Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/c502ba-d843-4bfd-989d-66d9e861b478/1/IvVT_vXBhZ2VIwCtPvtRHliv2gE.mft
File: IvVT_vXBhZ2VIwCtPvtRHliv2gE.mft (raw, json)
Hash identifier: wvb0/gTZxg/kKyMfthiYYS7XqnNLJthPQZqj6LfG6yM=
Subject key identifier: 35:F4:7E:97:15:E2:39:FE:08:63:53:BF:04:39:7E:DD:3D:2E:DF:0F
Authority key identifier: 22:F5:53:FE:F5:C1:85:9D:95:23:00:AD:3E:FB:51:1E:58:AF:DA:01
Certificate issuer: /CN=22f553fef5c1859d952300ad3efb511e58afda01
Certificate serial: 01974931288DF69B7FDEE540933CFB3FE261
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IvVT_vXBhZ2VIwCtPvtRHliv2gE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/c502ba-d843-4bfd-989d-66d9e861b478/1/IvVT_vXBhZ2VIwCtPvtRHliv2gE.mft
Manifest number: 1577
Signing time: Sat 07 Jun 2025 07:00:47 +0000
Manifest this update: Sat 07 Jun 2025 07:00:47 +0000
Manifest next update: Sun 08 Jun 2025 07:00:47 +0000
Files and hashes: 1: IvVT_vXBhZ2VIwCtPvtRHliv2gE.crl (hash: reGwrseUtKeEhtpHVjNkjeu+e9vVKkhmgbomDtALqSU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/c502ba-d843-4bfd-989d-66d9e861b478/1/IvVT_vXBhZ2VIwCtPvtRHliv2gE.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/c502ba-d843-4bfd-989d-66d9e861b478/1/IvVT_vXBhZ2VIwCtPvtRHliv2gE.mft
rsync://rpki.ripe.net/repository/DEFAULT/IvVT_vXBhZ2VIwCtPvtRHliv2gE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 00:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:31:28:8d:f6:9b:7f:de:e5:40:93:3c:fb:3f:e2:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22f553fef5c1859d952300ad3efb511e58afda01
Validity
Not Before: Jun 7 07:00:47 2025 GMT
Not After : Jun 8 07:00:47 2025 GMT
Subject: CN=35f47e9715e239fe086353bf04397edd3d2edf0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:c0:8b:ca:ab:fb:56:86:e8:70:64:f6:78:4f:
80:a4:83:39:f7:7a:a5:24:49:2a:35:d6:13:25:e2:
14:bd:de:d4:36:dc:c6:29:ce:7b:c7:2a:7c:37:da:
b8:3b:57:75:c9:20:84:44:08:d9:8b:a8:f5:09:2d:
01:f8:f1:76:2e:89:60:6c:ac:ea:4e:a2:37:ca:20:
a6:32:74:4d:64:5c:14:25:bf:25:c9:12:6e:b1:65:
4f:c9:2d:a2:ad:93:c2:fb:dd:f6:a9:41:f3:19:8e:
99:b0:64:20:04:36:14:e3:d0:96:e1:78:e6:10:6a:
26:50:e5:f9:18:75:28:d3:a7:93:ce:1f:6f:8b:52:
92:b7:01:ec:f9:86:f7:ac:2b:2d:49:9c:d7:59:12:
50:fe:e9:68:9f:3b:f4:78:e0:10:9d:e5:bf:7e:53:
ae:3d:25:fb:b5:2e:81:b0:d5:2c:fd:d1:98:51:07:
fe:ae:80:43:f4:f1:e1:70:6f:6e:44:1d:1b:dd:04:
f3:99:a0:16:2a:21:c4:70:da:b0:e1:fd:ba:de:63:
23:8b:5b:7a:a0:c2:c6:f8:1e:90:f7:a5:d1:74:f8:
80:3f:30:61:2f:9a:d0:d5:78:5d:a0:8c:f7:0a:9f:
f1:97:80:30:7f:89:19:22:46:08:df:dc:ee:ac:4e:
2b:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:F4:7E:97:15:E2:39:FE:08:63:53:BF:04:39:7E:DD:3D:2E:DF:0F
X509v3 Authority Key Identifier:
keyid:22:F5:53:FE:F5:C1:85:9D:95:23:00:AD:3E:FB:51:1E:58:AF:DA:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IvVT_vXBhZ2VIwCtPvtRHliv2gE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/c502ba-d843-4bfd-989d-66d9e861b478/1/IvVT_vXBhZ2VIwCtPvtRHliv2gE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/c502ba-d843-4bfd-989d-66d9e861b478/1/IvVT_vXBhZ2VIwCtPvtRHliv2gE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:36:f0:24:59:7f:4e:eb:cb:74:cc:3b:b3:8b:40:79:e8:f3:
3f:16:54:30:1b:26:7b:1b:d3:d1:56:69:96:91:23:d2:61:c8:
14:0a:22:b7:6f:6e:09:6a:96:e3:39:91:a4:f6:c0:a3:47:8b:
5e:d2:ae:ba:a8:78:9a:92:69:9a:f1:44:58:a3:d9:c6:89:46:
3e:b2:9f:3b:7c:b2:f6:12:60:62:42:93:d7:6b:b6:e2:60:c8:
f3:4a:b8:fc:87:6f:1d:a1:34:a2:f0:7a:0c:61:ca:49:5a:0c:
42:9d:ea:3f:fb:80:17:92:3b:c0:b4:c6:7e:f4:5a:54:5d:e4:
30:42:d1:ce:9a:b9:0a:7e:a5:01:c1:03:35:d2:61:0d:04:98:
57:26:c5:1b:fa:38:91:e4:bd:e2:eb:a6:26:c1:6e:91:09:f4:
f9:6e:f1:2b:5c:6b:14:2d:97:04:1f:28:45:43:5f:a0:47:17:
1a:bf:ea:16:fa:d1:5e:3a:7f:df:df:3d:6f:5a:32:1f:e3:e8:
5b:b7:e0:88:27:71:da:39:fb:e1:12:cc:72:4b:ac:f0:7a:27:
fb:24:57:ef:40:ce:e4:4a:ea:a4:31:a5:0c:68:03:20:30:a3:
aa:a1:8a:a5:21:bf:c5:31:f6:de:75:73:14:f7:b8:b1:71:cb:
8a:c1:58:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 09:31:34 2025 by rpki-client