Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/5f2167-6a5d-4d41-8297-c2e9d17d8d4a/1/i4-7JMKLohFyEvDTJzo8KkwnzBI.mft
File: i4-7JMKLohFyEvDTJzo8KkwnzBI.mft (raw, json)
Hash identifier: kYoBCOxd1dZVygCfY7fP0YCYmNOekvn9HHi6z7AiQjI=
Subject key identifier: 83:92:6D:70:5F:9E:AA:A9:2B:2A:FB:01:5B:33:2A:C6:6F:D2:61:6A
Authority key identifier: 8B:8F:BB:24:C2:8B:A2:11:72:12:F0:D3:27:3A:3C:2A:4C:27:CC:12
Certificate issuer: /CN=8b8fbb24c28ba2117212f0d3273a3c2a4c27cc12
Certificate serial: 0199228CB90595EB2D9FE1E62FC130DD7F8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i4-7JMKLohFyEvDTJzo8KkwnzBI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/5f2167-6a5d-4d41-8297-c2e9d17d8d4a/1/i4-7JMKLohFyEvDTJzo8KkwnzBI.mft
Manifest number: 0BEE
Signing time: Sun 07 Sep 2025 05:01:11 +0000
Manifest this update: Sun 07 Sep 2025 05:01:11 +0000
Manifest next update: Mon 08 Sep 2025 05:01:11 +0000
Files and hashes: 1: i4-7JMKLohFyEvDTJzo8KkwnzBI.crl (hash: oaOd7dduJfw4R0Z/K4TYRKhaLPsEyU37k43iH7l1VUc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/5f2167-6a5d-4d41-8297-c2e9d17d8d4a/1/i4-7JMKLohFyEvDTJzo8KkwnzBI.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/5f2167-6a5d-4d41-8297-c2e9d17d8d4a/1/i4-7JMKLohFyEvDTJzo8KkwnzBI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i4-7JMKLohFyEvDTJzo8KkwnzBI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:8c:b9:05:95:eb:2d:9f:e1:e6:2f:c1:30:dd:7f:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b8fbb24c28ba2117212f0d3273a3c2a4c27cc12
Validity
Not Before: Sep 7 05:01:11 2025 GMT
Not After : Sep 8 05:01:11 2025 GMT
Subject: CN=83926d705f9eaaa92b2afb015b332ac66fd2616a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:9d:bd:c8:53:f4:da:bb:bc:05:74:7e:16:83:
7f:95:8c:40:75:bc:7e:cc:7a:03:8a:a5:d5:62:fd:
7b:9b:8c:13:f9:6d:cf:7a:6a:91:25:c2:bf:6d:6c:
35:9e:fd:8f:dd:88:53:c2:50:f8:7e:06:03:0e:1a:
73:f2:4e:9b:1e:b5:a1:49:16:a7:ca:7f:32:60:e8:
87:3d:42:b1:5f:49:c5:c4:71:4d:23:65:49:de:b7:
0e:a6:9e:7c:2f:7c:e2:58:cd:bb:f6:c0:0c:fd:c7:
71:8b:b5:60:06:cd:d8:a5:18:92:e1:45:b0:e5:67:
c3:be:09:07:91:f7:c3:f5:ad:78:df:ac:c4:f6:49:
12:9b:c9:3f:99:ce:f3:1b:35:ed:23:75:d9:65:d7:
0c:29:05:18:1c:68:fc:a4:64:cd:58:b5:18:86:42:
61:b8:85:b8:0e:28:45:83:32:11:3f:c8:27:1b:ad:
f6:36:01:19:91:0c:09:f8:0c:59:91:1f:9c:43:65:
89:a7:95:d1:1c:a7:21:c3:34:e0:af:cb:34:8f:d2:
dd:bf:49:21:08:a7:f2:84:7f:37:06:d6:3a:5d:0d:
f8:61:6d:f8:d9:e8:6a:bb:77:30:5b:53:66:df:54:
8b:7e:8e:52:ac:3d:43:16:c4:cc:ba:0e:d9:9d:63:
e9:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:92:6D:70:5F:9E:AA:A9:2B:2A:FB:01:5B:33:2A:C6:6F:D2:61:6A
X509v3 Authority Key Identifier:
keyid:8B:8F:BB:24:C2:8B:A2:11:72:12:F0:D3:27:3A:3C:2A:4C:27:CC:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i4-7JMKLohFyEvDTJzo8KkwnzBI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/5f2167-6a5d-4d41-8297-c2e9d17d8d4a/1/i4-7JMKLohFyEvDTJzo8KkwnzBI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/5f2167-6a5d-4d41-8297-c2e9d17d8d4a/1/i4-7JMKLohFyEvDTJzo8KkwnzBI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:e6:b8:00:03:21:bc:a3:22:7d:cb:03:a8:9b:b4:f4:9c:a4:
d9:64:37:4c:08:99:f5:9b:2f:7b:10:4d:fc:78:e6:d4:e6:52:
52:d6:2f:23:c9:4d:43:35:e6:d0:27:8c:98:f2:80:ff:42:73:
bc:c3:44:a2:df:26:eb:fa:be:f4:9d:d5:79:79:b5:56:ef:4a:
5d:16:35:fd:74:81:84:45:37:61:4d:a8:7a:05:a3:75:49:dc:
08:e8:2c:0a:2f:40:a3:f1:6d:05:a8:8b:72:f2:b1:0e:a0:71:
3e:4c:0b:3c:0e:78:cb:5c:65:7f:36:34:3a:1c:03:a1:f7:eb:
bb:23:73:3c:14:c8:8b:54:21:ac:b8:e6:ec:b3:64:37:0d:79:
08:27:b8:25:2c:59:f2:cb:67:95:d6:98:cb:5b:30:8e:99:6a:
ea:95:e8:b6:33:3b:7a:d3:0f:be:e7:27:90:e5:d0:5d:7d:2c:
1c:aa:69:80:ca:4f:11:08:50:33:91:3c:bc:e8:74:43:e1:58:
25:d7:ca:de:cf:b4:db:7f:30:25:38:6b:f4:db:ef:b7:55:aa:
30:65:b5:bf:73:23:c1:fa:d5:59:1f:7d:0f:fb:a2:6b:f3:38:
8e:b3:66:fb:eb:01:44:3d:93:44:31:3d:c7:1b:53:5c:a5:f0:
2f:2c:f4:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:12:12 2025 by rpki-client