Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/6bac55-9aaa-4530-8ff4-6027a6839ae4/1/Ic4xHI7WC-8bXk99O4ZBB4FEGKM.mft
File: Ic4xHI7WC-8bXk99O4ZBB4FEGKM.mft (raw, json)
Hash identifier: 9yyAWgVkj4XksKlG0zuGDpBY9qJ+dS03SAJiCqJlH3w=
Subject key identifier: 4B:54:DA:AC:31:CC:10:03:E7:4E:19:CC:38:90:60:B9:34:F8:90:B0
Authority key identifier: 21:CE:31:1C:8E:D6:0B:EF:1B:5E:4F:7D:3B:86:41:07:81:44:18:A3
Certificate issuer: /CN=21ce311c8ed60bef1b5e4f7d3b864107814418a3
Certificate serial: 019764DF290C7EC9DAC2CC32FCC6A4D2DA65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ic4xHI7WC-8bXk99O4ZBB4FEGKM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/6bac55-9aaa-4530-8ff4-6027a6839ae4/1/Ic4xHI7WC-8bXk99O4ZBB4FEGKM.mft
Manifest number: 092B
Signing time: Thu 12 Jun 2025 16:00:35 +0000
Manifest this update: Thu 12 Jun 2025 16:00:35 +0000
Manifest next update: Fri 13 Jun 2025 16:00:35 +0000
Files and hashes: 1: Ic4xHI7WC-8bXk99O4ZBB4FEGKM.crl (hash: dOHNEERsoPJrZO/aYE31L9+PnQeSchQnvCEA56y432M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/6bac55-9aaa-4530-8ff4-6027a6839ae4/1/Ic4xHI7WC-8bXk99O4ZBB4FEGKM.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/6bac55-9aaa-4530-8ff4-6027a6839ae4/1/Ic4xHI7WC-8bXk99O4ZBB4FEGKM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ic4xHI7WC-8bXk99O4ZBB4FEGKM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Jun 2025 13:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:64:df:29:0c:7e:c9:da:c2:cc:32:fc:c6:a4:d2:da:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21ce311c8ed60bef1b5e4f7d3b864107814418a3
Validity
Not Before: Jun 12 16:00:35 2025 GMT
Not After : Jun 13 16:00:35 2025 GMT
Subject: CN=4b54daac31cc1003e74e19cc389060b934f890b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:c3:27:22:08:4b:34:c4:d2:bb:af:22:a4:29:
2d:d5:e2:aa:ed:d9:22:84:b4:2d:43:1a:07:91:12:
46:f5:f4:fe:8e:12:3a:06:1e:7f:ae:73:48:ab:d2:
01:06:d6:d1:50:d8:dd:a7:14:49:2f:c9:3b:85:b3:
02:d1:d3:a5:39:0b:d6:c8:82:98:18:72:94:3e:cb:
fb:65:e2:99:b0:52:08:60:ba:77:78:d4:c1:c3:ea:
6e:5d:26:80:36:cc:07:d4:27:63:a9:ba:b4:de:b3:
64:f6:71:a9:26:a5:dc:54:0a:ad:c8:54:40:46:a1:
a6:bc:1e:8a:59:2b:1b:41:7a:53:e2:d9:2d:78:3c:
47:b7:fb:74:4a:1f:f1:0f:b6:ce:48:5c:d9:7b:42:
7a:3b:3d:c8:cf:3d:5b:7c:53:08:ac:cb:49:bf:ae:
5d:ed:78:12:b5:59:c9:1f:b6:1a:e4:4f:02:58:08:
64:e1:43:38:90:3d:90:a3:58:08:79:e3:f9:41:c7:
68:96:3a:df:e5:0e:70:76:37:c3:a4:e8:ab:d8:18:
a5:16:94:08:f2:27:5f:2d:7c:ca:03:fd:7a:d9:0a:
01:21:5f:8a:cb:de:e3:47:b7:84:e7:b3:58:db:56:
eb:cf:8f:64:f6:cd:86:ce:df:fc:32:7f:1d:20:b2:
31:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:54:DA:AC:31:CC:10:03:E7:4E:19:CC:38:90:60:B9:34:F8:90:B0
X509v3 Authority Key Identifier:
keyid:21:CE:31:1C:8E:D6:0B:EF:1B:5E:4F:7D:3B:86:41:07:81:44:18:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ic4xHI7WC-8bXk99O4ZBB4FEGKM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/6bac55-9aaa-4530-8ff4-6027a6839ae4/1/Ic4xHI7WC-8bXk99O4ZBB4FEGKM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/6bac55-9aaa-4530-8ff4-6027a6839ae4/1/Ic4xHI7WC-8bXk99O4ZBB4FEGKM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:9b:bb:56:16:05:93:c8:44:a9:65:06:12:2e:8d:c4:8f:ca:
5c:6d:c2:84:a2:cf:d5:9a:d8:c2:cf:e6:26:03:cf:6c:de:71:
3d:c5:60:b0:c4:9a:2e:9b:e3:42:c5:2c:2e:3b:45:d7:85:ff:
79:e9:e8:59:d4:bf:c8:90:c5:06:93:b3:0e:9f:cb:26:c4:2c:
e0:13:46:ba:e4:25:92:64:7a:a8:83:92:09:b1:64:e6:55:1f:
ce:ca:20:0f:56:9b:78:bf:a7:38:9e:80:9c:69:e9:a5:53:a6:
ed:96:15:d1:73:5a:96:93:17:30:11:00:43:d3:80:73:fd:10:
38:2d:9c:33:cb:82:db:3c:9d:27:42:94:5c:d6:55:96:fc:b7:
8c:f7:21:14:6e:10:3c:5f:8b:58:0e:ca:2a:bf:4f:25:9d:cc:
f5:da:62:b0:af:c4:86:44:27:0d:96:52:e0:09:e8:d3:7d:0a:
b7:a9:29:94:68:50:a4:27:17:0c:a8:5d:ff:d1:13:22:9f:f4:
18:25:33:34:00:e5:66:f1:83:b5:bf:d3:f8:88:ca:0d:ee:dd:
5b:d7:af:65:30:1d:1f:6d:f5:48:cb:9f:de:30:43:cc:50:51:
42:0c:51:46:1c:b8:8f:41:ef:6e:a9:7c:24:fc:79:53:4c:fc:
2e:6b:94:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 21:07:44 2025 by rpki-client