
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/912152-7df8-4ebf-b1d3-4776c7093a29/1/I6YR9Nqh1JrPstsip4DM57Cb3-k.mft
File: I6YR9Nqh1JrPstsip4DM57Cb3-k.mft (raw, json)
Hash identifier: 0EGE2Mdtot/EIjkn+q04P05EveMB8GGtDIZGnVaUTP8=
Subject key identifier: 6E:71:77:AF:03:84:71:B0:07:8C:64:75:61:AD:2E:E6:90:33:BD:A0
Authority key identifier: 23:A6:11:F4:DA:A1:D4:9A:CF:B2:DB:22:A7:80:CC:E7:B0:9B:DF:E9
Certificate issuer: /CN=23a611f4daa1d49acfb2db22a780cce7b09bdfe9
Certificate serial: 0197488CA5A6247EC5E81A67854C0F423DEF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I6YR9Nqh1JrPstsip4DM57Cb3-k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/912152-7df8-4ebf-b1d3-4776c7093a29/1/I6YR9Nqh1JrPstsip4DM57Cb3-k.mft
Manifest number: 0965
Signing time: Sat 07 Jun 2025 04:01:06 +0000
Manifest this update: Sat 07 Jun 2025 04:01:06 +0000
Manifest next update: Sun 08 Jun 2025 04:01:06 +0000
Files and hashes: 1: I6YR9Nqh1JrPstsip4DM57Cb3-k.crl (hash: bY3UHWy4u55scJrVreIqEz6r6xwhmNIEhttTWkug6lY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/912152-7df8-4ebf-b1d3-4776c7093a29/1/I6YR9Nqh1JrPstsip4DM57Cb3-k.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/912152-7df8-4ebf-b1d3-4776c7093a29/1/I6YR9Nqh1JrPstsip4DM57Cb3-k.mft
rsync://rpki.ripe.net/repository/DEFAULT/I6YR9Nqh1JrPstsip4DM57Cb3-k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 22:50:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:8c:a5:a6:24:7e:c5:e8:1a:67:85:4c:0f:42:3d:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23a611f4daa1d49acfb2db22a780cce7b09bdfe9
Validity
Not Before: Jun 7 04:01:06 2025 GMT
Not After : Jun 8 04:01:06 2025 GMT
Subject: CN=6e7177af038471b0078c647561ad2ee69033bda0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:49:ba:6b:81:8d:1e:8c:73:b3:97:61:2d:a3:
00:25:ab:7d:0c:a4:78:d5:9c:44:24:1e:e3:be:da:
38:15:4a:91:6b:a4:04:10:af:63:4d:7a:61:1c:cf:
31:a3:02:af:db:ad:5f:ac:5e:32:ad:61:88:69:70:
83:07:6b:93:83:ea:05:b4:da:e1:94:b1:99:2c:85:
3f:be:b7:67:6c:19:8f:f6:c0:f8:3a:1d:d3:42:bb:
5b:cf:fe:5f:f7:e8:8a:12:b7:dc:73:02:17:9e:db:
ac:42:4d:76:e9:d2:10:17:57:fd:46:fc:c5:1b:f5:
41:a7:d4:d0:7a:a5:63:6d:d8:1a:1e:eb:fc:84:ce:
93:ea:21:92:6e:57:81:ff:bb:c4:2d:44:0f:5b:26:
95:03:22:f9:6c:7e:3d:a6:de:05:9a:20:2c:69:0a:
cf:36:ec:95:33:ae:be:86:4a:5c:60:c0:ba:1d:18:
3c:91:10:2b:da:db:82:8c:a7:f4:bd:ce:f3:bb:8a:
da:aa:ba:8c:52:e1:cd:07:a9:ee:b3:be:09:88:de:
83:29:09:6c:d1:c1:00:2f:2d:66:3f:a3:e8:a3:8d:
74:41:e9:60:b2:b3:b7:05:4b:48:a2:1e:cb:4e:f6:
6a:0d:50:d6:ee:7d:5b:e7:84:1f:64:c3:86:a7:52:
62:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:71:77:AF:03:84:71:B0:07:8C:64:75:61:AD:2E:E6:90:33:BD:A0
X509v3 Authority Key Identifier:
keyid:23:A6:11:F4:DA:A1:D4:9A:CF:B2:DB:22:A7:80:CC:E7:B0:9B:DF:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I6YR9Nqh1JrPstsip4DM57Cb3-k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/912152-7df8-4ebf-b1d3-4776c7093a29/1/I6YR9Nqh1JrPstsip4DM57Cb3-k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/912152-7df8-4ebf-b1d3-4776c7093a29/1/I6YR9Nqh1JrPstsip4DM57Cb3-k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:aa:c5:e7:86:31:0c:ac:7e:d7:5e:4e:b9:0d:93:05:73:65:
e1:f4:1b:12:cd:24:c0:f7:8e:c7:35:6a:f0:a5:37:3a:fe:fe:
42:33:9b:e9:c3:86:6e:cf:34:ae:06:e2:c0:66:e6:80:01:ed:
d6:ed:ee:90:70:9b:13:6e:5d:9d:e2:91:7b:af:56:9d:6a:b6:
68:9f:5b:23:09:5a:fc:a5:e0:b9:06:a5:67:8a:f1:bb:97:5f:
f6:76:04:97:56:fa:69:16:f4:80:2d:48:c8:9d:e4:42:6e:c7:
01:a9:b6:95:e8:4e:70:45:e6:38:19:04:d3:0e:90:1f:af:bf:
c1:0a:c8:92:7c:08:ba:c2:e3:c8:fb:e1:2d:e7:16:55:5f:26:
e0:50:0a:8f:83:f6:64:00:09:9e:7e:e7:03:2e:bb:d0:d9:2d:
2a:0e:3b:3d:ab:59:eb:c5:1a:3d:dc:de:5c:eb:07:1d:3f:b1:
81:af:fa:8d:59:18:8d:8b:70:01:5b:e5:c3:94:49:b2:a7:3e:
86:a2:2b:db:0d:8a:cc:b1:2e:df:bf:04:32:91:91:2b:a1:a2:
78:a1:5a:f3:b1:2f:ff:50:9c:60:41:7d:d3:af:77:ae:ff:d4:
6a:c8:49:f6:03:d2:e6:32:25:53:4e:57:bd:f7:85:a1:ed:02:
83:c7:94:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 07:56:48 2025 by rpki-client