Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/eddbcc-22e3-4cda-910a-6f4421b9d525/1/IV-8e-5GcW9jbLfZU7Y-vjS37uk.mft
File: IV-8e-5GcW9jbLfZU7Y-vjS37uk.mft (raw, json)
Hash identifier: h4yFzfgvMK/PtgMGZRXNs/pakyopcYw/C92uPvL04Z4=
Subject key identifier: BB:50:BF:F5:A1:21:2C:71:25:68:17:62:AD:16:F5:56:C1:B4:6E:0E
Authority key identifier: 21:5F:BC:7B:EE:46:71:6F:63:6C:B7:D9:53:B6:3E:BE:34:B7:EE:E9
Certificate issuer: /CN=215fbc7bee46716f636cb7d953b63ebe34b7eee9
Certificate serial: 0197470B7E35E828882587C4EF163817EC39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IV-8e-5GcW9jbLfZU7Y-vjS37uk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/eddbcc-22e3-4cda-910a-6f4421b9d525/1/IV-8e-5GcW9jbLfZU7Y-vjS37uk.mft
Manifest number: 04E7
Signing time: Fri 06 Jun 2025 21:00:24 +0000
Manifest this update: Fri 06 Jun 2025 21:00:24 +0000
Manifest next update: Sat 07 Jun 2025 21:00:24 +0000
Files and hashes: 1: IV-8e-5GcW9jbLfZU7Y-vjS37uk.crl (hash: 1hbBjUftrkMSokgGlx0Q9pY3mvlAyuyARNdt1WYzy2k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/eddbcc-22e3-4cda-910a-6f4421b9d525/1/IV-8e-5GcW9jbLfZU7Y-vjS37uk.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/eddbcc-22e3-4cda-910a-6f4421b9d525/1/IV-8e-5GcW9jbLfZU7Y-vjS37uk.mft
rsync://rpki.ripe.net/repository/DEFAULT/IV-8e-5GcW9jbLfZU7Y-vjS37uk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:0b:7e:35:e8:28:88:25:87:c4:ef:16:38:17:ec:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=215fbc7bee46716f636cb7d953b63ebe34b7eee9
Validity
Not Before: Jun 6 21:00:24 2025 GMT
Not After : Jun 7 21:00:24 2025 GMT
Subject: CN=bb50bff5a1212c7125681762ad16f556c1b46e0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:86:ef:d4:2a:63:8d:46:d0:5e:c3:55:7f:b5:
d2:f2:a6:f8:fb:43:e6:3a:10:e6:f7:78:7f:a8:d6:
ed:19:cb:f8:ba:5b:3e:0e:df:c6:93:a7:f9:e0:c7:
c2:fe:a0:8b:c2:a4:d2:05:ed:e1:7d:a5:8a:3b:62:
b1:e0:73:2a:20:fd:80:47:42:e8:ae:03:93:7a:8b:
c5:3d:60:23:19:4d:25:8c:2d:d9:9b:8a:0e:ed:15:
0d:c2:0b:d2:5c:c0:05:1e:2c:18:05:0e:2e:cc:ab:
d4:c0:cf:a3:d7:67:5d:e8:1a:e3:61:92:23:6f:1d:
a8:be:93:8b:55:24:5e:a3:3c:46:94:01:34:ee:13:
b2:f8:bf:7a:fa:30:c6:da:b2:cb:a0:d7:69:e8:04:
6b:15:23:37:e6:66:17:d3:c7:f8:92:88:45:26:12:
70:ce:91:91:ad:ce:0c:02:a1:a8:f9:96:d6:c6:25:
c3:b3:f4:30:d7:e0:94:73:a5:a6:4f:ec:86:9f:dd:
3b:04:59:79:43:22:59:a0:69:42:a0:ce:93:18:38:
14:6b:03:10:ab:9c:6c:c1:34:35:36:2f:5c:58:6e:
81:bb:f4:7a:7c:20:85:d2:43:d0:1a:49:c0:b0:ed:
80:83:ee:8c:73:f4:c8:cf:e8:b3:5a:d3:8b:6b:57:
3c:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:50:BF:F5:A1:21:2C:71:25:68:17:62:AD:16:F5:56:C1:B4:6E:0E
X509v3 Authority Key Identifier:
keyid:21:5F:BC:7B:EE:46:71:6F:63:6C:B7:D9:53:B6:3E:BE:34:B7:EE:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IV-8e-5GcW9jbLfZU7Y-vjS37uk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/eddbcc-22e3-4cda-910a-6f4421b9d525/1/IV-8e-5GcW9jbLfZU7Y-vjS37uk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/eddbcc-22e3-4cda-910a-6f4421b9d525/1/IV-8e-5GcW9jbLfZU7Y-vjS37uk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:e3:ec:33:1f:68:b7:97:aa:75:d3:81:de:b6:be:85:ff:7a:
27:66:c6:23:3c:b3:4f:98:47:f7:dd:18:3d:49:65:ca:76:1d:
b5:54:5d:6c:91:5d:08:02:7e:f5:20:84:70:31:87:b3:46:7c:
0a:0f:7a:ce:7c:17:e8:4b:7d:27:e2:27:e2:5f:7f:40:17:79:
91:42:9e:ef:f7:01:ef:8a:1b:9f:40:d4:7b:5b:76:a3:67:1e:
84:bc:9d:62:5f:c0:8a:fc:b3:dd:c6:cf:62:44:98:08:47:4a:
b2:38:e3:25:b0:03:07:9c:0b:b1:58:51:06:f7:fc:e5:02:74:
e8:0d:89:02:bc:60:5f:df:37:77:bd:ea:a6:ad:94:72:02:11:
e0:2a:76:61:c7:78:e8:e3:87:e3:a8:77:13:b2:e5:45:f7:e0:
eb:8a:01:29:12:8f:54:d7:c3:b2:cc:a4:9b:3e:94:f0:5b:03:
78:75:c6:ee:fe:5a:ee:bd:0f:8a:2c:a9:09:36:2e:43:7e:03:
50:62:cf:13:8d:62:f8:91:00:22:0a:dd:49:ff:e2:51:98:09:
75:ee:31:35:d5:e7:23:b0:60:4a:fd:e2:0b:f5:ec:40:fd:fa:
16:90:3d:a4:01:0c:7d:ec:a8:ff:fe:7c:90:01:90:f1:55:3d:
9a:6c:99:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 01:17:46 2025 by rpki-client