Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/39adc9-db28-4b1e-bf6e-a08bf2c43460/1/iKslD4208gR6QBWFwmTzjA4ih_4.mft
File: iKslD4208gR6QBWFwmTzjA4ih_4.mft (raw, json)
Hash identifier: S+VpGjMaq4CteXZ7g9o+f5JMiCHo7SBVLK8iurQgh1o=
Subject key identifier: 93:53:86:F0:CB:46:B5:2E:E6:8E:D0:04:9C:A4:B1:29:C9:5B:F6:A2
Authority key identifier: 88:AB:25:0F:8D:B4:F2:04:7A:40:15:85:C2:64:F3:8C:0E:22:87:FE
Certificate issuer: /CN=88ab250f8db4f2047a401585c264f38c0e2287fe
Certificate serial: 01974967EB2F8462E6D6D7A675E7CF31CBAD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iKslD4208gR6QBWFwmTzjA4ih_4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/39adc9-db28-4b1e-bf6e-a08bf2c43460/1/iKslD4208gR6QBWFwmTzjA4ih_4.mft
Manifest number: 13A9
Signing time: Sat 07 Jun 2025 08:00:36 +0000
Manifest this update: Sat 07 Jun 2025 08:00:36 +0000
Manifest next update: Sun 08 Jun 2025 08:00:36 +0000
Files and hashes: 1: iKslD4208gR6QBWFwmTzjA4ih_4.crl (hash: FJAAIj1qZtBFxQeOIbFAl0wyUN0tiyOx1Na779ML0kw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/39adc9-db28-4b1e-bf6e-a08bf2c43460/1/iKslD4208gR6QBWFwmTzjA4ih_4.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/39adc9-db28-4b1e-bf6e-a08bf2c43460/1/iKslD4208gR6QBWFwmTzjA4ih_4.mft
rsync://rpki.ripe.net/repository/DEFAULT/iKslD4208gR6QBWFwmTzjA4ih_4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 08:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:67:eb:2f:84:62:e6:d6:d7:a6:75:e7:cf:31:cb:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88ab250f8db4f2047a401585c264f38c0e2287fe
Validity
Not Before: Jun 7 08:00:36 2025 GMT
Not After : Jun 8 08:00:36 2025 GMT
Subject: CN=935386f0cb46b52ee68ed0049ca4b129c95bf6a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:23:e6:1a:16:37:f6:99:48:52:01:82:2b:df:
4c:c3:23:38:e8:a0:2c:5d:c9:82:d6:73:78:57:98:
95:64:81:e7:25:a2:91:99:89:9f:ea:63:a8:b9:33:
ef:20:8f:a8:80:17:c1:4c:9a:09:0b:6c:42:e5:ec:
6c:5e:4e:db:b4:3b:b7:ec:bf:b2:b0:a1:f7:87:93:
94:b9:3f:dc:96:26:c2:b2:be:58:46:19:57:c2:7b:
a6:38:48:85:9b:62:a4:57:a1:15:0f:04:7d:16:bc:
b7:a3:d4:ba:5c:a8:14:84:e1:4d:dd:1e:bc:e8:c4:
47:f0:14:6b:21:65:47:2d:04:76:56:26:f3:65:2d:
12:47:02:b0:2e:38:1a:21:07:f2:72:78:9f:3c:fe:
08:14:ab:18:f1:32:47:aa:c3:dc:42:68:6d:95:a9:
f5:fe:e1:f9:22:c1:81:31:a0:8a:f0:53:b5:28:0e:
7a:56:7c:ca:b5:24:c9:a0:30:3e:06:a4:b6:cc:11:
58:f8:e7:b7:53:f6:d9:be:4f:c8:b2:9b:ea:28:b6:
7d:6e:23:cd:5d:5c:67:93:5d:c9:68:e7:3e:1f:3e:
de:2a:2c:ee:90:44:de:6b:62:3e:dd:5a:71:72:f1:
b1:68:93:fd:15:fa:79:61:49:d5:a0:a8:0c:d4:64:
71:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:53:86:F0:CB:46:B5:2E:E6:8E:D0:04:9C:A4:B1:29:C9:5B:F6:A2
X509v3 Authority Key Identifier:
keyid:88:AB:25:0F:8D:B4:F2:04:7A:40:15:85:C2:64:F3:8C:0E:22:87:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iKslD4208gR6QBWFwmTzjA4ih_4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/39adc9-db28-4b1e-bf6e-a08bf2c43460/1/iKslD4208gR6QBWFwmTzjA4ih_4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/39adc9-db28-4b1e-bf6e-a08bf2c43460/1/iKslD4208gR6QBWFwmTzjA4ih_4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:f8:e0:1f:bc:c2:30:c5:0f:84:a2:58:fe:18:41:2d:c0:e2:
2b:1a:fa:2a:ec:d1:aa:64:30:6b:7c:53:4e:e3:c4:b9:61:cd:
a6:54:a8:73:d4:83:aa:58:2f:45:fb:fc:24:1a:75:de:5c:09:
44:d0:1a:d2:11:81:96:7d:ac:46:67:3f:b8:f1:1d:64:86:67:
42:21:98:27:dd:ac:2f:c0:41:5c:5e:50:f6:d8:81:21:7a:0b:
f8:8a:d8:94:a4:84:12:b5:74:b7:9b:81:33:d3:bc:09:3c:01:
22:f6:a7:c6:91:38:75:a0:07:c5:f4:0e:e2:40:f8:61:b9:27:
ba:44:fd:6b:24:c6:4d:b4:4a:da:7f:2e:3b:e6:a4:37:17:62:
f3:a7:2e:4e:4d:e4:80:32:21:5d:77:e2:09:86:8a:ba:c2:9b:
3c:89:cb:8b:70:b7:fb:73:3b:05:c1:29:cf:59:ab:17:4d:3d:
1b:20:8a:35:67:b6:c6:01:58:f9:de:ce:2f:2f:56:71:2c:70:
ff:4b:36:36:84:22:2e:cd:06:2a:bc:e6:5a:c7:f2:78:f7:40:
e8:7b:85:1a:75:8c:0c:bb:88:94:0d:d6:14:92:dc:d7:fc:96:
18:4e:1a:b1:01:7c:8a:0a:27:e4:05:da:40:52:9f:65:6f:1d:
fe:1e:ad:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 14:06:40 2025 by rpki-client