Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/5f2167-6a5d-4d41-8297-c2e9d17d8d4a/1/i4-7JMKLohFyEvDTJzo8KkwnzBI.mft
File: i4-7JMKLohFyEvDTJzo8KkwnzBI.mft (raw, json)
Hash identifier: ok9MlMPjinBQzCE5kWbOPnhkZjOSUcFUa5S0zaOn2oU=
Subject key identifier: 53:50:40:7A:CC:C4:D7:94:9F:1C:23:E8:64:1B:A9:4D:A2:5F:7A:A5
Authority key identifier: 8B:8F:BB:24:C2:8B:A2:11:72:12:F0:D3:27:3A:3C:2A:4C:27:CC:12
Certificate issuer: /CN=8b8fbb24c28ba2117212f0d3273a3c2a4c27cc12
Certificate serial: 019754FEB2A3475E728B23DDEA2A15CE755D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i4-7JMKLohFyEvDTJzo8KkwnzBI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/5f2167-6a5d-4d41-8297-c2e9d17d8d4a/1/i4-7JMKLohFyEvDTJzo8KkwnzBI.mft
Manifest number: 0AFF
Signing time: Mon 09 Jun 2025 14:01:07 +0000
Manifest this update: Mon 09 Jun 2025 14:01:07 +0000
Manifest next update: Tue 10 Jun 2025 14:01:07 +0000
Files and hashes: 1: i4-7JMKLohFyEvDTJzo8KkwnzBI.crl (hash: RT6cKe4TQcmSqmEy9gFKsKh+PQYYQMYZNMYqtomRV3w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/5f2167-6a5d-4d41-8297-c2e9d17d8d4a/1/i4-7JMKLohFyEvDTJzo8KkwnzBI.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/5f2167-6a5d-4d41-8297-c2e9d17d8d4a/1/i4-7JMKLohFyEvDTJzo8KkwnzBI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i4-7JMKLohFyEvDTJzo8KkwnzBI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Jun 2025 14:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:54:fe:b2:a3:47:5e:72:8b:23:dd:ea:2a:15:ce:75:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b8fbb24c28ba2117212f0d3273a3c2a4c27cc12
Validity
Not Before: Jun 9 14:01:07 2025 GMT
Not After : Jun 10 14:01:07 2025 GMT
Subject: CN=5350407accc4d7949f1c23e8641ba94da25f7aa5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:86:ae:f9:8e:aa:0b:6a:a9:18:48:92:56:b9:
47:c8:0f:24:8a:20:c2:97:1a:a7:cd:26:44:6c:f3:
c9:3f:d4:f7:6e:dd:db:61:40:08:69:aa:38:0c:61:
da:56:65:90:93:e7:0d:b6:38:dd:fa:4c:5b:83:f5:
d1:2e:9b:6c:6b:eb:a8:2e:2f:90:33:94:f6:25:3f:
ca:61:f3:46:f2:3a:38:ea:f7:0c:0e:37:25:87:1a:
ea:f3:77:69:f5:d8:d9:7a:7a:63:25:e5:9a:63:88:
b1:64:9b:18:14:8e:9d:4c:aa:46:e1:03:91:42:0f:
11:6d:07:cf:ee:e1:b2:af:5e:a6:8e:af:b1:0a:d1:
5c:86:35:10:6f:f5:9f:38:28:8b:37:bb:29:62:ce:
11:b1:26:40:4e:78:f8:ef:cc:ec:a4:d6:08:3c:84:
ef:8c:25:e5:e7:2a:6a:0b:f3:5c:cf:52:b7:8f:15:
1e:f4:2a:65:7a:20:7e:5d:3b:f2:2b:c2:89:9d:71:
b1:e7:0a:e6:12:62:53:c0:e1:6e:03:c3:28:ed:3d:
1d:7f:77:7e:28:60:6c:e2:2d:df:f9:87:ba:fe:ce:
64:28:df:c8:b4:e4:b0:aa:3c:55:5f:3f:8a:5d:40:
3a:3f:7e:a8:c4:7f:79:de:e5:2d:0d:d0:95:0b:a9:
eb:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:50:40:7A:CC:C4:D7:94:9F:1C:23:E8:64:1B:A9:4D:A2:5F:7A:A5
X509v3 Authority Key Identifier:
