Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/7b2885-3cf3-4367-b64a-99e35c709486/1/cIKkpfKWFe2f7k9nURSF40z3EuA.mft
File: cIKkpfKWFe2f7k9nURSF40z3EuA.mft (raw, json)
Hash identifier: 7rlX06tSc+ieVZWqlNKFn7oBXBMuLyq6jTmmUsbGGKY=
Subject key identifier: 90:93:B7:7C:ED:2D:AF:A3:08:D5:23:A5:25:B8:76:DC:89:55:E6:DB
Authority key identifier: 70:82:A4:A5:F2:96:15:ED:9F:EE:4F:67:51:14:85:E3:4C:F7:12:E0
Certificate issuer: /CN=7082a4a5f29615ed9fee4f67511485e34cf712e0
Certificate serial: 01974A0C8F5E5CFC5E91CD88CF8ACDE392AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cIKkpfKWFe2f7k9nURSF40z3EuA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/7b2885-3cf3-4367-b64a-99e35c709486/1/cIKkpfKWFe2f7k9nURSF40z3EuA.mft
Manifest number: 18
Signing time: Sat 07 Jun 2025 11:00:26 +0000
Manifest this update: Sat 07 Jun 2025 11:00:26 +0000
Manifest next update: Sun 08 Jun 2025 11:00:26 +0000
Files and hashes: 1: cIKkpfKWFe2f7k9nURSF40z3EuA.crl (hash: 8ixyJAWvAfqVEXlPEVy5leM6ikKdbusiep5LbFzHZkI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/7b2885-3cf3-4367-b64a-99e35c709486/1/cIKkpfKWFe2f7k9nURSF40z3EuA.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/7b2885-3cf3-4367-b64a-99e35c709486/1/cIKkpfKWFe2f7k9nURSF40z3EuA.mft
rsync://rpki.ripe.net/repository/DEFAULT/cIKkpfKWFe2f7k9nURSF40z3EuA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:0c:8f:5e:5c:fc:5e:91:cd:88:cf:8a:cd:e3:92:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7082a4a5f29615ed9fee4f67511485e34cf712e0
Validity
Not Before: Jun 7 11:00:26 2025 GMT
Not After : Jun 8 11:00:26 2025 GMT
Subject: CN=9093b77ced2dafa308d523a525b876dc8955e6db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:6a:44:b0:79:26:cc:d2:c9:c4:ee:36:af:cc:
f9:72:f9:c3:ce:0c:53:f2:b9:76:dc:ea:e6:af:74:
76:37:f3:9d:4e:cd:45:72:20:3e:69:e9:4f:7e:b2:
66:e9:79:c9:3d:39:81:f5:8e:79:0a:a5:7d:72:15:
24:6d:59:70:e2:e6:12:93:60:28:ac:a2:52:e1:5a:
58:28:f7:ce:3b:8d:ed:db:f4:48:b4:0d:1b:30:d7:
8f:da:b7:33:cf:9b:56:2a:d8:d3:a6:4b:b3:4e:74:
1e:63:f9:39:10:21:69:c2:cc:4e:08:14:6e:f9:d3:
39:05:8f:31:da:43:2c:b0:df:e0:a4:02:71:73:75:
32:99:b4:60:57:1a:2f:f6:b6:fe:2a:65:49:91:d5:
0f:a8:cd:b5:37:fe:f6:7a:9c:78:36:1e:8f:99:89:
59:cd:68:6f:12:e8:c5:51:1f:33:be:c6:17:80:01:
5f:34:18:33:7e:fa:f1:81:32:a3:47:de:f4:6f:a7:
f0:51:5e:c2:be:90:88:c0:fe:38:a0:b8:27:a8:f4:
50:5c:70:3a:ef:c6:7e:47:19:43:3a:6e:16:9f:7b:
fa:01:86:2f:e2:54:42:12:18:1c:29:a6:d6:f3:49:
54:7c:76:1f:70:31:a6:c8:63:a1:37:a9:2a:18:7b:
00:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:93:B7:7C:ED:2D:AF:A3:08:D5:23:A5:25:B8:76:DC:89:55:E6:DB
X509v3 Authority Key Identifier:
keyid:70:82:A4:A5:F2:96:15:ED:9F:EE:4F:67:51:14:85:E3:4C:F7:12:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cIKkpfKWFe2f7k9nURSF40z3EuA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/7b2885-3cf3-4367-b64a-99e35c709486/1/cIKkpfKWFe2f7k9nURSF40z3EuA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/7b2885-3cf3-4367-b64a-99e35c709486/1/cIKkpfKWFe2f7k9nURSF40z3EuA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:f8:46:93:25:7b:f0:73:1d:7d:cf:46:16:05:83:f3:49:4d:
84:06:55:af:69:8a:29:5c:3e:48:f8:58:97:ba:1d:af:09:f2:
8a:e8:46:ec:24:14:dc:0d:a6:b1:fd:b3:1d:1d:0d:f9:d9:18:
5b:89:2d:2b:b6:fd:c0:e9:3c:f2:5b:80:ce:f8:04:83:58:4a:
77:dc:e4:07:18:b2:72:70:41:e5:dc:07:c0:cb:a2:79:3b:44:
82:b4:ea:83:d8:c9:cb:3f:97:a4:83:92:c0:5e:b0:d6:c2:cd:
32:a7:00:db:a7:e6:b6:c0:c1:05:aa:90:2d:7a:a4:f2:51:e8:
0d:f6:60:6e:94:b1:aa:fc:be:1d:ef:d8:12:64:9a:17:ec:8c:
69:6d:b2:26:ad:90:bd:e1:07:5d:4b:00:70:e7:fa:48:fe:68:
31:09:dd:97:ef:d9:4d:2a:7b:40:32:39:31:09:73:7b:a8:9e:
cf:e8:de:d5:9c:74:f5:fe:3a:67:3b:78:cc:b6:0b:1b:1d:6e:
fd:52:3a:9b:e0:8f:c7:b8:12:60:1c:13:6f:3e:64:29:40:69:
4b:c4:4b:40:58:6f:72:19:28:6f:b0:cd:57:6f:e9:7d:57:56:
ac:43:d4:2e:6a:a4:9a:10:c2:a1:4d:97:43:a5:80:4c:47:ee:
dd:eb:a6:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 16:51:57 2025 by rpki-client