
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/efece3-e530-46c8-b388-9873afa73e7e/1/I1HFLSNz9aW3LcbdEqddE7JluQQ.mft
File: I1HFLSNz9aW3LcbdEqddE7JluQQ.mft (raw, json)
Hash identifier: qk4jgKvIBsT/UgTyhfLTLCxnFasHQOBffIHI8JTzvdw=
Subject key identifier: 89:5F:00:C7:75:0B:36:58:90:CE:24:26:A2:7E:95:9A:03:B4:A5:4B
Authority key identifier: 23:51:C5:2D:23:73:F5:A5:B7:2D:C6:DD:12:A7:5D:13:B2:65:B9:04
Certificate issuer: /CN=2351c52d2373f5a5b72dc6dd12a75d13b265b904
Certificate serial: 01975FEFE2B49958A5EF62E5B36A34120694
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I1HFLSNz9aW3LcbdEqddE7JluQQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/efece3-e530-46c8-b388-9873afa73e7e/1/I1HFLSNz9aW3LcbdEqddE7JluQQ.mft
Manifest number: 12A7
Signing time: Wed 11 Jun 2025 17:00:45 +0000
Manifest this update: Wed 11 Jun 2025 17:00:45 +0000
Manifest next update: Thu 12 Jun 2025 17:00:45 +0000
Files and hashes: 1: I1HFLSNz9aW3LcbdEqddE7JluQQ.crl (hash: 98RNUONvP0WUV0G3NqUHvRNPaT+bohSmGFpcLS2szJc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/efece3-e530-46c8-b388-9873afa73e7e/1/I1HFLSNz9aW3LcbdEqddE7JluQQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/efece3-e530-46c8-b388-9873afa73e7e/1/I1HFLSNz9aW3LcbdEqddE7JluQQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/I1HFLSNz9aW3LcbdEqddE7JluQQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Jun 2025 15:40:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5f:ef:e2:b4:99:58:a5:ef:62:e5:b3:6a:34:12:06:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2351c52d2373f5a5b72dc6dd12a75d13b265b904
Validity
Not Before: Jun 11 17:00:45 2025 GMT
Not After : Jun 12 17:00:45 2025 GMT
Subject: CN=895f00c7750b365890ce2426a27e959a03b4a54b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:c4:f5:4c:88:b3:d8:8b:ad:d4:f2:7d:6f:68:
dc:dc:68:ac:7e:64:f9:d7:10:83:b5:7e:a3:68:09:
29:94:50:f8:26:74:1a:bb:e8:da:f4:e2:95:1e:94:
11:58:3d:88:c6:2d:30:90:57:45:2e:93:96:f3:88:
28:1a:36:5e:fa:1d:2f:a7:e1:e2:6b:14:e5:d1:f4:
e2:31:90:3f:02:92:6a:2d:a7:a1:f3:99:2a:58:54:
40:0e:80:8c:f8:00:dc:17:cf:3e:83:d8:13:a4:9c:
39:83:f7:73:55:17:e1:07:30:03:97:07:95:76:c6:
a2:4b:cd:c8:f2:7d:c0:96:83:8f:20:17:84:c0:43:
83:f5:46:1a:8f:b3:b6:19:7b:62:fa:43:6f:5d:be:
73:e5:fc:4c:e2:af:bf:02:d6:e2:42:ab:04:bc:c1:
56:30:70:09:4f:0c:87:18:29:21:b1:2c:bc:19:71:
de:07:0b:16:31:f3:32:96:0c:3e:13:f2:4a:9c:f7:
3d:c8:18:76:60:36:94:60:ac:e0:85:7e:8c:1d:33:
6b:86:cf:f6:fb:de:7b:ff:61:00:06:e7:e7:3a:59:
45:a0:7e:d8:2c:87:0d:5c:bb:6f:41:05:a5:37:13:
de:f0:96:be:12:1d:c3:e4:fd:4a:47:35:3b:6a:3c:
94:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:5F:00:C7:75:0B:36:58:90:CE:24:26:A2:7E:95:9A:03:B4:A5:4B
X509v3 Authority Key Identifier:
keyid:23:51:C5:2D:23:73:F5:A5:B7:2D:C6:DD:12:A7:5D:13:B2:65:B9:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I1HFLSNz9aW3LcbdEqddE7JluQQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/efece3-e530-46c8-b388-9873afa73e7e/1/I1HFLSNz9aW3LcbdEqddE7JluQQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/efece3-e530-46c8-b388-9873afa73e7e/1/I1HFLSNz9aW3LcbdEqddE7JluQQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:de:f4:b5:78:0d:06:fd:79:8f:7a:4c:6e:9a:58:2b:4c:46:
3e:e2:4e:27:45:d5:a6:10:73:18:47:39:c1:c2:cd:4f:38:11:
f8:5a:08:99:8f:e5:72:9a:e2:f3:34:76:ce:53:7c:b3:70:90:
79:14:de:97:a1:12:64:98:4f:7c:16:d4:27:2e:6b:d6:7a:7f:
85:65:3f:37:ce:df:2d:9f:ed:77:c8:c5:6a:82:1b:c3:ee:38:
19:54:a0:30:af:16:00:91:fd:54:0e:3e:dc:75:ee:31:16:44:
76:c7:ca:ac:87:09:c8:29:cf:7b:31:c9:17:3a:8b:5d:e8:9c:
54:66:27:1d:9b:e0:4a:ae:10:74:69:3e:08:ec:37:42:33:06:
d7:08:3c:ce:fc:98:0a:a2:93:29:c8:b5:d9:14:1d:f1:9b:47:
3a:70:3a:ec:27:c4:cb:d5:40:ec:8f:52:4b:18:83:12:51:25:
bd:fa:9a:18:d4:64:5f:e2:d3:1a:41:67:71:27:73:29:39:83:
ac:12:15:0b:7e:b8:c2:86:38:74:9a:ed:6d:f7:ed:54:65:44:
0d:43:a4:33:27:ea:97:f2:57:9d:92:dc:15:2b:c4:3e:fd:be:
fd:20:f8:ee:6f:6e:ed:fd:2d:1c:01:00:ae:c6:6c:27:b6:ee:
2d:86:17:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 00:24:09 2025 by rpki-client