Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/6bac55-9aaa-4530-8ff4-6027a6839ae4/1/Ic4xHI7WC-8bXk99O4ZBB4FEGKM.mft
File: Ic4xHI7WC-8bXk99O4ZBB4FEGKM.mft (raw, json)
Hash identifier: Gsq1yT+7WB34BxHQR5dHLezyotVcISVShuxoPi/QMto=
Subject key identifier: 2F:51:1C:DB:1F:A8:DD:A7:4A:EC:EB:82:E3:99:3E:23:38:06:92:4A
Authority key identifier: 21:CE:31:1C:8E:D6:0B:EF:1B:5E:4F:7D:3B:86:41:07:81:44:18:A3
Certificate issuer: /CN=21ce311c8ed60bef1b5e4f7d3b864107814418a3
Certificate serial: 019762F1448B0F2577E6A65103BAB54FBB5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ic4xHI7WC-8bXk99O4ZBB4FEGKM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/6bac55-9aaa-4530-8ff4-6027a6839ae4/1/Ic4xHI7WC-8bXk99O4ZBB4FEGKM.mft
Manifest number: 092A
Signing time: Thu 12 Jun 2025 07:01:08 +0000
Manifest this update: Thu 12 Jun 2025 07:01:08 +0000
Manifest next update: Fri 13 Jun 2025 07:01:08 +0000
Files and hashes: 1: Ic4xHI7WC-8bXk99O4ZBB4FEGKM.crl (hash: pcynrZci55fFZ0fDuPoqRtmNHm3ookaIZoDrPECI7Rk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/6bac55-9aaa-4530-8ff4-6027a6839ae4/1/Ic4xHI7WC-8bXk99O4ZBB4FEGKM.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/6bac55-9aaa-4530-8ff4-6027a6839ae4/1/Ic4xHI7WC-8bXk99O4ZBB4FEGKM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ic4xHI7WC-8bXk99O4ZBB4FEGKM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Jun 2025 07:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:62:f1:44:8b:0f:25:77:e6:a6:51:03:ba:b5:4f:bb:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21ce311c8ed60bef1b5e4f7d3b864107814418a3
Validity
Not Before: Jun 12 07:01:08 2025 GMT
Not After : Jun 13 07:01:08 2025 GMT
Subject: CN=2f511cdb1fa8dda74aeceb82e3993e233806924a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:31:02:5f:9c:3b:76:99:69:46:22:bc:c2:1a:
a2:2d:32:65:46:9b:5d:7d:77:1e:fd:38:67:ec:3d:
ac:5e:45:4e:a1:10:70:8a:80:30:f1:88:39:18:d4:
12:fb:56:2a:f8:9a:41:e9:89:4c:e7:c2:d0:d9:dd:
5b:ca:a8:b9:f3:99:6b:9d:53:d2:3f:5c:0a:e1:86:
1c:82:34:8b:ac:7f:08:66:84:f5:ef:88:0e:35:12:
cb:71:9d:d9:f4:a5:8c:09:d0:24:71:5d:80:aa:d6:
73:ea:10:75:4a:81:8f:ed:0b:f1:2b:be:52:f2:12:
bb:6b:81:c0:ac:e4:04:38:30:e5:20:f7:7b:26:e2:
40:d1:b2:99:be:e7:f0:5b:9e:ea:18:c9:79:7a:a8:
02:7f:2e:12:b4:a1:cd:94:d8:4c:0c:c0:1d:55:11:
ba:27:e3:ca:d8:55:eb:20:b5:45:43:03:fd:e5:9c:
41:af:98:19:36:d4:07:e2:12:17:01:33:20:fa:d3:
5e:20:8d:63:cb:3c:79:37:52:67:b6:5c:54:02:b7:
ba:87:2b:78:b1:77:b8:cf:14:66:3f:c5:90:fe:de:
5c:25:6a:d3:e0:e7:8b:f2:24:ae:bc:01:e2:95:03:
30:b7:92:fe:a8:76:82:a9:be:51:07:c3:de:e6:f4:
4d:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:51:1C:DB:1F:A8:DD:A7:4A:EC:EB:82:E3:99:3E:23:38:06:92:4A
X509v3 Authority Key Identifier:
keyid:21:CE:31:1C:8E:D6:0B:EF:1B:5E:4F:7D:3B:86:41:07:81:44:18:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ic4xHI7WC-8bXk99O4ZBB4FEGKM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/6bac55-9aaa-4530-8ff4-6027a6839ae4/1/Ic4xHI7WC-8bXk99O4ZBB4FEGKM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/6bac55-9aaa-4530-8ff4-6027a6839ae4/1/Ic4xHI7WC-8bXk99O4ZBB4FEGKM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:a4:f8:31:ac:57:9d:1e:45:b9:c7:e6:3d:71:16:88:cd:97:
2c:90:2e:ea:ed:fd:5b:d5:1a:e0:d5:14:3b:2a:2f:27:a7:38:
93:bf:b4:3c:75:e6:0f:a0:cd:47:e6:8b:24:35:c7:94:2b:0a:
e7:6a:54:9e:c2:78:1b:4f:8b:2c:1b:4c:d4:d3:d4:02:1b:50:
79:83:ca:ad:95:7a:a2:de:ac:c9:aa:e3:52:9e:a6:e1:f7:3f:
04:74:9d:25:53:56:1a:92:fd:bc:20:b8:13:16:f1:cf:d1:21:
51:5b:21:a1:14:0b:75:7a:5b:4a:9a:0f:c1:5f:81:16:fa:9a:
13:af:bf:01:1d:4b:a9:4d:9f:0b:75:ee:05:53:72:ad:36:cc:
22:05:68:39:83:85:9d:d4:9e:38:cc:13:09:f7:a2:a7:76:bc:
f8:ed:59:09:39:2c:1a:99:aa:8e:af:3b:da:df:30:99:98:ee:
e9:9c:d9:7f:98:af:ab:2f:ab:50:79:0b:3b:ee:d0:ea:e7:5f:
c1:30:fc:18:6b:70:0b:3e:83:fb:69:21:14:73:d2:c7:e0:5f:
99:33:c9:62:39:78:cc:9a:e3:89:f5:fa:e5:73:70:c9:d8:23:
9c:53:50:2f:d1:41:33:72:6c:77:cd:0a:c8:7e:fe:6a:74:d8:
0b:97:9e:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 12:10:15 2025 by rpki-client