Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/cdc148-5703-4e91-9a8e-284036a81d90/1/itYGdkMvaHI2YskyV5qEk1IBS5U.mft
File: itYGdkMvaHI2YskyV5qEk1IBS5U.mft (raw, json)
Hash identifier: sND0Y/1DGi5zl5mEGrLDx4cP2D8aFD3B2vAQ8YGFYZ0=
Subject key identifier: 36:10:99:74:D5:E4:DD:FE:06:3A:61:1A:58:82:D5:5D:2D:DB:95:B7
Authority key identifier: 8A:D6:06:76:43:2F:68:72:36:62:C9:32:57:9A:84:93:52:01:4B:95
Certificate issuer: /CN=8ad60676432f68723662c932579a849352014b95
Certificate serial: 019749D5FEEFEE9BE25E66AB4A30E4430BB6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/itYGdkMvaHI2YskyV5qEk1IBS5U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/cdc148-5703-4e91-9a8e-284036a81d90/1/itYGdkMvaHI2YskyV5qEk1IBS5U.mft
Manifest number: 0743
Signing time: Sat 07 Jun 2025 10:00:50 +0000
Manifest this update: Sat 07 Jun 2025 10:00:50 +0000
Manifest next update: Sun 08 Jun 2025 10:00:50 +0000
Files and hashes: 1: itYGdkMvaHI2YskyV5qEk1IBS5U.crl (hash: FbAa6niYhaPZy+IfCng+bpljX5YnCGQIm5AASr6IgPs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/cdc148-5703-4e91-9a8e-284036a81d90/1/itYGdkMvaHI2YskyV5qEk1IBS5U.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/cdc148-5703-4e91-9a8e-284036a81d90/1/itYGdkMvaHI2YskyV5qEk1IBS5U.mft
rsync://rpki.ripe.net/repository/DEFAULT/itYGdkMvaHI2YskyV5qEk1IBS5U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:d5:fe:ef:ee:9b:e2:5e:66:ab:4a:30:e4:43:0b:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ad60676432f68723662c932579a849352014b95
Validity
Not Before: Jun 7 10:00:50 2025 GMT
Not After : Jun 8 10:00:50 2025 GMT
Subject: CN=36109974d5e4ddfe063a611a5882d55d2ddb95b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:9e:29:a5:51:6e:d9:45:0b:99:83:ac:3a:34:
5f:a8:83:4e:f8:81:fa:d0:8f:b0:63:44:37:50:8a:
6f:41:98:94:06:d1:89:ab:cb:7c:14:f8:b5:7e:4c:
d1:de:ac:ee:90:9c:da:0b:42:59:80:3c:9d:72:50:
5a:f6:05:84:e7:bd:f8:a0:16:e0:3c:f5:39:94:ac:
3d:12:a3:c0:cf:a2:f8:cf:5c:4a:17:8b:91:44:49:
c0:33:d4:1b:d1:ca:e2:a7:6a:8b:9b:ff:8a:fc:0a:
c8:1c:72:c9:22:5a:5b:ae:da:f5:14:a6:b2:58:0d:
79:c5:04:70:78:27:16:5c:fe:86:48:c5:6b:01:6b:
63:91:70:3f:99:3e:c3:11:8b:c1:29:4b:a6:73:a3:
a1:ea:75:26:70:3e:ea:eb:1f:8b:fa:31:0e:ac:f5:
f8:3d:47:a9:93:a3:0e:b3:da:9b:aa:28:d7:d8:bb:
75:f6:75:3b:5b:26:7a:cc:2f:7e:c3:03:60:7c:e0:
9b:29:16:1f:4f:8f:24:22:99:02:dc:cc:72:ed:d5:
20:2a:d7:46:b3:75:1c:77:5d:09:28:8a:c1:64:f7:
7f:33:c6:05:cb:01:02:82:15:7a:4c:8d:6a:90:aa:
85:09:e0:e3:de:f5:6c:fc:49:a3:3c:9f:23:8d:d2:
f0:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:10:99:74:D5:E4:DD:FE:06:3A:61:1A:58:82:D5:5D:2D:DB:95:B7
X509v3 Authority Key Identifier:
keyid:8A:D6:06:76:43:2F:68:72:36:62:C9:32:57:9A:84:93:52:01:4B:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/itYGdkMvaHI2YskyV5qEk1IBS5U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/cdc148-5703-4e91-9a8e-284036a81d90/1/itYGdkMvaHI2YskyV5qEk1IBS5U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/cdc148-5703-4e91-9a8e-284036a81d90/1/itYGdkMvaHI2YskyV5qEk1IBS5U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:30:5b:ec:b4:df:de:c7:ea:8f:8d:95:4b:21:20:a2:eb:d3:
8f:fa:d1:dd:47:a9:a4:e1:94:3c:b7:f9:7c:e3:a9:e2:0a:b7:
14:39:f3:2e:51:19:e2:c6:31:86:cd:42:2e:5a:a6:85:a0:00:
dd:f0:af:56:b3:02:38:71:a9:dd:74:14:f7:0c:ce:c7:61:4b:
f6:63:4f:90:48:f8:a0:ec:cb:ba:bf:20:fd:74:e0:57:2b:7c:
38:37:72:fa:8d:47:2f:8e:06:f5:2a:46:88:95:a3:d6:2c:be:
f7:eb:ea:9d:67:19:3f:58:5c:9d:e9:8e:16:75:33:72:d4:50:
58:c6:97:1b:32:70:6b:26:55:fa:e6:e2:67:54:62:37:9a:2a:
24:d8:34:f3:28:ec:3b:b4:e5:18:d8:bb:cf:ab:b6:0f:2d:a9:
6a:8c:40:c5:05:e6:c5:7e:a3:6c:a4:95:21:58:93:c6:43:e1:
07:a6:b0:03:f6:45:10:a1:33:e5:75:f8:64:75:a2:db:2a:5e:
d2:10:f6:8e:85:60:08:42:6c:cc:29:ea:55:cc:e2:d5:8a:0a:
aa:c9:04:b9:61:ec:d1:88:f9:dd:ff:15:68:66:2f:66:6b:7f:
53:2a:2f:51:ae:59:ac:e8:13:b5:27:99:39:d6:29:1a:03:a8:
fd:f7:24:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 16:09:10 2025 by rpki-client