Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/93e301-62f8-49f1-a0f7-7ed6ef73ff6d/1/i2nPHqZfCOKQoEFSd-ZeyVt4DXc.mft
File: i2nPHqZfCOKQoEFSd-ZeyVt4DXc.mft (raw, json)
Hash identifier: z7u6bRndRn+j60TXBKJ7qvPvOJFFtun1Q1v7ielDTNU=
Subject key identifier: B0:81:F6:79:15:A3:B3:54:F8:94:C6:AF:93:BF:CE:CA:50:5B:46:1D
Authority key identifier: 8B:69:CF:1E:A6:5F:08:E2:90:A0:41:52:77:E6:5E:C9:5B:78:0D:77
Certificate issuer: /CN=8b69cf1ea65f08e290a0415277e65ec95b780d77
Certificate serial: 01974A7AF78CDF9A9C51B69C59ED3D7ABBCE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2nPHqZfCOKQoEFSd-ZeyVt4DXc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/93e301-62f8-49f1-a0f7-7ed6ef73ff6d/1/i2nPHqZfCOKQoEFSd-ZeyVt4DXc.mft
Manifest number: 0CB3
Signing time: Sat 07 Jun 2025 13:01:02 +0000
Manifest this update: Sat 07 Jun 2025 13:01:02 +0000
Manifest next update: Sun 08 Jun 2025 13:01:02 +0000
Files and hashes: 1: i2nPHqZfCOKQoEFSd-ZeyVt4DXc.crl (hash: XmJeNI1gJKyx/WxSfVsBEJ+Z61vaZHYmb0w2d7GJbFc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/93e301-62f8-49f1-a0f7-7ed6ef73ff6d/1/i2nPHqZfCOKQoEFSd-ZeyVt4DXc.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/93e301-62f8-49f1-a0f7-7ed6ef73ff6d/1/i2nPHqZfCOKQoEFSd-ZeyVt4DXc.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2nPHqZfCOKQoEFSd-ZeyVt4DXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:7a:f7:8c:df:9a:9c:51:b6:9c:59:ed:3d:7a:bb:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b69cf1ea65f08e290a0415277e65ec95b780d77
Validity
Not Before: Jun 7 13:01:02 2025 GMT
Not After : Jun 8 13:01:02 2025 GMT
Subject: CN=b081f67915a3b354f894c6af93bfceca505b461d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:e4:62:be:7a:97:c5:77:39:30:a0:1d:3a:b7:
c4:c2:89:f3:94:13:17:dd:d9:5e:ad:92:70:e0:61:
55:ea:f0:3d:6f:4a:ff:55:12:09:52:cc:7f:17:3c:
15:0b:7f:cd:1f:fe:c7:5c:14:c1:9c:4b:a7:46:9b:
be:98:14:0f:5c:3f:10:24:14:57:71:b2:43:dc:a5:
44:34:81:2a:ca:02:63:3e:7c:f2:88:0c:6c:5f:29:
b4:a2:5a:3c:2a:76:10:0b:8d:78:61:b9:31:6d:2a:
e1:a8:d6:a3:68:75:f0:e8:a8:4c:60:3d:5a:66:a6:
67:b8:e9:10:87:4d:64:0b:16:45:77:56:09:f2:69:
8f:08:c3:cc:ec:30:68:cd:51:dd:59:0e:32:61:67:
86:7b:46:a1:49:1e:e0:6e:83:d5:5c:31:0a:ad:d9:
02:9a:fd:bf:d7:ce:a2:18:c9:c0:0f:b7:85:2b:14:
48:2a:96:55:8c:f1:0b:7e:4f:a4:d9:c3:d9:9c:73:
e7:73:24:28:84:ac:33:6c:a5:e6:ba:17:55:d2:3f:
92:08:80:fe:2e:1f:03:d2:0e:76:ea:bb:6e:1d:40:
38:66:90:cf:40:c0:26:4c:dd:4a:b2:2f:84:6c:2f:
68:75:44:d5:39:94:14:ca:fd:06:a0:40:b9:d8:37:
fc:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:81:F6:79:15:A3:B3:54:F8:94:C6:AF:93:BF:CE:CA:50:5B:46:1D
X509v3 Authority Key Identifier:
keyid:8B:69:CF:1E:A6:5F:08:E2:90:A0:41:52:77:E6:5E:C9:5B:78:0D:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2nPHqZfCOKQoEFSd-ZeyVt4DXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/93e301-62f8-49f1-a0f7-7ed6ef73ff6d/1/i2nPHqZfCOKQoEFSd-ZeyVt4DXc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/93e301-62f8-49f1-a0f7-7ed6ef73ff6d/1/i2nPHqZfCOKQoEFSd-ZeyVt4DXc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:47:a1:c4:37:4a:3c:fa:4c:5a:b3:7f:cd:5a:a6:b9:10:b0:
99:ec:19:b5:3a:0b:5c:a5:23:0d:00:34:c5:0b:2f:05:1d:94:
73:f0:4f:49:3b:d3:2e:be:c3:4a:0a:d2:40:19:86:2e:47:5d:
9e:1b:10:9a:b9:b3:9d:ce:6f:57:b3:4c:43:a5:71:47:c5:e9:
89:25:d0:e7:4f:4e:5c:0d:9a:8b:8a:eb:d1:85:32:2d:bc:4c:
6e:7a:d6:61:f1:4c:c2:c1:f0:b2:3f:ea:96:97:4a:78:60:59:
d8:77:11:bf:80:e5:0d:9c:00:f6:c6:b2:00:ea:a7:bc:c4:79:
17:92:aa:1f:21:ab:fd:93:79:87:80:bf:a9:89:32:db:b8:c3:
34:51:84:62:92:4f:4c:e4:8e:0f:75:96:78:2b:af:50:f6:7e:
18:8b:c1:db:86:d3:7d:d0:b6:1d:90:b5:6c:c3:4b:5e:b4:89:
67:d3:2c:63:a3:86:ef:b1:5b:0c:90:00:83:7a:0e:63:c1:a9:
7e:1a:52:de:ce:5e:7c:3c:85:ef:e8:21:fe:49:b0:9b:7a:c1:
ae:d4:6b:19:5e:a3:25:c4:f5:10:c1:1c:3e:50:9a:7f:56:62:
a7:44:97:bb:85:a9:a2:27:c8:bd:0b:7b:9e:6e:5a:66:4a:2d:
e7:ba:39:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 16:39:14 2025 by rpki-client