Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/6bac55-9aaa-4530-8ff4-6027a6839ae4/1/Ic4xHI7WC-8bXk99O4ZBB4FEGKM.mft
File: Ic4xHI7WC-8bXk99O4ZBB4FEGKM.mft (raw, json)
Hash identifier: ex0lG9SsvLnFm4N4WKm7pD+db+pl5JOt+KwPnA9lal4=
Subject key identifier: EE:3F:F3:A0:A3:5B:70:11:50:AF:63:24:2C:60:40:22:3B:F8:CF:43
Authority key identifier: 21:CE:31:1C:8E:D6:0B:EF:1B:5E:4F:7D:3B:86:41:07:81:44:18:A3
Certificate issuer: /CN=21ce311c8ed60bef1b5e4f7d3b864107814418a3
Certificate serial: 01976102E1D1074F6CD46E0967D02F924CD6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ic4xHI7WC-8bXk99O4ZBB4FEGKM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/6bac55-9aaa-4530-8ff4-6027a6839ae4/1/Ic4xHI7WC-8bXk99O4ZBB4FEGKM.mft
Manifest number: 0929
Signing time: Wed 11 Jun 2025 22:01:08 +0000
Manifest this update: Wed 11 Jun 2025 22:01:08 +0000
Manifest next update: Thu 12 Jun 2025 22:01:08 +0000
Files and hashes: 1: Ic4xHI7WC-8bXk99O4ZBB4FEGKM.crl (hash: UasqWKxveTl+W0stSxzuuTtl3zJl53zBEjRQ20dqaa4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/6bac55-9aaa-4530-8ff4-6027a6839ae4/1/Ic4xHI7WC-8bXk99O4ZBB4FEGKM.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/6bac55-9aaa-4530-8ff4-6027a6839ae4/1/Ic4xHI7WC-8bXk99O4ZBB4FEGKM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ic4xHI7WC-8bXk99O4ZBB4FEGKM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Jun 2025 21:26:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:61:02:e1:d1:07:4f:6c:d4:6e:09:67:d0:2f:92:4c:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21ce311c8ed60bef1b5e4f7d3b864107814418a3
Validity
Not Before: Jun 11 22:01:08 2025 GMT
Not After : Jun 12 22:01:08 2025 GMT
Subject: CN=ee3ff3a0a35b701150af63242c6040223bf8cf43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:d3:eb:9c:fe:01:90:32:dc:41:ae:ce:ae:ff:
b4:a6:6f:e8:eb:91:e4:9f:74:81:3d:72:ac:75:e3:
1a:55:fa:b6:4c:11:9e:6c:48:8b:5f:2f:fc:14:28:
67:3d:1f:ab:a6:b6:c4:21:df:8f:3f:bc:5e:72:40:
48:4e:1e:e4:92:c1:53:40:13:cc:f3:40:dd:23:4c:
d9:5e:79:eb:27:7e:39:95:15:2b:3e:df:f7:de:c7:
da:c8:f5:c3:d6:87:84:a3:56:1b:5a:f1:3e:59:a4:
79:b6:4b:c3:eb:da:d2:ea:22:72:2f:11:04:fb:eb:
1c:b9:6a:32:c9:dd:d1:f5:ef:a6:4f:36:93:89:e4:
2b:fc:12:53:fe:d1:85:ad:82:6a:86:f4:da:d8:16:
75:57:a1:f5:38:4a:a2:08:ca:bb:29:6f:56:0a:a7:
95:ca:23:d9:d1:ab:88:df:0b:c2:0a:ce:a5:03:14:
f1:70:2d:8d:c7:24:19:66:68:5e:08:2c:c0:84:5d:
9e:ea:61:74:ea:7b:fd:4c:27:d0:0c:68:21:d5:80:
94:39:01:86:d5:b0:be:08:21:82:18:0b:83:5e:b8:
28:2a:8b:4d:35:4d:97:42:18:85:77:30:fa:40:33:
8b:87:33:1d:e5:f8:f1:93:f2:be:da:d6:57:81:49:
89:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:3F:F3:A0:A3:5B:70:11:50:AF:63:24:2C:60:40:22:3B:F8:CF:43
X509v3 Authority Key Identifier:
keyid:21:CE:31:1C:8E:D6:0B:EF:1B:5E:4F:7D:3B:86:41:07:81:44:18:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ic4xHI7WC-8bXk99O4ZBB4FEGKM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/6bac55-9aaa-4530-8ff4-6027a6839ae4/1/Ic4xHI7WC-8bXk99O4ZBB4FEGKM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/6bac55-9aaa-4530-8ff4-6027a6839ae4/1/Ic4xHI7WC-8bXk99O4ZBB4FEGKM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:32:ea:85:bc:a8:d3:ac:a6:aa:05:fe:a4:00:a6:3d:41:5e:
f0:37:df:d4:87:70:c8:f5:19:17:1d:78:d8:73:2d:4a:91:11:
ae:40:6a:0e:a2:62:94:7a:a2:b8:bc:4d:09:64:db:ae:d0:c4:
1f:30:ea:7a:f6:52:47:de:d6:ae:13:5a:df:4d:70:5c:28:48:
57:05:47:62:ec:97:26:7d:3b:4b:93:53:b1:a0:d6:5a:d3:7a:
d5:86:99:20:7d:cd:96:df:dc:4f:d8:7e:55:f9:7f:b7:41:bc:
79:45:13:1d:bd:bc:c4:14:a6:a6:2c:07:59:ae:4d:65:56:f3:
48:cc:b4:b7:a3:6c:a1:23:f0:82:74:b9:a2:1b:9f:94:5e:19:
d1:9f:b1:a8:80:90:ad:b6:71:9a:dd:f8:0e:48:fd:76:87:89:
6b:13:4b:3a:a9:32:c7:cf:61:78:b8:51:09:10:49:53:ab:b2:
a0:aa:1b:8c:d7:b0:f8:a4:02:d7:b6:e0:fd:66:f7:8a:5c:50:
75:ef:c2:0c:0b:13:9a:92:02:2c:8e:16:0f:73:b8:32:81:50:
83:a5:ff:16:4f:2d:b5:a5:32:b6:1e:ae:f1:65:b2:a6:45:f9:
b0:0b:6b:9e:89:93:18:e7:45:13:f5:d1:2b:e4:f9:6e:9d:66:
8f:ee:a2:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 02:19:24 2025 by rpki-client