Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/b18080-e3c9-4114-a174-c3d6c7c8ba8a/1/I0AYtVE7d50uHjrBqGpZO92XTKc.mft
File: I0AYtVE7d50uHjrBqGpZO92XTKc.mft (raw, json)
Hash identifier: C3l+ac0qm4rD218W8l0EU0BrHN7W1LYkwqzzAk0jpuY=
Subject key identifier: 48:01:C4:EC:89:23:64:74:24:FD:A6:63:09:1A:CA:F8:CC:E7:78:80
Authority key identifier: 23:40:18:B5:51:3B:77:9D:2E:1E:3A:C1:A8:6A:59:3B:DD:97:4C:A7
Certificate issuer: /CN=234018b5513b779d2e1e3ac1a86a593bdd974ca7
Certificate serial: 019748FA4EC2771BE60671565CC499BEC286
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I0AYtVE7d50uHjrBqGpZO92XTKc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/b18080-e3c9-4114-a174-c3d6c7c8ba8a/1/I0AYtVE7d50uHjrBqGpZO92XTKc.mft
Manifest number: 015D
Signing time: Sat 07 Jun 2025 06:00:53 +0000
Manifest this update: Sat 07 Jun 2025 06:00:53 +0000
Manifest next update: Sun 08 Jun 2025 06:00:53 +0000
Files and hashes: 1: I0AYtVE7d50uHjrBqGpZO92XTKc.crl (hash: c1dmTuS/W1LpiCW4QYDxwyNXyu0Ifdm5PS2d8yCeHi8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/b18080-e3c9-4114-a174-c3d6c7c8ba8a/1/I0AYtVE7d50uHjrBqGpZO92XTKc.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/b18080-e3c9-4114-a174-c3d6c7c8ba8a/1/I0AYtVE7d50uHjrBqGpZO92XTKc.mft
rsync://rpki.ripe.net/repository/DEFAULT/I0AYtVE7d50uHjrBqGpZO92XTKc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:fa:4e:c2:77:1b:e6:06:71:56:5c:c4:99:be:c2:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=234018b5513b779d2e1e3ac1a86a593bdd974ca7
Validity
Not Before: Jun 7 06:00:53 2025 GMT
Not After : Jun 8 06:00:53 2025 GMT
Subject: CN=4801c4ec8923647424fda663091acaf8cce77880
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:f0:4f:c5:f8:a3:cd:77:39:e0:61:ed:6a:a8:
d5:74:8f:ac:22:28:44:5c:b2:01:6f:06:48:69:3f:
20:6f:c2:d1:b1:21:5a:1c:c6:cd:18:99:71:8a:b9:
78:ad:77:72:ce:ea:b9:ea:80:42:1a:70:55:70:d4:
e3:b5:12:89:92:87:bd:e1:b8:16:ec:de:f2:b7:a1:
e5:ba:f0:5b:39:95:d8:a1:38:32:7c:d5:b3:ea:91:
71:69:e8:fb:9d:b3:42:04:b3:55:1a:14:fe:04:24:
56:3f:6b:ee:73:77:4a:60:70:a1:2f:d8:07:08:00:
40:0d:2c:90:e7:fe:b6:ed:64:a4:3a:aa:23:9f:5f:
9d:e5:50:8c:da:ff:51:3e:2e:da:f6:27:85:63:3a:
a5:c1:de:15:20:b6:f8:09:3c:5f:95:3d:51:2e:f0:
ec:04:ca:f5:88:0a:91:e7:e0:30:d0:28:f6:b1:be:
58:9b:6c:70:96:ac:52:f0:36:55:ac:5b:54:a3:cb:
13:50:e8:4f:5c:52:2e:84:31:85:ff:d4:f7:b6:8a:
8e:55:5d:e0:88:7a:4d:03:e7:c5:ff:bf:cb:21:a3:
f5:a7:4f:f3:e1:87:f0:2a:f0:b0:46:16:3f:12:1c:
76:e6:5d:13:9b:ae:55:6b:9c:25:d5:f3:85:21:e5:
3f:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:01:C4:EC:89:23:64:74:24:FD:A6:63:09:1A:CA:F8:CC:E7:78:80
X509v3 Authority Key Identifier:
keyid:23:40:18:B5:51:3B:77:9D:2E:1E:3A:C1:A8:6A:59:3B:DD:97:4C:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I0AYtVE7d50uHjrBqGpZO92XTKc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/b18080-e3c9-4114-a174-c3d6c7c8ba8a/1/I0AYtVE7d50uHjrBqGpZO92XTKc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/b18080-e3c9-4114-a174-c3d6c7c8ba8a/1/I0AYtVE7d50uHjrBqGpZO92XTKc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:a8:87:19:92:36:8e:d7:5c:4a:33:c9:70:8e:1f:4a:c5:ea:
5e:4e:7e:83:7a:30:20:72:27:c3:03:c0:c1:43:82:89:02:eb:
97:a5:6b:f6:d3:2f:4b:2e:c0:30:88:d2:36:4d:39:81:73:ae:
67:00:24:92:da:b4:51:73:9c:a4:ea:73:a0:98:09:39:e0:29:
9c:8f:d7:f0:a2:21:20:0b:7a:2f:ae:ee:9d:28:0d:2f:41:83:
d4:a7:86:f2:24:b1:72:e4:cf:25:ed:e5:89:e4:81:10:cd:ef:
5a:c7:e1:ae:c9:37:dd:63:0d:94:dd:22:ca:43:6d:c4:fc:b4:
29:ba:e3:f0:a9:dd:5f:95:61:f6:8a:8f:00:9b:83:e1:28:58:
16:f3:00:51:bd:ad:f3:fb:d5:e4:2e:ae:83:da:bf:84:60:b8:
88:1b:dd:34:b9:fc:8b:d2:ed:cd:b7:dd:ec:e8:f9:13:50:98:
48:c6:b7:3a:f2:b5:1f:80:1e:a9:7e:45:35:f5:f9:c4:5b:b1:
e6:ea:db:4f:9b:de:44:77:c3:72:06:35:73:88:fa:15:bb:56:
d6:10:33:2b:4c:ec:9e:ef:8c:58:67:01:29:3c:22:6e:9d:e4:
36:56:70:32:53:57:46:29:fb:03:a5:15:2e:1a:55:97:03:fe:
8b:e0:92:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 14:18:02 2025 by rpki-client