Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/4d3d98-51f2-4d95-bc37-2d32426e141d/1/itC83pWbIDJiNJG_MnmtRanKC-g.mft
File: itC83pWbIDJiNJG_MnmtRanKC-g.mft (raw, json)
Hash identifier: iui6LaBz7rl+WsNLco+4Wna+kRnX1E+FP43jmuQPJuU=
Subject key identifier: 1F:36:BE:C0:E9:76:4D:02:B6:5A:4C:EF:7B:75:5E:29:42:E2:40:60
Authority key identifier: 8A:D0:BC:DE:95:9B:20:32:62:34:91:BF:32:79:AD:45:A9:CA:0B:E8
Certificate issuer: /CN=8ad0bcde959b2032623491bf3279ad45a9ca0be8
Certificate serial: 0197499F1D9F8A245A57C5AC630BCE1105D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/itC83pWbIDJiNJG_MnmtRanKC-g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/4d3d98-51f2-4d95-bc37-2d32426e141d/1/itC83pWbIDJiNJG_MnmtRanKC-g.mft
Manifest number: 1D
Signing time: Sat 07 Jun 2025 09:00:53 +0000
Manifest this update: Sat 07 Jun 2025 09:00:53 +0000
Manifest next update: Sun 08 Jun 2025 09:00:53 +0000
Files and hashes: 1: itC83pWbIDJiNJG_MnmtRanKC-g.crl (hash: gg2rQtvi645si6er/WMNpmzVwgObd7FOA/7yHiTZdDU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/4d3d98-51f2-4d95-bc37-2d32426e141d/1/itC83pWbIDJiNJG_MnmtRanKC-g.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/4d3d98-51f2-4d95-bc37-2d32426e141d/1/itC83pWbIDJiNJG_MnmtRanKC-g.mft
rsync://rpki.ripe.net/repository/DEFAULT/itC83pWbIDJiNJG_MnmtRanKC-g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:9f:1d:9f:8a:24:5a:57:c5:ac:63:0b:ce:11:05:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ad0bcde959b2032623491bf3279ad45a9ca0be8
Validity
Not Before: Jun 7 09:00:53 2025 GMT
Not After : Jun 8 09:00:53 2025 GMT
Subject: CN=1f36bec0e9764d02b65a4cef7b755e2942e24060
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:da:ff:2a:e5:86:e6:73:66:9f:b6:9b:33:55:
b4:10:ee:82:c4:5f:22:6e:2d:7e:87:2c:22:a0:11:
3c:54:72:5b:03:7e:37:51:d8:8f:87:34:e0:60:d8:
ee:7e:40:c8:02:8d:29:40:75:14:58:c8:7c:0e:fd:
3c:86:d9:5d:a9:87:d7:f1:dc:ca:8c:4f:95:1f:a5:
e7:b5:2c:43:db:f6:d2:4d:63:46:69:8d:96:85:eb:
38:89:82:4b:f4:8e:9e:67:ca:2f:a5:98:5c:e6:6a:
02:de:f3:93:f6:9d:20:1e:35:86:cc:93:b2:3b:52:
91:e6:ad:02:b4:69:1a:77:73:14:77:1c:38:23:f7:
48:f4:5f:c5:ff:1a:98:b7:0f:7c:29:09:7d:88:e3:
af:34:fc:35:f0:b0:7e:ae:e6:0b:d1:fb:f3:f7:e1:
f5:b5:ad:4a:6b:a1:d2:b3:82:af:cc:ad:12:74:dc:
ec:cd:04:3b:90:54:43:21:b9:90:fb:0c:52:43:37:
e4:ee:7e:55:ab:f0:c4:10:ce:f9:69:62:c7:f5:31:
8d:3f:d3:34:29:26:b1:4e:75:aa:66:9f:fb:2f:26:
c8:50:ba:5e:e8:f1:3a:aa:da:92:75:5c:b6:08:2a:
84:fa:54:48:9f:1c:eb:c4:ba:3e:61:c3:7d:8b:6b:
70:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:36:BE:C0:E9:76:4D:02:B6:5A:4C:EF:7B:75:5E:29:42:E2:40:60
X509v3 Authority Key Identifier:
keyid:8A:D0:BC:DE:95:9B:20:32:62:34:91:BF:32:79:AD:45:A9:CA:0B:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/itC83pWbIDJiNJG_MnmtRanKC-g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/4d3d98-51f2-4d95-bc37-2d32426e141d/1/itC83pWbIDJiNJG_MnmtRanKC-g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/4d3d98-51f2-4d95-bc37-2d32426e141d/1/itC83pWbIDJiNJG_MnmtRanKC-g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:8e:19:04:e2:92:ee:59:82:93:27:17:26:de:8f:b2:b1:6a:
a1:f4:f8:e3:c2:da:1f:a2:7c:6b:46:7f:29:37:2b:b4:ee:71:
a4:ae:1d:d7:39:36:44:0c:19:f4:0c:b7:48:9b:44:21:8f:cd:
d5:14:fb:1e:1f:42:23:17:85:4a:64:62:15:25:45:85:8f:59:
87:ef:f6:53:91:91:d9:ac:7f:8f:7e:f1:4c:31:a3:13:69:8d:
2a:f2:75:25:bd:e6:3b:2b:50:c3:f7:0e:bc:06:32:c9:1f:4f:
ba:ea:2c:89:d5:31:a5:5e:8a:86:01:fe:bc:11:ba:4f:38:e3:
0b:06:f1:8c:aa:d2:0d:4b:b7:e7:8e:da:d4:3c:b3:3a:64:18:
5c:4a:01:cd:cc:8c:2a:c7:f7:c1:78:7c:81:c3:f7:66:17:43:
49:08:ee:f3:88:68:e9:76:de:ee:4e:de:09:39:4e:09:a7:4a:
af:8c:65:85:b3:8f:f3:ac:f5:57:c2:25:e2:b3:ae:21:d7:1b:
aa:60:d6:df:25:7d:b2:c9:96:81:18:a8:64:f8:f7:85:42:9b:
21:4d:15:4b:7f:a8:5d:4f:9a:14:50:03:b7:cb:23:68:7b:b2:
76:5b:c3:56:a6:92:77:a2:e4:20:25:1b:c3:ae:88:64:00:1e:
75:12:2f:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 13:53:21 2025 by rpki-client