Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/993364-d85f-4007-96ec-49ac28142318/1/iXlCagvNkDpVJkksxa97TysO2wQ.mft
File: iXlCagvNkDpVJkksxa97TysO2wQ.mft (raw, json)
Hash identifier: EKmJYq3zNR3PFlJ8tQexa1NimVkBBf+OdxW6t8wuvU4=
Subject key identifier: A5:79:9D:0B:18:A3:7B:81:F6:5E:BA:48:F8:5C:4A:39:AD:5B:E8:1F
Authority key identifier: 89:79:42:6A:0B:CD:90:3A:55:26:49:2C:C5:AF:7B:4F:2B:0E:DB:04
Certificate issuer: /CN=8979426a0bcd903a5526492cc5af7b4f2b0edb04
Certificate serial: 0197669711547153B943AB2EB5C3E5D8277B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iXlCagvNkDpVJkksxa97TysO2wQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/993364-d85f-4007-96ec-49ac28142318/1/iXlCagvNkDpVJkksxa97TysO2wQ.mft
Manifest number: 050D
Signing time: Fri 13 Jun 2025 00:01:05 +0000
Manifest this update: Fri 13 Jun 2025 00:01:05 +0000
Manifest next update: Sat 14 Jun 2025 00:01:05 +0000
Files and hashes: 1: iXlCagvNkDpVJkksxa97TysO2wQ.crl (hash: c/i+fGPRC3q15CuCo4OzIVFnOR0O+TjtHeyFp2i3d8w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/993364-d85f-4007-96ec-49ac28142318/1/iXlCagvNkDpVJkksxa97TysO2wQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/993364-d85f-4007-96ec-49ac28142318/1/iXlCagvNkDpVJkksxa97TysO2wQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/iXlCagvNkDpVJkksxa97TysO2wQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Jun 2025 22:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:66:97:11:54:71:53:b9:43:ab:2e:b5:c3:e5:d8:27:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8979426a0bcd903a5526492cc5af7b4f2b0edb04
Validity
Not Before: Jun 13 00:01:05 2025 GMT
Not After : Jun 14 00:01:05 2025 GMT
Subject: CN=a5799d0b18a37b81f65eba48f85c4a39ad5be81f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:e5:24:54:51:0e:ff:9c:6b:d1:ac:e1:1e:df:
ed:99:63:0c:89:a0:d7:0f:6c:22:b0:6a:05:c4:6e:
0e:0a:54:ea:cd:8d:6d:a4:48:6c:00:93:ef:0d:e9:
81:7e:5d:76:2b:37:24:4b:e5:b3:9d:05:28:4a:74:
a0:0a:8a:ce:d0:fd:be:88:35:9f:48:b9:c2:ca:15:
73:a6:95:ce:74:3c:c6:3b:e8:6d:17:3f:90:1a:51:
b8:1b:e3:c5:5e:5e:39:02:20:f5:ec:ad:b0:49:a3:
9a:da:b5:35:53:a9:92:47:49:a9:40:fb:7f:4a:67:
a2:79:42:3a:9e:7d:f3:c5:84:8b:7d:58:6a:c8:2c:
4e:a8:1c:8e:61:29:1e:8f:34:c3:bf:3b:63:6f:62:
05:f4:58:d5:f1:c3:dd:d2:1e:0c:39:cd:20:a8:b5:
43:be:a0:27:1d:96:51:42:48:9e:4e:82:ad:ff:1b:
61:27:68:7b:cf:b9:94:e1:3e:b3:53:f6:40:f1:74:
0b:bc:ab:60:b2:ae:ec:4b:40:7b:45:23:c7:14:28:
dd:b8:79:bb:67:84:10:27:82:64:44:35:17:cf:3f:
82:c8:50:97:00:3b:9f:13:fa:ad:26:9a:0d:0b:81:
23:96:e3:71:f5:6e:16:37:7d:cf:c5:68:75:25:e7:
7d:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:79:9D:0B:18:A3:7B:81:F6:5E:BA:48:F8:5C:4A:39:AD:5B:E8:1F
X509v3 Authority Key Identifier:
keyid:89:79:42:6A:0B:CD:90:3A:55:26:49:2C:C5:AF:7B:4F:2B:0E:DB:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iXlCagvNkDpVJkksxa97TysO2wQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/993364-d85f-4007-96ec-49ac28142318/1/iXlCagvNkDpVJkksxa97TysO2wQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/993364-d85f-4007-96ec-49ac28142318/1/iXlCagvNkDpVJkksxa97TysO2wQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:1f:8d:8a:7d:f3:62:21:f6:3f:6e:01:5b:f2:5f:a2:3a:14:
f7:9f:f5:9f:ed:ac:41:a9:ed:8d:2c:56:dd:29:41:64:3b:f7:
fc:b6:cc:59:55:5d:35:5b:55:5e:64:f4:21:d5:91:14:61:2b:
5e:9f:4a:ad:43:37:28:c4:02:e0:9d:d5:d6:7b:c5:ed:a0:14:
3d:9e:36:68:82:4f:a5:c5:75:29:e2:95:0a:e6:3c:41:b1:0f:
f4:39:7a:7b:56:48:f5:46:a9:25:38:58:5f:74:52:7d:21:d7:
0d:d8:9c:4a:8e:9f:4f:42:a3:92:64:76:0b:c0:d7:21:c2:ef:
da:ce:91:e0:53:12:90:eb:89:af:62:3a:84:3e:43:5f:55:9f:
c5:ea:4d:d4:53:7f:6d:8b:fe:cd:f5:62:98:7e:ea:26:ff:78:
53:5c:86:c6:2c:4c:f7:46:83:ee:fa:54:f8:20:86:e4:d5:54:
62:b3:29:16:35:b0:af:da:13:ee:65:bb:62:cb:27:1d:67:65:
55:bb:b2:77:6d:f3:e6:95:80:ff:89:83:f1:71:ca:34:b0:ee:
ec:ce:37:97:d0:42:65:b6:0c:b4:d1:bc:41:b9:0b:9f:7e:a9:
08:3f:32:5c:16:00:e4:f0:0b:5e:4f:31:30:c8:b1:7b:1b:7c:
1d:34:f1:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 02:28:25 2025 by rpki-client