keyid:8B:8F:BB:24:C2:8B:A2:11:72:12:F0:D3:27:3A:3C:2A:4C:27:CC:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i4-7JMKLohFyEvDTJzo8KkwnzBI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/5f2167-6a5d-4d41-8297-c2e9d17d8d4a/1/i4-7JMKLohFyEvDTJzo8KkwnzBI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/5f2167-6a5d-4d41-8297-c2e9d17d8d4a/1/i4-7JMKLohFyEvDTJzo8KkwnzBI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:43:9f:94:b5:81:be:b5:f6:31:7a:cf:0b:39:de:97:c2:22:
4c:2b:f5:8b:12:6f:b0:5e:2f:f0:0b:2b:83:22:50:12:50:2e:
d8:e6:5f:e3:84:0d:10:cf:4e:89:0a:e7:cd:6d:ea:8f:3a:9e:
5f:c1:ff:2d:7f:d8:a1:fc:15:e7:5a:a8:e2:3c:9b:b0:61:b8:
8f:fa:25:2e:db:5c:b9:a6:2f:e5:7c:b8:e8:53:86:d2:65:04:
25:59:44:90:0a:89:05:a9:bc:b2:6c:22:43:2f:4b:0a:74:a8:
ce:f3:32:0e:46:2c:c9:8d:66:fb:2a:31:f6:25:af:15:b9:e5:
02:60:43:a2:f5:b3:0d:07:60:e0:fa:41:53:be:54:b5:6c:f8:
3a:bc:21:c7:2e:90:68:3d:4a:d0:63:b7:ce:a6:1f:58:97:21:
30:cd:d2:bb:8d:f5:48:88:e5:a4:8a:a2:d6:2d:91:c1:b5:88:
20:57:c5:c9:21:6f:30:db:d0:57:87:e4:84:49:a6:67:2e:d9:
6a:20:5a:03:f3:41:4d:c5:a8:e5:c0:05:e4:72:ac:d7:8d:30:
bf:20:67:5d:85:2b:65:0b:0f:c0:f9:ce:3d:75:81:ba:d3:05:
6a:ad:84:7e:e9:bc:22:59:fc:1d:f3:83:97:a5:dc:fb:c1:60:
bf:b3:06:d0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdU/rKjR15yiyPd6ioVznVdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhiOGZiYjI0YzI4YmEyMTE3MjEyZjBkMzI3M2EzYzJhNGMy
N2NjMTIwHhcNMjUwNjA5MTQwMTA3WhcNMjUwNjEwMTQwMTA3WjAzMTEwLwYDVQQD
Eyg1MzUwNDA3YWNjYzRkNzk0OWYxYzIzZTg2NDFiYTk0ZGEyNWY3YWE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp4au+Y6qC2qpGEiSVrlHyA8kiiDC
lxqnzSZEbPPJP9T3bt3bYUAIaao4DGHaVmWQk+cNtjjd+kxbg/XRLptsa+uoLi+Q
M5T2JT/KYfNG8jo46vcMDjclhxrq83dp9djZenpjJeWaY4ixZJsYFI6dTKpG4QOR
Qg8RbQfP7uGyr16mjq+xCtFchjUQb/WfOCiLN7spYs4RsSZATnj478zspNYIPITv
jCXl5ypqC/Ncz1K3jxUe9CpleiB+XTvyK8KJnXGx5wrmEmJTwOFuA8Mo7T0df3d+
KGBs4i3f+Ye6/s5kKN/ItOSwqjxVXz+KXUA6P36oxH953uUtDdCVC6nr1QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFNQQHrMxNeUnxwj6GQbqU2iX3qlMB8GA1UdIwQY
MBaAFIuPuyTCi6IRchLw0yc6PCpMJ8wSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaTQtN0pNS0xvaEZ5RXZEVEp6bzhLa3duekJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC81ZjIxNjctNmE1ZC00ZDQxLTgyOTct
YzJlOWQxN2Q4ZDRhLzEvaTQtN0pNS0xvaEZ5RXZEVEp6bzhLa3duekJJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NC81ZjIxNjctNmE1ZC00ZDQxLTgyOTctYzJlOWQxN2Q4ZDRh
LzEvaTQtN0pNS0xvaEZ5RXZEVEp6bzhLa3duekJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAEOflLWB
vrX2MXrPCznel8IiTCv1ixJvsF4v8AsrgyJQElAu2OZf44QNEM9OiQrnzW3qjzqe
X8H/LX/YofwV51qo4jybsGG4j/olLttcuaYv5Xy46FOG0mUEJVlEkAqJBam8smwi
Qy9LCnSozvMyDkYsyY1m+yox9iWvFbnlAmBDovWzDQdg4PpBU75UtWz4Orwhxy6Q
aD1K0GO3zqYfWJchMM3Su431SIjlpIqi1i2RwbWIIFfFySFvMNvQV4fkhEmmZy7Z
aiBaA/NBTcWo5cAF5HKs140wvyBnXYUrZQsPwPnOPXWButMFaq2Efum8Iln8HfOD
l6Xc+8Fgv7MG0A==
-----END CERTIFICATE-----
Generated at Tue Jun 10 01:39:34 2025 by rpki-client