZDA3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmmpPCoyBA1g0Ax51y5BOQU0k0Ouv
H0bzHtxLrBcG5ZVGiuthzAYvdmaKrqaGD8A8msuhj0nGSNqZhE7o1Klr+x8XDwTP
BICD4uHZfILegubh3o6I+36MzWJqFxsPIehI2RFMutXf2Lw1P2cQLed2i6uckhIo
xR+A2ar0gCu04+rx2wcJdRwhmtBRaP334QUwRJN4Ffvuf9F5IQsenjjN79fVBGxn
FeoPAz6KswD8n0Jf3YsrIcamVZoQHg6GeG/WuxRgsmI3PUZ2KmY2EJpd9P2sBaRE
Wz8lF3jG/W4MFAHdp5SuNTkju/LMEHOK1I6/R4AcNRis8yTdXlztsre/sQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE7s8NiA/9v/HlFXohALlg5gTd0HMB8GA1UdIwQY
MBaAFIuXqRU2Ckh9XPXVxmXlv+H/9TafMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaTVlcEZUWUtTSDFjOWRYR1plV180Zl8xTnA4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy83ZDRhMjktMDIzZi00MmQ3LWFhYjct
ZDg3YjM2MWFjZDg5LzEvaTVlcEZUWUtTSDFjOWRYR1plV180Zl8xTnA4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYy83ZDRhMjktMDIzZi00MmQ3LWFhYjctZDg3YjM2MWFjZDg5
LzEvaTVlcEZUWUtTSDFjOWRYR1plV180Zl8xTnA4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANOgwVUAC
zYybgetwQBVHYzrXeVFQOXITHhVy5giXBTlWySiJ7xmvbSmI2swkTIGf6raodC3S
JK3kaYpA52XnB2LAxqkaUWTxvaY6JGApczb2lAcglhrshTho7b7ZuLc673zmV03F
lNnmvo/UNllcs7zrgfWQ3YMZlEgBbAB9vzdSt2OCigUNVFt2rxXReOXfYvTMi4pX
zMdbO0kYQbHRLRVadt3IpAoDszoqffikgAKiaykz3cShWNRdpPY0XvLaCkRFUx8V
mUi4XSwI02dX2zDbCXIfnZi/k1LVXGptlrSE0z6YOx+Mmq2RLTj0yNzQ1/gs2/qV
ETeMrI7Bf+OT/w==
-----END CERTIFICATE-----
Generated at Sat Jun 7 13:53:35 2025 by rpki-client