Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/69daa7-cfaf-4ef9-8f5f-d5eb621fc3ac/1/iJNH62PbDmEjDFwx6eGd_OfpQcQ.mft
File: iJNH62PbDmEjDFwx6eGd_OfpQcQ.mft (raw, json)
Hash identifier: ik4amPYOSwZr0BDIPVfgwOVBvV5m0y5ft9jiI97xJkI=
Subject key identifier: 4C:A7:CC:F8:35:F3:22:F5:E7:42:3E:F0:49:A9:32:68:04:11:A3:21
Authority key identifier: 88:93:47:EB:63:DB:0E:61:23:0C:5C:31:E9:E1:9D:FC:E7:E9:41:C4
Certificate issuer: /CN=889347eb63db0e61230c5c31e9e19dfce7e941c4
Certificate serial: 01974EC547CAAB2F4FF10DD9B665AC2C0696
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iJNH62PbDmEjDFwx6eGd_OfpQcQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/69daa7-cfaf-4ef9-8f5f-d5eb621fc3ac/1/iJNH62PbDmEjDFwx6eGd_OfpQcQ.mft
Manifest number: 1000
Signing time: Sun 08 Jun 2025 09:00:41 +0000
Manifest this update: Sun 08 Jun 2025 09:00:41 +0000
Manifest next update: Mon 09 Jun 2025 09:00:41 +0000
Files and hashes: 1: iJNH62PbDmEjDFwx6eGd_OfpQcQ.crl (hash: jdIfmiVS5za+w4rwDcUTpcjA8WAdgeg7tvICtJ6WlZk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/69daa7-cfaf-4ef9-8f5f-d5eb621fc3ac/1/iJNH62PbDmEjDFwx6eGd_OfpQcQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/69daa7-cfaf-4ef9-8f5f-d5eb621fc3ac/1/iJNH62PbDmEjDFwx6eGd_OfpQcQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/iJNH62PbDmEjDFwx6eGd_OfpQcQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 09:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4e:c5:47:ca:ab:2f:4f:f1:0d:d9:b6:65:ac:2c:06:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=889347eb63db0e61230c5c31e9e19dfce7e941c4
Validity
Not Before: Jun 8 09:00:41 2025 GMT
Not After : Jun 9 09:00:41 2025 GMT
Subject: CN=4ca7ccf835f322f5e7423ef049a932680411a321
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:4f:82:76:60:11:d2:a7:f3:20:bf:46:ff:f0:
ec:ed:12:ae:f3:fa:86:cf:8f:8c:7c:d6:4a:77:f6:
36:46:9e:35:96:8a:a1:1f:70:05:61:8b:ff:ee:05:
b9:8a:a6:5a:d2:21:39:01:be:24:61:4e:cb:05:90:
c4:8e:52:c2:a2:68:fb:06:e1:d1:74:da:87:9e:13:
ed:a5:89:27:fb:67:2f:fd:c3:5a:6d:5c:76:f5:12:
74:d6:a1:71:3f:fe:fb:b8:2f:af:8c:5d:53:56:6f:
fb:4f:16:5c:d5:6f:32:8a:d5:32:cd:e6:c4:1a:6f:
11:d4:79:45:52:ea:2e:2b:ee:01:3d:62:86:af:51:
46:cb:31:d5:fa:83:22:d3:14:93:84:88:0d:1e:e6:
52:9e:69:1d:0a:63:bf:a6:26:74:a2:39:ae:00:1e:
d5:ee:4c:84:ac:d7:fc:a3:cd:43:90:62:4e:e1:88:
1f:26:df:98:a1:13:59:74:f1:2c:dd:ed:ba:64:fe:
d5:f3:de:2d:65:83:a3:fd:67:54:4b:81:92:80:7c:
c6:a8:df:ec:33:01:a6:c2:49:49:92:87:88:32:e5:
ff:2e:9c:2a:a8:59:95:1a:4b:21:b6:be:2c:4c:bb:
24:c5:02:5b:81:ac:3b:bf:a7:55:97:15:a0:c5:b8:
e7:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:A7:CC:F8:35:F3:22:F5:E7:42:3E:F0:49:A9:32:68:04:11:A3:21
X509v3 Authority Key Identifier:
keyid:88:93:47:EB:63:DB:0E:61:23:0C:5C:31:E9:E1:9D:FC:E7:E9:41:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iJNH62PbDmEjDFwx6eGd_OfpQcQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/69daa7-cfaf-4ef9-8f5f-d5eb621fc3ac/1/iJNH62PbDmEjDFwx6eGd_OfpQcQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/69daa7-cfaf-4ef9-8f5f-d5eb621fc3ac/1/iJNH62PbDmEjDFwx6eGd_OfpQcQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:c0:ce:b4:9a:ab:99:bb:fc:25:0a:9e:55:0d:70:0b:80:68:
12:c8:0c:d9:de:c4:6d:65:e9:ac:b2:9a:f5:09:f3:05:ab:bc:
31:58:7c:58:48:97:86:83:2f:b2:81:ed:ed:0a:81:76:82:66:
46:cd:f0:70:bb:f9:69:2b:79:38:c1:76:04:74:e9:b0:20:64:
ef:58:a2:18:94:00:10:63:13:e2:da:f7:21:46:32:4f:02:2b:
a8:0c:df:01:85:b2:5e:5f:fb:19:e3:2d:9e:5a:e3:75:28:51:
c5:63:c1:99:1b:11:c7:21:de:6f:df:58:f6:ff:7b:49:a0:5c:
85:71:49:9a:fd:44:04:74:b0:1d:55:51:be:aa:a2:53:35:4b:
31:a3:08:3e:4b:35:93:30:04:73:d1:c1:2f:d7:6d:18:34:4d:
54:09:74:7c:0a:7b:5a:22:9b:5f:54:4b:ad:5f:e6:d1:97:b9:
4b:b4:45:4d:d6:dd:58:7d:5e:6f:63:13:42:45:32:08:b6:4b:
21:c1:6d:7f:45:be:4f:c7:20:4f:de:ef:0f:67:ec:75:aa:6b:
d8:65:c2:23:86:dc:7f:29:33:a4:d5:41:bc:a6:e8:39:68:22:
e6:44:2c:5b:ab:78:63:dd:5d:91:56:c4:d5:0c:b5:d6:d8:ca:
64:44:71:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 19:07:02 2025 by rpki-client