Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/efece3-e530-46c8-b388-9873afa73e7e/1/I1HFLSNz9aW3LcbdEqddE7JluQQ.mft
File: I1HFLSNz9aW3LcbdEqddE7JluQQ.mft (raw, json)
Hash identifier: JPkIPRnV+x4NStuq89uDSwxRwCe0AfVVvG2RTprZJX0=
Subject key identifier: 6A:20:DD:23:EE:34:CE:08:9F:EA:87:75:74:51:BF:81:4A:4E:09:33
Authority key identifier: 23:51:C5:2D:23:73:F5:A5:B7:2D:C6:DD:12:A7:5D:13:B2:65:B9:04
Certificate issuer: /CN=2351c52d2373f5a5b72dc6dd12a75d13b265b904
Certificate serial: 01975A244DA9A0A5EAF257DCF309E21C71CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I1HFLSNz9aW3LcbdEqddE7JluQQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/efece3-e530-46c8-b388-9873afa73e7e/1/I1HFLSNz9aW3LcbdEqddE7JluQQ.mft
Manifest number: 12A4
Signing time: Tue 10 Jun 2025 14:00:17 +0000
Manifest this update: Tue 10 Jun 2025 14:00:17 +0000
Manifest next update: Wed 11 Jun 2025 14:00:17 +0000
Files and hashes: 1: I1HFLSNz9aW3LcbdEqddE7JluQQ.crl (hash: J/XnRin9bSSlhL+BOUGtr6Gy1x9wGOzOuMslgOYdypE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/efece3-e530-46c8-b388-9873afa73e7e/1/I1HFLSNz9aW3LcbdEqddE7JluQQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/efece3-e530-46c8-b388-9873afa73e7e/1/I1HFLSNz9aW3LcbdEqddE7JluQQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/I1HFLSNz9aW3LcbdEqddE7JluQQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Jun 2025 14:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5a:24:4d:a9:a0:a5:ea:f2:57:dc:f3:09:e2:1c:71:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2351c52d2373f5a5b72dc6dd12a75d13b265b904
Validity
Not Before: Jun 10 14:00:17 2025 GMT
Not After : Jun 11 14:00:17 2025 GMT
Subject: CN=6a20dd23ee34ce089fea87757451bf814a4e0933
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:90:c5:49:d8:c4:db:3d:35:fd:9b:c6:20:16:
3c:8a:fe:87:c8:a7:ce:5f:1e:1e:48:07:ab:78:7b:
b2:83:08:4f:a8:28:e2:f2:85:42:af:4b:07:31:e5:
6a:24:51:b0:41:80:c1:fb:9a:03:39:45:9c:55:9a:
ef:5a:dc:49:c7:a7:eb:98:e7:52:3e:36:42:b2:5f:
b5:61:90:32:86:8e:c2:47:9d:0a:67:89:b4:3c:7c:
33:af:c9:e0:c0:5c:df:5d:17:ae:71:ff:a8:1b:89:
0f:81:7c:cd:e1:0d:f7:a9:15:36:6b:95:12:b6:36:
fd:7a:ef:93:05:bb:ed:6e:6f:42:d9:85:e4:a8:1e:
43:cd:06:63:27:cb:42:15:6f:97:0b:97:df:3f:15:
17:43:6f:e4:ec:27:da:5a:b7:7e:2a:ec:f6:5f:65:
e0:61:27:ef:7f:74:17:a6:1a:f8:b8:35:84:1a:9e:
d8:b3:ec:e2:48:f3:ad:60:61:c1:e3:af:43:a4:70:
63:60:5a:07:0d:dc:79:92:a3:a8:76:aa:90:52:2c:
ab:f2:ec:6a:7c:74:df:3c:20:41:20:63:9b:ba:8d:
1c:cd:04:f7:88:3c:db:d1:b6:06:fb:22:59:91:96:
40:1e:63:6d:6e:30:13:0d:a4:a0:39:ec:d9:cd:8a:
83:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:20:DD:23:EE:34:CE:08:9F:EA:87:75:74:51:BF:81:4A:4E:09:33
X509v3 Authority Key Identifier:
keyid:23:51:C5:2D:23:73:F5:A5:B7:2D:C6:DD:12:A7:5D:13:B2:65:B9:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I1HFLSNz9aW3LcbdEqddE7JluQQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/efece3-e530-46c8-b388-9873afa73e7e/1/I1HFLSNz9aW3LcbdEqddE7JluQQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/efece3-e530-46c8-b388-9873afa73e7e/1/I1HFLSNz9aW3LcbdEqddE7JluQQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:0b:df:69:80:e9:1e:32:2f:ef:4b:f3:fe:b8:2d:55:47:ec:
e7:c3:89:fb:52:93:72:40:6b:cd:5c:b6:48:2a:18:74:a6:65:
e8:9d:a8:26:8e:4f:7a:67:e8:60:dc:84:e2:fa:2c:46:fa:cf:
b0:ee:10:f4:4f:ff:80:5c:07:a6:cc:22:26:6d:b1:7a:bd:6a:
e9:e9:96:03:39:4d:ef:e2:b3:15:d0:b1:a2:9b:dc:04:5a:ac:
9f:10:d9:34:24:15:6d:b5:21:22:af:5d:e5:49:3e:b0:e4:8c:
74:0a:6a:63:b7:d6:08:32:d2:fa:bb:e4:84:4c:97:ce:0b:9a:
63:21:43:90:e1:58:78:04:79:79:1c:11:cd:0a:e6:c2:53:0f:
c0:19:46:40:02:be:19:96:ab:63:50:ab:b3:3b:5b:64:ff:28:
46:d5:5f:8a:9a:53:57:66:e7:94:d7:59:16:a4:94:49:81:e6:
30:3f:f7:0c:c1:44:12:59:b3:e5:6a:87:cf:13:2e:94:20:a4:
25:91:36:65:51:93:5e:67:24:0c:16:03:45:72:8d:ae:ea:b9:
16:d3:2f:e4:34:08:29:51:20:ef:62:f1:53:f2:07:3c:7c:92:
66:b2:f4:b2:79:f0:9b:a8:ad:eb:8d:4c:71:60:c9:07:52:c5:
7b:d6:00:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 17:48:09 2025 by rpki-client