Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/d1f16c-5d15-4f7b-ba5e-6be0bfe1cbdb/1/_izVtrb_hGG7l5eGHJuBZ2oHU6o.mft
File: _izVtrb_hGG7l5eGHJuBZ2oHU6o.mft (raw, json)
Hash identifier: lTI0VJjG2TAt1h/lR7MVvPK4/8ibKzNPxk7zuu4V9As=
Subject key identifier: DF:3B:18:47:9C:0C:87:FB:6A:2B:3F:3E:92:6E:6F:99:8B:27:2B:C6
Authority key identifier: FE:2C:D5:B6:B6:FF:84:61:BB:97:97:86:1C:9B:81:67:6A:07:53:AA
Certificate issuer: /CN=fe2cd5b6b6ff8461bb9797861c9b81676a0753aa
Certificate serial: 01974AB19B1676945A6EDC322824961E40D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_izVtrb_hGG7l5eGHJuBZ2oHU6o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/d1f16c-5d15-4f7b-ba5e-6be0bfe1cbdb/1/_izVtrb_hGG7l5eGHJuBZ2oHU6o.mft
Manifest number: 0539
Signing time: Sat 07 Jun 2025 14:00:42 +0000
Manifest this update: Sat 07 Jun 2025 14:00:42 +0000
Manifest next update: Sun 08 Jun 2025 14:00:42 +0000
Files and hashes: 1: _izVtrb_hGG7l5eGHJuBZ2oHU6o.crl (hash: +fE+WV1yrbDhPBekF7w/NwdllKXEj7WVJU403QPCbWo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/d1f16c-5d15-4f7b-ba5e-6be0bfe1cbdb/1/_izVtrb_hGG7l5eGHJuBZ2oHU6o.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/d1f16c-5d15-4f7b-ba5e-6be0bfe1cbdb/1/_izVtrb_hGG7l5eGHJuBZ2oHU6o.mft
rsync://rpki.ripe.net/repository/DEFAULT/_izVtrb_hGG7l5eGHJuBZ2oHU6o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 11:24:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:b1:9b:16:76:94:5a:6e:dc:32:28:24:96:1e:40:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe2cd5b6b6ff8461bb9797861c9b81676a0753aa
Validity
Not Before: Jun 7 14:00:42 2025 GMT
Not After : Jun 8 14:00:42 2025 GMT
Subject: CN=df3b18479c0c87fb6a2b3f3e926e6f998b272bc6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:c2:75:bb:b1:5e:21:e8:62:0c:ca:b6:f5:66:
01:44:74:50:53:91:08:82:b1:fe:5c:3e:fd:aa:c3:
ba:a2:cd:19:24:91:b9:9c:1c:2d:48:d9:65:f2:5d:
dc:b7:59:e0:30:e7:ba:7b:36:56:37:d7:92:c3:b6:
b7:05:3e:1a:1a:e2:e4:82:66:80:3f:aa:5f:03:a3:
fc:4f:ed:64:16:6d:2c:26:f0:52:72:80:df:33:7d:
aa:b4:8f:cc:dd:91:28:3a:e2:fc:60:02:fc:f0:af:
9f:6b:db:a0:4f:e2:22:5a:74:d6:27:ae:b3:1e:f6:
3e:e9:f7:e5:f6:5a:b0:7a:d9:bb:86:d8:98:96:ce:
8f:f6:bb:0b:34:9d:5a:58:53:5d:8d:cd:3a:fd:75:
7a:cf:17:84:5a:0f:7c:af:cd:14:f0:da:a6:07:d4:
c6:e6:f1:e6:13:43:ce:3b:6c:eb:52:7b:f6:83:9a:
96:5b:40:9e:2e:31:62:25:8b:94:7b:b2:80:df:06:
5e:83:96:d1:63:44:c2:51:1b:9d:0f:b8:c2:92:f4:
5e:54:b6:1f:de:6d:1e:ee:28:7b:72:df:53:20:40:
55:b2:2f:f5:88:f9:ef:4f:73:12:4b:9c:30:6f:11:
10:89:09:95:80:3d:a2:aa:27:e7:ca:b7:79:c6:7e:
58:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:3B:18:47:9C:0C:87:FB:6A:2B:3F:3E:92:6E:6F:99:8B:27:2B:C6
X509v3 Authority Key Identifier:
keyid:FE:2C:D5:B6:B6:FF:84:61:BB:97:97:86:1C:9B:81:67:6A:07:53:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_izVtrb_hGG7l5eGHJuBZ2oHU6o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/d1f16c-5d15-4f7b-ba5e-6be0bfe1cbdb/1/_izVtrb_hGG7l5eGHJuBZ2oHU6o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/d1f16c-5d15-4f7b-ba5e-6be0bfe1cbdb/1/_izVtrb_hGG7l5eGHJuBZ2oHU6o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:bc:f5:d8:6a:6d:07:55:18:eb:15:25:4c:c6:38:6f:27:3a:
54:84:c7:77:3b:cc:30:76:ff:f6:9c:ff:28:3b:f3:72:b2:da:
a6:57:36:f1:70:65:3c:28:51:b8:aa:28:a9:97:f6:ea:d8:5c:
57:42:5c:ed:73:f5:bf:e3:e9:46:31:71:fd:53:51:36:56:cd:
88:4c:69:33:75:01:3c:f9:3c:0a:f5:e7:d4:0d:91:61:73:11:
40:bc:5d:41:bc:5c:45:66:94:04:03:52:fd:a4:a1:40:8e:e6:
7e:3d:8f:d6:84:ab:99:f6:53:96:70:fa:aa:be:a4:b5:1c:42:
08:81:91:fa:95:b9:90:59:2f:e4:3a:ac:17:16:75:9c:1b:ce:
ed:9c:83:55:f2:25:c2:bc:d4:29:7f:b4:db:fd:94:57:02:f9:
0f:f5:a0:04:17:6d:0f:cb:2b:8b:33:39:c0:4d:a6:06:e8:ec:
24:ed:8e:5b:f5:15:71:69:62:0e:1d:e9:0f:a4:88:06:ea:f9:
ff:88:a1:10:c0:9b:25:8a:6c:31:09:df:f8:d9:64:f6:76:b9:
bd:0f:1f:3d:68:1f:61:93:6a:c5:31:bf:1d:be:01:87:b9:1e:
59:6c:61:bd:ff:96:a4:b7:86:5b:02:53:52:82:05:05:ba:3f:
91:b3:f3:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 20:30:13 2025 by rpki-client